Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft
File: ume_97rR64OEtYXfe-8SBvfxn34.mft (raw, json)
Hash identifier: EMUFPHot/19iVuv7n0k8mL8pjk4mVnsi8NQlu84+9wg=
Subject key identifier: BD:39:E3:5D:3A:54:8C:0F:F7:3E:B7:84:CC:66:29:CA:90:C9:19:C7
Authority key identifier: BA:67:BF:F7:BA:D1:EB:83:84:B5:85:DF:7B:EF:12:06:F7:F1:9F:7E
Certificate issuer: /CN=ba67bff7bad1eb8384b585df7bef1206f7f19f7e
Certificate serial: 019A7293414EAF0E7C568B8C4E880523874C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft
Manifest number: 0EC8
Signing time: Tue 11 Nov 2025 11:00:44 +0000
Manifest this update: Tue 11 Nov 2025 11:00:44 +0000
Manifest next update: Wed 12 Nov 2025 11:00:44 +0000
Files and hashes: 1: 584yOVeS4oyabLizAkaG7pPUY5Y.roa (hash: fVHqq9WRd9turce9ObKFB2HXSMmM46QztnuoCC2qLk4=)
2: 6hhOpOhfqnR9-Ld8KayuH8mAoWs.roa (hash: YDdcSyFrdBXffZ4Dd2UbaWaiQhW+ysfcb6F+PHXrFi8=)
3: DUee1zARkcUrvJo1YXT27pZLsMI.roa (hash: HI4DwNpTGowkvqavS8zu9KuCdBY9g/9IT49vijYsyXc=)
4: I-EAyalxyJcb3mCdLEW_KjnJh28.roa (hash: ILntYHJsQMd6NnMaYmwE9WwXTjkIQwH3De7tLAyjOys=)
5: IYGX-KP7TNoYyXnNP3CGKI0BUBU.roa (hash: q3zwHLLir+6KRJpls1Fd7jTNccM1a26eqIKhpBQyAyQ=)
6: KGZiYfWbrqod_nWmRvyl3sSYKI0.roa (hash: Khu5Z2RrlQkXVAgtt6oYTaCJX+GXP24KAjpf9sk4O3w=)
7: eGD2qM9gyPlyNsWFm0ZA5Omy1IE.roa (hash: y0pG7C3wx0x5ZaENQv/xppcabkujI4sYVnGq/OBgcB8=)
8: ume_97rR64OEtYXfe-8SBvfxn34.crl (hash: /IFfUxWbfycvhl6yezjLPS63S2shdy695iMMmJVziDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft
rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:41:4e:af:0e:7c:56:8b:8c:4e:88:05:23:87:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba67bff7bad1eb8384b585df7bef1206f7f19f7e
Validity
Not Before: Nov 11 11:00:44 2025 GMT
Not After : Nov 12 11:00:44 2025 GMT
Subject: CN=bd39e35d3a548c0ff73eb784cc6629ca90c919c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:20:5a:db:a7:4d:af:ca:85:c9:fd:f6:40:23:
aa:27:fc:87:0c:0d:cf:2b:21:5c:77:01:9c:b1:fb:
ef:3d:a9:ba:3d:1f:cc:78:44:1d:be:4f:ff:80:ec:
87:09:7f:1e:96:2f:a4:05:96:d3:0a:c5:fa:c3:e3:
91:e1:2c:9c:ae:c7:65:a3:08:cc:27:e4:34:ea:96:
73:9c:1f:99:98:5d:f1:ee:05:8b:a4:5b:64:ce:91:
50:51:a8:57:b8:5f:4b:c7:df:54:27:8a:82:e5:91:
14:98:a5:5c:41:20:3c:c5:0c:f9:ae:09:6e:48:6c:
dc:c2:5f:a9:33:60:73:17:7f:25:3d:10:22:58:d8:
a6:57:37:5c:5e:da:98:de:57:bf:e5:8c:5b:b2:9f:
e2:7b:8c:84:48:1c:9c:8b:55:73:23:ec:71:77:88:
d8:2b:bd:8a:7f:51:90:d5:8f:be:89:21:9e:d8:6a:
a4:c9:88:c4:06:f7:70:e1:59:ee:90:31:76:22:6e:
9d:52:e2:77:35:83:9c:e4:25:c5:17:91:e7:55:1e:
16:71:58:f3:01:12:e7:76:1a:e0:7e:09:5d:16:f9:
d3:64:08:17:f6:ad:2e:4b:e2:d2:8d:4b:1d:b9:a2:
77:79:36:22:dc:0c:48:4e:66:d2:7c:a6:22:4f:67:
7f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:39:E3:5D:3A:54:8C:0F:F7:3E:B7:84:CC:66:29:CA:90:C9:19:C7
X509v3 Authority Key Identifier:
keyid:BA:67:BF:F7:BA:D1:EB:83:84:B5:85:DF:7B:EF:12:06:F7:F1:9F:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:c7:70:0b:10:4d:6d:85:ba:75:a9:95:07:09:a7:09:4b:42:
51:73:1f:98:31:fa:66:ed:14:c0:99:85:80:2d:41:1f:1a:cd:
2f:da:c3:d4:cf:99:ae:da:0b:ac:56:8b:85:90:44:a9:6d:40:
8a:87:ad:da:74:37:dd:03:c2:c3:d8:18:e5:a2:6e:44:b7:71:
01:64:f8:74:99:e0:4a:61:c0:1d:9d:df:18:43:6b:96:95:22:
0b:05:34:57:6d:95:87:d5:8c:da:ee:d6:e8:ef:6b:a8:75:3d:
0b:ff:46:a5:03:1f:90:0d:83:c1:2b:b0:16:e2:3c:1e:35:6a:
1f:d3:71:97:14:d4:62:5f:7b:18:f2:e9:41:3f:e1:e8:69:16:
88:36:29:12:a8:3f:15:21:94:62:61:01:22:d8:15:9e:37:a7:
e1:92:c5:c0:a7:64:1b:1c:53:65:ec:16:32:4e:30:08:d3:0e:
88:09:7c:65:af:c1:5d:fe:0d:a1:d7:62:bd:5a:4c:e2:9b:50:
a7:d8:71:8c:73:b4:01:13:bf:24:5e:e7:b7:77:6a:72:94:4c:
70:03:f2:5e:b5:ba:a4:e5:1e:a1:92:01:e9:34:04:14:20:50:
d3:08:84:b9:e1:8e:27:e0:4d:cf:02:8b:47:b2:06:d1:94:9c:
38:fe:06:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:16:42 2025 by rpki-client