Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/eed853-3b36-45ed-9533-b17c2affa30b/1/ug-GS6D6IE3pOsWqhPcotiIMb3w.mft
File: ug-GS6D6IE3pOsWqhPcotiIMb3w.mft (raw, json)
Hash identifier: Rt3CNP2eKUJA40Tw9ChT1IelcPIgFTYhNTnNNyZUcFk=
Subject key identifier: 78:60:A2:67:B1:97:7A:83:3C:70:C3:ED:67:3A:20:F8:B2:D8:7D:5C
Authority key identifier: BA:0F:86:4B:A0:FA:20:4D:E9:3A:C5:AA:84:F7:28:B6:22:0C:6F:7C
Certificate issuer: /CN=ba0f864ba0fa204de93ac5aa84f728b6220c6f7c
Certificate serial: 019748C2D7A0CC9F78EFB16B0C338F1351E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ug-GS6D6IE3pOsWqhPcotiIMb3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/eed853-3b36-45ed-9533-b17c2affa30b/1/ug-GS6D6IE3pOsWqhPcotiIMb3w.mft
Manifest number: 0C14
Signing time: Sat 07 Jun 2025 05:00:18 +0000
Manifest this update: Sat 07 Jun 2025 05:00:18 +0000
Manifest next update: Sun 08 Jun 2025 05:00:18 +0000
Files and hashes: 1: 0MltjoScbWKVRJAVtzOlI7_AtTM.roa (hash: SViUMsy1T/49SZJpozJCX+cxm4lNhgz3VR3S8vcAZvk=)
2: ug-GS6D6IE3pOsWqhPcotiIMb3w.crl (hash: x3xpBWtkPk7G0M6+qvtB2VTMveNzS53sm8y898fdcEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/eed853-3b36-45ed-9533-b17c2affa30b/1/ug-GS6D6IE3pOsWqhPcotiIMb3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/eed853-3b36-45ed-9533-b17c2affa30b/1/ug-GS6D6IE3pOsWqhPcotiIMb3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/ug-GS6D6IE3pOsWqhPcotiIMb3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c2:d7:a0:cc:9f:78:ef:b1:6b:0c:33:8f:13:51:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba0f864ba0fa204de93ac5aa84f728b6220c6f7c
Validity
Not Before: Jun 7 05:00:18 2025 GMT
Not After : Jun 8 05:00:18 2025 GMT
Subject: CN=7860a267b1977a833c70c3ed673a20f8b2d87d5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:26:33:75:53:db:25:34:68:a8:90:96:65:87:
c3:cd:bb:1e:4e:14:09:e9:55:4f:40:c8:16:31:c1:
cf:40:e1:52:71:dc:70:f4:6e:71:4a:ee:1e:3c:5b:
eb:9a:da:2c:c1:13:cc:3e:70:b6:17:6d:d8:d9:07:
a9:e9:47:ad:1f:6b:99:8b:6f:4a:3b:c1:7a:0e:5d:
d0:1e:00:21:45:94:6b:d0:c4:50:da:ec:f4:e0:24:
86:7d:98:29:de:4b:3f:b9:e8:a8:77:03:00:be:67:
40:d9:a9:09:7f:c2:c1:3f:94:d7:b7:41:4a:d1:f5:
3b:e7:3a:1f:9a:da:b5:5f:42:bd:7c:48:44:13:a0:
66:1d:0c:3a:53:31:3f:dc:e9:1f:7e:c1:aa:5c:63:
60:aa:d7:63:61:3f:72:07:0f:38:7c:50:77:00:00:
5d:dc:20:92:41:d1:39:e7:35:b3:46:83:0e:35:0d:
df:15:ee:21:2d:45:20:21:31:26:2e:38:79:f8:51:
f7:57:0c:dd:ec:2f:35:74:79:5c:8b:2a:a3:d0:69:
23:a4:a9:77:ba:17:ca:c6:30:fc:47:ab:80:11:8a:
ea:e3:92:ab:22:ab:fc:88:96:d4:c8:38:e5:42:bd:
61:9f:94:27:60:75:82:67:6d:7f:d9:d0:fb:f5:25:
d2:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:60:A2:67:B1:97:7A:83:3C:70:C3:ED:67:3A:20:F8:B2:D8:7D:5C
X509v3 Authority Key Identifier:
keyid:BA:0F:86:4B:A0:FA:20:4D:E9:3A:C5:AA:84:F7:28:B6:22:0C:6F:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ug-GS6D6IE3pOsWqhPcotiIMb3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/eed853-3b36-45ed-9533-b17c2affa30b/1/ug-GS6D6IE3pOsWqhPcotiIMb3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/eed853-3b36-45ed-9533-b17c2affa30b/1/ug-GS6D6IE3pOsWqhPcotiIMb3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:bf:4d:9e:45:40:e4:e5:60:a2:03:d4:d6:27:7b:54:3b:d8:
16:63:11:16:d2:d5:52:57:8f:4a:2e:67:d8:f3:12:93:74:9b:
39:81:0d:04:c7:e4:9b:fa:2c:b9:c8:9a:7f:ee:78:78:a2:e2:
33:05:bd:75:bf:69:85:03:b4:b0:34:23:b0:27:4b:81:db:14:
68:2b:6c:bc:72:eb:7f:0a:2c:a7:a9:44:4b:2f:0f:38:91:ff:
4b:80:ec:a3:5b:b0:67:4d:a2:d2:49:35:b3:7e:00:0d:bf:1c:
dd:01:d6:ea:05:3c:be:77:ea:92:8b:1b:ff:17:0c:9f:30:a1:
75:7a:74:9b:74:ab:f5:fe:f8:6b:ce:65:7d:e5:15:6a:1d:bf:
2d:a2:22:37:38:70:f3:12:3e:95:b8:c8:b0:41:67:36:49:fc:
25:16:8e:6d:23:03:63:cf:c4:af:f4:9b:78:26:f5:86:23:8d:
79:03:90:7b:4f:e2:1a:89:c4:4c:c3:45:01:8d:e7:43:60:24:
6f:28:0a:40:a4:52:20:7a:5f:9e:ab:3f:6b:c7:c4:65:f3:36:
97:4f:ac:4e:ad:03:05:f2:ac:50:30:aa:92:31:ad:c3:7f:8f:
f3:43:1e:da:3f:67:0e:bb:0a:9d:9c:3e:67:53:ec:66:1b:77:
af:01:9a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 08:15:46 2025 by rpki-client