Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/eed853-3b36-45ed-9533-b17c2affa30b/1/ug-GS6D6IE3pOsWqhPcotiIMb3w.mft
File: ug-GS6D6IE3pOsWqhPcotiIMb3w.mft (raw, json)
Hash identifier: Jv1kSOG/D58Mzu6SJK2XpTv5U94ImUx2ZcCuLNcq91M=
Subject key identifier: 75:C6:47:A3:DE:CB:16:8A:8F:D6:1B:1E:63:88:74:2E:D8:16:DF:EB
Authority key identifier: BA:0F:86:4B:A0:FA:20:4D:E9:3A:C5:AA:84:F7:28:B6:22:0C:6F:7C
Certificate issuer: /CN=ba0f864ba0fa204de93ac5aa84f728b6220c6f7c
Certificate serial: 019A71135D25E3EA033B2D8991ECB37B5986
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ug-GS6D6IE3pOsWqhPcotiIMb3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/eed853-3b36-45ed-9533-b17c2affa30b/1/ug-GS6D6IE3pOsWqhPcotiIMb3w.mft
Manifest number: 0DB9
Signing time: Tue 11 Nov 2025 04:01:25 +0000
Manifest this update: Tue 11 Nov 2025 04:01:25 +0000
Manifest next update: Wed 12 Nov 2025 04:01:25 +0000
Files and hashes: 1: gPcTxlbf3arbuyi9zI7DRrews5w.roa (hash: PLKd6xzj3MbPH7j7KxVjpwNPtA1yOPfuOFe/zsglNlc=)
2: ug-GS6D6IE3pOsWqhPcotiIMb3w.crl (hash: e4J4jaC40OcSewSop99STvx384uvvK3sGZF8tLMmgFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/eed853-3b36-45ed-9533-b17c2affa30b/1/ug-GS6D6IE3pOsWqhPcotiIMb3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/eed853-3b36-45ed-9533-b17c2affa30b/1/ug-GS6D6IE3pOsWqhPcotiIMb3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/ug-GS6D6IE3pOsWqhPcotiIMb3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:5d:25:e3:ea:03:3b:2d:89:91:ec:b3:7b:59:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba0f864ba0fa204de93ac5aa84f728b6220c6f7c
Validity
Not Before: Nov 11 04:01:25 2025 GMT
Not After : Nov 12 04:01:25 2025 GMT
Subject: CN=75c647a3decb168a8fd61b1e6388742ed816dfeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b7:eb:00:50:4b:7f:58:a3:7c:f5:4e:01:36:
14:79:10:49:25:b9:83:8d:44:e9:98:52:98:79:a9:
27:d4:78:11:58:cb:a6:0d:34:2e:e9:c1:b4:93:ae:
da:58:2e:5d:ce:28:17:64:04:8c:42:f2:60:09:41:
0d:e0:2a:20:3e:f9:4a:db:75:bc:15:3c:f6:9b:48:
65:75:e9:13:87:04:a4:c0:20:01:5e:d9:5b:aa:f3:
18:01:65:0e:9d:c3:15:cf:07:de:23:69:86:c5:87:
a6:b4:ce:85:a9:bd:aa:8f:87:fa:91:df:32:68:0c:
ee:28:92:35:83:61:d9:0f:94:b6:55:fc:cc:87:c8:
54:00:e2:b9:83:8e:6f:f9:8c:24:24:3d:97:01:b2:
1e:fe:80:87:c2:d6:39:e9:4e:a2:ce:0d:3f:3e:b1:
1e:c9:54:59:c2:46:f6:99:0c:d3:c5:79:a5:4a:75:
fc:4f:2f:52:f9:0a:4b:b9:2b:75:85:9d:5c:94:16:
17:36:49:dd:8e:ef:23:c8:de:82:98:87:33:bc:b0:
21:3e:a3:0d:f5:da:a3:47:ff:47:d7:43:ea:8d:91:
67:e3:eb:5f:cb:92:c9:e1:ff:86:5b:e2:a5:7f:d8:
2e:30:aa:c7:1c:b9:e8:39:0a:58:a1:5c:a9:c8:25:
c8:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:C6:47:A3:DE:CB:16:8A:8F:D6:1B:1E:63:88:74:2E:D8:16:DF:EB
X509v3 Authority Key Identifier:
keyid:BA:0F:86:4B:A0:FA:20:4D:E9:3A:C5:AA:84:F7:28:B6:22:0C:6F:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ug-GS6D6IE3pOsWqhPcotiIMb3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/eed853-3b36-45ed-9533-b17c2affa30b/1/ug-GS6D6IE3pOsWqhPcotiIMb3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/eed853-3b36-45ed-9533-b17c2affa30b/1/ug-GS6D6IE3pOsWqhPcotiIMb3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:04:50:a5:c1:37:5c:51:71:11:a1:4f:73:6d:4a:be:ea:9a:
be:2c:2e:4d:9a:59:14:57:4c:fa:cc:37:96:af:a7:ea:b5:f6:
25:a4:4a:51:eb:c7:09:a5:88:b3:44:54:bc:39:8d:53:b2:64:
9f:b9:4a:83:5d:f8:f5:5a:cf:ab:6d:84:2a:95:81:0f:e4:66:
b9:f4:92:5c:4e:6a:7b:9c:e7:8f:02:6e:5e:07:4b:c5:9f:a0:
f9:49:0a:ff:dd:75:f9:8d:93:71:99:38:af:be:2f:48:a1:b2:
04:d5:52:97:52:12:88:fc:89:c2:12:5c:38:a4:ef:2c:34:17:
da:0b:f5:88:e7:10:00:16:7d:ff:71:27:ea:a6:13:03:57:ea:
e2:3c:73:9d:4d:ce:93:f4:bc:ff:48:c1:a8:b3:94:bd:e3:3b:
3c:cf:72:d4:02:28:25:fd:eb:31:80:3f:0b:8a:da:03:12:4d:
17:59:60:61:f7:aa:73:48:47:4f:fa:d3:e0:a4:0e:78:8b:2f:
82:5a:2f:7c:f9:9c:9d:2e:74:23:0d:67:4f:a1:43:71:20:66:
98:e7:76:75:3c:5f:78:d0:3b:c4:83:a8:0c:75:a9:9f:94:54:
cb:0e:cb:d4:21:5a:24:e5:1d:00:d6:0a:ef:6f:c6:f8:5e:78:
f0:ab:a3:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:53 2025 by rpki-client