Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/d2cec5-b245-4547-a9cd-f6c644c94608/1/c_umgtacHRBwjte2rqojLuibkB0.mft
File: c_umgtacHRBwjte2rqojLuibkB0.mft (raw, json)
Hash identifier: cax6OA+c2z+ocYswArqBkOYKXrCzyfaLXF+GHBF6U6U=
Subject key identifier: 2E:AA:BD:FD:EA:70:B1:C7:39:09:41:14:AA:18:DF:E4:14:30:81:17
Authority key identifier: 73:FB:A6:82:D6:9C:1D:10:70:8E:D7:B6:AE:AA:23:2E:E8:9B:90:1D
Certificate issuer: /CN=73fba682d69c1d10708ed7b6aeaa232ee89b901d
Certificate serial: 0198D54E61B07BC8B46C39F6A1D765FBA4C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_umgtacHRBwjte2rqojLuibkB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/d2cec5-b245-4547-a9cd-f6c644c94608/1/c_umgtacHRBwjte2rqojLuibkB0.mft
Manifest number: 0F88
Signing time: Sat 23 Aug 2025 05:02:20 +0000
Manifest this update: Sat 23 Aug 2025 05:02:20 +0000
Manifest next update: Sun 24 Aug 2025 05:02:20 +0000
Files and hashes: 1: VFafoaVO2bN0O_eWCA7NRDo9AQI.roa (hash: ZCSixYQYQeBNPNi+wxPK+CWr+k+nO4o0D+w9LRSwgUE=)
2: c_umgtacHRBwjte2rqojLuibkB0.crl (hash: FboOtrlKB/MEFBQjKk3g2GuOvqk+D9oJIeXdAlPENQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/d2cec5-b245-4547-a9cd-f6c644c94608/1/c_umgtacHRBwjte2rqojLuibkB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/d2cec5-b245-4547-a9cd-f6c644c94608/1/c_umgtacHRBwjte2rqojLuibkB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/c_umgtacHRBwjte2rqojLuibkB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:61:b0:7b:c8:b4:6c:39:f6:a1:d7:65:fb:a4:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73fba682d69c1d10708ed7b6aeaa232ee89b901d
Validity
Not Before: Aug 23 05:02:20 2025 GMT
Not After : Aug 24 05:02:20 2025 GMT
Subject: CN=2eaabdfdea70b1c739094114aa18dfe414308117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:7e:0b:cb:66:bf:ba:b0:7d:9b:d4:ec:a6:2b:
12:c2:cb:0a:8f:a2:f1:68:21:f6:ae:95:db:7f:4c:
1f:fb:a9:fe:0f:8a:32:77:cc:49:0a:29:db:67:33:
1b:71:b6:5c:e3:ca:7d:d2:fd:d2:e1:4d:df:03:b9:
11:73:1a:a6:93:9d:f0:15:24:29:e0:5f:5b:04:5d:
d4:d0:71:00:65:d6:96:aa:05:43:9f:e1:b7:18:01:
f4:96:2c:29:cc:01:11:dc:fa:b3:ec:b4:d7:fd:fa:
85:e2:54:40:ea:e9:f4:95:be:09:64:0a:aa:7d:d8:
96:6c:8a:b9:0c:a7:14:9b:85:36:88:4a:52:93:4c:
4b:17:6e:c5:cd:ad:36:36:d2:29:fd:5f:ac:f4:ff:
c5:dd:73:4c:97:fa:de:e7:cf:56:23:f3:6a:67:47:
4e:1e:f3:0d:a1:4b:ec:47:5b:f7:74:1f:0a:ea:d9:
a2:9b:a9:6d:6c:2b:0a:6f:05:bd:8a:f5:5f:4e:2b:
30:d4:dd:86:0e:b2:ad:87:aa:cb:bf:82:39:6b:7b:
c0:d1:d4:15:3f:c7:a1:8e:12:dd:08:0e:16:ee:2f:
80:0d:c1:3d:c8:07:66:8f:5d:1d:67:68:c7:34:11:
13:08:d5:0c:02:9f:df:82:68:03:54:72:47:07:db:
7e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:AA:BD:FD:EA:70:B1:C7:39:09:41:14:AA:18:DF:E4:14:30:81:17
X509v3 Authority Key Identifier:
keyid:73:FB:A6:82:D6:9C:1D:10:70:8E:D7:B6:AE:AA:23:2E:E8:9B:90:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_umgtacHRBwjte2rqojLuibkB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d2cec5-b245-4547-a9cd-f6c644c94608/1/c_umgtacHRBwjte2rqojLuibkB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d2cec5-b245-4547-a9cd-f6c644c94608/1/c_umgtacHRBwjte2rqojLuibkB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:a6:37:18:75:8b:c0:a6:ca:f3:01:5e:56:cd:3e:72:64:c6:
13:76:d5:2b:67:13:b8:8c:27:3b:88:ff:6f:d7:79:6a:65:1e:
30:2e:9f:55:67:8c:e8:af:c7:6f:02:50:27:c0:92:c2:c4:d1:
e1:2f:dc:6e:8f:69:c8:c9:5d:a7:7c:d6:9f:06:93:d0:0d:31:
82:da:3c:58:07:5b:c2:6e:22:2e:ca:c5:c6:52:02:f3:eb:3b:
9e:33:44:93:27:f9:7a:44:81:fa:a7:d4:bd:14:72:68:99:5f:
de:4d:ae:ef:0d:04:c2:d1:a2:1b:da:1c:1e:23:af:92:82:7d:
b8:51:31:7c:b3:73:96:12:68:c3:db:b7:f4:75:33:24:57:33:
56:ea:ac:31:b4:77:ea:3d:fa:3d:a8:0e:6a:61:e7:e5:68:ce:
80:80:d6:79:6e:04:f4:f5:d2:55:64:3e:59:f3:4f:27:8c:e6:
e8:7b:1b:16:3d:8c:d2:11:95:68:05:8d:e2:f7:91:f8:e8:b1:
17:f7:bb:bf:5b:b2:b3:c0:42:1e:72:6e:73:d9:5d:3b:bf:e9:
43:23:1d:15:c0:10:83:93:9c:29:1f:a1:e2:c5:43:91:30:ed:
9c:f2:44:96:ad:a3:42:aa:2f:05:e7:30:75:d6:f4:2e:02:28:
5c:8d:fa:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:46 2025 by rpki-client