Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft
File: ume_97rR64OEtYXfe-8SBvfxn34.mft (raw, json)
Hash identifier: It1rIapFDhSLGbzXgW9+0Y4lEKZzglJno60nJwxAE+I=
Subject key identifier: D2:AF:B0:F1:53:87:C3:6C:DD:AA:04:09:0F:BC:B5:6C:C9:40:1D:EA
Authority key identifier: BA:67:BF:F7:BA:D1:EB:83:84:B5:85:DF:7B:EF:12:06:F7:F1:9F:7E
Certificate issuer: /CN=ba67bff7bad1eb8384b585df7bef1206f7f19f7e
Certificate serial: 019A4E188CEE857946EED63CD2FA320DF6B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft
Manifest number: 0EB5
Signing time: Tue 04 Nov 2025 09:00:22 +0000
Manifest this update: Tue 04 Nov 2025 09:00:22 +0000
Manifest next update: Wed 05 Nov 2025 09:00:22 +0000
Files and hashes: 1: 584yOVeS4oyabLizAkaG7pPUY5Y.roa (hash: fVHqq9WRd9turce9ObKFB2HXSMmM46QztnuoCC2qLk4=)
2: 6hhOpOhfqnR9-Ld8KayuH8mAoWs.roa (hash: YDdcSyFrdBXffZ4Dd2UbaWaiQhW+ysfcb6F+PHXrFi8=)
3: DUee1zARkcUrvJo1YXT27pZLsMI.roa (hash: HI4DwNpTGowkvqavS8zu9KuCdBY9g/9IT49vijYsyXc=)
4: IYGX-KP7TNoYyXnNP3CGKI0BUBU.roa (hash: q3zwHLLir+6KRJpls1Fd7jTNccM1a26eqIKhpBQyAyQ=)
5: KGZiYfWbrqod_nWmRvyl3sSYKI0.roa (hash: Khu5Z2RrlQkXVAgtt6oYTaCJX+GXP24KAjpf9sk4O3w=)
6: eGD2qM9gyPlyNsWFm0ZA5Omy1IE.roa (hash: y0pG7C3wx0x5ZaENQv/xppcabkujI4sYVnGq/OBgcB8=)
7: ume_97rR64OEtYXfe-8SBvfxn34.crl (hash: KGSaIqs/CfvpAzBXBUscy5rG3+x2DrJe4nOvTc4By9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft
rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:8c:ee:85:79:46:ee:d6:3c:d2:fa:32:0d:f6:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba67bff7bad1eb8384b585df7bef1206f7f19f7e
Validity
Not Before: Nov 4 09:00:22 2025 GMT
Not After : Nov 5 09:00:22 2025 GMT
Subject: CN=d2afb0f15387c36cddaa04090fbcb56cc9401dea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:cb:8e:61:26:64:ce:9d:da:ba:a4:10:af:bf:
49:a3:73:7d:19:93:d1:1f:c7:fa:a8:bc:a9:5c:53:
b0:bf:34:8b:bb:52:ee:76:c1:69:f2:df:bd:7f:8e:
d6:fa:28:db:87:25:29:5f:87:62:38:7d:43:eb:73:
24:27:57:d2:8e:48:4b:8c:2e:2f:67:d6:86:2b:c2:
d0:b2:21:da:95:00:2b:d3:85:af:6e:e6:cd:4f:c4:
c5:f3:2c:76:66:cf:07:a5:cf:59:cc:e9:01:77:91:
63:b7:5f:4f:44:64:d7:06:b2:f5:29:d2:55:f5:50:
84:94:02:54:b4:c2:41:7b:1b:09:21:ed:07:cc:3d:
72:2e:57:fd:d8:49:49:ff:b3:32:ff:21:d8:2d:41:
80:36:4d:37:43:2a:d0:6e:bd:14:d7:cf:f3:b2:84:
a3:de:cc:69:1e:b8:76:1f:7f:ce:f4:0c:10:39:fc:
d1:33:50:34:c4:74:e6:41:df:b5:32:0f:0d:d2:83:
d5:3b:7c:c0:fb:8d:a2:25:1f:19:15:b4:3e:a1:dd:
4e:25:01:57:fb:e5:e8:93:6b:aa:6e:4a:ff:ea:76:
a2:36:bb:4a:7f:90:39:ed:fd:39:92:ba:4f:80:95:
38:0c:a0:8d:78:26:b5:03:ef:0c:9b:49:a6:d4:95:
b9:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:AF:B0:F1:53:87:C3:6C:DD:AA:04:09:0F:BC:B5:6C:C9:40:1D:EA
X509v3 Authority Key Identifier:
keyid:BA:67:BF:F7:BA:D1:EB:83:84:B5:85:DF:7B:EF:12:06:F7:F1:9F:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:15:19:e5:5a:e3:cb:25:fc:f9:22:e2:87:80:96:04:e2:0b:
cd:c0:28:48:2c:f5:1a:ab:c5:9e:3f:ce:72:62:80:8a:ff:6b:
39:4f:ef:94:9a:c2:32:7a:78:ab:fd:54:16:4b:06:46:6e:d0:
81:4f:5f:37:85:08:c6:f3:29:6e:b2:0b:29:12:0d:dd:cf:9b:
df:cc:df:77:a3:b0:0e:db:25:6b:23:c1:05:fa:41:cc:5a:6e:
60:78:5e:33:b1:08:b8:92:20:a6:b9:6e:c4:e9:3f:a5:fd:73:
2a:d3:f8:48:40:b1:58:0b:15:30:b6:2d:16:0f:14:52:61:bd:
26:21:cf:09:84:43:c3:32:b0:67:c2:4e:64:68:4b:36:8b:70:
90:45:ae:a3:a1:71:42:5f:06:52:b6:e7:19:47:e2:d4:87:2c:
f8:16:9e:a3:ab:00:c2:81:09:15:63:12:69:26:44:9a:e7:01:
5c:3e:b7:16:6d:3f:cd:2a:34:fa:ff:bd:81:1e:bc:a0:62:2c:
94:55:b2:c6:5a:15:7b:95:e0:44:8e:86:52:8d:93:27:6a:59:
1b:1d:c8:d5:52:4f:42:fb:b8:02:44:f5:0f:fc:40:13:9a:bd:
25:c4:dd:1a:be:44:f8:b2:24:bf:7a:fb:0c:ec:d9:6c:12:40:
7b:2e:b1:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:55:25 2025 by rpki-client