Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft
File: ume_97rR64OEtYXfe-8SBvfxn34.mft (raw, json)
Hash identifier: EA2gbgUWy/D7DGYyPgWMVOXe+aEQaT2FcUy2P7jc9ew=
Subject key identifier: 26:43:E0:34:F5:C6:2E:95:91:80:FD:3E:CA:FC:F9:E4:A1:C0:E7:98
Authority key identifier: BA:67:BF:F7:BA:D1:EB:83:84:B5:85:DF:7B:EF:12:06:F7:F1:9F:7E
Certificate issuer: /CN=ba67bff7bad1eb8384b585df7bef1206f7f19f7e
Certificate serial: 0196C45E7F17AA8056A2281B15D1F46F0D0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft
Manifest number: 0CDD
Signing time: Mon 12 May 2025 12:00:49 +0000
Manifest this update: Mon 12 May 2025 12:00:49 +0000
Manifest next update: Tue 13 May 2025 12:00:49 +0000
Files and hashes: 1: 584yOVeS4oyabLizAkaG7pPUY5Y.roa (hash: fVHqq9WRd9turce9ObKFB2HXSMmM46QztnuoCC2qLk4=)
2: ZpR5RrZCeOAjRf8Bmcohe3YCcXY.roa (hash: pTEfc3PDuejgf4x4olTLHWXi7yz1fRVMFq2Y3JTaBo4=)
3: ume_97rR64OEtYXfe-8SBvfxn34.crl (hash: UgdOikqnl9V4nohzNanhLwTnR2zq8BjLxECo+72QJZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft
rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 12:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:5e:7f:17:aa:80:56:a2:28:1b:15:d1:f4:6f:0d:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba67bff7bad1eb8384b585df7bef1206f7f19f7e
Validity
Not Before: May 12 12:00:49 2025 GMT
Not After : May 13 12:00:49 2025 GMT
Subject: CN=2643e034f5c62e959180fd3ecafcf9e4a1c0e798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:30:f5:d5:7d:dd:f2:8c:b1:de:98:31:40:f2:
be:e5:53:5f:7b:d7:3d:be:35:83:ea:db:f2:ae:b5:
b0:50:80:2c:0e:68:cf:72:8e:cc:25:8a:25:06:8c:
8c:29:6d:54:8a:1f:ab:c7:85:0b:b0:e0:94:1f:bf:
6e:4c:da:01:a3:bc:ef:2b:00:cf:13:ae:d0:e9:8c:
4b:63:3d:f1:e2:4f:7e:06:c1:87:6a:8c:25:8f:28:
0d:0b:8d:58:aa:c4:d4:23:3a:a5:40:4e:a6:46:70:
f0:7e:76:b7:40:18:16:02:3f:11:9f:6a:a3:34:e1:
d2:5f:34:d8:e4:5b:6a:0f:af:0b:b5:44:95:62:48:
99:b9:d7:85:19:9f:33:86:c8:3a:5f:29:dc:a8:d8:
ef:ee:63:82:60:cd:ca:fe:15:07:47:c5:65:77:64:
c8:17:dd:9f:ce:c9:b4:af:c9:d9:54:96:ff:26:6c:
df:b0:e5:89:b6:b1:72:31:84:a9:0b:0a:77:e1:b2:
c2:3a:16:a3:b2:3d:05:8e:69:8e:60:17:2a:79:1c:
d7:24:13:95:ec:95:d7:2b:fd:5b:79:6b:6d:66:a2:
ce:b0:c5:b3:c8:35:c0:56:3d:68:1f:15:50:20:40:
0d:c0:7a:47:dd:d1:ec:c0:10:1a:e4:76:4d:61:ae:
02:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:43:E0:34:F5:C6:2E:95:91:80:FD:3E:CA:FC:F9:E4:A1:C0:E7:98
X509v3 Authority Key Identifier:
keyid:BA:67:BF:F7:BA:D1:EB:83:84:B5:85:DF:7B:EF:12:06:F7:F1:9F:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:b2:ef:ea:92:43:f9:88:28:80:0b:0f:3d:ac:ed:87:12:c8:
d4:35:5d:bb:a4:f2:77:3c:6b:f5:ad:14:f1:92:74:9d:79:b2:
8d:9c:34:e7:54:85:9d:fd:74:89:71:48:c3:d4:01:72:52:5b:
f9:12:05:5d:0b:2d:39:28:38:04:62:d3:78:e3:75:01:bc:80:
b3:00:0c:89:08:2d:89:fd:74:93:1f:e0:cf:54:90:50:d7:16:
c2:ce:c3:4d:1b:39:6f:f6:e5:b4:bb:be:1a:a3:29:98:ce:3a:
fc:25:d9:e5:d6:f3:e2:7b:94:bf:c3:83:0d:26:3d:99:5f:dc:
d0:12:ad:07:01:ab:22:53:4e:d6:8f:a9:4b:9e:88:db:b5:e0:
ed:36:be:64:93:d4:04:86:d7:15:f0:a4:85:94:41:d4:72:7e:
31:4e:64:1a:28:6d:3a:80:ab:10:44:8f:d3:f4:e8:76:22:e4:
21:a0:9e:34:d0:8e:c4:4f:20:c7:0f:a6:85:76:76:9c:2b:20:
31:22:a7:04:86:79:c7:37:1e:d3:ee:5e:5a:22:a3:62:52:7e:
0d:10:dd:95:0a:9e:96:c2:8a:a9:db:15:78:8d:a1:79:1e:ed:
38:b3:cc:94:e6:2c:62:61:c0:b9:d8:6e:e3:36:b1:8f:a8:c5:
2e:45:ab:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:26:09 2025 by rpki-client