Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.mft
File: um1Gt2v9bUK71XXi8m_OE2ubam0.mft (raw, json)
Hash identifier: z/fB+N5RJSxzR6rkf4fX6ufG7dFTalGqSGmfkkUAGOU=
Subject key identifier: 3A:AF:56:1D:FD:6E:6C:AF:E4:01:1A:14:A5:AB:BE:8E:66:3F:7D:FF
Authority key identifier: BA:6D:46:B7:6B:FD:6D:42:BB:D5:75:E2:F2:6F:CE:13:6B:9B:6A:6D
Certificate issuer: /CN=ba6d46b76bfd6d42bbd575e2f26fce136b9b6a6d
Certificate serial: 0199FC8F972400DDD08B3F5AE66EA19F24E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um1Gt2v9bUK71XXi8m_OE2ubam0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 13:01:32 +0000
Manifest this update: Sun 19 Oct 2025 13:01:32 +0000
Manifest next update: Mon 20 Oct 2025 13:01:32 +0000
Files and hashes: 1: EtrP_0kTCR5Y3QaHgesqcI8qZFg.roa (hash: lv6k+R6R1gqgBt1ARniBlQxWo2X/ZK4cvTKtuDAns7o=)
2: HJSwnKLNgwsgkTsWAJGJbhRxrYg.roa (hash: k/1eexGDlUI1L69r6EcdCcQNtE5gQOhNhUm2uiosEaU=)
3: qY4Pn2rojeUbBpawT6zBM5pztdI.roa (hash: bdIYON38cjUERyQWKrGfXHpQNcizuWiDaFQ+QLNzEDg=)
4: uJnVKXAIy60auoGPJwESNrSmHkE.roa (hash: ebmKrJfXBBi07GAqHoc+u6RWZ0ztB7xPcVNK+Z+MDgQ=)
5: um1Gt2v9bUK71XXi8m_OE2ubam0.crl (hash: 0u4Qexv0CL7RhzkuPmZKQiTcaEroUz0uUip+twrEv1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.mft
rsync://rpki.ripe.net/repository/DEFAULT/um1Gt2v9bUK71XXi8m_OE2ubam0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:97:24:00:dd:d0:8b:3f:5a:e6:6e:a1:9f:24:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba6d46b76bfd6d42bbd575e2f26fce136b9b6a6d
Validity
Not Before: Oct 19 13:01:32 2025 GMT
Not After : Oct 20 13:01:32 2025 GMT
Subject: CN=3aaf561dfd6e6cafe4011a14a5abbe8e663f7dff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:16:f1:0a:20:bb:17:46:06:55:e3:f7:26:4a:
e4:b6:bc:55:40:e5:17:d7:c9:c8:e2:c2:98:a7:e6:
4e:6f:3f:4b:1a:cd:e9:89:45:c9:55:c6:a4:33:e4:
a5:b7:1b:be:2d:f8:f5:1d:12:a4:19:c0:d6:75:0d:
75:72:41:03:d0:77:aa:28:5b:be:d4:72:a5:f3:cd:
4a:d0:e9:c3:99:b8:02:75:2b:19:21:a5:96:ad:3d:
37:ad:f8:a3:59:55:5e:51:e6:cf:df:87:b2:c1:c2:
9b:79:78:88:55:bb:bb:0a:b0:f8:b2:ff:1a:f2:37:
d4:ff:ad:ae:2e:37:ca:e7:64:c0:ab:e7:2a:5d:95:
49:ad:0f:fb:4b:2a:14:a0:05:82:91:c4:39:a1:13:
66:8c:1f:2d:86:18:d8:34:0b:50:2c:12:c8:94:8c:
1f:ce:f2:86:4c:aa:3f:71:54:69:8c:6f:37:95:e8:
d1:9a:f0:31:d2:bc:ec:5b:c0:00:7a:7e:14:05:2b:
8c:fb:7a:f7:43:ae:58:ba:72:fa:77:c5:3d:7f:87:
27:47:d0:39:ae:1a:b6:67:c1:89:e4:ff:bd:45:24:
ca:73:ae:31:7f:db:75:52:e1:bf:d0:0c:06:c7:01:
83:ee:ee:53:d3:5b:48:56:80:25:19:a6:0e:93:db:
63:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:AF:56:1D:FD:6E:6C:AF:E4:01:1A:14:A5:AB:BE:8E:66:3F:7D:FF
X509v3 Authority Key Identifier:
keyid:BA:6D:46:B7:6B:FD:6D:42:BB:D5:75:E2:F2:6F:CE:13:6B:9B:6A:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um1Gt2v9bUK71XXi8m_OE2ubam0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:21:21:da:53:77:9b:08:81:aa:42:bb:5b:04:80:0b:b3:dc:
23:b8:58:4b:ae:27:99:66:51:6a:a0:91:43:e9:35:63:cd:ab:
f5:1a:82:a4:7c:19:e7:28:16:cc:4a:93:94:6a:41:8e:ed:40:
29:33:00:0a:c3:9f:cf:db:3a:6e:f3:8c:ea:93:18:c3:2f:e3:
eb:41:ba:b7:76:f2:8f:01:b1:07:e1:28:61:82:c1:aa:4d:30:
d8:f9:28:78:05:d9:92:3d:16:fe:85:ba:77:b0:d0:78:96:86:
3f:af:b1:d3:aa:bd:52:8a:b7:18:84:6f:fa:1c:94:ad:0d:3f:
77:b1:60:40:b0:33:3e:e9:ad:94:2b:80:29:d5:27:57:ae:fb:
e1:62:27:97:1f:9b:c0:b5:e0:af:65:fe:48:17:1b:35:0a:18:
ab:a4:b1:ff:c3:76:c8:3a:52:41:3a:73:71:86:d4:82:e4:fa:
7d:61:7a:00:9a:fb:cf:02:5a:ed:b3:97:44:99:ae:13:9a:46:
77:9b:c0:ed:3a:54:ac:db:70:69:37:5b:90:78:21:2b:a4:88:
16:84:0f:76:25:fb:05:93:57:8d:88:f6:18:9c:93:7e:37:5c:
4f:03:33:d3:b1:2d:44:12:a3:21:d3:ff:60:ea:87:62:00:14:
3d:cc:d8:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:48:57 2025 by rpki-client