
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.mft
File: um1Gt2v9bUK71XXi8m_OE2ubam0.mft (raw, json)
Hash identifier: RIM3A0hStxAVBpVbb+uD5wNXlLxJ/3aWUFMxgoZQ3Fc=
Subject key identifier: A7:1A:1A:4C:85:77:A4:D4:6E:80:60:CE:6B:7D:D1:31:20:44:C3:91
Authority key identifier: BA:6D:46:B7:6B:FD:6D:42:BB:D5:75:E2:F2:6F:CE:13:6B:9B:6A:6D
Certificate issuer: /CN=ba6d46b76bfd6d42bbd575e2f26fce136b9b6a6d
Certificate serial: 0198D8F2F0E703F9596029F4922F28559412
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um1Gt2v9bUK71XXi8m_OE2ubam0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 22:00:56 +0000
Manifest this update: Sat 23 Aug 2025 22:00:56 +0000
Manifest next update: Sun 24 Aug 2025 22:00:56 +0000
Files and hashes: 1: EtrP_0kTCR5Y3QaHgesqcI8qZFg.roa (hash: lv6k+R6R1gqgBt1ARniBlQxWo2X/ZK4cvTKtuDAns7o=)
2: HJSwnKLNgwsgkTsWAJGJbhRxrYg.roa (hash: k/1eexGDlUI1L69r6EcdCcQNtE5gQOhNhUm2uiosEaU=)
3: qY4Pn2rojeUbBpawT6zBM5pztdI.roa (hash: bdIYON38cjUERyQWKrGfXHpQNcizuWiDaFQ+QLNzEDg=)
4: uJnVKXAIy60auoGPJwESNrSmHkE.roa (hash: ebmKrJfXBBi07GAqHoc+u6RWZ0ztB7xPcVNK+Z+MDgQ=)
5: um1Gt2v9bUK71XXi8m_OE2ubam0.crl (hash: eXlHB+cxfrePD3tVfOh9LvI3TIG0LhbbQNQjvZEV+B8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.mft
rsync://rpki.ripe.net/repository/DEFAULT/um1Gt2v9bUK71XXi8m_OE2ubam0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 22:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:f2:f0:e7:03:f9:59:60:29:f4:92:2f:28:55:94:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba6d46b76bfd6d42bbd575e2f26fce136b9b6a6d
Validity
Not Before: Aug 23 22:00:56 2025 GMT
Not After : Aug 24 22:00:56 2025 GMT
Subject: CN=a71a1a4c8577a4d46e8060ce6b7dd1312044c391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8e:b8:e1:04:7a:87:4f:89:a6:24:0e:48:09:
b6:75:b3:f3:f3:9c:b5:3a:69:8c:05:88:56:59:29:
5f:7c:e3:19:4b:1e:ed:96:74:25:39:73:a2:ed:0a:
60:ed:e0:c2:2a:e1:8e:68:6d:5a:15:2c:72:55:d9:
18:0b:4b:5f:19:42:fc:ae:16:c4:53:14:7c:3b:52:
fd:97:42:d2:37:8b:43:50:ef:74:76:9d:c2:d4:da:
74:af:e6:4f:1c:97:b0:e5:7c:f4:dd:3d:5f:d0:b4:
83:9c:9c:a7:b5:bc:af:b8:fd:22:22:fc:30:fc:75:
a5:dc:50:24:70:20:4e:c8:61:c3:bf:a2:e0:b5:13:
ec:22:dc:71:ed:ec:7f:b7:6f:cc:1b:79:eb:c1:f2:
22:28:fb:95:ed:9e:a4:72:54:ec:71:23:57:f2:5f:
39:9e:a4:95:4a:60:5d:59:f9:13:6c:4a:9e:08:39:
84:c6:17:dc:fa:aa:78:6d:f0:96:99:5f:87:e3:ac:
a8:99:b3:ce:58:fe:a6:9c:84:06:ac:ad:86:8d:ca:
a8:42:d9:b1:8e:e8:b8:60:fd:71:27:04:af:c9:4f:
dc:e6:df:b6:48:34:fb:05:90:9f:a2:1c:b0:f6:d0:
7a:b8:de:68:4f:e9:92:89:9a:ca:dc:62:f0:13:eb:
62:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:1A:1A:4C:85:77:A4:D4:6E:80:60:CE:6B:7D:D1:31:20:44:C3:91
X509v3 Authority Key Identifier:
keyid:BA:6D:46:B7:6B:FD:6D:42:BB:D5:75:E2:F2:6F:CE:13:6B:9B:6A:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um1Gt2v9bUK71XXi8m_OE2ubam0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:63:f6:e9:cf:3c:42:2e:67:4f:5c:76:47:72:43:ef:b2:b3:
5e:cd:8f:1d:60:e1:a5:6b:39:d4:b7:e2:f4:e6:05:8e:8f:0d:
e7:7b:4e:e5:96:58:7b:6c:b5:dc:42:87:f1:f3:f1:52:fe:c3:
ef:b8:c1:65:5b:c9:c9:3b:b9:4e:ea:3e:2b:7e:a2:c3:ee:6c:
46:11:bb:6e:89:f6:c1:78:3c:0f:6d:ce:24:32:5e:a5:a8:46:
6d:d0:ac:c9:2f:10:13:82:cd:ce:ac:6d:18:47:de:1b:7e:42:
65:bf:3b:68:dd:cc:30:89:fb:73:61:f6:e1:5e:b8:d3:62:71:
2c:1c:36:bc:d0:b0:e3:1a:61:81:ff:ca:72:2b:8e:ee:02:48:
be:25:0c:2d:d5:48:b8:ca:0b:08:50:26:d3:f8:fd:36:16:db:
95:c5:0f:49:bb:ff:91:b1:c5:08:8e:88:fc:3f:f1:93:64:24:
23:d7:30:32:e3:0f:dd:4a:0f:4e:59:e7:bc:1a:1d:b5:97:61:
fb:b6:55:3b:b4:d5:2e:0b:45:2b:53:9d:38:cf:5c:1b:94:6e:
fe:e1:10:0b:dd:62:1e:82:9a:39:7c:53:6a:0f:22:63:2a:09:
84:ca:34:3f:57:77:c8:93:c3:52:9f:a4:e9:68:09:e2:64:23:
18:8d:75:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 06:14:07 2025 by rpki-client