Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/64c2fa-df54-47ff-a8c9-bfe0ccb79fcc/1/ug4SZOB7Nwi8udtaFOfMknCGOVg.mft
File: ug4SZOB7Nwi8udtaFOfMknCGOVg.mft (raw, json)
Hash identifier: EjCmml14GD/ePsg/CPbAyYYT1fgei2aDVf2yEvrByRo=
Subject key identifier: 9E:4D:13:49:82:A2:7B:4A:25:48:DB:6D:C8:0A:2B:30:51:2E:B4:D9
Authority key identifier: BA:0E:12:64:E0:7B:37:08:BC:B9:DB:5A:14:E7:CC:92:70:86:39:58
Certificate issuer: /CN=ba0e1264e07b3708bcb9db5a14e7cc9270863958
Certificate serial: 019881D572827107DD53A3605F66B3927E40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ug4SZOB7Nwi8udtaFOfMknCGOVg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/64c2fa-df54-47ff-a8c9-bfe0ccb79fcc/1/ug4SZOB7Nwi8udtaFOfMknCGOVg.mft
Manifest number: 1625
Signing time: Thu 07 Aug 2025 00:01:45 +0000
Manifest this update: Thu 07 Aug 2025 00:01:45 +0000
Manifest next update: Fri 08 Aug 2025 00:01:45 +0000
Files and hashes: 1: ug4SZOB7Nwi8udtaFOfMknCGOVg.crl (hash: 7d6p+ji4jsko3vWfNhpVxM211VM4dXH8o2CF2JkThN8=)
2: xXvm8v3Fqzu_dszdmjsgqNl1Hcw.roa (hash: Nh/ftcdTWsREAPkqBZbyfany4F8e1nXpYHmf8szSz/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/64c2fa-df54-47ff-a8c9-bfe0ccb79fcc/1/ug4SZOB7Nwi8udtaFOfMknCGOVg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/64c2fa-df54-47ff-a8c9-bfe0ccb79fcc/1/ug4SZOB7Nwi8udtaFOfMknCGOVg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ug4SZOB7Nwi8udtaFOfMknCGOVg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:d5:72:82:71:07:dd:53:a3:60:5f:66:b3:92:7e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba0e1264e07b3708bcb9db5a14e7cc9270863958
Validity
Not Before: Aug 7 00:01:45 2025 GMT
Not After : Aug 8 00:01:45 2025 GMT
Subject: CN=9e4d134982a27b4a2548db6dc80a2b30512eb4d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:18:2b:27:85:da:cb:51:60:e8:5b:b4:ba:cd:
b4:8e:ee:7f:96:90:94:d1:71:e0:f8:1e:15:a9:1c:
1a:40:94:d3:04:5e:02:8b:c1:e6:a0:cd:f0:93:fb:
72:73:9f:e0:80:54:af:17:f4:7e:d7:6d:3d:82:41:
3d:ad:91:19:9e:42:10:99:b9:89:9c:43:05:ee:f3:
6d:79:51:81:4f:7b:82:6a:fc:c5:17:cf:66:d8:79:
5c:ee:bb:f6:2d:9d:4a:4b:4c:52:38:5c:1a:69:77:
72:23:46:92:10:05:71:48:22:12:69:1f:5a:6f:6a:
df:f1:61:f4:95:53:cc:bc:9a:a9:7e:a5:40:44:78:
00:03:a5:21:9f:37:38:d2:7f:de:28:10:9a:b8:57:
86:d7:86:dd:36:73:92:63:ec:46:49:36:f8:09:ac:
32:e4:fb:91:ad:d9:22:1d:1c:dd:f7:e3:4a:03:bb:
61:c8:1d:88:a8:8f:25:82:b6:38:c3:ad:68:3e:5a:
a2:c3:20:4f:c1:96:2a:59:bc:3b:32:57:a0:b3:42:
66:ed:ac:f2:e5:d2:3e:72:b1:30:55:e5:fc:05:cd:
5f:19:d9:53:d9:44:6f:68:f7:f4:53:48:b2:56:a3:
7b:54:3b:e2:c6:44:00:35:f1:2e:26:0d:0f:e7:83:
cd:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:4D:13:49:82:A2:7B:4A:25:48:DB:6D:C8:0A:2B:30:51:2E:B4:D9
X509v3 Authority Key Identifier:
keyid:BA:0E:12:64:E0:7B:37:08:BC:B9:DB:5A:14:E7:CC:92:70:86:39:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ug4SZOB7Nwi8udtaFOfMknCGOVg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/64c2fa-df54-47ff-a8c9-bfe0ccb79fcc/1/ug4SZOB7Nwi8udtaFOfMknCGOVg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/64c2fa-df54-47ff-a8c9-bfe0ccb79fcc/1/ug4SZOB7Nwi8udtaFOfMknCGOVg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:af:04:2e:04:0a:9a:31:7b:09:db:d4:79:0f:36:1e:59:2c:
40:6b:1f:36:01:d0:01:b5:8b:ce:f7:74:08:6f:88:31:97:aa:
15:c4:ff:5f:1d:e9:b2:01:63:e2:27:04:6c:5c:03:65:7c:25:
5b:02:81:29:7a:a4:a4:13:bc:9c:1e:d5:18:06:a1:da:32:2c:
bb:65:cf:46:8a:b2:68:71:36:b6:96:02:ef:9c:4b:b6:d2:07:
f1:51:d9:2e:11:66:07:23:ed:23:84:1d:a5:cd:c0:9e:1c:23:
60:f9:b7:00:e9:2b:a0:55:10:ce:a8:3c:33:15:41:81:da:6e:
6c:fe:08:7d:68:81:98:01:ad:4a:2c:93:34:e2:6c:66:30:bd:
14:89:1b:eb:e5:95:7c:47:c6:85:12:ed:d4:aa:f5:9a:4d:9b:
5f:53:64:e1:e9:66:47:7d:78:8c:7a:83:a2:95:ac:f6:ff:4a:
04:f6:cf:45:bb:6c:be:bc:a0:ad:b7:af:ee:76:ee:78:23:72:
6c:11:46:ac:6c:81:e8:a9:e8:59:5c:70:02:a7:e1:f2:ac:c3:
03:d8:16:ca:86:62:6b:ab:20:7d:ac:49:82:a7:04:e9:f2:3b:
d9:88:98:82:ca:18:d8:ac:16:7b:9f:0d:43:6a:c6:91:6c:30:
e6:64:60:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:03:52 2025 by rpki-client