Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/eed853-3b36-45ed-9533-b17c2affa30b/1/ug-GS6D6IE3pOsWqhPcotiIMb3w.mft
File: ug-GS6D6IE3pOsWqhPcotiIMb3w.mft (raw, json)
Hash identifier: iHK3hpYjLUtuDzYiZ2hhid8IHwC7VFqAv+qQ4rIjLD8=
Subject key identifier: BD:0E:D4:15:70:18:4F:95:01:93:A8:35:27:AE:35:B4:21:51:79:D0
Authority key identifier: BA:0F:86:4B:A0:FA:20:4D:E9:3A:C5:AA:84:F7:28:B6:22:0C:6F:7C
Certificate issuer: /CN=ba0f864ba0fa204de93ac5aa84f728b6220c6f7c
Certificate serial: 0196B9DA8A4638DA5D0DC98984AACC99B8AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ug-GS6D6IE3pOsWqhPcotiIMb3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/eed853-3b36-45ed-9533-b17c2affa30b/1/ug-GS6D6IE3pOsWqhPcotiIMb3w.mft
Manifest number: 0BCA
Signing time: Sat 10 May 2025 11:00:29 +0000
Manifest this update: Sat 10 May 2025 11:00:29 +0000
Manifest next update: Sun 11 May 2025 11:00:29 +0000
Files and hashes: 1: 0MltjoScbWKVRJAVtzOlI7_AtTM.roa (hash: SViUMsy1T/49SZJpozJCX+cxm4lNhgz3VR3S8vcAZvk=)
2: ug-GS6D6IE3pOsWqhPcotiIMb3w.crl (hash: pVZd2b6BrKbAMiccIDL/VuoNn/7q2DwW9xOnOyBcEx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/eed853-3b36-45ed-9533-b17c2affa30b/1/ug-GS6D6IE3pOsWqhPcotiIMb3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/eed853-3b36-45ed-9533-b17c2affa30b/1/ug-GS6D6IE3pOsWqhPcotiIMb3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/ug-GS6D6IE3pOsWqhPcotiIMb3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 11:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:da:8a:46:38:da:5d:0d:c9:89:84:aa:cc:99:b8:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba0f864ba0fa204de93ac5aa84f728b6220c6f7c
Validity
Not Before: May 10 11:00:29 2025 GMT
Not After : May 11 11:00:29 2025 GMT
Subject: CN=bd0ed41570184f950193a83527ae35b4215179d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a0:fc:b1:5b:98:88:84:c9:cf:12:d4:26:14:
dc:5c:22:17:df:e6:f0:6b:dc:07:d5:30:39:b0:89:
4d:22:8f:0c:e9:9f:f4:71:0e:8c:e5:a7:2f:23:83:
58:e0:b0:71:60:d1:1f:9a:15:f6:f4:d0:53:c2:c4:
6a:86:2c:b7:77:8e:a2:b9:79:c3:58:97:cd:bb:10:
8e:a3:8f:37:33:b1:ce:5b:86:d2:a9:05:18:3e:fa:
9d:70:0e:8f:9e:1b:f5:24:48:38:12:dd:51:6d:a0:
a3:88:32:0f:a3:d2:d1:6a:7b:80:1e:2f:a7:bb:af:
97:75:42:09:19:f7:6e:12:1d:65:37:60:2f:b1:7e:
38:b9:32:15:88:dc:42:50:3c:1f:69:b7:35:1d:10:
f3:52:54:61:eb:d3:08:a3:04:b0:8d:54:98:ac:ad:
4a:63:ab:80:0c:0e:f0:12:11:fd:74:9a:ef:0f:ec:
d9:8c:61:15:a8:57:61:8d:0a:0a:34:fe:6e:cc:e6:
6b:4a:5e:d2:df:95:02:27:53:18:c1:8c:04:f2:da:
f4:9e:a2:25:b2:53:a4:a6:ba:f7:49:3e:8f:32:ae:
b0:aa:37:41:c9:1a:9c:6d:67:4e:04:95:4d:ff:ea:
81:d0:92:93:0d:12:8b:73:61:03:95:68:0c:e0:57:
94:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:0E:D4:15:70:18:4F:95:01:93:A8:35:27:AE:35:B4:21:51:79:D0
X509v3 Authority Key Identifier:
keyid:BA:0F:86:4B:A0:FA:20:4D:E9:3A:C5:AA:84:F7:28:B6:22:0C:6F:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ug-GS6D6IE3pOsWqhPcotiIMb3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/eed853-3b36-45ed-9533-b17c2affa30b/1/ug-GS6D6IE3pOsWqhPcotiIMb3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/eed853-3b36-45ed-9533-b17c2affa30b/1/ug-GS6D6IE3pOsWqhPcotiIMb3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:3b:a9:3b:d0:1f:9d:a7:9e:b4:4f:3e:bd:d3:92:2c:a5:50:
44:36:c0:49:a3:77:a8:95:c1:36:7e:be:cd:4c:13:55:b3:f3:
52:e4:c8:af:02:14:08:fd:33:7a:3f:b2:9f:a6:4e:d3:94:3b:
73:51:8f:f6:3c:f3:03:bf:fb:b5:33:d3:fa:cc:6c:c1:4b:28:
ed:20:d7:6a:90:12:0e:9c:2b:3e:ac:4c:96:72:02:70:af:f0:
a9:1e:da:e8:e9:7d:16:7e:d6:29:f6:96:b5:db:56:5c:b9:f0:
75:8f:9a:01:17:d1:3d:24:72:49:38:9d:42:f0:b3:87:ba:ec:
9a:1b:49:cd:ed:df:0d:b5:e4:a0:bc:d0:99:2f:67:89:42:69:
31:38:77:81:dc:4b:1d:8a:29:1d:79:74:97:63:cb:93:7f:e6:
2a:89:cd:fa:a3:a7:fd:88:2a:90:43:79:72:63:ab:6d:2c:7c:
e4:06:1c:97:99:b1:69:c0:ab:6f:2d:20:85:98:24:43:4d:c9:
3e:1b:44:4a:65:82:6e:55:5e:5e:c4:02:ad:1d:49:1b:4b:36:
60:fd:c3:c0:07:87:54:18:3d:55:78:23:5d:4d:32:5a:30:5b:
5e:d9:ee:be:db:fc:16:c6:de:0d:9d:8d:78:32:6f:3a:54:65:
d0:c1:11:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 20:41:44 2025 by rpki-client