Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/7815d6-d5ad-4f60-8a6d-057ad9331fa8/1/ugpNIpkX1GVzikghtu7FvrJObuQ.mft
File: ugpNIpkX1GVzikghtu7FvrJObuQ.mft (raw, json)
Hash identifier: e82qXhNd0kgOyBPVk0AJhxAtwQhk6CqppS3CYvlGTLM=
Subject key identifier: BD:66:48:37:53:7F:64:A2:F7:60:9B:76:CF:65:11:5D:44:08:4E:E7
Authority key identifier: BA:0A:4D:22:99:17:D4:65:73:8A:48:21:B6:EE:C5:BE:B2:4E:6E:E4
Certificate issuer: /CN=ba0a4d229917d465738a4821b6eec5beb24e6ee4
Certificate serial: 019A71B812A9625B141CC1048BEC78AD29AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ugpNIpkX1GVzikghtu7FvrJObuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/7815d6-d5ad-4f60-8a6d-057ad9331fa8/1/ugpNIpkX1GVzikghtu7FvrJObuQ.mft
Manifest number: 01D3
Signing time: Tue 11 Nov 2025 07:01:20 +0000
Manifest this update: Tue 11 Nov 2025 07:01:20 +0000
Manifest next update: Wed 12 Nov 2025 07:01:20 +0000
Files and hashes: 1: ugpNIpkX1GVzikghtu7FvrJObuQ.crl (hash: 2h1m6WXGw0hlIe9SPQVvoPRxo1j6Fv2VD0cez8VFSfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/7815d6-d5ad-4f60-8a6d-057ad9331fa8/1/ugpNIpkX1GVzikghtu7FvrJObuQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/7815d6-d5ad-4f60-8a6d-057ad9331fa8/1/ugpNIpkX1GVzikghtu7FvrJObuQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ugpNIpkX1GVzikghtu7FvrJObuQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:12:a9:62:5b:14:1c:c1:04:8b:ec:78:ad:29:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba0a4d229917d465738a4821b6eec5beb24e6ee4
Validity
Not Before: Nov 11 07:01:20 2025 GMT
Not After : Nov 12 07:01:20 2025 GMT
Subject: CN=bd664837537f64a2f7609b76cf65115d44084ee7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:3c:ed:78:46:21:90:9c:03:87:4f:3d:69:22:
b5:a1:03:ec:60:8e:0a:38:32:7f:c9:47:ec:e6:ca:
f5:92:0b:4e:22:58:bd:f8:26:91:b1:b5:f9:c4:94:
4c:43:7b:dc:6d:f6:2b:c2:d6:e7:16:dc:1a:ed:9f:
67:ff:3d:fe:aa:15:b0:af:2e:35:69:5e:9a:fa:bc:
b1:c8:91:ff:da:87:4a:33:1d:41:da:04:80:35:09:
5c:03:05:88:19:d3:a5:8a:04:9d:1a:0e:43:14:14:
69:fd:9c:51:94:fe:6d:1a:00:5a:da:30:b8:4f:66:
fb:eb:e6:a5:56:b3:de:87:79:0e:a8:f3:66:a8:75:
1d:fd:74:e1:0a:79:64:f2:17:9e:72:af:88:68:b4:
bb:3b:c3:1f:ec:4c:dc:06:ff:6c:90:e8:87:65:76:
f3:45:a3:9c:ae:43:26:02:d5:11:92:ba:f6:70:13:
43:d1:97:ec:55:e0:0d:43:e0:80:3f:f4:b8:e2:54:
ef:72:1b:cf:a4:9b:07:41:e3:d3:09:10:0d:3d:ee:
5c:61:9b:e4:42:ed:52:2a:4a:a4:fe:a3:4e:89:56:
97:5f:45:ea:76:29:68:01:86:ea:9a:bc:55:18:56:
d0:08:77:7a:2c:e9:2b:45:6e:61:a5:86:90:d3:9f:
bd:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:66:48:37:53:7F:64:A2:F7:60:9B:76:CF:65:11:5D:44:08:4E:E7
X509v3 Authority Key Identifier:
keyid:BA:0A:4D:22:99:17:D4:65:73:8A:48:21:B6:EE:C5:BE:B2:4E:6E:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ugpNIpkX1GVzikghtu7FvrJObuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/7815d6-d5ad-4f60-8a6d-057ad9331fa8/1/ugpNIpkX1GVzikghtu7FvrJObuQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/7815d6-d5ad-4f60-8a6d-057ad9331fa8/1/ugpNIpkX1GVzikghtu7FvrJObuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:70:56:cf:dd:51:f0:9c:00:14:b8:a0:4f:d3:ed:5d:2f:7b:
1e:e3:91:07:85:5a:f2:c3:a1:1b:f2:6f:fc:ec:b0:2a:5f:a0:
e0:96:cb:fa:2d:86:ea:df:db:4b:9d:8e:03:c2:57:53:91:c7:
68:60:30:46:99:93:f2:4e:27:98:54:8e:2f:1b:13:ca:db:eb:
ba:62:4e:1e:f7:b9:7b:26:ed:f7:8b:da:14:04:56:4f:bd:1d:
9d:e4:87:a4:63:b9:52:99:d7:be:d5:28:97:5f:90:23:88:98:
42:74:2f:bc:12:69:0b:59:8f:00:ac:ab:2d:2c:0d:a3:83:40:
3e:b1:90:27:82:a4:e1:d5:b1:aa:bd:47:9e:56:9b:93:94:9b:
f1:21:3b:68:7c:f0:c6:36:25:3a:d1:87:c8:79:e3:8c:bb:c4:
9d:28:40:5d:c0:db:45:5d:60:89:19:0e:8e:96:8a:fc:8b:fe:
1e:78:39:73:15:14:e5:f4:7c:35:92:57:08:ad:c7:61:87:68:
58:2a:07:a6:aa:80:bc:ec:b8:2c:a2:7f:ed:c0:ce:0f:ae:32:
6f:49:01:58:10:12:ff:17:35:47:b1:a5:68:f0:ea:a9:8c:1b:
61:c2:2f:44:8e:65:f9:da:8b:94:ea:a0:1a:92:71:7e:26:c1:
2b:bd:e1:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuBKpYlsUHMEEi+x4rSmtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhMGE0ZDIyOTkxN2Q0NjU3MzhhNDgyMWI2ZWVjNWJlYjI0
ZTZlZTQwHhcNMjUxMTExMDcwMTIwWhcNMjUxMTEyMDcwMTIwWjAzMTEwLwYDVQQD
EyhiZDY2NDgzNzUzN2Y2NGEyZjc2MDliNzZjZjY1MTE1ZDQ0MDg0ZWU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7DzteEYhkJwDh089aSK1oQPsYI4K
ODJ/yUfs5sr1kgtOIli9+CaRsbX5xJRMQ3vcbfYrwtbnFtwa7Z9n/z3+qhWwry41
aV6a+ryxyJH/2odKMx1B2gSANQlcAwWIGdOligSdGg5DFBRp/ZxRlP5tGgBa2jC4
T2b76+alVrPeh3kOqPNmqHUd/XThCnlk8heecq+IaLS7O8Mf7EzcBv9skOiHZXbz
RaOcrkMmAtURkrr2cBND0ZfsVeANQ+CAP/S44lTvchvPpJsHQePTCRANPe5cYZvk
Qu1SKkqk/qNOiVaXX0XqdiloAYbqmrxVGFbQCHd6LOkrRW5hpYaQ05+9cQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL1mSDdTf2Si92Cbds9lEV1ECE7nMB8GA1UdIwQY
MBaAFLoKTSKZF9Rlc4pIIbbuxb6yTm7kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWdwTklwa1gxR1Z6aWtnaHR1N0Z2ckpPYnVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS83ODE1ZDYtZDVhZC00ZjYwLThhNmQt
MDU3YWQ5MzMxZmE4LzEvdWdwTklwa1gxR1Z6aWtnaHR1N0Z2ckpPYnVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS83ODE1ZDYtZDVhZC00ZjYwLThhNmQtMDU3YWQ5MzMxZmE4
LzEvdWdwTklwa1gxR1Z6aWtnaHR1N0Z2ckpPYnVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuXBWz91R
8JwAFLigT9PtXS97HuORB4Va8sOhG/Jv/OywKl+g4JbL+i2G6t/bS52OA8JXU5HH
aGAwRpmT8k4nmFSOLxsTytvrumJOHve5eybt94vaFARWT70dneSHpGO5UpnXvtUo
l1+QI4iYQnQvvBJpC1mPAKyrLSwNo4NAPrGQJ4Kk4dWxqr1Hnlabk5Sb8SE7aHzw
xjYlOtGHyHnjjLvEnShAXcDbRV1giRkOjpaK/Iv+Hng5cxUU5fR8NZJXCK3HYYdo
WCoHpqqAvOy4LKJ/7cDOD64yb0kBWBAS/xc1R7GlaPDqqYwbYcIvRI5l+dqLlOqg
GpJxfibBK73hyw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:12 2025 by rpki-client