Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/472a4d-fcae-4454-9967-02ded9b2e0c9/1/umhZWZeQDe0wDpklcJ2mJ-k_Njo.mft
File: umhZWZeQDe0wDpklcJ2mJ-k_Njo.mft (raw, json)
Hash identifier: vTX8lMMlKC4kq3iP5jwZVP5PSH8LZVsPQlkArgXjc4E=
Subject key identifier: 1B:BC:9A:64:87:E2:E1:37:CE:B7:C7:35:EA:EC:7E:3A:C1:E8:F6:35
Authority key identifier: BA:68:59:59:97:90:0D:ED:30:0E:99:25:70:9D:A6:27:E9:3F:36:3A
Certificate issuer: /CN=ba68595997900ded300e9925709da627e93f363a
Certificate serial: 0198499C4BD8D57B836365E9B48D6070609A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/umhZWZeQDe0wDpklcJ2mJ-k_Njo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/472a4d-fcae-4454-9967-02ded9b2e0c9/1/umhZWZeQDe0wDpklcJ2mJ-k_Njo.mft
Manifest number: 0E9E
Signing time: Sun 27 Jul 2025 02:00:36 +0000
Manifest this update: Sun 27 Jul 2025 02:00:36 +0000
Manifest next update: Mon 28 Jul 2025 02:00:36 +0000
Files and hashes: 1: Vevc9vrQGyVF5o4NzN0QFHnZAiA.roa (hash: AOWcNE88wNCBWfSzm2+MmaRV4c7usJ5kQGrhyE8Gj6M=)
2: umhZWZeQDe0wDpklcJ2mJ-k_Njo.crl (hash: fMNLChEvinSjG90HY59OWyWxtIbBpG6occWkUpZoCsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/472a4d-fcae-4454-9967-02ded9b2e0c9/1/umhZWZeQDe0wDpklcJ2mJ-k_Njo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/472a4d-fcae-4454-9967-02ded9b2e0c9/1/umhZWZeQDe0wDpklcJ2mJ-k_Njo.mft
rsync://rpki.ripe.net/repository/DEFAULT/umhZWZeQDe0wDpklcJ2mJ-k_Njo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:4b:d8:d5:7b:83:63:65:e9:b4:8d:60:70:60:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba68595997900ded300e9925709da627e93f363a
Validity
Not Before: Jul 27 02:00:36 2025 GMT
Not After : Jul 28 02:00:36 2025 GMT
Subject: CN=1bbc9a6487e2e137ceb7c735eaec7e3ac1e8f635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d3:ce:a8:ec:70:00:e7:ad:6b:40:06:89:11:
16:97:36:43:ea:03:fe:8d:26:b6:78:00:9e:73:ae:
d9:46:32:2d:63:c0:99:ba:ab:c6:01:bb:81:e8:8d:
99:c5:de:6f:fc:11:d4:c0:c9:5a:e8:39:93:27:37:
53:f0:50:14:60:90:c7:76:c6:c0:b4:1f:8b:83:41:
b2:04:55:78:5b:8f:16:e0:8d:b1:3e:7f:e4:36:06:
b3:ae:d1:93:65:e0:d2:3a:50:5b:b5:6c:12:52:3e:
1d:56:24:0f:d1:3e:d7:60:68:ea:bf:a0:a9:32:cb:
78:e9:94:95:36:63:e0:78:52:43:d4:e0:be:59:8d:
0d:25:2e:29:02:22:f3:7b:40:91:eb:44:59:9c:f8:
78:1a:bd:64:ff:11:0b:2b:e7:16:db:60:c4:da:03:
4b:d4:19:17:8b:a8:a8:6f:ed:50:4d:05:5a:f8:f7:
b8:d3:b3:2e:08:12:96:19:99:99:03:60:e2:2f:37:
aa:2a:97:b9:fa:13:d0:a8:b4:80:4f:c6:08:57:cb:
15:6c:d9:f4:ba:c8:c0:8e:28:51:3a:16:31:a3:f5:
f1:0c:3d:1a:70:f6:44:ba:74:db:5b:4f:66:cb:30:
17:e7:34:59:b9:37:07:a2:15:65:0f:1b:5e:d2:03:
b6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:BC:9A:64:87:E2:E1:37:CE:B7:C7:35:EA:EC:7E:3A:C1:E8:F6:35
X509v3 Authority Key Identifier:
keyid:BA:68:59:59:97:90:0D:ED:30:0E:99:25:70:9D:A6:27:E9:3F:36:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/umhZWZeQDe0wDpklcJ2mJ-k_Njo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/472a4d-fcae-4454-9967-02ded9b2e0c9/1/umhZWZeQDe0wDpklcJ2mJ-k_Njo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/472a4d-fcae-4454-9967-02ded9b2e0c9/1/umhZWZeQDe0wDpklcJ2mJ-k_Njo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:ba:4c:69:c6:0c:7c:1a:9c:e0:ae:c4:d2:1d:15:89:53:7e:
41:14:8f:81:15:0e:aa:23:32:42:59:60:bb:f4:19:27:df:17:
ca:50:f0:7a:3b:6b:27:b7:50:20:50:ab:79:f5:71:8a:70:34:
1d:1c:fa:bb:69:21:bd:9f:9c:27:0a:22:88:e2:1b:b0:07:98:
e3:c1:a3:9a:62:14:31:99:6a:c4:05:92:f1:1e:db:03:16:e6:
d8:f0:08:61:dc:b1:60:ea:53:fb:b3:7e:fc:97:cb:c3:1c:dd:
d6:58:73:51:3d:3c:4e:1a:bc:1f:bd:2f:ef:57:08:69:30:76:
4e:8f:69:05:79:40:cb:8d:11:f3:ae:55:f7:4e:a3:85:d4:20:
0e:bb:1a:01:3a:e8:c4:ac:b8:85:60:76:f9:d3:a8:02:4b:79:
5d:1b:f5:ff:6f:c2:38:fb:55:85:f4:20:77:74:2f:5e:41:a2:
04:6f:82:c1:52:e7:68:d6:b2:45:ed:2a:56:f0:07:2b:f5:8e:
24:be:aa:95:d1:7c:6a:b5:db:41:79:64:9a:01:a9:4b:32:f0:
92:64:e0:33:30:55:00:b8:d3:33:a6:17:8e:84:b4:08:ae:69:
23:8d:df:ad:0a:3a:fb:18:96:1d:a3:88:80:ff:50:4e:4f:d6:
80:ed:11:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:34:30 2025 by rpki-client