Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/eed853-3b36-45ed-9533-b17c2affa30b/1/ug-GS6D6IE3pOsWqhPcotiIMb3w.mft
File: ug-GS6D6IE3pOsWqhPcotiIMb3w.mft (raw, json)
Hash identifier: KRx5BDXrBoZxYXTnrP/2X9p0DhW5GIcuTHdd+3mHd3g=
Subject key identifier: 45:C9:EE:9C:BF:1C:EE:35:07:90:8D:55:8E:B1:43:68:79:EB:64:6F
Authority key identifier: BA:0F:86:4B:A0:FA:20:4D:E9:3A:C5:AA:84:F7:28:B6:22:0C:6F:7C
Certificate issuer: /CN=ba0f864ba0fa204de93ac5aa84f728b6220c6f7c
Certificate serial: 019653804A3FAC8FF935820F40B0302A1A2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ug-GS6D6IE3pOsWqhPcotiIMb3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/eed853-3b36-45ed-9533-b17c2affa30b/1/ug-GS6D6IE3pOsWqhPcotiIMb3w.mft
Manifest number: 0B95
Signing time: Sun 20 Apr 2025 14:00:38 +0000
Manifest this update: Sun 20 Apr 2025 14:00:38 +0000
Manifest next update: Mon 21 Apr 2025 14:00:38 +0000
Files and hashes: 1: 0MltjoScbWKVRJAVtzOlI7_AtTM.roa (hash: SViUMsy1T/49SZJpozJCX+cxm4lNhgz3VR3S8vcAZvk=)
2: ug-GS6D6IE3pOsWqhPcotiIMb3w.crl (hash: duAE9Q+YBTShbicZO4xY7+ZFM+7/jqSYadBdO/OSi8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/eed853-3b36-45ed-9533-b17c2affa30b/1/ug-GS6D6IE3pOsWqhPcotiIMb3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/eed853-3b36-45ed-9533-b17c2affa30b/1/ug-GS6D6IE3pOsWqhPcotiIMb3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/ug-GS6D6IE3pOsWqhPcotiIMb3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:80:4a:3f:ac:8f:f9:35:82:0f:40:b0:30:2a:1a:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba0f864ba0fa204de93ac5aa84f728b6220c6f7c
Validity
Not Before: Apr 20 14:00:38 2025 GMT
Not After : Apr 21 14:00:38 2025 GMT
Subject: CN=45c9ee9cbf1cee3507908d558eb1436879eb646f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:94:de:d8:ae:15:bf:19:e1:eb:be:9e:d5:dc:
55:50:a9:c4:ff:ea:36:e5:a0:d9:81:23:8e:61:8e:
92:f9:08:06:b6:bf:44:bb:89:b4:14:89:62:2d:c9:
75:ab:c1:41:19:81:a8:7e:c3:e0:96:12:9b:b1:fc:
5e:85:3a:73:a7:02:43:3c:4c:87:30:33:96:71:bd:
87:fe:f5:dd:41:f4:17:e3:e6:2a:47:8d:9c:8b:6d:
ec:3c:ab:ad:49:b8:ab:50:6a:3c:b3:11:76:0f:85:
1a:93:7e:45:34:74:2c:c6:a2:ee:8b:43:ce:99:f2:
43:d7:c3:a5:f5:2e:b4:0a:1d:11:66:3a:5a:31:19:
92:e1:8f:f0:30:91:20:c0:2f:26:20:2d:df:ac:1e:
bf:64:b6:cb:21:32:bf:54:38:23:d6:6d:62:62:21:
41:50:27:00:19:37:4e:00:ba:2f:79:2a:38:34:4a:
94:f8:29:e4:26:5e:27:23:7a:7a:92:99:42:f5:76:
8a:89:7d:58:f9:cd:49:93:df:b9:f5:51:2d:12:cb:
4f:38:5b:c9:8c:cf:cf:68:ab:94:21:e9:6f:51:99:
57:30:3f:7e:01:3a:e9:4c:78:3d:de:b2:c1:1c:49:
d8:dc:72:e4:a5:45:a0:e5:43:69:d3:3d:f3:eb:a6:
6c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:C9:EE:9C:BF:1C:EE:35:07:90:8D:55:8E:B1:43:68:79:EB:64:6F
X509v3 Authority Key Identifier:
keyid:BA:0F:86:4B:A0:FA:20:4D:E9:3A:C5:AA:84:F7:28:B6:22:0C:6F:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ug-GS6D6IE3pOsWqhPcotiIMb3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/eed853-3b36-45ed-9533-b17c2affa30b/1/ug-GS6D6IE3pOsWqhPcotiIMb3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/eed853-3b36-45ed-9533-b17c2affa30b/1/ug-GS6D6IE3pOsWqhPcotiIMb3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:c7:64:86:85:0d:b8:ee:a2:64:e0:bb:d7:e0:7a:00:5e:a7:
1e:e5:0a:e5:b7:45:0b:d9:3e:0e:df:c1:fa:bc:bb:86:48:4b:
6c:bf:21:d9:88:fb:4d:07:af:a4:36:06:2e:98:dd:bc:5a:d4:
9d:f8:5e:87:26:dc:66:29:6d:d2:03:bd:63:37:c0:52:c3:e1:
9e:12:83:9d:06:1f:b6:5b:54:c6:18:ab:00:fa:2a:b0:a5:02:
28:db:3c:f2:d2:f8:6b:6e:f8:fa:d9:e3:04:31:60:a4:cf:b3:
49:60:93:94:dd:20:63:42:93:cb:f6:59:77:85:9b:1b:2b:00:
f2:d8:03:55:b7:df:62:e5:e8:bf:b4:0d:db:bb:08:98:ca:5c:
1f:b4:28:e3:bc:e9:c4:7b:92:26:28:6d:47:0b:2c:7c:6d:b1:
94:3c:14:aa:3d:38:39:d1:87:a2:43:3d:6a:c9:6f:59:f7:1a:
2f:9c:9e:55:e7:35:35:d2:3e:66:82:2d:75:06:47:d7:44:c6:
92:5f:24:1f:dc:9e:02:cc:02:7d:b0:71:9d:3d:46:26:dc:84:
51:e8:ac:0c:b9:95:7d:78:da:0f:7b:d1:de:67:fd:53:7e:45:
ff:01:78:75:84:1c:e9:bb:a7:be:87:e4:ee:b3:9b:03:98:56:
03:d8:c1:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:20:29 2025 by rpki-client