Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/eed853-3b36-45ed-9533-b17c2affa30b/1/ug-GS6D6IE3pOsWqhPcotiIMb3w.mft
File: ug-GS6D6IE3pOsWqhPcotiIMb3w.mft (raw, json)
Hash identifier: P7OqnGYSBwJ1OMyBZQTRdN8o9cu8O3pazYBOOUHkpzM=
Subject key identifier: F5:BF:2C:F7:BC:26:CC:C8:84:88:BD:5D:C2:D5:92:8D:3D:11:E7:C9
Authority key identifier: BA:0F:86:4B:A0:FA:20:4D:E9:3A:C5:AA:84:F7:28:B6:22:0C:6F:7C
Certificate issuer: /CN=ba0f864ba0fa204de93ac5aa84f728b6220c6f7c
Certificate serial: 0197B6D74C67190D79BDD4363FFD090A13AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ug-GS6D6IE3pOsWqhPcotiIMb3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/eed853-3b36-45ed-9533-b17c2affa30b/1/ug-GS6D6IE3pOsWqhPcotiIMb3w.mft
Manifest number: 0C4D
Signing time: Sat 28 Jun 2025 14:00:52 +0000
Manifest this update: Sat 28 Jun 2025 14:00:52 +0000
Manifest next update: Sun 29 Jun 2025 14:00:52 +0000
Files and hashes: 1: 0MltjoScbWKVRJAVtzOlI7_AtTM.roa (hash: SViUMsy1T/49SZJpozJCX+cxm4lNhgz3VR3S8vcAZvk=)
2: ug-GS6D6IE3pOsWqhPcotiIMb3w.crl (hash: ZaKB2a05HHthy1raswt7WzwAuoOxJv/Ts5LBxnHDIXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/eed853-3b36-45ed-9533-b17c2affa30b/1/ug-GS6D6IE3pOsWqhPcotiIMb3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/eed853-3b36-45ed-9533-b17c2affa30b/1/ug-GS6D6IE3pOsWqhPcotiIMb3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/ug-GS6D6IE3pOsWqhPcotiIMb3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:4c:67:19:0d:79:bd:d4:36:3f:fd:09:0a:13:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba0f864ba0fa204de93ac5aa84f728b6220c6f7c
Validity
Not Before: Jun 28 14:00:52 2025 GMT
Not After : Jun 29 14:00:52 2025 GMT
Subject: CN=f5bf2cf7bc26ccc88488bd5dc2d5928d3d11e7c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:43:38:9f:57:d4:dc:67:30:c1:f0:2a:f0:46:
b5:ba:10:0e:57:13:c7:26:82:a9:9e:c0:b8:1e:a4:
cf:eb:21:90:42:11:28:13:5b:5b:58:d3:20:30:81:
30:fa:e4:09:98:f5:8b:d6:88:93:f6:1d:83:29:d0:
4d:d2:2e:c2:10:1d:7e:d3:79:7d:b4:d6:77:98:b0:
20:3b:00:2d:e5:10:de:53:90:e8:01:86:8f:60:c0:
0c:d0:a5:e2:2e:68:3f:b6:eb:98:82:f4:c7:71:2c:
34:0b:4c:3b:c9:c5:fd:51:37:99:33:fe:b3:1f:ad:
c6:64:b2:d7:b6:03:39:76:10:1f:68:fd:d1:bc:80:
08:0f:eb:1e:11:a5:9d:e3:69:5f:b1:54:b4:be:c6:
ee:85:48:7d:86:fa:5d:0a:2b:8e:cc:5d:80:8f:88:
78:2d:f0:5a:1b:43:cd:27:ba:3a:f1:bb:55:7b:78:
00:aa:99:07:65:5a:4b:ca:33:b5:b0:af:4d:d9:cf:
06:50:00:32:55:3d:76:b2:85:5e:a8:20:3f:67:c3:
d0:93:49:eb:58:fc:5e:57:7c:a3:37:67:24:d8:0e:
8f:4c:5a:97:b2:89:1d:65:73:9f:4b:c2:da:6e:74:
0e:c4:fb:12:ce:2a:ce:fd:33:51:5f:6e:be:56:1b:
6c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:BF:2C:F7:BC:26:CC:C8:84:88:BD:5D:C2:D5:92:8D:3D:11:E7:C9
X509v3 Authority Key Identifier:
keyid:BA:0F:86:4B:A0:FA:20:4D:E9:3A:C5:AA:84:F7:28:B6:22:0C:6F:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ug-GS6D6IE3pOsWqhPcotiIMb3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/eed853-3b36-45ed-9533-b17c2affa30b/1/ug-GS6D6IE3pOsWqhPcotiIMb3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/eed853-3b36-45ed-9533-b17c2affa30b/1/ug-GS6D6IE3pOsWqhPcotiIMb3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:c9:73:1d:1b:bb:a1:71:13:45:5d:07:72:f1:bc:5f:7d:1a:
3d:a2:e5:4b:1c:c4:94:74:07:7a:c2:5e:21:39:1c:f2:63:57:
12:fe:ef:5f:63:c8:05:3d:ac:c9:9d:b2:f5:c2:f1:af:7f:ea:
49:d2:84:93:3c:2d:6b:60:af:c5:0a:ab:43:22:94:10:4b:16:
71:18:f8:72:6a:d4:0a:49:b2:67:c1:19:c9:e5:bd:36:04:45:
c5:ad:ee:6d:f2:70:55:d0:af:e6:84:93:d7:22:03:37:44:a7:
bd:0f:d3:5b:f0:41:5c:d9:9f:9c:69:c5:c3:63:80:8a:8d:70:
93:86:81:2d:4c:c1:10:6c:82:6f:a1:7f:75:a5:fa:38:a2:f3:
2e:01:f1:f7:0f:95:ef:99:76:67:c1:e8:7c:86:09:58:fe:c1:
2a:59:6f:a4:91:be:92:22:e8:18:b7:8a:78:ec:dd:26:3e:0a:
65:3c:bc:5a:20:2c:93:0f:de:8f:dc:53:42:ea:07:f5:ae:6d:
63:d5:f0:33:97:de:c4:2e:a3:fa:e9:5d:e4:26:6f:ef:ed:42:
58:79:e7:40:53:ef:39:45:4d:44:46:3f:ef:a0:92:6c:85:66:
37:d2:4a:0b:e7:c1:5c:81:69:5d:bb:43:c7:e1:ec:ae:e2:71:
1d:83:2d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:02:54 2025 by rpki-client