Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/umCk2HTZYByBQsNS-AxWpDJ2zUc.mft
File: umCk2HTZYByBQsNS-AxWpDJ2zUc.mft (raw, json)
Hash identifier: ahn6wFsxx2uD4SYg98BjEa8ij9g9G6uTmCD5Zs4emwY=
Subject key identifier: D5:F1:A8:72:87:5D:A9:F6:3F:09:3E:61:64:D1:A5:68:51:84:CA:E8
Authority key identifier: BA:60:A4:D8:74:D9:60:1C:81:42:C3:52:F8:0C:56:A4:32:76:CD:47
Certificate issuer: /CN=ba60a4d874d9601c8142c352f80c56a43276cd47
Certificate serial: 0198274733B296B6A1BE4CF3DAA132F04B2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/umCk2HTZYByBQsNS-AxWpDJ2zUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/umCk2HTZYByBQsNS-AxWpDJ2zUc.mft
Manifest number: 15FF
Signing time: Sun 20 Jul 2025 10:00:34 +0000
Manifest this update: Sun 20 Jul 2025 10:00:34 +0000
Manifest next update: Mon 21 Jul 2025 10:00:34 +0000
Files and hashes: 1: 5U4MEYVwKErq9FhOsJB89ZvBBuA.roa (hash: NDCcRzRMP/wHXoUUOEq/IXJG3IgwKCj1GS7rUpsjlXY=)
2: 60lbisj9EBvEk8CkvIEbp4prM3I.roa (hash: cqYnW2I6KAO2XW2NYFnEXuAIZkVjJlu5WB2aqpTSh88=)
3: bHZh-gl2BV9HaE6gMvNJJyeNKUs.roa (hash: sDUjjxYqPfgF3z6qcjo8Ch8x8GHsvhm9yqvWs72G0WI=)
4: koXm2_p4F4KWKYlIu0UQERaNMQ8.roa (hash: zXAmEZonvu8xaYLE77bD6JgXELMdseALDrYiTNuQR1E=)
5: qerWJ9N0klhuhzcIgvZSrAumV_Y.roa (hash: /vwvzpt6A9BdPc1JxUloTrK4LVtePi7FvbqVFdA3VF8=)
6: umCk2HTZYByBQsNS-AxWpDJ2zUc.crl (hash: 0OkdwS8cLwRHANZDA05H4QizlginruYqTitAxcjBUk8=)
7: zMnP4SbXXtzO5Qz_HmHXST-lJbc.roa (hash: x/mXpix8fyVF7pfT27hYA7xsa5opQzKkRx7F0dXWqMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/umCk2HTZYByBQsNS-AxWpDJ2zUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/umCk2HTZYByBQsNS-AxWpDJ2zUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/umCk2HTZYByBQsNS-AxWpDJ2zUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 10:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:27:47:33:b2:96:b6:a1:be:4c:f3:da:a1:32:f0:4b:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba60a4d874d9601c8142c352f80c56a43276cd47
Validity
Not Before: Jul 20 10:00:34 2025 GMT
Not After : Jul 21 10:00:34 2025 GMT
Subject: CN=d5f1a872875da9f63f093e6164d1a5685184cae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:83:61:49:44:07:10:c5:dd:14:97:e9:a4:72:
6f:de:6e:b4:99:af:2a:2a:81:ca:8d:4c:d0:0e:40:
56:3c:82:c2:62:e9:dd:d1:d7:22:fb:20:1b:70:75:
56:32:73:3c:39:5e:4b:e5:ca:89:d8:0c:07:1b:d3:
93:7b:94:57:fe:83:21:6b:c9:9a:44:4f:fe:78:46:
af:72:d6:ae:9d:d0:f9:5b:a2:5f:09:60:15:38:8a:
1e:ac:91:31:7f:2f:a3:34:14:0c:4e:72:1c:a1:ad:
3d:c0:af:2f:50:d5:71:1c:87:27:c2:39:61:b4:78:
f3:91:c6:f9:a8:6e:30:bc:ae:a9:46:0a:27:4e:18:
43:68:0c:a7:ee:f6:02:c4:63:25:71:6b:4c:3a:38:
12:b8:80:93:f2:bb:ec:91:b3:cf:5b:c8:8d:73:70:
d4:3b:15:dd:8c:01:2d:cd:53:ad:87:28:43:27:ad:
98:7c:d9:58:06:b0:d0:41:45:55:1b:bf:d7:a6:7b:
76:89:13:1b:70:d4:19:e3:ed:62:7e:ce:18:02:a6:
59:d2:15:89:dd:5f:33:c2:5e:e5:c2:fd:2a:ea:0b:
b5:a8:ee:e1:e0:7e:72:2a:10:d6:7a:fa:cc:f2:37:
d6:76:ac:7a:11:f4:6b:2c:44:ad:36:3f:18:80:44:
e0:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:F1:A8:72:87:5D:A9:F6:3F:09:3E:61:64:D1:A5:68:51:84:CA:E8
X509v3 Authority Key Identifier:
keyid:BA:60:A4:D8:74:D9:60:1C:81:42:C3:52:F8:0C:56:A4:32:76:CD:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/umCk2HTZYByBQsNS-AxWpDJ2zUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/umCk2HTZYByBQsNS-AxWpDJ2zUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/28cb5c-298f-4d8b-815b-e5a3778be3ad/1/umCk2HTZYByBQsNS-AxWpDJ2zUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:57:79:1f:41:5a:6c:5f:9e:e8:94:a3:ca:13:78:d6:56:90:
06:3c:f5:08:84:a9:4c:ec:3a:4a:de:cb:3d:f7:54:ca:59:09:
54:ee:2c:1f:ce:32:5c:d3:dd:77:34:0a:6f:d1:b1:bd:32:65:
91:87:85:55:c2:0b:90:25:63:b0:62:cd:0c:ae:51:62:f4:be:
fc:8c:fb:62:21:65:01:06:d7:88:05:70:b6:5e:a7:21:0c:15:
95:65:10:d7:03:6b:44:a0:f6:c2:b5:15:cf:2d:8e:79:d5:a6:
f5:3f:d3:30:d9:7d:56:ac:65:5f:6f:81:80:fe:be:e1:ea:c2:
6c:8f:ca:52:b4:9d:4b:74:7e:8b:70:8f:db:2e:76:c3:19:34:
d8:5f:9a:47:bd:92:70:d7:ce:ce:17:cd:25:eb:4a:ac:be:97:
23:72:b2:f8:74:b7:7a:9f:2b:2f:77:78:02:7e:04:33:80:28:
f7:76:43:e2:5c:fc:08:3c:a4:d2:36:af:f9:b7:e6:aa:73:28:
90:2c:69:90:6d:22:ff:60:bc:c1:25:9a:38:bd:62:b0:d1:54:
54:24:86:a9:bc:b0:ed:e2:18:fe:7e:a7:c8:35:51:52:32:d6:
68:7a:c7:2e:3a:d1:11:01:aa:b2:b6:34:6c:0f:50:33:72:45:
46:53:dd:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:20:28 2025 by rpki-client