Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.mft
File: ug1zjdKP8lSUVs5m50SJg3L8UD0.mft (raw, json)
Hash identifier: aMyMbOZFCRoQg5kgJ6ry47jy7ps5k87jE6s+0OavwdE=
Subject key identifier: 90:A1:7F:34:F9:6F:D9:A3:E2:3D:4B:48:D3:DF:DB:F5:70:06:8D:21
Authority key identifier: BA:0D:73:8D:D2:8F:F2:54:94:56:CE:66:E7:44:89:83:72:FC:50:3D
Certificate issuer: /CN=ba0d738dd28ff2549456ce66e744898372fc503d
Certificate serial: 019A07B70BBE3E284D22ED00B12F803F3996
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ug1zjdKP8lSUVs5m50SJg3L8UD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.mft
Manifest number: 16EA
Signing time: Tue 21 Oct 2025 17:00:27 +0000
Manifest this update: Tue 21 Oct 2025 17:00:27 +0000
Manifest next update: Wed 22 Oct 2025 17:00:27 +0000
Files and hashes: 1: 7-NH-ftLPJv2hgS7hIIra8h47rk.roa (hash: NgMYgra/QOYKtcgagrEDYRVy/zIMw/N7je2pXEjtpgU=)
2: F2LdL7ybzfzPSt5t-b18q089jwo.roa (hash: pV75yd4KSNaebS2IQ3XosafJetvCzED1fB/NU7nhrkc=)
3: ug1zjdKP8lSUVs5m50SJg3L8UD0.crl (hash: bbNA/wgU90/BvxS3G2DiilLQz27E7i9GVvykDiwPkj4=)
4: vdeCaypIFGdIRAqMdGTsPj8WbOU.roa (hash: vq84qfOVSp0uzDqim8nGELqrKMLD6OkkmbcoO9J1Zis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ug1zjdKP8lSUVs5m50SJg3L8UD0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 14:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:07:b7:0b:be:3e:28:4d:22:ed:00:b1:2f:80:3f:39:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba0d738dd28ff2549456ce66e744898372fc503d
Validity
Not Before: Oct 21 17:00:27 2025 GMT
Not After : Oct 22 17:00:27 2025 GMT
Subject: CN=90a17f34f96fd9a3e23d4b48d3dfdbf570068d21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:07:1e:c4:41:c7:2e:26:6a:06:22:a6:8f:94:
bf:a7:a1:ab:6a:5e:1e:2d:f1:c5:6b:a1:6f:92:8d:
ea:f9:20:a7:65:99:3c:f9:17:a7:a1:2d:a3:0c:c4:
15:dd:cd:61:8d:c7:4d:ff:63:87:71:7f:b9:94:fb:
71:d6:a0:ea:4f:05:b1:37:bd:56:4b:c2:eb:d3:3a:
cc:26:d0:06:bf:c6:cb:b4:87:0a:f1:a7:a6:40:19:
49:c7:75:b1:d8:a4:6e:d9:be:a2:8d:0c:ac:f6:de:
b0:0d:b0:b7:1b:02:ec:21:60:12:07:9e:cb:b2:99:
f2:bf:e8:00:fd:b2:6e:a7:1d:3f:3e:94:00:64:52:
92:25:6b:d6:86:15:20:84:93:ac:b3:c9:f7:5d:7b:
06:dd:0e:8e:7c:8c:d0:7b:f7:62:31:5b:c4:1b:15:
ba:8d:7f:60:f7:d3:48:f1:0b:83:78:ae:d8:c2:9c:
a8:7f:20:fd:44:83:92:ee:db:b8:28:e1:35:0e:29:
27:78:53:e6:55:83:7c:48:70:7f:7f:09:a0:d8:32:
29:b8:f4:f4:53:51:62:17:c0:7b:f4:be:ef:40:7c:
b4:f4:1d:56:5a:b7:98:5b:c3:f7:d4:6e:33:88:09:
17:39:c0:06:36:8f:0d:98:b0:72:a6:76:76:47:a1:
77:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:A1:7F:34:F9:6F:D9:A3:E2:3D:4B:48:D3:DF:DB:F5:70:06:8D:21
X509v3 Authority Key Identifier:
keyid:BA:0D:73:8D:D2:8F:F2:54:94:56:CE:66:E7:44:89:83:72:FC:50:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ug1zjdKP8lSUVs5m50SJg3L8UD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:08:00:2c:d8:90:b9:d9:b2:90:b4:ec:76:a5:fe:25:b8:e3:
72:6f:ed:bf:83:e9:31:00:2f:3b:a0:02:f1:1e:50:4c:f8:e9:
9d:b9:26:39:4c:94:b3:e6:18:62:db:d3:29:77:12:59:37:49:
a7:22:f5:1e:47:a4:70:95:ae:53:64:c3:a3:2b:33:b7:3a:55:
93:68:43:48:11:16:04:1e:75:8a:cf:04:0f:49:c9:59:ce:ee:
04:3b:a9:d9:7b:32:d7:5b:c3:e5:84:e8:6b:9a:ec:24:80:e9:
86:9c:95:64:f0:7b:fc:71:97:4b:c0:51:a1:9a:1a:9b:95:d2:
ad:f5:a3:c0:b9:ab:eb:b7:3d:1b:32:e8:23:a7:94:7f:6f:7e:
6b:38:fb:be:9a:4f:1b:26:98:73:ff:53:c1:c8:b0:d3:cc:9d:
db:4c:27:e1:4e:52:63:18:6f:28:05:3e:ed:61:b8:a9:7b:f1:
80:63:65:88:fa:fd:b8:48:c5:98:88:58:96:b5:08:30:2d:07:
2c:3b:c3:6b:f8:d2:ef:19:9c:75:8f:ce:03:b1:9c:b8:7d:63:
16:ff:27:94:37:b9:5f:41:60:57:41:c5:aa:f9:95:2f:b1:e8:
7b:4a:87:8a:8b:e8:08:c1:96:39:ea:eb:95:95:ff:74:a8:05:
2d:1b:f9:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 22:50:43 2025 by rpki-client