Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/64c2fa-df54-47ff-a8c9-bfe0ccb79fcc/1/ug4SZOB7Nwi8udtaFOfMknCGOVg.mft
File: ug4SZOB7Nwi8udtaFOfMknCGOVg.mft (raw, json)
Hash identifier: zV3mJISUlyqP3W+jrXwJOWHUbSn1XavYulsdT6NXvC4=
Subject key identifier: 2D:B5:D4:D4:62:44:DD:46:6C:F3:43:77:5C:08:1D:28:6D:FA:F4:DD
Authority key identifier: BA:0E:12:64:E0:7B:37:08:BC:B9:DB:5A:14:E7:CC:92:70:86:39:58
Certificate issuer: /CN=ba0e1264e07b3708bcb9db5a14e7cc9270863958
Certificate serial: 0198D4DFE9EA3DFB43D624152468909B639E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ug4SZOB7Nwi8udtaFOfMknCGOVg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/64c2fa-df54-47ff-a8c9-bfe0ccb79fcc/1/ug4SZOB7Nwi8udtaFOfMknCGOVg.mft
Manifest number: 1650
Signing time: Sat 23 Aug 2025 03:01:40 +0000
Manifest this update: Sat 23 Aug 2025 03:01:40 +0000
Manifest next update: Sun 24 Aug 2025 03:01:40 +0000
Files and hashes: 1: ug4SZOB7Nwi8udtaFOfMknCGOVg.crl (hash: TRJEAJpPVqefh4aB/dHuL6QRskYBv7Bqsfv3unqze2c=)
2: xXvm8v3Fqzu_dszdmjsgqNl1Hcw.roa (hash: Nh/ftcdTWsREAPkqBZbyfany4F8e1nXpYHmf8szSz/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/64c2fa-df54-47ff-a8c9-bfe0ccb79fcc/1/ug4SZOB7Nwi8udtaFOfMknCGOVg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/64c2fa-df54-47ff-a8c9-bfe0ccb79fcc/1/ug4SZOB7Nwi8udtaFOfMknCGOVg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ug4SZOB7Nwi8udtaFOfMknCGOVg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:e9:ea:3d:fb:43:d6:24:15:24:68:90:9b:63:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba0e1264e07b3708bcb9db5a14e7cc9270863958
Validity
Not Before: Aug 23 03:01:40 2025 GMT
Not After : Aug 24 03:01:40 2025 GMT
Subject: CN=2db5d4d46244dd466cf343775c081d286dfaf4dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:e2:5a:52:86:f7:f7:a9:0d:68:62:dd:37:c0:
7a:c6:63:2b:e0:fc:9b:4c:cb:8f:27:20:3b:4c:3c:
c0:82:1d:89:51:49:06:94:1f:f4:de:a5:68:14:15:
3e:de:ce:19:ec:2e:77:9b:b6:61:85:4d:be:4b:50:
40:18:d7:a0:41:e2:73:d5:87:c6:3b:03:a8:3c:a2:
cf:d5:f1:19:9b:b1:58:7e:b8:06:e9:03:79:3f:36:
33:df:82:de:fd:45:dd:a1:7a:ef:39:35:c2:5c:ab:
d7:d6:a1:5b:b5:30:b8:2c:ce:fe:ef:fb:80:af:4d:
ef:b0:1d:2c:9a:88:4e:14:96:05:a6:d7:52:fc:bb:
fd:74:86:44:03:2e:11:ab:48:b4:17:eb:51:f3:3f:
7f:30:d4:4c:fa:cc:09:11:25:18:d8:08:b4:8f:7b:
42:3d:a1:db:ed:75:ad:ea:17:69:ff:35:96:6c:e0:
ef:0e:b6:3e:27:ee:75:96:ea:fb:b8:e4:03:b2:1a:
b6:ae:c8:f2:c6:5b:fe:c4:45:d1:e0:65:1a:df:09:
53:52:41:fa:f3:b9:2c:dc:90:1e:db:68:a5:7f:8c:
6b:2d:67:d4:3f:f6:2d:8c:59:11:eb:e0:82:3f:a8:
01:fd:78:aa:b8:9e:70:41:be:46:4a:3a:fe:99:8a:
76:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:B5:D4:D4:62:44:DD:46:6C:F3:43:77:5C:08:1D:28:6D:FA:F4:DD
X509v3 Authority Key Identifier:
keyid:BA:0E:12:64:E0:7B:37:08:BC:B9:DB:5A:14:E7:CC:92:70:86:39:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ug4SZOB7Nwi8udtaFOfMknCGOVg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/64c2fa-df54-47ff-a8c9-bfe0ccb79fcc/1/ug4SZOB7Nwi8udtaFOfMknCGOVg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/64c2fa-df54-47ff-a8c9-bfe0ccb79fcc/1/ug4SZOB7Nwi8udtaFOfMknCGOVg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:98:1e:51:26:35:3f:f3:d0:72:93:1f:16:7c:34:f7:60:2b:
57:f8:21:d8:3a:c3:e3:38:04:32:de:37:7e:8d:55:d2:12:b1:
4e:d9:e4:5e:39:4b:aa:b5:47:28:71:95:48:c5:dc:30:47:7e:
c5:5a:ae:25:38:aa:6a:b1:34:fb:54:b3:92:dd:f3:79:c6:69:
16:5f:fa:01:38:0f:61:74:09:26:f2:9c:17:85:d3:b6:38:94:
b4:b3:9b:9e:7c:8b:cf:c6:fe:12:eb:bd:65:f3:68:dc:55:d3:
3a:cb:12:c3:fa:d4:4d:95:1c:1f:19:2b:57:f0:38:e4:f8:01:
6d:00:83:fc:c6:3d:d5:92:38:f9:e4:30:90:a9:a2:e8:83:01:
a7:5c:d3:8e:d4:81:e2:11:88:41:fb:a3:11:9d:32:d3:2a:b5:
ad:45:44:9c:46:88:bd:9f:31:68:ce:af:7d:ad:dd:a7:36:6e:
7a:7d:85:50:a3:d4:d1:09:75:34:8c:83:5c:8b:1f:12:62:52:
e9:2a:e5:a5:f6:c7:7d:a6:e1:72:ab:6d:a1:17:d4:db:fa:2a:
5b:9f:c8:68:54:8a:ec:35:70:98:a5:a5:be:68:7b:d5:70:d0:
f7:76:c7:af:54:05:1c:a0:4d:4a:68:7f:0e:26:02:49:7d:2a:
09:17:54:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:50:25 2025 by rpki-client