Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/7815d6-d5ad-4f60-8a6d-057ad9331fa8/1/ugpNIpkX1GVzikghtu7FvrJObuQ.mft
File: ugpNIpkX1GVzikghtu7FvrJObuQ.mft (raw, json)
Hash identifier: WgW+olGGKBMSwfaOI3AYzpwynBCtcZeQ4vdCJzr55ZQ=
Subject key identifier: 4F:DB:14:99:76:38:C5:24:8F:6B:C8:F2:5F:7D:E1:60:52:84:AD:04
Authority key identifier: BA:0A:4D:22:99:17:D4:65:73:8A:48:21:B6:EE:C5:BE:B2:4E:6E:E4
Certificate issuer: /CN=ba0a4d229917d465738a4821b6eec5beb24e6ee4
Certificate serial: 01984776F31567D22BBC986B5FD736233DFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ugpNIpkX1GVzikghtu7FvrJObuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/7815d6-d5ad-4f60-8a6d-057ad9331fa8/1/ugpNIpkX1GVzikghtu7FvrJObuQ.mft
Manifest number: B4
Signing time: Sat 26 Jul 2025 16:00:34 +0000
Manifest this update: Sat 26 Jul 2025 16:00:34 +0000
Manifest next update: Sun 27 Jul 2025 16:00:34 +0000
Files and hashes: 1: ugpNIpkX1GVzikghtu7FvrJObuQ.crl (hash: zg1R6b2uMnxgkKB2+AV5Fzzui0BVYAf1BuctKUrDZd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/7815d6-d5ad-4f60-8a6d-057ad9331fa8/1/ugpNIpkX1GVzikghtu7FvrJObuQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/7815d6-d5ad-4f60-8a6d-057ad9331fa8/1/ugpNIpkX1GVzikghtu7FvrJObuQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ugpNIpkX1GVzikghtu7FvrJObuQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:76:f3:15:67:d2:2b:bc:98:6b:5f:d7:36:23:3d:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba0a4d229917d465738a4821b6eec5beb24e6ee4
Validity
Not Before: Jul 26 16:00:34 2025 GMT
Not After : Jul 27 16:00:34 2025 GMT
Subject: CN=4fdb14997638c5248f6bc8f25f7de1605284ad04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:67:bd:11:64:82:7d:83:06:be:78:4c:39:b0:
3b:ed:ed:b6:7d:8e:6c:91:0c:c7:0d:f3:65:13:19:
a6:ba:77:45:5c:11:7d:9e:39:5e:17:20:52:cd:ff:
7b:52:f0:ed:c7:aa:75:a4:61:cd:12:d6:14:75:d8:
22:81:bd:f9:5b:15:a7:c2:b3:96:be:49:02:6e:f2:
bb:02:d5:27:d0:67:57:fa:93:a4:fd:bc:bc:56:59:
a5:4b:20:b9:a0:25:90:b0:3e:e3:b7:18:76:9a:0f:
b1:72:c9:e1:7d:8e:b8:f5:43:82:e4:0f:99:82:57:
aa:8d:40:1a:b5:7c:d7:dc:46:2c:f2:86:da:df:32:
cb:02:01:31:da:2d:84:fe:bc:81:65:ef:a0:41:60:
d2:a9:1f:30:48:e8:d1:f7:3f:98:c5:d7:c7:58:56:
68:bf:ac:b0:ea:f4:c8:b5:f3:35:03:91:8b:72:f1:
13:df:ec:ff:73:f0:20:a7:6a:ad:f2:72:30:8d:b8:
be:15:cc:2e:eb:ac:28:ae:9f:ee:38:29:bd:f3:b3:
5f:0f:be:ea:8b:e9:ee:0a:cf:c8:26:81:b4:16:54:
47:79:2a:fb:43:fd:f3:67:94:8c:0a:60:51:44:ef:
39:f8:55:89:86:98:4f:70:87:f3:18:50:0f:4b:2b:
c3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:DB:14:99:76:38:C5:24:8F:6B:C8:F2:5F:7D:E1:60:52:84:AD:04
X509v3 Authority Key Identifier:
keyid:BA:0A:4D:22:99:17:D4:65:73:8A:48:21:B6:EE:C5:BE:B2:4E:6E:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ugpNIpkX1GVzikghtu7FvrJObuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/7815d6-d5ad-4f60-8a6d-057ad9331fa8/1/ugpNIpkX1GVzikghtu7FvrJObuQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/7815d6-d5ad-4f60-8a6d-057ad9331fa8/1/ugpNIpkX1GVzikghtu7FvrJObuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:44:c8:76:10:88:bb:04:f1:6f:ff:a4:52:c7:1e:0b:f4:c0:
f2:39:dc:ea:bd:d6:49:47:65:e0:fa:1b:7c:27:5f:e3:dd:e0:
2a:35:1f:01:d2:23:f9:68:0b:6b:40:04:2a:a1:2e:b7:6a:60:
99:bc:d7:e5:92:9d:da:60:38:b9:26:d2:f4:5b:a7:b0:55:f4:
e3:a5:16:83:18:7e:69:57:a0:48:32:32:cc:0a:6f:7b:c9:97:
87:55:87:3b:14:4f:30:08:2d:38:e6:1f:e5:39:4c:84:61:d0:
2a:34:c6:94:97:31:cf:be:9d:89:69:63:3f:74:91:62:b5:60:
53:10:65:37:c9:09:1f:ef:bb:e2:ec:c7:b2:f4:6d:8f:e4:60:
a7:03:88:9b:b6:35:30:b0:78:8d:ef:7d:29:70:36:de:93:94:
ee:15:81:f7:8a:4f:a2:e7:43:40:db:12:36:9c:ea:65:b9:59:
a3:14:36:46:a4:60:f7:e1:44:da:77:b9:cb:c8:00:10:6e:90:
ec:06:62:35:d7:07:86:d9:6e:72:21:c0:3d:04:ab:da:bf:55:
88:3a:e9:fc:92:40:8b:30:db:55:ed:5e:98:31:05:5f:9c:74:
df:c6:94:26:c6:8e:98:5c:37:d9:72:9a:c8:56:cc:80:42:a5:
f8:65:b3:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 00:02:07 2025 by rpki-client