Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/d2cec5-b245-4547-a9cd-f6c644c94608/1/c_umgtacHRBwjte2rqojLuibkB0.mft
File: c_umgtacHRBwjte2rqojLuibkB0.mft (raw, json)
Hash identifier: kU/Ol6fXM0J7jf0RUqU3vLC8ORQQ1atwe6n7hYDmpIU=
Subject key identifier: F3:53:66:8C:F8:EF:10:7D:FA:2E:C6:98:24:CF:AA:B7:2D:E0:4A:0D
Authority key identifier: 73:FB:A6:82:D6:9C:1D:10:70:8E:D7:B6:AE:AA:23:2E:E8:9B:90:1D
Certificate issuer: /CN=73fba682d69c1d10708ed7b6aeaa232ee89b901d
Certificate serial: 01974B56DD4394E4765228C88B98E9A20A58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_umgtacHRBwjte2rqojLuibkB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/d2cec5-b245-4547-a9cd-f6c644c94608/1/c_umgtacHRBwjte2rqojLuibkB0.mft
Manifest number: 0EBC
Signing time: Sat 07 Jun 2025 17:01:13 +0000
Manifest this update: Sat 07 Jun 2025 17:01:13 +0000
Manifest next update: Sun 08 Jun 2025 17:01:13 +0000
Files and hashes: 1: VFafoaVO2bN0O_eWCA7NRDo9AQI.roa (hash: ZCSixYQYQeBNPNi+wxPK+CWr+k+nO4o0D+w9LRSwgUE=)
2: c_umgtacHRBwjte2rqojLuibkB0.crl (hash: gMfSqQYU694MtOSXdugHg3qp1Tyumo4JyxvfY/WU3sA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/d2cec5-b245-4547-a9cd-f6c644c94608/1/c_umgtacHRBwjte2rqojLuibkB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/d2cec5-b245-4547-a9cd-f6c644c94608/1/c_umgtacHRBwjte2rqojLuibkB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/c_umgtacHRBwjte2rqojLuibkB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 17:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:56:dd:43:94:e4:76:52:28:c8:8b:98:e9:a2:0a:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73fba682d69c1d10708ed7b6aeaa232ee89b901d
Validity
Not Before: Jun 7 17:01:13 2025 GMT
Not After : Jun 8 17:01:13 2025 GMT
Subject: CN=f353668cf8ef107dfa2ec69824cfaab72de04a0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ad:34:89:cc:b7:ca:c9:58:9d:aa:c3:7c:3e:
af:af:90:0a:a7:6c:99:85:ee:9b:70:d1:52:d6:22:
2a:01:08:65:3a:f9:4f:f1:d1:06:85:85:a6:20:d4:
b5:5d:88:ee:08:c8:2d:67:c1:99:a4:e3:ad:a5:33:
11:18:fa:eb:b2:52:91:1e:54:c4:24:e9:e2:5d:9a:
09:3b:93:1d:50:48:7d:5f:ab:ae:42:d7:50:ea:2b:
13:29:81:f9:97:3b:06:9e:35:f0:23:0c:9e:41:cd:
0d:09:ff:7e:81:3b:08:b0:5e:17:ea:36:80:09:d8:
66:04:d1:23:14:da:c3:31:c7:11:5c:22:4e:ec:de:
54:ff:1d:c3:4f:81:a0:2f:ed:f5:e7:2b:fb:16:59:
8c:c5:6f:6d:80:c1:5f:21:4f:96:d7:5e:bd:5a:b0:
b8:43:11:01:76:a9:83:4e:f4:87:bf:44:92:fb:83:
4a:15:33:fd:a5:b1:f3:82:96:e0:58:b2:6c:1c:a8:
4c:57:ef:9b:b3:00:9f:65:ab:16:b1:04:0a:38:a9:
30:e8:5e:3b:b1:dd:e4:52:0e:20:17:43:5d:63:04:
d1:81:a8:f6:11:7f:bb:d9:7e:b2:ca:18:af:cf:93:
58:78:98:8f:e7:ba:99:75:ab:ce:45:89:b6:c2:b4:
06:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:53:66:8C:F8:EF:10:7D:FA:2E:C6:98:24:CF:AA:B7:2D:E0:4A:0D
X509v3 Authority Key Identifier:
keyid:73:FB:A6:82:D6:9C:1D:10:70:8E:D7:B6:AE:AA:23:2E:E8:9B:90:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_umgtacHRBwjte2rqojLuibkB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d2cec5-b245-4547-a9cd-f6c644c94608/1/c_umgtacHRBwjte2rqojLuibkB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d2cec5-b245-4547-a9cd-f6c644c94608/1/c_umgtacHRBwjte2rqojLuibkB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:c2:ad:36:a2:d8:94:96:8e:9c:34:0e:9c:85:ff:f1:36:3a:
26:43:b5:4c:b4:4f:3a:29:2e:59:88:b1:a3:6f:7e:58:61:4e:
b9:10:20:7d:e9:2e:e9:a9:0d:af:5e:97:43:c7:11:79:1b:70:
cd:5d:82:00:0e:01:08:37:e2:42:54:4f:ce:7f:9d:58:53:d0:
c6:9f:db:ce:92:e9:6b:5c:7e:b0:bb:70:bd:94:49:6c:a9:13:
33:86:a4:73:a4:09:8e:c4:4c:58:72:35:66:b1:e4:cb:90:0f:
97:4f:0d:33:9c:9f:35:db:40:c0:9e:ff:95:1d:cf:ae:64:33:
f5:5c:ec:84:ad:6c:2d:b9:04:54:7c:95:1c:fc:a0:c1:c4:1d:
d1:c6:00:b2:05:f4:57:a5:b1:0b:cc:40:c0:3a:bd:e9:5f:24:
24:02:ee:d2:29:9a:d5:5f:87:4d:95:a4:57:c0:68:61:c5:a0:
29:8b:94:4a:c0:b7:17:37:f8:03:37:19:ea:f5:f4:db:89:be:
41:8c:61:ef:08:3e:31:c1:f7:e1:2c:4f:c9:45:9f:1b:d2:0e:
76:19:c1:f2:a5:e3:74:d7:42:84:61:be:f4:5e:d9:b9:e6:1e:
e7:43:f0:2f:00:c1:78:12:b5:c7:c3:69:bf:f4:87:c8:73:b9:
f9:1a:66:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:22:33 2025 by rpki-client