Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/eed853-3b36-45ed-9533-b17c2affa30b/1/ug-GS6D6IE3pOsWqhPcotiIMb3w.mft
File: ug-GS6D6IE3pOsWqhPcotiIMb3w.mft (raw, json)
Hash identifier: eEH6FLE6gFn07016CdNG+wLC2fH+MeyEY+9ChoeLoNE=
Subject key identifier: 98:FA:4B:09:5D:D7:2C:A6:25:FE:D7:57:8B:8D:F8:FC:08:B4:75:74
Authority key identifier: BA:0F:86:4B:A0:FA:20:4D:E9:3A:C5:AA:84:F7:28:B6:22:0C:6F:7C
Certificate issuer: /CN=ba0f864ba0fa204de93ac5aa84f728b6220c6f7c
Certificate serial: 0199FB45A6EC4AACBF20C77249A6F286BDEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ug-GS6D6IE3pOsWqhPcotiIMb3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/eed853-3b36-45ed-9533-b17c2affa30b/1/ug-GS6D6IE3pOsWqhPcotiIMb3w.mft
Manifest number: 0D7C
Signing time: Sun 19 Oct 2025 07:01:09 +0000
Manifest this update: Sun 19 Oct 2025 07:01:09 +0000
Manifest next update: Mon 20 Oct 2025 07:01:09 +0000
Files and hashes: 1: gPcTxlbf3arbuyi9zI7DRrews5w.roa (hash: PLKd6xzj3MbPH7j7KxVjpwNPtA1yOPfuOFe/zsglNlc=)
2: ug-GS6D6IE3pOsWqhPcotiIMb3w.crl (hash: 6fQu6CHwx5sbOcXwHEVPFO0HaOh6lYWCJAZzTsopHJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/eed853-3b36-45ed-9533-b17c2affa30b/1/ug-GS6D6IE3pOsWqhPcotiIMb3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/eed853-3b36-45ed-9533-b17c2affa30b/1/ug-GS6D6IE3pOsWqhPcotiIMb3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/ug-GS6D6IE3pOsWqhPcotiIMb3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:a6:ec:4a:ac:bf:20:c7:72:49:a6:f2:86:bd:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba0f864ba0fa204de93ac5aa84f728b6220c6f7c
Validity
Not Before: Oct 19 07:01:09 2025 GMT
Not After : Oct 20 07:01:09 2025 GMT
Subject: CN=98fa4b095dd72ca625fed7578b8df8fc08b47574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:29:f9:5a:94:87:3f:9f:bd:25:77:de:ae:74:
e0:b7:47:f2:9e:7d:50:5c:8b:13:8b:e3:4a:c5:dd:
cd:7d:b1:43:d2:a0:35:33:44:4b:ab:92:64:90:b3:
ba:f7:54:70:30:06:7c:a2:dc:34:bc:ae:8c:04:2b:
f1:6b:95:01:1a:9a:8e:82:70:5f:13:a7:62:e2:36:
5b:3b:05:64:b8:4d:46:5d:8f:ad:77:a3:a7:ce:2b:
d6:14:79:74:98:72:40:a3:25:1a:2a:6b:5f:24:06:
a4:c5:d8:1b:a9:36:ba:99:88:24:04:0b:8c:a8:0d:
28:2d:9f:67:39:e7:1a:b8:77:fb:88:93:08:9b:db:
3b:0e:e0:1b:9e:10:5b:28:df:48:a2:fc:36:31:24:
f6:74:e9:7d:99:3a:c5:70:89:fa:7d:b7:88:b6:fa:
d8:59:1d:d3:61:ba:71:0d:54:2c:64:82:44:8e:2d:
e4:d2:6c:3e:6e:44:92:11:3a:7e:c5:d7:f6:ac:39:
bf:b7:5a:1f:a0:dc:73:25:a3:3e:88:38:bb:89:44:
89:2a:a3:ff:ad:b6:ae:f6:9b:c0:ff:ef:aa:a9:af:
55:55:cc:fe:77:7f:4e:17:eb:96:c9:26:c4:a4:a3:
f9:bb:f4:4f:d3:24:74:90:66:b2:73:76:fe:db:a7:
dc:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:FA:4B:09:5D:D7:2C:A6:25:FE:D7:57:8B:8D:F8:FC:08:B4:75:74
X509v3 Authority Key Identifier:
keyid:BA:0F:86:4B:A0:FA:20:4D:E9:3A:C5:AA:84:F7:28:B6:22:0C:6F:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ug-GS6D6IE3pOsWqhPcotiIMb3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/eed853-3b36-45ed-9533-b17c2affa30b/1/ug-GS6D6IE3pOsWqhPcotiIMb3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/eed853-3b36-45ed-9533-b17c2affa30b/1/ug-GS6D6IE3pOsWqhPcotiIMb3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:6e:0e:ef:4a:d4:d5:ae:05:00:54:84:a8:33:3f:0a:df:4a:
f0:c4:13:d5:dd:11:d4:79:23:98:0e:54:42:1d:57:6f:03:ad:
7a:16:f7:d3:db:ad:38:2e:33:a7:db:61:b8:0a:79:d6:2b:65:
c8:04:57:48:8f:36:aa:35:ca:57:a9:a1:a8:2d:c6:e4:93:68:
2f:f9:0a:18:e7:d5:1f:7b:32:87:a8:d0:93:bd:b9:e1:e4:18:
e4:fd:da:13:a9:ad:d3:eb:01:ab:8d:b0:e6:3b:b7:20:f8:4f:
fe:7e:c2:8a:43:53:76:ed:8e:26:d4:ac:86:2a:af:ca:4b:97:
77:e1:d7:4e:79:24:ca:9b:b9:9b:a5:bd:8c:ab:c2:0b:71:c3:
69:79:36:90:a9:ca:e3:59:e9:84:e8:86:00:4c:36:a2:e2:8f:
12:1a:0a:ea:64:62:2a:5e:ea:24:1e:c7:d8:92:c8:96:38:43:
f2:b4:a1:bd:48:2a:95:ad:6b:f2:d2:40:73:c4:bc:72:b8:85:
ee:38:c6:cf:02:8f:25:ce:ef:22:89:75:de:96:d1:74:14:ec:
a5:eb:d9:a5:42:76:b2:79:cc:31:f9:f4:06:4c:5a:a5:2d:89:
3e:a0:e2:9a:5d:39:2e:8b:5a:5d:b8:15:11:8f:bd:c4:a3:42:
7a:47:49:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:09:46 2025 by rpki-client