Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.mft
File: ug1zjdKP8lSUVs5m50SJg3L8UD0.mft (raw, json)
Hash identifier: IZ0yTRHrck6sbn/pTm2w9Jmtp5ocPKMrRCB/CcpnAZ0=
Subject key identifier: A3:46:72:40:4B:C0:D3:A7:17:57:CB:52:CF:28:34:BE:61:1C:2F:EC
Authority key identifier: BA:0D:73:8D:D2:8F:F2:54:94:56:CE:66:E7:44:89:83:72:FC:50:3D
Certificate issuer: /CN=ba0d738dd28ff2549456ce66e744898372fc503d
Certificate serial: 0197B96A5C38F2FD97D33199512BA06BA987
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ug1zjdKP8lSUVs5m50SJg3L8UD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.mft
Manifest number: 15B8
Signing time: Sun 29 Jun 2025 02:00:44 +0000
Manifest this update: Sun 29 Jun 2025 02:00:44 +0000
Manifest next update: Mon 30 Jun 2025 02:00:44 +0000
Files and hashes: 1: 7-NH-ftLPJv2hgS7hIIra8h47rk.roa (hash: NgMYgra/QOYKtcgagrEDYRVy/zIMw/N7je2pXEjtpgU=)
2: CcbL2suikwKGAhya-UWTND6NZ-8.roa (hash: oOLlZv9fktDSkNEJWYkIbxLGMe1qA0jO7UZ2EmxdF3k=)
3: ug1zjdKP8lSUVs5m50SJg3L8UD0.crl (hash: cnSU/1AR/+eTfeqWuLpLlnGQegS5OE42B/wNRGoekdU=)
4: vdeCaypIFGdIRAqMdGTsPj8WbOU.roa (hash: vq84qfOVSp0uzDqim8nGELqrKMLD6OkkmbcoO9J1Zis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ug1zjdKP8lSUVs5m50SJg3L8UD0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:6a:5c:38:f2:fd:97:d3:31:99:51:2b:a0:6b:a9:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba0d738dd28ff2549456ce66e744898372fc503d
Validity
Not Before: Jun 29 02:00:44 2025 GMT
Not After : Jun 30 02:00:44 2025 GMT
Subject: CN=a34672404bc0d3a71757cb52cf2834be611c2fec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0b:c0:30:30:aa:b4:1e:ff:5c:d9:7d:8f:0b:
51:c0:dd:3b:e0:57:fa:e4:6f:7c:2a:34:6d:bf:1e:
47:b3:d5:56:fc:0e:b3:09:be:df:0c:29:93:ac:db:
2d:0a:dd:63:99:8f:40:77:b2:11:6e:b1:6d:0b:01:
99:12:15:f8:08:d5:f4:22:9a:8d:49:38:6e:b8:f8:
56:cd:48:cd:d7:b4:e5:20:f8:a9:ce:77:eb:85:b3:
7a:ba:02:41:a7:11:fd:43:d0:16:75:13:c5:d0:dd:
8d:c0:96:80:72:ae:bd:a7:6f:54:ec:52:72:9b:2c:
60:52:56:2e:11:f1:50:f7:7f:d4:01:df:d0:73:93:
35:52:97:56:10:ae:49:b5:88:00:9e:4b:f1:cd:51:
3a:32:26:87:27:ca:ef:72:59:22:e6:f9:19:70:c4:
c6:ae:12:cf:9d:5f:7d:0f:c6:ac:f3:41:dc:40:98:
4a:40:69:30:2e:3e:3b:d2:3c:6c:a9:d6:5f:5c:18:
1e:4e:3c:b6:b7:8e:35:24:2e:61:46:e4:e5:1e:31:
71:d0:ca:64:3f:d1:17:7d:c2:98:21:17:9f:0d:4e:
63:74:80:65:a0:c8:38:dd:55:c1:80:de:c0:4d:ad:
70:42:f8:31:1d:a0:30:8f:0f:c2:a4:6c:80:75:a0:
39:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:46:72:40:4B:C0:D3:A7:17:57:CB:52:CF:28:34:BE:61:1C:2F:EC
X509v3 Authority Key Identifier:
keyid:BA:0D:73:8D:D2:8F:F2:54:94:56:CE:66:E7:44:89:83:72:FC:50:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ug1zjdKP8lSUVs5m50SJg3L8UD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:9e:c0:8c:b7:b8:17:ca:33:40:dd:2a:e3:17:e4:ee:73:d4:
12:3b:f5:f5:47:e9:ec:92:ef:dd:0d:6d:28:13:68:3d:08:0c:
58:b1:14:97:28:a6:85:83:c9:ad:9d:a1:9e:05:61:94:4b:38:
12:bd:b4:e9:32:ca:51:36:6e:ff:4b:24:d5:58:fb:e4:42:a8:
4e:7b:10:90:6f:d7:13:46:54:b1:20:52:f3:d3:83:8a:aa:08:
95:79:fd:c1:84:1d:a1:5f:ea:95:82:71:ef:ab:8a:77:f5:eb:
b5:50:e2:f4:ea:dd:32:96:ad:61:8d:7c:6a:d8:07:9d:e1:75:
65:19:e1:c1:18:bc:9b:03:13:a2:97:cd:87:ba:07:57:18:53:
fd:c4:06:e8:3a:7b:63:a5:30:d3:05:6c:58:10:fe:39:08:e9:
a9:d1:03:52:5c:a9:3a:f6:6b:60:ee:d4:3d:c1:34:64:c0:00:
1e:ce:d5:d1:22:2d:c5:53:06:21:0f:28:cc:77:9b:80:c3:d0:
f1:6c:7c:8b:5a:8d:cf:47:ef:8e:2e:4c:1b:e8:d5:5e:40:17:
8f:97:a5:cc:ba:b0:36:7a:c6:5d:15:32:12:0d:07:fb:8c:55:
dd:c1:23:6c:c0:96:7b:72:72:a4:e8:ca:41:d5:91:04:b5:10:
22:69:e3:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe5alw48v2X0zGZUSuga6mHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhMGQ3MzhkZDI4ZmYyNTQ5NDU2Y2U2NmU3NDQ4OTgzNzJm
YzUwM2QwHhcNMjUwNjI5MDIwMDQ0WhcNMjUwNjMwMDIwMDQ0WjAzMTEwLwYDVQQD
EyhhMzQ2NzI0MDRiYzBkM2E3MTc1N2NiNTJjZjI4MzRiZTYxMWMyZmVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQvAMDCqtB7/XNl9jwtRwN074Ff6
5G98KjRtvx5Hs9VW/A6zCb7fDCmTrNstCt1jmY9Ad7IRbrFtCwGZEhX4CNX0IpqN
SThuuPhWzUjN17TlIPipznfrhbN6ugJBpxH9Q9AWdRPF0N2NwJaAcq69p29U7FJy
myxgUlYuEfFQ93/UAd/Qc5M1UpdWEK5JtYgAnkvxzVE6MiaHJ8rvclki5vkZcMTG
rhLPnV99D8as80HcQJhKQGkwLj470jxsqdZfXBgeTjy2t441JC5hRuTlHjFx0Mpk
P9EXfcKYIRefDU5jdIBloMg43VXBgN7ATa1wQvgxHaAwjw/CpGyAdaA5KwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKNGckBLwNOnF1fLUs8oNL5hHC/sMB8GA1UdIwQY
MBaAFLoNc43Sj/JUlFbOZudEiYNy/FA9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWcxempkS1A4bFNVVnM1bTUwU0pnM0w4VUQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC8xY2Q3NmMtMDIwMS00NzAzLThlZDYt
YmViNmRhMDM3NTVlLzEvdWcxempkS1A4bFNVVnM1bTUwU0pnM0w4VUQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC8xY2Q3NmMtMDIwMS00NzAzLThlZDYtYmViNmRhMDM3NTVl
LzEvdWcxempkS1A4bFNVVnM1bTUwU0pnM0w4VUQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaJ7AjLe4
F8ozQN0q4xfk7nPUEjv19Ufp7JLv3Q1tKBNoPQgMWLEUlyimhYPJrZ2hngVhlEs4
Er206TLKUTZu/0sk1Vj75EKoTnsQkG/XE0ZUsSBS89ODiqoIlXn9wYQdoV/qlYJx
76uKd/XrtVDi9OrdMpatYY18atgHneF1ZRnhwRi8mwMTopfNh7oHVxhT/cQG6Dp7
Y6Uw0wVsWBD+OQjpqdEDUlypOvZrYO7UPcE0ZMAAHs7V0SItxVMGIQ8ozHebgMPQ
8Wx8i1qNz0fvji5MG+jVXkAXj5elzLqwNnrGXRUyEg0H+4xV3cEjbMCWe3JypOjK
QdWRBLUQImnjkQ==
-----END CERTIFICATE-----
Generated at Sun Jun 29 06:31:51 2025 by rpki-client