Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/64c2fa-df54-47ff-a8c9-bfe0ccb79fcc/1/ug4SZOB7Nwi8udtaFOfMknCGOVg.mft
File: ug4SZOB7Nwi8udtaFOfMknCGOVg.mft (raw, json)
Hash identifier: Bz5Iz3YI/gkAvK08cBX7CmUIQdVQAAJtOyUA+SMS0Qo=
Subject key identifier: EA:3B:A8:6C:42:C7:1F:39:EF:91:39:DE:6B:45:82:64:61:6C:50:60
Authority key identifier: BA:0E:12:64:E0:7B:37:08:BC:B9:DB:5A:14:E7:CC:92:70:86:39:58
Certificate issuer: /CN=ba0e1264e07b3708bcb9db5a14e7cc9270863958
Certificate serial: 019A0035D57635888C6383E228D68A5368EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ug4SZOB7Nwi8udtaFOfMknCGOVg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/64c2fa-df54-47ff-a8c9-bfe0ccb79fcc/1/ug4SZOB7Nwi8udtaFOfMknCGOVg.mft
Manifest number: 16EB
Signing time: Mon 20 Oct 2025 06:01:59 +0000
Manifest this update: Mon 20 Oct 2025 06:01:59 +0000
Manifest next update: Tue 21 Oct 2025 06:01:59 +0000
Files and hashes: 1: ug4SZOB7Nwi8udtaFOfMknCGOVg.crl (hash: GVlIGNRDttdl29FHLNnH5sZFaQOSbkh5Qy7xZk/t/cA=)
2: xXvm8v3Fqzu_dszdmjsgqNl1Hcw.roa (hash: Nh/ftcdTWsREAPkqBZbyfany4F8e1nXpYHmf8szSz/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/64c2fa-df54-47ff-a8c9-bfe0ccb79fcc/1/ug4SZOB7Nwi8udtaFOfMknCGOVg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/64c2fa-df54-47ff-a8c9-bfe0ccb79fcc/1/ug4SZOB7Nwi8udtaFOfMknCGOVg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ug4SZOB7Nwi8udtaFOfMknCGOVg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:d5:76:35:88:8c:63:83:e2:28:d6:8a:53:68:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba0e1264e07b3708bcb9db5a14e7cc9270863958
Validity
Not Before: Oct 20 06:01:59 2025 GMT
Not After : Oct 21 06:01:59 2025 GMT
Subject: CN=ea3ba86c42c71f39ef9139de6b458264616c5060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:54:5e:bb:6d:c1:ad:c7:c2:30:d2:fc:87:3e:
8a:6a:1b:64:3e:cf:20:5d:dc:03:b5:46:36:07:cb:
f3:d0:5f:81:cf:44:03:2c:64:9d:fd:99:ff:d4:6b:
c5:9e:34:ab:19:3d:0d:fd:25:0e:fd:fa:a6:21:d0:
f2:5b:f3:9a:ed:b9:d0:0b:41:6e:51:57:65:7b:a4:
e0:51:53:e3:3b:23:0b:60:ee:b4:8e:28:0f:76:12:
90:77:b3:54:ec:ae:cc:f7:17:b7:a7:57:d8:d0:d7:
7a:b8:57:b5:6c:af:74:ce:a6:79:21:d5:90:e9:63:
61:37:ba:30:9d:e6:4b:ca:dc:70:fe:7b:29:cc:0e:
a0:87:06:b6:2d:90:33:69:c1:a7:ad:b3:02:88:63:
15:29:03:29:a4:34:aa:ea:96:cc:19:09:a9:da:60:
7b:84:e4:6f:3e:7e:1c:d2:cf:95:98:90:5b:ff:3f:
bd:7f:20:e0:96:a6:58:0f:2b:63:be:cd:ad:6f:84:
7e:0c:91:c9:7b:59:9e:15:a1:9e:34:c5:fc:c3:b9:
0e:8a:c0:97:be:b9:61:e9:1f:29:f2:70:f7:ff:d9:
52:27:3a:a0:6a:15:b7:f2:10:6b:e5:23:bc:48:24:
f6:e2:57:0e:c4:66:8c:80:80:5d:72:39:4c:09:e6:
d7:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:3B:A8:6C:42:C7:1F:39:EF:91:39:DE:6B:45:82:64:61:6C:50:60
X509v3 Authority Key Identifier:
keyid:BA:0E:12:64:E0:7B:37:08:BC:B9:DB:5A:14:E7:CC:92:70:86:39:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ug4SZOB7Nwi8udtaFOfMknCGOVg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/64c2fa-df54-47ff-a8c9-bfe0ccb79fcc/1/ug4SZOB7Nwi8udtaFOfMknCGOVg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/64c2fa-df54-47ff-a8c9-bfe0ccb79fcc/1/ug4SZOB7Nwi8udtaFOfMknCGOVg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:00:96:6a:8a:61:1a:42:67:0d:5a:57:d8:2a:96:f4:48:0c:
5e:cc:77:5b:c7:00:77:3a:34:8e:3b:39:77:9b:83:5c:ca:c8:
84:36:70:33:0a:9e:ab:4b:12:85:02:86:c6:78:74:23:f0:75:
78:66:0e:5a:1e:c8:28:57:07:fc:f8:5f:32:c9:90:56:00:de:
ae:38:fe:90:4a:a1:40:bd:9c:eb:f0:c9:53:a6:2a:9a:8d:88:
0e:ab:7f:af:e8:e1:c9:db:50:1d:6c:e9:9a:c7:8a:a4:ad:6e:
68:24:bb:45:c8:25:8d:ec:b2:97:6e:26:1b:35:94:63:06:33:
bf:eb:f5:15:70:b4:a4:24:60:12:11:65:30:6f:a9:db:9a:04:
6d:73:25:ec:2c:eb:1d:8d:c6:59:27:23:6b:4e:56:bc:25:bf:
54:67:ee:ee:fa:a0:12:fc:88:71:e6:40:fd:1f:71:f0:6f:ad:
29:0c:e2:44:dc:e1:0f:ac:d0:83:7b:d1:35:1b:29:33:1b:ae:
b7:91:ff:f4:e8:b3:21:85:3b:fe:1c:d0:f0:c9:45:2e:8e:ad:
00:54:9b:9c:13:ea:36:19:ed:c2:d8:c5:4b:00:31:a3:48:73:
d0:ac:7d:82:de:13:60:4d:cf:41:72:49:18:e7:bd:4f:4c:28:
a0:0a:c5:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:26:14 2025 by rpki-client