Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/7815d6-d5ad-4f60-8a6d-057ad9331fa8/1/ugpNIpkX1GVzikghtu7FvrJObuQ.mft
File: ugpNIpkX1GVzikghtu7FvrJObuQ.mft (raw, json)
Hash identifier: uwkaIj+FRKEUgzciXzy+QuQrUfXNDpamNQIb+Dl5bBg=
Subject key identifier: CE:70:16:62:0A:3E:9D:4A:E8:D4:82:7E:81:3F:4F:1A:1B:64:0E:2B
Authority key identifier: BA:0A:4D:22:99:17:D4:65:73:8A:48:21:B6:EE:C5:BE:B2:4E:6E:E4
Certificate issuer: /CN=ba0a4d229917d465738a4821b6eec5beb24e6ee4
Certificate serial: 019890D9E3564099D4C8E71960289FB24A47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ugpNIpkX1GVzikghtu7FvrJObuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/7815d6-d5ad-4f60-8a6d-057ad9331fa8/1/ugpNIpkX1GVzikghtu7FvrJObuQ.mft
Manifest number: DA
Signing time: Sat 09 Aug 2025 22:00:55 +0000
Manifest this update: Sat 09 Aug 2025 22:00:55 +0000
Manifest next update: Sun 10 Aug 2025 22:00:55 +0000
Files and hashes: 1: ugpNIpkX1GVzikghtu7FvrJObuQ.crl (hash: I5X304s8py30+WlzUGvZcGMlLp8SV2mNqc1ilm3H13A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/7815d6-d5ad-4f60-8a6d-057ad9331fa8/1/ugpNIpkX1GVzikghtu7FvrJObuQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/7815d6-d5ad-4f60-8a6d-057ad9331fa8/1/ugpNIpkX1GVzikghtu7FvrJObuQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ugpNIpkX1GVzikghtu7FvrJObuQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 22:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:90:d9:e3:56:40:99:d4:c8:e7:19:60:28:9f:b2:4a:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba0a4d229917d465738a4821b6eec5beb24e6ee4
Validity
Not Before: Aug 9 22:00:55 2025 GMT
Not After : Aug 10 22:00:55 2025 GMT
Subject: CN=ce7016620a3e9d4ae8d4827e813f4f1a1b640e2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:56:92:16:8b:b9:84:56:94:1b:c3:d3:0b:5e:
fb:96:7c:f0:ca:66:e1:76:cf:8b:d5:85:49:5a:81:
71:7e:b1:65:ea:e0:b0:20:6a:34:db:85:84:20:cc:
f6:2e:3e:9c:6e:e3:30:60:11:b1:5c:4b:7d:37:63:
b8:d2:4a:cd:4c:ca:cd:88:5a:92:da:03:5d:d9:52:
b4:83:ec:76:9a:5e:29:7f:35:cf:bc:35:1c:89:4d:
fc:ce:b9:e6:ed:10:bc:a7:78:c9:b7:cb:0e:11:ca:
ed:02:bf:78:1f:e8:3e:35:82:14:f6:33:ba:ff:02:
e2:d3:e3:0e:28:e2:6a:f9:17:ee:34:e2:b0:9c:66:
10:1b:f1:93:91:24:c7:e9:6e:c3:42:21:e7:68:f2:
84:28:8b:8b:02:75:0b:0a:7e:35:40:08:a5:4a:3b:
1c:61:93:4b:ca:8e:70:65:1d:c5:83:7a:ea:13:4a:
ff:4e:23:8a:c2:de:6d:7d:e0:f8:3c:02:fd:95:ca:
0b:c3:48:1c:2f:bc:33:ae:67:ab:09:ea:f3:c7:82:
31:56:a9:ca:db:93:33:c9:6d:e0:88:37:1c:96:ca:
9b:0c:88:4e:43:41:bc:ec:22:0b:ee:a6:49:06:c8:
77:23:e0:1e:d9:d5:04:b7:41:5a:bf:bd:bc:13:f1:
a4:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:70:16:62:0A:3E:9D:4A:E8:D4:82:7E:81:3F:4F:1A:1B:64:0E:2B
X509v3 Authority Key Identifier:
keyid:BA:0A:4D:22:99:17:D4:65:73:8A:48:21:B6:EE:C5:BE:B2:4E:6E:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ugpNIpkX1GVzikghtu7FvrJObuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/7815d6-d5ad-4f60-8a6d-057ad9331fa8/1/ugpNIpkX1GVzikghtu7FvrJObuQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/7815d6-d5ad-4f60-8a6d-057ad9331fa8/1/ugpNIpkX1GVzikghtu7FvrJObuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:d5:30:2e:76:9e:6f:c6:be:69:13:e2:01:3a:d2:2a:70:4c:
c4:c0:07:79:1e:d6:32:b8:52:8e:56:fc:f6:0e:5c:c5:31:d4:
fd:0f:c9:7d:22:b1:b6:a7:3c:5d:6c:35:8c:37:56:c5:9d:db:
4e:4e:78:9c:2a:7f:e0:79:fb:d4:74:3b:9d:37:d8:e2:29:30:
62:31:6d:7a:42:4c:88:1d:cf:88:62:8d:01:7c:9a:e0:e7:9c:
3d:8a:ca:53:61:f8:4c:69:9d:f2:a3:c7:eb:17:d3:47:15:f2:
7f:1a:05:0e:b6:5d:55:a1:a6:7a:68:d0:28:6e:77:f4:57:dc:
80:90:d7:eb:d7:74:fd:92:8a:79:5c:e2:65:f5:b0:5e:78:44:
e0:46:c2:a8:61:01:f0:0d:60:07:11:d2:da:d0:6e:10:9a:8e:
d6:f8:25:7a:8e:c8:71:35:f8:2f:ed:b5:29:18:5c:d6:e5:f9:
a1:77:ef:9f:ac:f2:71:8b:dc:8d:77:4c:c0:0c:6e:15:93:ff:
2c:cd:a8:8e:75:f9:92:12:8a:86:a2:57:19:95:ad:0a:97:2f:
7a:e0:5e:0e:55:8f:f1:39:8d:d5:3f:a6:07:8d:5d:7a:67:fd:
62:0f:52:f6:86:62:d5:d4:8f:cb:b1:ef:fc:df:54:5f:67:7f:
6c:29:8c:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:35:53 2025 by rpki-client