Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/7815d6-d5ad-4f60-8a6d-057ad9331fa8/1/ugpNIpkX1GVzikghtu7FvrJObuQ.mft
File: ugpNIpkX1GVzikghtu7FvrJObuQ.mft (raw, json)
Hash identifier: 1V7JkfwUEER/Nfu1Uv+RZqnrA70Jm7y88NLxO1AjGu8=
Subject key identifier: 7C:44:D4:F2:6D:7B:60:0B:40:60:E7:F6:C4:4D:47:26:AA:FA:82:60
Authority key identifier: BA:0A:4D:22:99:17:D4:65:73:8A:48:21:B6:EE:C5:BE:B2:4E:6E:E4
Certificate issuer: /CN=ba0a4d229917d465738a4821b6eec5beb24e6ee4
Certificate serial: 01974A43823C92CB8162C504F7797789DA92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ugpNIpkX1GVzikghtu7FvrJObuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/7815d6-d5ad-4f60-8a6d-057ad9331fa8/1/ugpNIpkX1GVzikghtu7FvrJObuQ.mft
Manifest number: 31
Signing time: Sat 07 Jun 2025 12:00:27 +0000
Manifest this update: Sat 07 Jun 2025 12:00:27 +0000
Manifest next update: Sun 08 Jun 2025 12:00:27 +0000
Files and hashes: 1: ugpNIpkX1GVzikghtu7FvrJObuQ.crl (hash: Xy23uABAShErgZC0ZCnibJ6/adIuwbyX6TAfzkbtJ2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/7815d6-d5ad-4f60-8a6d-057ad9331fa8/1/ugpNIpkX1GVzikghtu7FvrJObuQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/7815d6-d5ad-4f60-8a6d-057ad9331fa8/1/ugpNIpkX1GVzikghtu7FvrJObuQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ugpNIpkX1GVzikghtu7FvrJObuQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:82:3c:92:cb:81:62:c5:04:f7:79:77:89:da:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba0a4d229917d465738a4821b6eec5beb24e6ee4
Validity
Not Before: Jun 7 12:00:27 2025 GMT
Not After : Jun 8 12:00:27 2025 GMT
Subject: CN=7c44d4f26d7b600b4060e7f6c44d4726aafa8260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:80:cf:85:c3:9c:17:bf:92:04:a5:4d:4a:b1:
42:ab:c9:6f:07:a6:1b:88:46:d3:ca:31:e8:18:22:
f4:18:07:dd:fc:b2:14:d8:2a:da:af:c8:37:b7:c5:
25:b0:23:04:a8:da:45:c6:14:e0:3a:af:56:65:5f:
2d:4b:b8:ae:c1:45:56:34:c3:eb:db:05:f5:fd:7d:
d2:9c:2e:56:00:ce:52:4b:73:c3:b0:a6:76:ce:34:
ce:e7:ca:90:f5:10:01:1a:b4:14:8b:25:8b:16:0a:
98:50:5d:33:9d:88:44:05:f0:61:d0:47:05:d2:3e:
08:7f:6e:9d:cd:89:0f:1f:5e:92:5c:be:eb:f7:56:
35:0d:42:86:5a:12:78:71:e1:0f:21:c0:c8:93:56:
4a:64:09:b7:6e:df:0d:d6:11:1a:44:26:6a:02:48:
55:54:a7:11:ca:55:f3:44:67:f3:79:28:75:fd:1c:
51:42:59:b8:55:84:fb:3b:96:aa:03:1d:e3:42:2b:
9b:d6:8b:95:c8:c4:22:29:1d:99:0e:0a:1b:e7:23:
fb:ee:24:ff:20:37:dd:7a:6a:d3:c1:1d:fe:cb:55:
b3:c4:60:7d:34:4c:70:b6:45:94:a3:87:97:77:11:
0a:c2:ae:f3:89:65:62:3d:18:3c:bf:03:f6:20:33:
b8:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:44:D4:F2:6D:7B:60:0B:40:60:E7:F6:C4:4D:47:26:AA:FA:82:60
X509v3 Authority Key Identifier:
keyid:BA:0A:4D:22:99:17:D4:65:73:8A:48:21:B6:EE:C5:BE:B2:4E:6E:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ugpNIpkX1GVzikghtu7FvrJObuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/7815d6-d5ad-4f60-8a6d-057ad9331fa8/1/ugpNIpkX1GVzikghtu7FvrJObuQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/7815d6-d5ad-4f60-8a6d-057ad9331fa8/1/ugpNIpkX1GVzikghtu7FvrJObuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:55:c9:e9:bf:b2:38:72:a6:dd:df:88:60:d5:a6:22:62:81:
27:76:16:97:e9:03:42:ac:bf:42:a5:6d:92:14:b2:54:34:bd:
4d:fb:17:c3:4c:2f:90:ea:52:b1:e5:b2:be:6b:03:5c:83:0b:
ba:2a:f8:0a:22:9b:ab:57:1f:89:84:33:0d:90:c0:8a:a3:26:
6f:91:81:be:60:1d:79:bf:f7:92:58:77:41:94:4a:a4:31:15:
61:a2:2e:7f:b4:9c:89:f0:ae:35:3e:0b:7c:4f:d5:29:fa:0d:
4d:1d:1f:6f:f3:f6:92:ad:82:d0:c6:c4:0c:db:b1:51:f2:c2:
f7:5e:ea:08:a0:35:b3:6c:3a:67:93:cb:14:e5:ef:3d:4f:61:
55:ac:f1:35:28:ef:f5:30:42:4b:d0:24:6e:35:fe:6f:3f:37:
6f:67:76:92:e6:c8:03:c4:1e:27:7f:a5:c4:29:0e:78:07:7b:
64:50:f9:5f:cf:fa:3c:dd:5f:84:8e:7d:37:76:a9:e0:2d:77:
4d:14:34:47:c0:ba:9e:bb:32:bb:89:6f:b1:55:57:5f:2a:2f:
9a:58:b0:82:b0:c7:2e:d8:b8:5d:df:3b:db:96:bc:53:d8:9f:
3a:31:d4:42:4d:2f:28:36:ee:6a:e3:85:06:60:6c:12:25:4b:
36:a4:01:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 20:10:18 2025 by rpki-client