Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.mft
File: um1Gt2v9bUK71XXi8m_OE2ubam0.mft (raw, json)
Hash identifier: 0P2iwQH0gShpS0SWGM3Jcxz4fwUvjqFpbk1+V7V5Wmg=
Subject key identifier: 6F:C6:95:EB:D6:6A:CB:AC:6E:CB:96:A5:D7:81:5C:CF:48:60:04:14
Authority key identifier: BA:6D:46:B7:6B:FD:6D:42:BB:D5:75:E2:F2:6F:CE:13:6B:9B:6A:6D
Certificate issuer: /CN=ba6d46b76bfd6d42bbd575e2f26fce136b9b6a6d
Certificate serial: 0197493114AB0EE85167EA084A4E5046DDEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um1Gt2v9bUK71XXi8m_OE2ubam0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 07:00:42 +0000
Manifest this update: Sat 07 Jun 2025 07:00:42 +0000
Manifest next update: Sun 08 Jun 2025 07:00:42 +0000
Files and hashes: 1: EtrP_0kTCR5Y3QaHgesqcI8qZFg.roa (hash: lv6k+R6R1gqgBt1ARniBlQxWo2X/ZK4cvTKtuDAns7o=)
2: HJSwnKLNgwsgkTsWAJGJbhRxrYg.roa (hash: k/1eexGDlUI1L69r6EcdCcQNtE5gQOhNhUm2uiosEaU=)
3: qY4Pn2rojeUbBpawT6zBM5pztdI.roa (hash: bdIYON38cjUERyQWKrGfXHpQNcizuWiDaFQ+QLNzEDg=)
4: uJnVKXAIy60auoGPJwESNrSmHkE.roa (hash: ebmKrJfXBBi07GAqHoc+u6RWZ0ztB7xPcVNK+Z+MDgQ=)
5: um1Gt2v9bUK71XXi8m_OE2ubam0.crl (hash: ULXxDmiBZmCRa9Lrv+c8ZK9CBDma+2lcTHgPAA/nNGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.mft
rsync://rpki.ripe.net/repository/DEFAULT/um1Gt2v9bUK71XXi8m_OE2ubam0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:14:ab:0e:e8:51:67:ea:08:4a:4e:50:46:dd:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba6d46b76bfd6d42bbd575e2f26fce136b9b6a6d
Validity
Not Before: Jun 7 07:00:42 2025 GMT
Not After : Jun 8 07:00:42 2025 GMT
Subject: CN=6fc695ebd66acbac6ecb96a5d7815ccf48600414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1a:25:2e:27:d0:61:e0:e3:f0:5a:16:70:7e:
b0:68:ae:2d:96:f2:1d:63:e9:c9:5a:6b:de:d4:e4:
22:e0:7b:7e:1b:cb:b7:2d:5b:55:38:64:32:7a:c1:
e0:b8:ba:30:42:49:26:50:6a:95:fd:00:f5:4c:1b:
db:62:60:b6:9b:23:8c:e0:53:12:80:aa:a0:f5:a3:
6d:53:a0:0e:a2:34:c2:27:47:9b:f2:4b:e4:42:30:
d1:64:0d:f9:c5:56:3a:ab:6e:54:4e:7c:1e:a6:84:
25:7c:b1:68:66:e7:90:1b:d5:d3:e2:06:4a:b2:49:
4e:bc:24:5e:66:cb:9e:8d:cf:73:5a:68:cd:8b:ec:
a3:71:d1:45:2f:90:a1:e1:80:93:dd:c4:90:a0:45:
64:0a:2a:01:2c:13:04:0b:fc:5c:3f:b5:d6:83:01:
d1:f8:b4:be:09:19:47:2d:50:c1:6a:68:a1:8c:91:
76:ab:51:50:9b:b6:3a:37:ac:d7:cb:cf:d6:b0:91:
7e:fc:92:79:d2:b0:52:64:31:af:84:c7:34:2c:e8:
80:8a:57:3d:74:25:a2:ea:f2:6c:07:04:22:37:20:
17:82:db:e4:3f:12:f2:c9:21:2d:9b:cc:57:87:2d:
1e:6b:d2:6a:2f:ca:da:c2:82:64:0b:78:0c:b6:ef:
b1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:C6:95:EB:D6:6A:CB:AC:6E:CB:96:A5:D7:81:5C:CF:48:60:04:14
X509v3 Authority Key Identifier:
keyid:BA:6D:46:B7:6B:FD:6D:42:BB:D5:75:E2:F2:6F:CE:13:6B:9B:6A:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um1Gt2v9bUK71XXi8m_OE2ubam0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:da:60:9a:0c:2d:12:15:5f:dd:7f:c5:f1:f9:d4:4c:21:1d:
b0:f2:51:fe:44:4c:b4:d2:b6:d4:91:bb:bd:ea:b7:a0:1b:4b:
f4:34:7d:a6:8d:ae:9b:55:e7:78:63:d2:fa:bf:2e:5f:28:d3:
51:33:69:ea:d7:d1:6d:99:b0:f2:58:12:44:6c:34:36:91:64:
34:63:41:6e:41:2b:fe:60:46:a1:36:9b:4e:26:c0:54:60:93:
05:c4:36:84:34:a7:20:a7:83:5e:08:63:93:cc:18:7e:f9:e4:
11:38:8b:95:35:93:1b:d5:a1:e9:8a:d0:eb:e9:9f:11:21:fa:
38:12:15:e3:97:44:a8:35:bd:80:51:bd:83:c2:50:81:ab:c5:
f0:89:f0:f4:70:4f:07:13:f3:f5:3c:ca:40:b3:3b:63:74:c0:
55:7e:bf:52:10:b2:60:35:39:2a:63:bc:4e:83:ca:23:d4:be:
d8:5b:cd:5a:db:43:96:76:81:ea:7d:b4:c7:11:ae:33:fc:ce:
8b:43:de:4d:e5:44:d9:fb:39:07:56:66:83:71:01:6f:0a:bb:
dd:5c:e9:eb:1a:41:d1:3e:cf:84:d2:9e:f0:ff:70:7a:85:5a:
30:4f:20:af:eb:bb:e9:42:6c:ce:3d:b5:67:f0:34:ec:95:26:
16:b9:d4:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:12:12 2025 by rpki-client