Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/eed853-3b36-45ed-9533-b17c2affa30b/1/ug-GS6D6IE3pOsWqhPcotiIMb3w.mft
File: ug-GS6D6IE3pOsWqhPcotiIMb3w.mft (raw, json)
Hash identifier: 8F2wfxSt70jL82Km5cuHwhbSK0nki/ATD2TswcdyFyc=
Subject key identifier: 3A:08:83:C8:8A:45:7D:9F:9C:02:84:1E:E1:30:83:85:CB:14:49:2F
Authority key identifier: BA:0F:86:4B:A0:FA:20:4D:E9:3A:C5:AA:84:F7:28:B6:22:0C:6F:7C
Certificate issuer: /CN=ba0f864ba0fa204de93ac5aa84f728b6220c6f7c
Certificate serial: 01984F676C296B83E42D3CA2DB5D7878E450
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ug-GS6D6IE3pOsWqhPcotiIMb3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/eed853-3b36-45ed-9533-b17c2affa30b/1/ug-GS6D6IE3pOsWqhPcotiIMb3w.mft
Manifest number: 0C9C
Signing time: Mon 28 Jul 2025 05:00:34 +0000
Manifest this update: Mon 28 Jul 2025 05:00:34 +0000
Manifest next update: Tue 29 Jul 2025 05:00:34 +0000
Files and hashes: 1: 0MltjoScbWKVRJAVtzOlI7_AtTM.roa (hash: SViUMsy1T/49SZJpozJCX+cxm4lNhgz3VR3S8vcAZvk=)
2: ug-GS6D6IE3pOsWqhPcotiIMb3w.crl (hash: R9JoSUMyba8S32pGToz2MCvFZ4U7506OPjyN/Ph7zG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/eed853-3b36-45ed-9533-b17c2affa30b/1/ug-GS6D6IE3pOsWqhPcotiIMb3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/eed853-3b36-45ed-9533-b17c2affa30b/1/ug-GS6D6IE3pOsWqhPcotiIMb3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/ug-GS6D6IE3pOsWqhPcotiIMb3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4f:67:6c:29:6b:83:e4:2d:3c:a2:db:5d:78:78:e4:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba0f864ba0fa204de93ac5aa84f728b6220c6f7c
Validity
Not Before: Jul 28 05:00:34 2025 GMT
Not After : Jul 29 05:00:34 2025 GMT
Subject: CN=3a0883c88a457d9f9c02841ee1308385cb14492f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:90:22:af:24:67:c7:f5:3c:3a:00:e9:3c:5c:
93:aa:fa:fd:32:6e:be:b8:99:35:7f:99:cd:c0:3a:
5c:bf:7f:4b:63:c4:33:11:19:2b:6d:be:09:2c:97:
98:40:c1:fa:f9:df:de:f4:49:0c:34:98:78:02:ef:
b9:db:45:62:6f:6a:ff:32:17:23:2e:5e:0b:c7:dd:
72:e0:a4:c2:7d:29:60:72:5d:e9:f6:98:19:6c:ba:
8c:dc:67:0e:07:68:27:d1:5c:0e:26:55:eb:50:a1:
1e:cb:18:9e:90:7c:66:34:65:05:34:c1:a8:6d:a5:
db:b8:35:5e:0b:85:c6:43:65:84:03:b0:39:6f:4c:
e1:61:be:9c:7d:56:c1:05:64:2e:c5:6c:9b:6d:1b:
1d:f5:6b:d3:f3:11:43:5f:f4:c4:6a:85:d0:86:53:
a6:b3:23:a4:cd:fc:0d:69:b2:a5:53:e1:82:36:28:
8f:eb:3c:ad:6c:2f:e5:ad:3b:0b:f7:b2:ba:05:1b:
1a:bc:9a:56:08:bb:de:43:da:cc:f4:1e:2f:fd:13:
a5:2e:8d:4c:3e:7f:da:02:79:82:95:39:96:0a:bd:
6a:5f:cf:bc:36:38:b3:c8:1f:1d:2b:51:dc:66:81:
c1:aa:89:50:d3:10:57:2b:04:02:c5:29:2d:f1:cb:
da:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:08:83:C8:8A:45:7D:9F:9C:02:84:1E:E1:30:83:85:CB:14:49:2F
X509v3 Authority Key Identifier:
keyid:BA:0F:86:4B:A0:FA:20:4D:E9:3A:C5:AA:84:F7:28:B6:22:0C:6F:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ug-GS6D6IE3pOsWqhPcotiIMb3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/eed853-3b36-45ed-9533-b17c2affa30b/1/ug-GS6D6IE3pOsWqhPcotiIMb3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/eed853-3b36-45ed-9533-b17c2affa30b/1/ug-GS6D6IE3pOsWqhPcotiIMb3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:0d:9e:54:6d:01:2d:42:d4:42:6a:c4:e3:dd:24:c1:37:1f:
72:d7:ed:bf:5b:9b:a6:f0:5e:da:2e:8f:30:4f:15:68:bd:c0:
14:56:d1:62:33:15:cd:21:01:a5:24:c7:b6:67:16:f6:27:a7:
da:13:68:5a:69:89:5e:31:28:b8:27:6c:92:32:68:2d:7f:f6:
e0:dc:22:d0:1e:50:1e:d5:1d:ea:4d:d2:c8:59:b9:d7:85:9c:
ba:33:1d:a1:ac:3b:70:8a:82:ad:f5:81:9f:84:44:ad:35:9f:
48:b2:b5:e6:93:f8:f8:17:da:84:ca:53:8b:a5:9b:5f:48:57:
c0:dd:96:7f:4f:9e:4d:94:1a:ab:5a:0e:10:a8:d5:25:43:f7:
3b:6d:f7:97:c9:41:20:3d:f8:8d:88:e2:12:70:f3:84:a6:06:
40:47:03:37:3f:16:65:a1:4f:87:82:f8:c5:78:60:31:8d:2b:
91:db:87:cf:0b:36:1b:d0:c7:76:ea:aa:d4:44:a3:d8:2d:f1:
e0:82:2d:4a:da:ec:46:38:05:8b:76:98:84:8a:3e:81:2c:cd:
18:4d:f3:09:2a:94:c3:f1:fa:ad:4a:72:49:7a:05:02:8e:26:
e9:98:62:d9:62:2d:1a:64:5c:6d:02:03:41:b7:55:28:63:bc:
ba:aa:88:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 07:08:59 2025 by rpki-client