Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/d2cec5-b245-4547-a9cd-f6c644c94608/1/c_umgtacHRBwjte2rqojLuibkB0.mft
File: c_umgtacHRBwjte2rqojLuibkB0.mft (raw, json)
Hash identifier: LZV/+WLKob7lLM9b8PnoHF3y2/+lcIvhlwGqW9jnl3g=
Subject key identifier: 49:87:01:66:51:82:AA:42:CA:77:59:85:0C:47:AA:37:BE:3D:8B:72
Authority key identifier: 73:FB:A6:82:D6:9C:1D:10:70:8E:D7:B6:AE:AA:23:2E:E8:9B:90:1D
Certificate issuer: /CN=73fba682d69c1d10708ed7b6aeaa232ee89b901d
Certificate serial: 019853E91B3F4C2E505F72FD7895F30B5071
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_umgtacHRBwjte2rqojLuibkB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/d2cec5-b245-4547-a9cd-f6c644c94608/1/c_umgtacHRBwjte2rqojLuibkB0.mft
Manifest number: 0F45
Signing time: Tue 29 Jul 2025 02:00:42 +0000
Manifest this update: Tue 29 Jul 2025 02:00:42 +0000
Manifest next update: Wed 30 Jul 2025 02:00:42 +0000
Files and hashes: 1: VFafoaVO2bN0O_eWCA7NRDo9AQI.roa (hash: ZCSixYQYQeBNPNi+wxPK+CWr+k+nO4o0D+w9LRSwgUE=)
2: c_umgtacHRBwjte2rqojLuibkB0.crl (hash: 5O2bHxiOdiFC7xSr19+jK19apjvKWrPPYPbSJ9KDs0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/d2cec5-b245-4547-a9cd-f6c644c94608/1/c_umgtacHRBwjte2rqojLuibkB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/d2cec5-b245-4547-a9cd-f6c644c94608/1/c_umgtacHRBwjte2rqojLuibkB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/c_umgtacHRBwjte2rqojLuibkB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:e9:1b:3f:4c:2e:50:5f:72:fd:78:95:f3:0b:50:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73fba682d69c1d10708ed7b6aeaa232ee89b901d
Validity
Not Before: Jul 29 02:00:42 2025 GMT
Not After : Jul 30 02:00:42 2025 GMT
Subject: CN=498701665182aa42ca7759850c47aa37be3d8b72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ab:44:07:a6:43:18:67:e2:99:01:d3:06:ea:
65:c3:06:74:87:3b:14:78:83:cf:39:9d:8d:aa:91:
06:e9:ec:91:dd:73:9b:3e:7c:54:a6:fc:72:29:2b:
c0:12:7e:7a:ff:5e:54:c8:2c:53:97:18:f5:96:9d:
63:b2:89:1d:b6:bf:f1:ad:58:eb:23:45:90:22:d9:
9b:f9:4c:47:99:27:58:70:7c:fd:23:e6:8d:d8:26:
da:1a:8b:a4:da:e0:8d:12:8b:06:fa:a4:44:36:6b:
31:0f:e3:38:4e:ad:bc:0d:64:65:c7:2a:28:91:c1:
54:5a:28:da:ac:32:e5:ff:6b:f3:8b:c3:ba:e3:25:
aa:f4:b0:cf:90:4a:e2:48:5b:52:b6:46:ad:47:dc:
d7:97:3c:c6:9b:7f:f7:dd:06:0d:30:29:b9:fa:56:
eb:df:58:4a:e9:d4:85:95:ec:2f:12:24:ee:b3:38:
3f:1a:d1:7d:86:76:bc:f9:44:1c:2f:3c:91:a8:8f:
61:f3:30:11:3c:d9:fb:27:80:5a:51:41:7a:84:5d:
87:c3:8b:fd:4b:63:87:ea:e9:7c:75:35:02:fd:8e:
a8:db:bf:97:13:71:ec:12:d1:d6:26:94:21:d4:74:
af:b9:6f:7c:22:95:d3:f4:f0:42:4f:65:cd:73:08:
d2:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:87:01:66:51:82:AA:42:CA:77:59:85:0C:47:AA:37:BE:3D:8B:72
X509v3 Authority Key Identifier:
keyid:73:FB:A6:82:D6:9C:1D:10:70:8E:D7:B6:AE:AA:23:2E:E8:9B:90:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_umgtacHRBwjte2rqojLuibkB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d2cec5-b245-4547-a9cd-f6c644c94608/1/c_umgtacHRBwjte2rqojLuibkB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d2cec5-b245-4547-a9cd-f6c644c94608/1/c_umgtacHRBwjte2rqojLuibkB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:c9:6a:13:72:e3:45:65:d2:67:fb:16:01:f7:d7:90:66:5d:
c8:aa:f8:46:32:ad:e5:5c:d2:08:67:71:18:c6:72:dc:20:23:
1f:40:45:b5:56:c6:a1:a9:d5:ae:49:9e:d1:fc:be:0f:8f:7d:
1f:4f:11:53:89:e6:5a:5a:88:ba:01:c6:ee:f4:c9:4a:ed:95:
56:5f:78:d8:70:15:49:4f:d4:f0:5d:00:92:46:61:21:b6:b9:
2a:0a:aa:e8:49:2f:ba:cc:7e:71:10:1f:6d:e1:20:07:80:66:
aa:6a:90:1c:30:7c:b3:21:e0:be:1f:f4:7e:c3:c7:6a:99:b8:
3c:6e:a2:99:70:9f:ae:08:8f:b5:b1:9c:99:ae:eb:ed:14:23:
0f:aa:2b:13:cf:f4:a3:e7:41:d4:13:22:a3:4f:27:9d:04:46:
b7:2c:0f:52:bd:dc:d0:4b:f3:3b:b1:ff:ac:0f:62:e3:ac:5c:
25:04:45:5f:4a:67:97:3f:3e:20:fb:0a:86:6c:62:e2:d3:61:
b0:63:9f:52:e8:ca:4b:b6:6f:1c:91:b3:98:67:6b:83:99:15:
e8:5b:0b:67:d3:b8:e8:1e:6f:b3:16:f4:bb:e2:db:3c:5b:47:
eb:5a:9b:23:96:ce:90:6a:ab:f8:69:5b:ac:c1:c7:16:6c:ae:
a7:d3:cc:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:16:52 2025 by rpki-client