Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.mft
File: ug1zjdKP8lSUVs5m50SJg3L8UD0.mft (raw, json)
Hash identifier: BT6Cjn0qszDSv7FDm1y3ugvIH0g/cVy5VLECQhZcae0=
Subject key identifier: E5:17:C3:E2:1B:D3:B7:38:16:27:15:7D:FA:43:A7:5F:B6:CF:10:51
Authority key identifier: BA:0D:73:8D:D2:8F:F2:54:94:56:CE:66:E7:44:89:83:72:FC:50:3D
Certificate issuer: /CN=ba0d738dd28ff2549456ce66e744898372fc503d
Certificate serial: 019853E8B37585BC2DD5871B5305B21FF314
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ug1zjdKP8lSUVs5m50SJg3L8UD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.mft
Manifest number: 1608
Signing time: Tue 29 Jul 2025 02:00:15 +0000
Manifest this update: Tue 29 Jul 2025 02:00:15 +0000
Manifest next update: Wed 30 Jul 2025 02:00:15 +0000
Files and hashes: 1: 7-NH-ftLPJv2hgS7hIIra8h47rk.roa (hash: NgMYgra/QOYKtcgagrEDYRVy/zIMw/N7je2pXEjtpgU=)
2: CcbL2suikwKGAhya-UWTND6NZ-8.roa (hash: oOLlZv9fktDSkNEJWYkIbxLGMe1qA0jO7UZ2EmxdF3k=)
3: ug1zjdKP8lSUVs5m50SJg3L8UD0.crl (hash: AfvOWRhklxXJAKgyTHEyys7plBx+D7p3mRy3ehiZa/Q=)
4: vdeCaypIFGdIRAqMdGTsPj8WbOU.roa (hash: vq84qfOVSp0uzDqim8nGELqrKMLD6OkkmbcoO9J1Zis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ug1zjdKP8lSUVs5m50SJg3L8UD0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:e8:b3:75:85:bc:2d:d5:87:1b:53:05:b2:1f:f3:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba0d738dd28ff2549456ce66e744898372fc503d
Validity
Not Before: Jul 29 02:00:15 2025 GMT
Not After : Jul 30 02:00:15 2025 GMT
Subject: CN=e517c3e21bd3b7381627157dfa43a75fb6cf1051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:86:34:a9:f6:6b:64:56:d3:89:db:7d:7f:0f:
5c:26:c7:d2:bd:ec:e6:b0:93:65:e3:2c:26:a9:e8:
33:2e:3b:fd:97:42:6c:f8:11:b9:ce:86:2c:06:41:
b9:a8:34:b8:8a:18:27:f4:94:43:da:59:ff:24:2a:
03:26:9f:c0:b2:45:29:3f:72:93:ba:28:ae:f7:32:
7a:79:d4:fd:07:78:4e:14:95:80:de:ab:59:3e:ca:
48:09:e0:ef:5d:2e:e2:b4:74:35:60:d1:49:3e:24:
71:8f:25:09:b8:7f:92:10:58:bb:b0:42:5d:c7:6b:
08:99:56:59:4c:7c:98:63:7e:75:03:b5:c5:b8:5f:
dd:4d:bc:e3:47:49:09:27:6c:4e:25:77:70:81:db:
d9:1b:43:75:08:88:a8:9b:30:63:e6:21:8c:38:a0:
45:33:1e:17:75:43:2d:cb:03:a3:5a:6e:17:70:ca:
31:fc:b1:bf:78:12:c3:78:a9:a7:b9:45:81:ff:86:
32:ba:0e:0b:9f:a5:dd:79:51:8d:23:d3:0d:95:d0:
da:20:a4:7d:dd:ad:a9:3d:2f:9e:62:58:3e:c7:bc:
78:21:f6:87:2e:7a:9f:80:1d:99:31:f6:58:e7:d8:
cb:b7:e2:44:a5:9d:48:63:da:2a:39:14:2a:ac:b6:
35:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:17:C3:E2:1B:D3:B7:38:16:27:15:7D:FA:43:A7:5F:B6:CF:10:51
X509v3 Authority Key Identifier:
keyid:BA:0D:73:8D:D2:8F:F2:54:94:56:CE:66:E7:44:89:83:72:FC:50:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ug1zjdKP8lSUVs5m50SJg3L8UD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:f5:55:50:17:52:2e:df:e1:58:ef:e9:bc:46:e0:f2:69:2c:
78:90:bb:a3:38:06:02:2d:86:43:9e:98:2c:27:37:27:22:9c:
3d:8a:c1:4d:b0:3b:49:c7:e9:3d:63:df:4d:bc:f4:23:9c:7b:
55:dd:6a:14:0d:9f:97:c5:1f:15:4e:a2:a0:65:a7:ad:fb:41:
70:d6:83:3d:27:be:9a:86:20:30:8a:54:b4:5a:b7:4c:ef:f1:
e9:27:e4:7c:ca:b1:1d:76:6a:b5:43:20:46:30:b1:70:10:91:
01:fc:04:3e:4b:fa:01:91:a3:7a:e9:3c:36:83:56:ed:8b:d0:
ce:49:b5:1d:15:19:61:88:5b:26:37:8b:fc:52:0c:76:51:20:
08:85:f1:10:00:b8:c8:e0:55:b9:12:7d:bf:d4:c6:25:04:3b:
e5:7f:a6:c5:de:52:45:3e:09:00:95:12:37:d7:38:6e:1f:f6:
6e:c9:0b:40:71:1f:01:f3:eb:ce:9b:4b:5a:1b:f0:37:82:a7:
fe:c2:55:5b:ea:51:bb:82:6a:17:d1:c5:a2:f1:e2:e3:7f:69:
4c:7b:35:e5:dc:28:4d:b8:f3:bd:24:a1:11:7d:50:67:6d:39:
e6:4d:27:7b:e3:c7:ac:66:37:18:78:2d:63:25:36:f1:9c:f4:
31:c8:5e:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:17:37 2025 by rpki-client