
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.mft
File: ug1zjdKP8lSUVs5m50SJg3L8UD0.mft (raw, json)
Hash identifier: n18j+dfzeh/bHCEPeyIqXlSXc0Pd2XGO4QkXK9zJg2c=
Subject key identifier: F2:2B:B4:FF:92:B3:D1:68:40:A8:D8:06:48:64:C6:94:A1:89:C6:7F
Authority key identifier: BA:0D:73:8D:D2:8F:F2:54:94:56:CE:66:E7:44:89:83:72:FC:50:3D
Certificate issuer: /CN=ba0d738dd28ff2549456ce66e744898372fc503d
Certificate serial: 0196C426FD8D3118BE005667A07C3CB07477
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ug1zjdKP8lSUVs5m50SJg3L8UD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.mft
Manifest number: 1539
Signing time: Mon 12 May 2025 11:00:11 +0000
Manifest this update: Mon 12 May 2025 11:00:11 +0000
Manifest next update: Tue 13 May 2025 11:00:11 +0000
Files and hashes: 1: 7-NH-ftLPJv2hgS7hIIra8h47rk.roa (hash: NgMYgra/QOYKtcgagrEDYRVy/zIMw/N7je2pXEjtpgU=)
2: CcbL2suikwKGAhya-UWTND6NZ-8.roa (hash: oOLlZv9fktDSkNEJWYkIbxLGMe1qA0jO7UZ2EmxdF3k=)
3: ug1zjdKP8lSUVs5m50SJg3L8UD0.crl (hash: L9qlPHZyvLT+71zJjDjmoQ7IMHOvEoLI3SjOtloqOVE=)
4: vdeCaypIFGdIRAqMdGTsPj8WbOU.roa (hash: vq84qfOVSp0uzDqim8nGELqrKMLD6OkkmbcoO9J1Zis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ug1zjdKP8lSUVs5m50SJg3L8UD0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 11:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:26:fd:8d:31:18:be:00:56:67:a0:7c:3c:b0:74:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba0d738dd28ff2549456ce66e744898372fc503d
Validity
Not Before: May 12 11:00:11 2025 GMT
Not After : May 13 11:00:11 2025 GMT
Subject: CN=f22bb4ff92b3d16840a8d8064864c694a189c67f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:41:4a:36:45:6e:a1:ba:f9:0c:46:ea:49:67:
08:1d:81:56:bf:4b:7b:86:65:d7:be:b0:d2:00:cf:
ef:23:92:48:cf:a1:93:e4:3f:33:c2:a9:7c:1c:1a:
ef:7b:2d:7d:67:73:63:39:60:4d:f7:22:5e:1b:b8:
8f:e7:b9:5b:fb:4c:de:ac:65:79:88:05:b1:0a:9d:
3f:c9:35:1b:57:9b:68:5e:d3:85:d0:a5:8b:2d:12:
90:75:73:0c:21:86:5a:17:09:b8:be:e4:c3:d8:ab:
8e:ad:3f:b3:d9:25:14:4d:37:4f:67:21:3b:a6:ef:
6d:af:8f:5d:48:4e:e0:fc:20:51:76:31:3d:f5:20:
b8:e8:66:00:16:ad:c5:8a:d6:22:02:70:de:a5:ae:
13:0f:a4:23:9b:e2:41:55:22:a3:25:a9:16:17:bb:
59:27:fe:ec:e1:f7:e4:8d:e2:5b:32:e4:9f:2f:15:
25:eb:ea:57:05:88:5e:b4:f6:9c:49:ce:7e:e3:7a:
3d:2e:29:ee:19:cf:97:1a:72:2e:70:99:4d:77:a4:
85:6d:15:88:30:fb:64:f6:a9:86:43:14:75:fd:ef:
d8:36:67:fb:94:b1:32:ad:ef:c7:65:49:36:dd:8c:
57:ce:e5:48:36:c5:d4:ec:5b:21:92:ea:90:33:fc:
6d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:2B:B4:FF:92:B3:D1:68:40:A8:D8:06:48:64:C6:94:A1:89:C6:7F
X509v3 Authority Key Identifier:
keyid:BA:0D:73:8D:D2:8F:F2:54:94:56:CE:66:E7:44:89:83:72:FC:50:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ug1zjdKP8lSUVs5m50SJg3L8UD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:36:22:62:c1:b9:d9:4b:fa:59:23:65:3b:23:fd:68:cc:bb:
5d:56:4d:8f:49:80:ac:a6:8f:9a:0e:e9:70:c0:92:ff:38:67:
4d:1c:ab:a2:8a:79:4a:4a:d9:65:a8:e7:1e:43:96:33:a5:10:
7d:db:eb:f7:85:a1:e6:09:4e:69:40:5d:e9:28:de:10:ad:a4:
be:d8:36:5c:5f:77:46:db:8f:e8:aa:a5:9c:68:18:fb:92:13:
5d:ef:33:3a:17:65:9a:c3:3c:0d:49:45:81:47:cb:7f:a7:0a:
3c:9c:ed:1e:f0:81:da:cf:8c:5e:47:ae:e4:80:56:64:c4:61:
f8:a0:5c:9d:28:10:11:8e:96:c0:16:d1:ed:61:28:0c:5c:0b:
5d:0a:93:76:11:34:50:f9:1b:f3:77:04:45:e8:b5:95:05:c9:
06:a9:cf:49:49:8a:b3:0a:4e:4a:2a:70:ba:b1:94:c6:88:1c:
d4:29:cd:e2:4d:a7:c3:fe:36:e4:0f:26:b7:c4:9f:56:b9:bb:
f8:c9:98:6e:fc:68:f6:db:51:46:49:a6:a6:f0:f8:2b:a1:c7:
94:9b:f4:cc:3d:af:52:b1:15:e5:7f:3d:f1:fd:e6:aa:df:33:
a6:10:55:e8:6f:91:e1:bd:31:6d:52:d2:78:28:b7:3e:5a:0e:
ed:1b:33:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 17:13:59 2025 by rpki-client