Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft
File: ume_97rR64OEtYXfe-8SBvfxn34.mft (raw, json)
Hash identifier: WfYk0aPaCR88MA4OamCUnpl/KaU+dXC2xLBhs2MWb+g=
Subject key identifier: 9E:E3:4A:7E:83:88:C9:6A:53:5F:18:09:5D:DA:B7:F4:4D:63:AC:5C
Authority key identifier: BA:67:BF:F7:BA:D1:EB:83:84:B5:85:DF:7B:EF:12:06:F7:F1:9F:7E
Certificate issuer: /CN=ba67bff7bad1eb8384b585df7bef1206f7f19f7e
Certificate serial: 0197CB03010E9ABDDCBF8D0E3948112C32D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft
Manifest number: 0D65
Signing time: Wed 02 Jul 2025 12:01:01 +0000
Manifest this update: Wed 02 Jul 2025 12:01:01 +0000
Manifest next update: Thu 03 Jul 2025 12:01:01 +0000
Files and hashes: 1: 584yOVeS4oyabLizAkaG7pPUY5Y.roa (hash: fVHqq9WRd9turce9ObKFB2HXSMmM46QztnuoCC2qLk4=)
2: ZpR5RrZCeOAjRf8Bmcohe3YCcXY.roa (hash: pTEfc3PDuejgf4x4olTLHWXi7yz1fRVMFq2Y3JTaBo4=)
3: ume_97rR64OEtYXfe-8SBvfxn34.crl (hash: 2r1NftPDFjaMCghVPbG4ZX+HigKEws0XZEWh2Jbbc5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft
rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:03:01:0e:9a:bd:dc:bf:8d:0e:39:48:11:2c:32:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba67bff7bad1eb8384b585df7bef1206f7f19f7e
Validity
Not Before: Jul 2 12:01:01 2025 GMT
Not After : Jul 3 12:01:01 2025 GMT
Subject: CN=9ee34a7e8388c96a535f18095ddab7f44d63ac5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:bb:ba:7d:70:53:66:7b:a2:b1:89:f8:a5:f8:
4b:5c:3d:24:26:65:e6:c2:b5:37:05:1e:48:5e:25:
b6:d4:c8:e2:35:e3:91:24:94:6e:97:a8:d9:46:70:
2e:4d:db:38:4c:38:af:77:17:bc:f4:a4:26:36:f3:
08:6d:a9:eb:f1:08:f8:37:6e:af:90:77:25:8a:bf:
20:ba:3f:b3:1a:e2:42:da:09:51:e5:3c:59:29:2f:
c9:0e:fa:fe:6d:6c:33:0a:0b:0c:2f:1c:fb:a8:fb:
72:f3:3e:b5:cf:3e:0c:f6:67:e4:bc:19:99:ce:05:
d2:55:ff:6c:40:2c:20:91:d3:ee:cd:d9:7f:38:9d:
09:3b:e7:15:a5:26:83:01:05:23:65:56:c7:0e:11:
4d:f5:ed:28:ce:a3:7d:31:fa:c4:7d:0a:e1:21:e9:
d8:64:ec:27:7a:86:ea:f4:2e:c2:23:02:80:4b:0e:
84:b7:3c:96:b8:d6:ad:bb:d2:88:52:d7:7a:ad:85:
be:cd:0a:b3:92:4d:4d:74:f6:0b:4a:65:99:21:1f:
fa:a7:70:c7:59:8c:76:d1:ea:99:e8:47:28:95:bc:
48:6b:21:d9:5c:70:9a:38:b6:2e:24:dc:7a:18:6c:
5a:fa:05:3b:54:cf:95:76:91:ff:a2:81:03:ae:b3:
68:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:E3:4A:7E:83:88:C9:6A:53:5F:18:09:5D:DA:B7:F4:4D:63:AC:5C
X509v3 Authority Key Identifier:
keyid:BA:67:BF:F7:BA:D1:EB:83:84:B5:85:DF:7B:EF:12:06:F7:F1:9F:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:d6:ca:05:2e:82:9e:18:91:41:38:db:34:ec:17:5f:e5:0f:
a1:c6:20:95:41:b6:97:b6:a8:c7:1a:9c:8f:3f:bb:89:54:da:
7b:51:2b:8e:64:45:7c:b7:2e:32:55:96:1e:32:15:34:b7:00:
56:d6:b3:47:b0:d8:24:58:82:e4:44:24:e0:e3:4b:bc:6b:fb:
4a:fd:f7:17:09:fa:7c:a3:24:77:01:39:c7:40:60:a3:1b:43:
49:d4:01:91:83:f0:87:b1:db:ec:d3:69:cc:68:c5:1f:90:4e:
b9:9f:ae:6a:19:50:1c:df:fc:8e:09:62:e8:f9:76:7a:33:e2:
69:69:20:c0:45:c2:d1:36:a5:a8:38:a0:2e:79:89:97:1e:bf:
41:b7:01:26:5d:3a:96:e9:18:60:ac:4c:40:e2:8f:f4:c3:53:
84:89:a2:5a:20:b0:86:c8:7b:73:90:56:ab:20:6e:a0:af:6e:
11:57:66:21:72:66:f4:7a:3f:e2:f1:c0:50:9c:30:b8:ab:36:
70:5d:cd:ad:4b:ce:18:aa:d2:65:67:ac:2f:d0:4d:ab:41:43:
11:9f:ff:51:db:f0:0e:c9:e8:16:ba:c4:f7:af:e9:a3:48:9b:
6d:b7:88:27:82:c7:dd:1f:3c:91:31:df:f6:50:3c:3d:7e:53:
36:48:a7:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfLAwEOmr3cv40OOUgRLDLQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhNjdiZmY3YmFkMWViODM4NGI1ODVkZjdiZWYxMjA2Zjdm
MTlmN2UwHhcNMjUwNzAyMTIwMTAxWhcNMjUwNzAzMTIwMTAxWjAzMTEwLwYDVQQD
Eyg5ZWUzNGE3ZTgzODhjOTZhNTM1ZjE4MDk1ZGRhYjdmNDRkNjNhYzVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbu6fXBTZnuisYn4pfhLXD0kJmXm
wrU3BR5IXiW21MjiNeORJJRul6jZRnAuTds4TDivdxe89KQmNvMIbanr8Qj4N26v
kHclir8guj+zGuJC2glR5TxZKS/JDvr+bWwzCgsMLxz7qPty8z61zz4M9mfkvBmZ
zgXSVf9sQCwgkdPuzdl/OJ0JO+cVpSaDAQUjZVbHDhFN9e0ozqN9MfrEfQrhIenY
ZOwneobq9C7CIwKASw6EtzyWuNatu9KIUtd6rYW+zQqzkk1NdPYLSmWZIR/6p3DH
WYx20eqZ6EcolbxIayHZXHCaOLYuJNx6GGxa+gU7VM+VdpH/ooEDrrNoYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ7jSn6DiMlqU18YCV3at/RNY6xcMB8GA1UdIwQY
MBaAFLpnv/e60euDhLWF33vvEgb38Z9+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdW1lXzk3clI2NE9FdFlYZmUtOFNCdmZ4bjM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi80YTI0NGQtNTFkMS00MTQzLWI2YWYt
ZGE0NTM4MDIyYWM3LzEvdW1lXzk3clI2NE9FdFlYZmUtOFNCdmZ4bjM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi80YTI0NGQtNTFkMS00MTQzLWI2YWYtZGE0NTM4MDIyYWM3
LzEvdW1lXzk3clI2NE9FdFlYZmUtOFNCdmZ4bjM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZdbKBS6C
nhiRQTjbNOwXX+UPocYglUG2l7aoxxqcjz+7iVTae1ErjmRFfLcuMlWWHjIVNLcA
VtazR7DYJFiC5EQk4ONLvGv7Sv33Fwn6fKMkdwE5x0BgoxtDSdQBkYPwh7Hb7NNp
zGjFH5BOuZ+uahlQHN/8jgli6Pl2ejPiaWkgwEXC0TalqDigLnmJlx6/QbcBJl06
lukYYKxMQOKP9MNThImiWiCwhsh7c5BWqyBuoK9uEVdmIXJm9Ho/4vHAUJwwuKs2
cF3NrUvOGKrSZWesL9BNq0FDEZ//UdvwDsnoFrrE96/po0ibbbeIJ4LH3R88kTHf
9lA8PX5TNkin3w==
-----END CERTIFICATE-----
Generated at Wed Jul 2 20:07:02 2025 by rpki-client