Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft
File: ume_97rR64OEtYXfe-8SBvfxn34.mft (raw, json)
Hash identifier: RuBS4PkskPy2E80DoLbhX+dkCPx+OXpqyAm94EnpbT4=
Subject key identifier: C4:F7:6C:A5:47:CC:9D:AB:59:C2:77:AC:63:01:BB:93:89:90:61:0C
Authority key identifier: BA:67:BF:F7:BA:D1:EB:83:84:B5:85:DF:7B:EF:12:06:F7:F1:9F:7E
Certificate issuer: /CN=ba67bff7bad1eb8384b585df7bef1206f7f19f7e
Certificate serial: 019891481AA09C591FB585C70F135C113CFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft
Manifest number: 0DCD
Signing time: Sun 10 Aug 2025 00:01:17 +0000
Manifest this update: Sun 10 Aug 2025 00:01:17 +0000
Manifest next update: Mon 11 Aug 2025 00:01:17 +0000
Files and hashes: 1: 584yOVeS4oyabLizAkaG7pPUY5Y.roa (hash: fVHqq9WRd9turce9ObKFB2HXSMmM46QztnuoCC2qLk4=)
2: 6hhOpOhfqnR9-Ld8KayuH8mAoWs.roa (hash: YDdcSyFrdBXffZ4Dd2UbaWaiQhW+ysfcb6F+PHXrFi8=)
3: HWqSqY616k_MxnxWWXrz-F7oaUY.roa (hash: ughEkO9c0ao80SC1dna2XMUSyH1lSHlaqzc5hraWMtM=)
4: ume_97rR64OEtYXfe-8SBvfxn34.crl (hash: e/+tsvDxYYdNcwcbjh5EydyLT9o7uzyy+iCh4wHmDY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft
rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 23:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:91:48:1a:a0:9c:59:1f:b5:85:c7:0f:13:5c:11:3c:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba67bff7bad1eb8384b585df7bef1206f7f19f7e
Validity
Not Before: Aug 10 00:01:17 2025 GMT
Not After : Aug 11 00:01:17 2025 GMT
Subject: CN=c4f76ca547cc9dab59c277ac6301bb938990610c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:15:6b:da:a2:db:90:54:bb:03:b2:f1:31:95:
bb:ae:b0:01:33:cd:20:0e:5a:3d:f2:c9:c3:97:de:
87:6d:71:64:4f:72:01:42:6e:5c:80:7c:bb:15:f9:
64:22:af:70:63:8b:56:ca:f9:e7:41:93:10:e2:25:
49:89:51:cb:32:6c:43:f2:3b:6d:19:00:45:c8:03:
e8:97:62:1e:db:f7:b0:38:e5:5d:70:dd:95:a9:44:
41:c7:67:f8:ed:98:0d:14:e8:e3:48:bb:0f:63:f1:
81:32:c1:78:fd:67:d9:37:22:d0:1a:88:9d:30:d6:
0b:a9:ef:eb:20:12:1c:39:f9:37:3b:2e:f7:a0:37:
65:1e:a3:f3:db:63:9b:c2:58:14:94:84:6f:3f:8d:
f8:66:66:55:12:6d:ff:e9:43:31:16:cc:2e:bb:a1:
43:2b:c6:9c:85:cf:b1:d8:e9:02:e1:15:ee:48:08:
7d:22:c5:cb:db:16:8a:ef:d3:a4:05:49:bb:38:b7:
09:b2:ac:b5:3e:ba:ce:de:52:22:07:f8:47:5b:f2:
cd:11:9e:c9:32:be:d5:b0:7c:23:33:69:96:4c:c2:
51:f9:24:d6:8e:3d:1c:a0:10:97:01:9a:71:1c:96:
92:bf:ad:71:cf:ff:ba:04:dc:8d:23:98:03:7c:45:
d9:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:F7:6C:A5:47:CC:9D:AB:59:C2:77:AC:63:01:BB:93:89:90:61:0C
X509v3 Authority Key Identifier:
keyid:BA:67:BF:F7:BA:D1:EB:83:84:B5:85:DF:7B:EF:12:06:F7:F1:9F:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:3e:73:a1:f0:17:4d:1a:ac:ec:a5:22:4e:dd:51:cb:d6:e0:
98:37:6e:14:2a:96:cf:fb:b2:a0:f9:69:ee:9f:f4:2e:c2:77:
13:90:81:25:bb:97:e0:c5:fc:ff:ff:cc:e6:60:f2:71:0b:6c:
1d:98:15:67:26:70:ce:a4:d7:07:f9:3f:2a:8e:a7:bc:bc:40:
56:d9:23:b3:33:be:2f:d5:53:1d:47:ed:74:c4:48:0e:17:97:
09:f0:0e:8b:63:44:01:53:42:63:7b:df:06:4a:89:04:cb:6e:
0f:23:3d:0a:54:63:16:5f:71:6a:ec:29:76:e8:86:ac:5f:b8:
ac:bc:e7:36:a1:67:ad:4b:cb:a7:6c:67:5e:eb:25:c9:8c:ea:
d9:82:34:1f:ef:cb:31:8e:34:18:c2:b8:72:5a:e2:57:11:c9:
85:42:2e:a0:54:92:ee:e5:0b:33:45:53:2c:52:da:ae:72:aa:
40:d2:41:49:c7:de:ad:5c:67:9e:a6:05:68:52:41:31:c3:f9:
b3:36:45:52:98:22:10:ae:8a:a7:02:d6:ce:1d:33:51:64:d2:
d4:c2:b4:3d:9c:81:7e:ae:50:73:f0:52:bb:70:f2:04:d1:3e:
19:20:20:1d:ab:f8:42:be:e1:7f:2a:90:70:e4:e9:32:28:a6:
f0:11:6e:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiRSBqgnFkftYXHDxNcETz9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhNjdiZmY3YmFkMWViODM4NGI1ODVkZjdiZWYxMjA2Zjdm
MTlmN2UwHhcNMjUwODEwMDAwMTE3WhcNMjUwODExMDAwMTE3WjAzMTEwLwYDVQQD
EyhjNGY3NmNhNTQ3Y2M5ZGFiNTljMjc3YWM2MzAxYmI5Mzg5OTA2MTBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBVr2qLbkFS7A7LxMZW7rrABM80g
Dlo98snDl96HbXFkT3IBQm5cgHy7FflkIq9wY4tWyvnnQZMQ4iVJiVHLMmxD8jtt
GQBFyAPol2Ie2/ewOOVdcN2VqURBx2f47ZgNFOjjSLsPY/GBMsF4/WfZNyLQGoid
MNYLqe/rIBIcOfk3Oy73oDdlHqPz22ObwlgUlIRvP434ZmZVEm3/6UMxFswuu6FD
K8achc+x2OkC4RXuSAh9IsXL2xaK79OkBUm7OLcJsqy1PrrO3lIiB/hHW/LNEZ7J
Mr7VsHwjM2mWTMJR+STWjj0coBCXAZpxHJaSv61xz/+6BNyNI5gDfEXZjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMT3bKVHzJ2rWcJ3rGMBu5OJkGEMMB8GA1UdIwQY
MBaAFLpnv/e60euDhLWF33vvEgb38Z9+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdW1lXzk3clI2NE9FdFlYZmUtOFNCdmZ4bjM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi80YTI0NGQtNTFkMS00MTQzLWI2YWYt
ZGE0NTM4MDIyYWM3LzEvdW1lXzk3clI2NE9FdFlYZmUtOFNCdmZ4bjM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi80YTI0NGQtNTFkMS00MTQzLWI2YWYtZGE0NTM4MDIyYWM3
LzEvdW1lXzk3clI2NE9FdFlYZmUtOFNCdmZ4bjM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALz5zofAX
TRqs7KUiTt1Ry9bgmDduFCqWz/uyoPlp7p/0LsJ3E5CBJbuX4MX8///M5mDycQts
HZgVZyZwzqTXB/k/Ko6nvLxAVtkjszO+L9VTHUftdMRIDheXCfAOi2NEAVNCY3vf
BkqJBMtuDyM9ClRjFl9xauwpduiGrF+4rLznNqFnrUvLp2xnXuslyYzq2YI0H+/L
MY40GMK4clriVxHJhUIuoFSS7uULM0VTLFLarnKqQNJBScferVxnnqYFaFJBMcP5
szZFUpgiEK6KpwLWzh0zUWTS1MK0PZyBfq5Qc/BSu3DyBNE+GSAgHav4Qr7hfyqQ
cOTpMiim8BFuOA==
-----END CERTIFICATE-----
Generated at Sun Aug 10 05:36:59 2025 by rpki-client