Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.mft
File: ug1zjdKP8lSUVs5m50SJg3L8UD0.mft (raw, json)
Hash identifier: B5JP5bwp+rjNUYoUc/VF/pItY0Z4y0vf/RjScZhvVVQ=
Subject key identifier: EE:9D:AF:F0:E8:8C:0E:85:E4:F2:5C:7E:FC:75:ED:38:F2:85:22:00
Authority key identifier: BA:0D:73:8D:D2:8F:F2:54:94:56:CE:66:E7:44:89:83:72:FC:50:3D
Certificate issuer: /CN=ba0d738dd28ff2549456ce66e744898372fc503d
Certificate serial: 01974967F8F2B4E209403D894368005FDE43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ug1zjdKP8lSUVs5m50SJg3L8UD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 08:00:39 +0000
Manifest this update: Sat 07 Jun 2025 08:00:39 +0000
Manifest next update: Sun 08 Jun 2025 08:00:39 +0000
Files and hashes: 1: 7-NH-ftLPJv2hgS7hIIra8h47rk.roa (hash: NgMYgra/QOYKtcgagrEDYRVy/zIMw/N7je2pXEjtpgU=)
2: CcbL2suikwKGAhya-UWTND6NZ-8.roa (hash: oOLlZv9fktDSkNEJWYkIbxLGMe1qA0jO7UZ2EmxdF3k=)
3: ug1zjdKP8lSUVs5m50SJg3L8UD0.crl (hash: ygBihX8k55I9ylRneCVnitLxIEZZXupUsp/+M+0QsgI=)
4: vdeCaypIFGdIRAqMdGTsPj8WbOU.roa (hash: vq84qfOVSp0uzDqim8nGELqrKMLD6OkkmbcoO9J1Zis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ug1zjdKP8lSUVs5m50SJg3L8UD0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:67:f8:f2:b4:e2:09:40:3d:89:43:68:00:5f:de:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba0d738dd28ff2549456ce66e744898372fc503d
Validity
Not Before: Jun 7 08:00:39 2025 GMT
Not After : Jun 8 08:00:39 2025 GMT
Subject: CN=ee9daff0e88c0e85e4f25c7efc75ed38f2852200
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1e:11:18:ba:99:0d:25:01:c1:67:f6:88:eb:
24:ca:b8:d3:d6:cd:5c:b9:5c:fe:6a:c1:c6:05:38:
48:9c:c2:5c:e7:51:3c:b7:84:90:4b:b7:39:fe:d2:
0e:aa:25:15:3f:d6:98:7b:31:5e:c8:83:03:a5:23:
37:79:49:de:f0:cd:1a:90:f4:1e:9c:4e:e6:c1:2e:
a0:c9:a2:19:2d:d7:e3:fa:60:7e:d9:aa:a1:c4:b3:
aa:ea:84:a9:c3:38:27:5b:35:40:65:a6:55:03:20:
6d:c4:4f:53:d1:c7:18:54:fe:e5:8a:27:52:db:91:
f4:20:18:68:7d:b2:e9:6c:78:a2:95:bd:ed:d4:1b:
1f:67:b4:c9:b1:0d:60:20:ef:38:86:aa:81:9f:e2:
ac:b4:63:10:58:3f:07:e1:22:e7:f1:8f:32:cc:93:
c2:fe:fe:c1:19:66:2b:ca:76:33:46:4b:74:0f:df:
61:b9:45:1b:f2:43:18:39:6b:c7:d9:68:f7:1f:a2:
f8:53:3b:10:70:09:92:41:33:b3:f1:01:e5:e6:67:
eb:a2:b2:30:0f:45:6e:ae:9d:ee:41:0c:5e:48:97:
81:40:b5:a3:94:19:02:af:e5:21:e3:11:c6:77:55:
18:ae:e8:37:bd:e1:21:5c:ad:98:c4:20:53:03:05:
41:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:9D:AF:F0:E8:8C:0E:85:E4:F2:5C:7E:FC:75:ED:38:F2:85:22:00
X509v3 Authority Key Identifier:
keyid:BA:0D:73:8D:D2:8F:F2:54:94:56:CE:66:E7:44:89:83:72:FC:50:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ug1zjdKP8lSUVs5m50SJg3L8UD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:02:2e:ba:02:98:18:ba:f4:86:9f:03:26:0a:bf:8b:f9:6b:
e6:93:0a:cd:85:bb:9e:20:ba:0e:4d:3b:c6:5e:9a:67:3b:a6:
bf:17:96:bb:98:11:bc:db:a6:8e:26:a8:21:8c:fd:b6:17:c3:
b3:1e:d1:dc:92:ac:c3:70:63:5e:f0:59:61:2f:a9:cc:75:b3:
40:10:08:bb:eb:6c:57:31:61:5a:0b:62:1c:61:e3:df:b3:8d:
73:f4:d7:64:ae:07:8d:2e:11:d7:e2:ab:de:fa:31:41:3c:45:
85:0e:6a:67:54:69:d6:7d:af:28:c4:3a:b5:de:aa:c0:9b:bc:
a1:0f:d3:88:d2:a0:52:fb:8d:e0:19:90:7b:9a:8a:7d:37:55:
e8:ca:ec:e6:5b:96:b7:5d:89:e2:75:ab:2a:5e:f5:4a:c7:be:
32:a9:a9:75:18:0f:6b:44:93:e9:3a:d8:4b:f3:99:78:0a:61:
fd:ea:15:33:bf:19:0c:99:f4:a0:73:09:f6:e5:34:9b:35:ca:
9c:3d:5a:62:7e:24:83:43:0b:f0:5d:66:61:9b:6c:08:88:ea:
1b:14:f1:e5:fa:bb:66:f4:f2:8c:c7:70:53:75:f3:6e:c5:8e:
84:3d:11:49:9e:ad:ee:37:e3:db:b1:e4:ba:b2:b2:21:8a:08:
a6:c1:f6:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:15:03 2025 by rpki-client