Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/eed853-3b36-45ed-9533-b17c2affa30b/1/ug-GS6D6IE3pOsWqhPcotiIMb3w.mft
File: ug-GS6D6IE3pOsWqhPcotiIMb3w.mft (raw, json)
Hash identifier: lAc1RBeERKiNRp3kDtLhI/l4JEOPTUU42Lc4WDOO/Bs=
Subject key identifier: B3:BB:3E:DF:C2:AC:3C:4C:F1:18:32:78:D8:A3:6E:C7:E0:72:E5:76
Authority key identifier: BA:0F:86:4B:A0:FA:20:4D:E9:3A:C5:AA:84:F7:28:B6:22:0C:6F:7C
Certificate issuer: /CN=ba0f864ba0fa204de93ac5aa84f728b6220c6f7c
Certificate serial: 01987DC1029D758750467A3CE8BF5819D838
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ug-GS6D6IE3pOsWqhPcotiIMb3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/eed853-3b36-45ed-9533-b17c2affa30b/1/ug-GS6D6IE3pOsWqhPcotiIMb3w.mft
Manifest number: 0CB4
Signing time: Wed 06 Aug 2025 05:00:57 +0000
Manifest this update: Wed 06 Aug 2025 05:00:57 +0000
Manifest next update: Thu 07 Aug 2025 05:00:57 +0000
Files and hashes: 1: 0MltjoScbWKVRJAVtzOlI7_AtTM.roa (hash: SViUMsy1T/49SZJpozJCX+cxm4lNhgz3VR3S8vcAZvk=)
2: ug-GS6D6IE3pOsWqhPcotiIMb3w.crl (hash: 1CakgUffun1GikKvY/aha+2mh/xOhtpfAM33gMZkQBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/eed853-3b36-45ed-9533-b17c2affa30b/1/ug-GS6D6IE3pOsWqhPcotiIMb3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/eed853-3b36-45ed-9533-b17c2affa30b/1/ug-GS6D6IE3pOsWqhPcotiIMb3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/ug-GS6D6IE3pOsWqhPcotiIMb3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 05:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:c1:02:9d:75:87:50:46:7a:3c:e8:bf:58:19:d8:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba0f864ba0fa204de93ac5aa84f728b6220c6f7c
Validity
Not Before: Aug 6 05:00:57 2025 GMT
Not After : Aug 7 05:00:57 2025 GMT
Subject: CN=b3bb3edfc2ac3c4cf1183278d8a36ec7e072e576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:34:34:c9:73:59:af:dc:c5:36:30:a8:19:33:
74:17:7d:de:1e:c4:50:bf:40:53:26:a0:1b:25:7d:
d3:eb:0b:c0:31:73:c3:b9:ad:11:e6:63:cd:05:64:
ef:f3:d6:39:52:c4:a1:99:6a:2f:6c:96:e6:7d:94:
2a:87:77:83:a0:e8:07:8f:b5:5d:1c:ba:f6:b0:36:
63:3f:e6:65:97:b9:17:39:a2:0f:04:cf:69:a9:86:
34:22:99:12:5b:f6:44:3b:af:6c:7c:fc:72:6d:e0:
21:eb:32:9d:2e:7d:9c:94:3e:b0:0c:79:a4:fe:9b:
61:52:b2:84:5a:9b:08:5c:93:db:28:d2:5d:24:32:
0d:e7:4a:c2:3d:27:cd:77:91:86:72:57:4e:49:02:
a4:41:97:11:18:1c:e7:b0:45:09:98:bd:fd:4b:90:
1e:35:b7:b4:f5:52:1f:7f:be:19:ca:1b:8e:32:54:
8f:a5:c5:c5:c1:f8:9b:91:1d:df:a1:3d:6c:bf:b2:
31:ca:de:57:56:95:62:b1:2c:8c:f5:14:05:b0:bd:
fa:2f:a2:31:11:39:5f:56:cd:92:5c:b9:05:54:e3:
99:22:32:22:de:4c:4b:0e:90:62:56:0c:3d:07:07:
73:6e:47:7d:c8:00:a1:34:ef:22:4f:26:d4:2b:37:
4e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:BB:3E:DF:C2:AC:3C:4C:F1:18:32:78:D8:A3:6E:C7:E0:72:E5:76
X509v3 Authority Key Identifier:
keyid:BA:0F:86:4B:A0:FA:20:4D:E9:3A:C5:AA:84:F7:28:B6:22:0C:6F:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ug-GS6D6IE3pOsWqhPcotiIMb3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/eed853-3b36-45ed-9533-b17c2affa30b/1/ug-GS6D6IE3pOsWqhPcotiIMb3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/eed853-3b36-45ed-9533-b17c2affa30b/1/ug-GS6D6IE3pOsWqhPcotiIMb3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:34:5d:fb:20:db:a4:03:47:67:b3:74:31:e3:50:76:e0:3e:
90:79:d8:55:f7:5a:e5:54:50:7d:16:6a:7d:be:70:aa:d5:50:
b2:45:46:72:41:e6:45:b3:59:8a:c6:54:db:9a:a6:2f:25:34:
da:e3:92:c1:77:d7:c1:48:75:bd:f3:85:2f:bb:f6:88:77:94:
6a:22:ce:88:97:1e:41:6b:56:5a:c9:42:43:12:21:56:c6:4e:
0d:42:4a:19:8a:13:dd:48:ec:62:e6:21:95:ff:61:67:75:f4:
5c:47:56:53:17:33:6f:fd:41:00:2d:6a:ed:08:f8:96:fd:65:
c5:b8:79:ca:73:7b:9b:5c:4c:e0:c9:55:b2:7b:32:f0:d5:f4:
e0:b4:b4:80:5c:6c:8f:09:23:28:e9:2b:46:1c:ab:d3:50:4a:
38:22:b7:4a:61:24:c8:0a:45:db:eb:ae:5e:15:d3:b3:b7:06:
1c:5f:0c:6d:3f:c3:85:6d:6c:ad:a2:d9:25:54:1c:95:90:aa:
8e:b6:b5:ef:19:af:a6:af:ec:4c:ee:ce:3f:6a:58:70:ad:ee:
46:3d:b4:d6:81:04:ce:3e:fd:ef:99:4a:1b:81:d1:1a:03:f7:
3d:18:ef:88:4c:a0:16:fc:73:c9:9d:91:61:7d:b9:5e:97:b4:
22:d1:9d:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:04:46 2025 by rpki-client