Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.mft
File: um1Gt2v9bUK71XXi8m_OE2ubam0.mft (raw, json)
Hash identifier: 38OjzbBR2QMGgFAdzbN9Gv6o95VjNsxS+KimDC7XPCg=
Subject key identifier: 89:5A:79:A3:A2:1B:59:16:7A:9B:42:8D:94:47:C4:C3:73:5E:BB:0A
Authority key identifier: BA:6D:46:B7:6B:FD:6D:42:BB:D5:75:E2:F2:6F:CE:13:6B:9B:6A:6D
Certificate issuer: /CN=ba6d46b76bfd6d42bbd575e2f26fce136b9b6a6d
Certificate serial: 019A4F9984A6C40555D55F3EDFBDA7B33980
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um1Gt2v9bUK71XXi8m_OE2ubam0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 16:00:52 +0000
Manifest this update: Tue 04 Nov 2025 16:00:52 +0000
Manifest next update: Wed 05 Nov 2025 16:00:52 +0000
Files and hashes: 1: EtrP_0kTCR5Y3QaHgesqcI8qZFg.roa (hash: lv6k+R6R1gqgBt1ARniBlQxWo2X/ZK4cvTKtuDAns7o=)
2: HJSwnKLNgwsgkTsWAJGJbhRxrYg.roa (hash: k/1eexGDlUI1L69r6EcdCcQNtE5gQOhNhUm2uiosEaU=)
3: qY4Pn2rojeUbBpawT6zBM5pztdI.roa (hash: bdIYON38cjUERyQWKrGfXHpQNcizuWiDaFQ+QLNzEDg=)
4: uJnVKXAIy60auoGPJwESNrSmHkE.roa (hash: ebmKrJfXBBi07GAqHoc+u6RWZ0ztB7xPcVNK+Z+MDgQ=)
5: um1Gt2v9bUK71XXi8m_OE2ubam0.crl (hash: L1MKuSWksW36++NGRUuMhglR7tAuoQmL4eSlqd6f/Tw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.mft
rsync://rpki.ripe.net/repository/DEFAULT/um1Gt2v9bUK71XXi8m_OE2ubam0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:84:a6:c4:05:55:d5:5f:3e:df:bd:a7:b3:39:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba6d46b76bfd6d42bbd575e2f26fce136b9b6a6d
Validity
Not Before: Nov 4 16:00:52 2025 GMT
Not After : Nov 5 16:00:52 2025 GMT
Subject: CN=895a79a3a21b59167a9b428d9447c4c3735ebb0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:01:84:c5:21:d5:ff:f3:99:27:81:12:26:11:
03:31:46:2e:99:75:37:d9:15:14:1d:2c:13:23:36:
82:58:8d:3d:5b:3a:1b:16:b7:fe:00:ab:48:b2:20:
8d:c1:a2:9e:e3:8a:a9:80:ac:9e:c7:bf:0a:44:d0:
7c:ef:6d:fc:ce:fd:1e:63:0e:24:1a:ac:c3:ad:e0:
ba:39:41:a9:ca:15:21:03:ce:7a:e2:00:c1:2a:29:
84:82:80:c5:fb:ca:40:a1:c5:e6:f5:e9:36:9d:b0:
76:e3:00:82:e6:b2:b3:8d:7e:d9:66:09:f2:4a:1e:
bb:0b:ca:64:9b:2b:2a:21:40:63:a0:5e:02:1a:9c:
37:4d:00:e3:12:72:6b:02:93:51:d8:5f:c4:bd:82:
a6:9b:81:7a:da:75:ab:ac:e6:57:72:2c:26:6c:a5:
e9:c4:84:86:3d:0a:4e:3d:2e:11:68:8b:73:ee:82:
29:17:ab:e4:a2:b2:93:2a:38:83:bf:a7:36:a3:66:
6d:c3:f7:ec:4d:5d:83:81:64:d2:14:aa:08:46:84:
70:a7:95:27:36:c5:51:d2:72:fd:ed:25:dd:b2:2d:
ea:77:0b:73:c6:05:c6:59:85:4c:ac:08:f2:bf:8c:
57:68:67:65:2f:74:25:1b:c3:1e:93:1a:96:ca:cc:
59:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:5A:79:A3:A2:1B:59:16:7A:9B:42:8D:94:47:C4:C3:73:5E:BB:0A
X509v3 Authority Key Identifier:
keyid:BA:6D:46:B7:6B:FD:6D:42:BB:D5:75:E2:F2:6F:CE:13:6B:9B:6A:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um1Gt2v9bUK71XXi8m_OE2ubam0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:58:46:02:8f:03:0b:e3:2a:f8:ca:37:2c:a0:8c:2c:47:65:
f1:66:7b:9e:4c:59:b9:0e:45:ca:7c:f1:ea:63:74:3b:43:ba:
dd:97:f7:58:88:07:5e:19:df:9a:60:bd:16:f2:a5:55:25:d2:
86:93:54:32:1f:6e:19:1e:5d:8c:d2:12:d9:8f:24:53:8c:cf:
fa:92:d9:f2:2d:b9:fd:8e:48:1c:12:43:19:70:26:fb:24:96:
30:d1:c9:11:7d:1e:dc:0e:11:3d:70:61:a9:17:c6:ca:34:db:
86:95:ba:6f:b0:dc:95:c9:5b:90:04:61:83:c5:cc:e2:6d:80:
53:a8:b7:3d:1f:4f:d4:1c:06:67:4b:89:d0:b4:b5:57:37:01:
ab:91:4b:ff:ee:90:f1:19:03:f9:37:a4:36:f8:bb:50:57:d6:
8f:a3:34:53:ea:2a:5b:48:cd:03:ee:8a:1c:91:ee:4e:03:ed:
66:08:4e:1e:71:28:c9:ff:c3:4a:5b:d3:c0:6f:16:37:0f:d8:
a6:13:26:4e:08:a1:69:bd:16:fc:58:a8:ab:90:dc:d2:ec:05:
23:c1:db:e3:7e:a7:11:a2:99:9e:05:32:67:be:26:4a:ae:8b:
a9:b5:25:86:f5:54:22:2e:bf:0e:5c:6b:de:d2:e4:f8:e0:a1:
4d:e3:77:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:18:22 2025 by rpki-client