Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.mft
File: ug1zjdKP8lSUVs5m50SJg3L8UD0.mft (raw, json)
Hash identifier: 9kfJBbV9uq2fOxapt2MKRrkgL2IaUXG6kr6cQ1Y5fwI=
Subject key identifier: 42:98:7A:09:E4:39:CD:5E:6C:8E:9A:9E:CF:AE:FA:AF:97:C1:B5:17
Authority key identifier: BA:0D:73:8D:D2:8F:F2:54:94:56:CE:66:E7:44:89:83:72:FC:50:3D
Certificate issuer: /CN=ba0d738dd28ff2549456ce66e744898372fc503d
Certificate serial: 019884318AB595F694A14FC2176A0395195A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ug1zjdKP8lSUVs5m50SJg3L8UD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.mft
Manifest number: 1621
Signing time: Thu 07 Aug 2025 11:01:35 +0000
Manifest this update: Thu 07 Aug 2025 11:01:35 +0000
Manifest next update: Fri 08 Aug 2025 11:01:35 +0000
Files and hashes: 1: 7-NH-ftLPJv2hgS7hIIra8h47rk.roa (hash: NgMYgra/QOYKtcgagrEDYRVy/zIMw/N7je2pXEjtpgU=)
2: CcbL2suikwKGAhya-UWTND6NZ-8.roa (hash: oOLlZv9fktDSkNEJWYkIbxLGMe1qA0jO7UZ2EmxdF3k=)
3: ug1zjdKP8lSUVs5m50SJg3L8UD0.crl (hash: GLrGRwNtQ+BkqcKDczZB4J1aAEcVZap08JPEjezR8jc=)
4: vdeCaypIFGdIRAqMdGTsPj8WbOU.roa (hash: vq84qfOVSp0uzDqim8nGELqrKMLD6OkkmbcoO9J1Zis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ug1zjdKP8lSUVs5m50SJg3L8UD0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:84:31:8a:b5:95:f6:94:a1:4f:c2:17:6a:03:95:19:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba0d738dd28ff2549456ce66e744898372fc503d
Validity
Not Before: Aug 7 11:01:35 2025 GMT
Not After : Aug 8 11:01:35 2025 GMT
Subject: CN=42987a09e439cd5e6c8e9a9ecfaefaaf97c1b517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:07:14:4c:53:94:0c:0c:93:b7:17:a8:d5:0e:
bb:bc:f2:3c:c4:0a:55:b2:60:3f:7f:ce:ef:07:de:
e6:8f:09:a0:23:37:4d:39:05:21:84:7b:25:a2:1e:
59:7b:6c:d2:a4:98:78:06:cf:f9:41:18:a8:61:71:
70:f5:8a:99:04:f4:11:6b:b9:87:e1:e8:66:5a:db:
69:cf:2f:ae:60:1c:60:26:b7:f4:55:79:4d:8c:43:
df:f3:9a:37:8e:27:0d:d1:c0:d0:8a:b1:5c:ca:dd:
e8:de:30:bc:0f:c6:0f:23:ce:e8:ea:83:39:fe:e5:
6a:76:11:29:1d:59:fe:e6:b1:74:23:65:0e:2f:6c:
06:4f:e1:f8:ee:4b:3b:ae:60:a0:dd:fd:2e:fe:22:
7e:c5:07:49:7d:dd:c1:2d:db:26:93:8f:dc:b4:df:
08:d9:c9:57:44:11:bf:bb:18:07:6a:58:41:b6:7e:
00:7a:48:0e:f0:17:01:2b:da:70:19:f6:d6:3c:ba:
c1:66:b6:97:8e:17:b2:af:0b:0f:11:f6:5c:7f:17:
15:a2:55:16:6f:b5:87:02:b7:b9:08:01:0b:f1:d9:
1d:0c:cb:cc:d1:d6:57:d2:e8:ac:25:67:65:d5:3a:
c6:f8:ef:45:0b:2e:30:7f:ab:2d:61:2e:e2:f5:0a:
03:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:98:7A:09:E4:39:CD:5E:6C:8E:9A:9E:CF:AE:FA:AF:97:C1:B5:17
X509v3 Authority Key Identifier:
keyid:BA:0D:73:8D:D2:8F:F2:54:94:56:CE:66:E7:44:89:83:72:FC:50:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ug1zjdKP8lSUVs5m50SJg3L8UD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:a6:69:6a:a3:0f:96:47:23:34:48:31:ff:44:c6:a6:37:37:
5e:36:4e:80:32:9b:47:da:29:57:72:d4:5a:69:59:ff:49:4e:
bb:64:2d:16:cb:46:02:01:91:93:40:7e:35:fb:7f:83:fc:27:
85:73:3d:7f:28:0a:3e:8a:ef:d8:14:08:34:02:8d:ec:1c:7e:
77:63:6b:ba:50:20:01:cc:0a:9e:94:9b:cb:6e:f4:2b:ad:ad:
d9:4e:c0:14:7d:57:74:28:a3:e2:08:36:cd:55:7e:44:78:99:
d0:01:b2:68:3d:27:a9:13:e3:be:f4:f8:a6:50:36:df:1d:ba:
33:46:64:cd:29:47:b7:3d:4f:84:dc:a7:5c:17:4a:e8:9e:ae:
3c:94:c1:31:fa:f0:f8:f7:30:f0:e7:76:b7:57:d6:0f:a5:8a:
2e:35:22:6f:39:fd:c7:d7:f0:04:70:2b:08:18:4d:73:0b:47:
86:17:20:4b:8a:85:ca:1f:44:b6:1e:29:ca:7c:22:41:58:d8:
d5:bd:23:a0:b3:79:a7:bc:1b:47:ab:ea:47:4c:63:4e:72:08:
b2:84:48:27:d7:0b:e9:50:ce:b7:4a:57:8b:4d:8a:bf:a8:c8:
8b:01:e4:e8:8c:97:a2:ad:21:4e:83:0d:79:18:c6:86:9e:ea:
f7:f2:2d:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiEMYq1lfaUoU/CF2oDlRlaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhMGQ3MzhkZDI4ZmYyNTQ5NDU2Y2U2NmU3NDQ4OTgzNzJm
YzUwM2QwHhcNMjUwODA3MTEwMTM1WhcNMjUwODA4MTEwMTM1WjAzMTEwLwYDVQQD
Eyg0Mjk4N2EwOWU0MzljZDVlNmM4ZTlhOWVjZmFlZmFhZjk3YzFiNTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQcUTFOUDAyTtxeo1Q67vPI8xApV
smA/f87vB97mjwmgIzdNOQUhhHsloh5Ze2zSpJh4Bs/5QRioYXFw9YqZBPQRa7mH
4ehmWttpzy+uYBxgJrf0VXlNjEPf85o3jicN0cDQirFcyt3o3jC8D8YPI87o6oM5
/uVqdhEpHVn+5rF0I2UOL2wGT+H47ks7rmCg3f0u/iJ+xQdJfd3BLdsmk4/ctN8I
2clXRBG/uxgHalhBtn4AekgO8BcBK9pwGfbWPLrBZraXjheyrwsPEfZcfxcVolUW
b7WHAre5CAEL8dkdDMvM0dZX0uisJWdl1TrG+O9FCy4wf6stYS7i9QoDJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEKYegnkOc1ebI6ans+u+q+XwbUXMB8GA1UdIwQY
MBaAFLoNc43Sj/JUlFbOZudEiYNy/FA9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWcxempkS1A4bFNVVnM1bTUwU0pnM0w4VUQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC8xY2Q3NmMtMDIwMS00NzAzLThlZDYt
YmViNmRhMDM3NTVlLzEvdWcxempkS1A4bFNVVnM1bTUwU0pnM0w4VUQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC8xY2Q3NmMtMDIwMS00NzAzLThlZDYtYmViNmRhMDM3NTVl
LzEvdWcxempkS1A4bFNVVnM1bTUwU0pnM0w4VUQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwKZpaqMP
lkcjNEgx/0TGpjc3XjZOgDKbR9opV3LUWmlZ/0lOu2QtFstGAgGRk0B+Nft/g/wn
hXM9fygKPorv2BQINAKN7Bx+d2NrulAgAcwKnpSby270K62t2U7AFH1XdCij4gg2
zVV+RHiZ0AGyaD0nqRPjvvT4plA23x26M0ZkzSlHtz1PhNynXBdK6J6uPJTBMfrw
+Pcw8Od2t1fWD6WKLjUibzn9x9fwBHArCBhNcwtHhhcgS4qFyh9Eth4pynwiQVjY
1b0joLN5p7wbR6vqR0xjTnIIsoRIJ9cL6VDOt0pXi02Kv6jIiwHk6IyXoq0hToMN
eRjGhp7q9/ItDw==
-----END CERTIFICATE-----
Generated at Thu Aug 7 14:33:53 2025 by rpki-client