Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft
File: ume_97rR64OEtYXfe-8SBvfxn34.mft (raw, json)
Hash identifier: aFkXk+mxmVlVww/NNyu47tBWZMTGs0Tja3g0aRIGo2U=
Subject key identifier: 24:FC:D6:C5:49:AB:82:4A:4B:94:2D:14:C8:BE:37:B2:13:23:5C:CF
Authority key identifier: BA:67:BF:F7:BA:D1:EB:83:84:B5:85:DF:7B:EF:12:06:F7:F1:9F:7E
Certificate issuer: /CN=ba67bff7bad1eb8384b585df7bef1206f7f19f7e
Certificate serial: 01984777A2D1015E32C67952E39A7A7DEB1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft
Manifest number: 0DA6
Signing time: Sat 26 Jul 2025 16:01:19 +0000
Manifest this update: Sat 26 Jul 2025 16:01:19 +0000
Manifest next update: Sun 27 Jul 2025 16:01:19 +0000
Files and hashes: 1: 584yOVeS4oyabLizAkaG7pPUY5Y.roa (hash: fVHqq9WRd9turce9ObKFB2HXSMmM46QztnuoCC2qLk4=)
2: KbtzbkJoBiqdAJoxwgfp_T-Kbfg.roa (hash: aZgS+ihWCfC1vp+8bDD+54B9BXQ7wDfy0wamP1chOGE=)
3: ume_97rR64OEtYXfe-8SBvfxn34.crl (hash: nyxmzVljQobkTIqzkHx9aC1w4kLf/yxBfY87JN+NcxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft
rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:77:a2:d1:01:5e:32:c6:79:52:e3:9a:7a:7d:eb:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba67bff7bad1eb8384b585df7bef1206f7f19f7e
Validity
Not Before: Jul 26 16:01:19 2025 GMT
Not After : Jul 27 16:01:19 2025 GMT
Subject: CN=24fcd6c549ab824a4b942d14c8be37b213235ccf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:27:92:93:39:69:50:20:01:77:ec:c2:bc:ec:
ef:27:14:43:f3:e7:53:aa:9f:6a:4d:67:4f:7b:2e:
9b:f4:48:21:c6:07:81:af:c1:21:ec:fd:70:ba:a9:
5f:84:f9:31:41:32:59:a2:a9:2b:3e:3a:76:be:bc:
39:c6:25:ce:44:6d:30:59:dd:16:b0:db:91:bd:bd:
6c:22:f4:af:90:f3:31:06:2d:42:fe:75:60:86:29:
15:65:b8:b6:be:74:ec:65:42:03:0f:fa:0d:a0:52:
6b:ca:9f:05:b6:df:cd:f7:10:71:79:92:14:10:6e:
f7:4d:cd:f5:f9:71:3a:4a:a5:e8:3a:ae:ff:6b:23:
c1:b7:bd:04:1d:7f:b6:45:65:c0:ac:25:14:72:93:
4a:dd:82:58:42:49:a7:b3:dd:06:7c:ad:61:d2:3a:
9a:f8:d0:88:a0:66:ac:3c:e5:8b:86:f2:91:0a:23:
11:5b:73:be:0e:97:37:8c:e6:85:c6:af:fc:58:36:
d7:09:7d:2f:1a:84:56:ad:ff:7d:b6:8f:e4:28:ea:
dd:3c:68:1f:3b:f2:43:37:51:fa:17:da:1b:8f:b0:
c8:d2:07:3d:b8:e7:f5:5e:94:ee:51:73:4a:3f:8f:
6e:39:e7:b6:d5:4a:a7:f3:1d:fb:58:a2:ec:99:3a:
68:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:FC:D6:C5:49:AB:82:4A:4B:94:2D:14:C8:BE:37:B2:13:23:5C:CF
X509v3 Authority Key Identifier:
keyid:BA:67:BF:F7:BA:D1:EB:83:84:B5:85:DF:7B:EF:12:06:F7:F1:9F:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:18:b3:22:d4:58:aa:48:7c:d3:9f:95:9f:83:cd:b2:4c:c2:
83:40:91:78:7b:c3:ec:f4:30:4e:42:d4:99:9c:32:7f:73:1a:
e4:60:ba:24:ae:21:df:c0:50:ab:b8:be:03:19:17:2d:dc:6f:
86:e1:b6:56:42:69:96:ad:b8:30:03:f2:71:7d:13:bc:f9:1e:
0d:a5:6a:bf:01:93:4d:e1:2a:3a:59:68:d8:10:c0:68:c9:3a:
6b:14:1b:65:e3:b8:ff:72:10:51:b1:37:eb:cb:31:3b:85:aa:
70:f7:33:39:af:98:f9:d2:41:de:90:04:ac:fd:b9:93:88:fb:
24:ed:af:56:7b:5b:56:f5:d9:7e:1f:73:9b:bf:21:f6:68:a8:
e3:95:70:86:c1:0a:e0:37:24:38:0c:1c:28:0f:10:e9:eb:88:
23:c8:55:4f:bb:1b:4d:eb:94:09:88:73:f0:c2:3a:b0:51:b6:
7f:92:c3:ac:27:1b:81:6f:aa:22:c0:c5:29:b6:84:33:32:1b:
34:ab:f4:0a:bc:cb:53:d0:ac:fe:46:b9:30:04:9f:1d:52:0c:
b4:85:f9:bd:47:b6:b3:9f:26:02:1e:ae:0d:a4:fb:93:50:ca:
e1:3b:dc:d4:54:89:70:b1:6e:28:3b:00:ef:4b:0a:14:8c:57:
9a:5c:d0:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:42:26 2025 by rpki-client