Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/d2cec5-b245-4547-a9cd-f6c644c94608/1/c_umgtacHRBwjte2rqojLuibkB0.mft
File: c_umgtacHRBwjte2rqojLuibkB0.mft (raw, json)
Hash identifier: KauKoFVt9jf+Eg0bMQnuvxLzPUoCZeGknyRPXODHks0=
Subject key identifier: 3D:5C:4B:F2:92:C7:88:D8:D4:E3:E8:5A:4B:E6:90:4D:91:75:7C:7F
Authority key identifier: 73:FB:A6:82:D6:9C:1D:10:70:8E:D7:B6:AE:AA:23:2E:E8:9B:90:1D
Certificate issuer: /CN=73fba682d69c1d10708ed7b6aeaa232ee89b901d
Certificate serial: 0199FEB48CEA9C7942008E2F0118B78D5FA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_umgtacHRBwjte2rqojLuibkB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/d2cec5-b245-4547-a9cd-f6c644c94608/1/c_umgtacHRBwjte2rqojLuibkB0.mft
Manifest number: 1022
Signing time: Sun 19 Oct 2025 23:01:09 +0000
Manifest this update: Sun 19 Oct 2025 23:01:09 +0000
Manifest next update: Mon 20 Oct 2025 23:01:09 +0000
Files and hashes: 1: VFafoaVO2bN0O_eWCA7NRDo9AQI.roa (hash: ZCSixYQYQeBNPNi+wxPK+CWr+k+nO4o0D+w9LRSwgUE=)
2: c_umgtacHRBwjte2rqojLuibkB0.crl (hash: d6SVgWPTcBu4cmEhxVsIjD8Gs7Jh9q4utAf+dewIDGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/d2cec5-b245-4547-a9cd-f6c644c94608/1/c_umgtacHRBwjte2rqojLuibkB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/d2cec5-b245-4547-a9cd-f6c644c94608/1/c_umgtacHRBwjte2rqojLuibkB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/c_umgtacHRBwjte2rqojLuibkB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:8c:ea:9c:79:42:00:8e:2f:01:18:b7:8d:5f:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73fba682d69c1d10708ed7b6aeaa232ee89b901d
Validity
Not Before: Oct 19 23:01:09 2025 GMT
Not After : Oct 20 23:01:09 2025 GMT
Subject: CN=3d5c4bf292c788d8d4e3e85a4be6904d91757c7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:81:25:a7:cf:fa:26:28:d7:43:00:fd:67:66:
f7:01:52:9d:e0:86:6c:35:9c:18:f7:c2:9a:ed:07:
0b:b4:7b:e5:f5:ef:d8:8c:19:9c:a7:17:03:1f:4f:
b0:18:0b:d1:5e:93:3d:86:85:af:dd:0c:0b:9b:fb:
40:fc:27:75:8e:ec:f4:52:51:6b:0b:c1:17:35:b7:
62:28:46:3d:ff:52:eb:c7:79:72:ba:a8:c4:e6:ce:
89:ff:61:f8:32:fd:9c:f8:6c:20:d0:ef:99:1b:54:
39:55:85:f4:a0:13:39:22:1f:4e:de:b8:82:99:57:
cd:c6:c6:ee:45:f4:27:a3:85:a7:a7:7d:22:b8:33:
59:2f:23:9d:3b:35:7d:e7:64:ec:08:4c:81:12:e7:
ff:bd:d1:b5:72:eb:c7:8a:39:48:e2:a5:5f:a5:95:
7a:6d:a0:93:7f:bd:7c:78:79:05:97:a2:ec:f1:f4:
44:3d:28:55:d8:68:ac:b3:63:30:e2:55:3d:d7:40:
df:30:8e:41:05:2f:3e:bd:42:14:9e:46:82:bf:49:
9e:66:07:6f:b3:79:a8:c7:9d:15:fe:a8:5e:71:ba:
9a:38:bd:3a:3c:20:ba:fc:e8:09:65:af:81:fb:a9:
da:59:67:6d:09:8e:cd:49:d9:ed:93:63:f0:4f:d3:
dd:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:5C:4B:F2:92:C7:88:D8:D4:E3:E8:5A:4B:E6:90:4D:91:75:7C:7F
X509v3 Authority Key Identifier:
keyid:73:FB:A6:82:D6:9C:1D:10:70:8E:D7:B6:AE:AA:23:2E:E8:9B:90:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_umgtacHRBwjte2rqojLuibkB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d2cec5-b245-4547-a9cd-f6c644c94608/1/c_umgtacHRBwjte2rqojLuibkB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d2cec5-b245-4547-a9cd-f6c644c94608/1/c_umgtacHRBwjte2rqojLuibkB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:50:02:de:0e:f2:6f:a0:1e:70:3b:63:f1:6e:6f:79:27:81:
75:ad:4f:b6:4e:c0:15:07:1e:c6:bd:61:0e:4a:18:75:4a:15:
d1:3d:c1:aa:9e:f5:46:32:8e:62:6b:9c:95:25:71:d8:83:48:
78:9d:7f:eb:2f:69:a1:b6:2b:e8:89:90:d6:62:0c:79:f5:35:
39:50:2f:bd:4e:3b:63:70:73:b5:dc:2e:0f:17:2a:1f:5c:40:
e7:0d:b1:fe:63:fe:21:b0:82:63:3c:5e:f7:68:d8:9a:0a:1c:
97:65:bc:0c:2a:63:2f:7f:72:d9:4b:95:44:6d:58:bc:4a:12:
49:1a:a4:72:02:9c:01:c3:f8:06:85:c9:df:08:0a:e4:13:f9:
82:2e:5e:ef:a3:17:f4:b5:ac:44:1b:25:b9:91:8c:3f:0c:9b:
75:b9:20:5b:5e:45:77:36:29:52:9b:54:16:11:d5:b8:5d:90:
8e:51:f0:85:52:dd:c4:22:0d:ab:a5:47:33:44:f4:8d:45:cc:
1d:05:5d:76:f5:de:b8:85:2f:15:3b:03:e3:57:43:5a:fd:82:
d9:9e:54:39:1a:55:eb:e1:29:d4:19:5d:87:fb:e8:4b:2e:f3:
3c:85:da:19:b6:f8:e8:bf:6c:44:ed:0d:1d:da:34:c9:c7:19:
b4:2a:7e:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+tIzqnHlCAI4vARi3jV+kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczZmJhNjgyZDY5YzFkMTA3MDhlZDdiNmFlYWEyMzJlZTg5
YjkwMWQwHhcNMjUxMDE5MjMwMTA5WhcNMjUxMDIwMjMwMTA5WjAzMTEwLwYDVQQD
EygzZDVjNGJmMjkyYzc4OGQ4ZDRlM2U4NWE0YmU2OTA0ZDkxNzU3YzdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04Elp8/6JijXQwD9Z2b3AVKd4IZs
NZwY98Ka7QcLtHvl9e/YjBmcpxcDH0+wGAvRXpM9hoWv3QwLm/tA/Cd1juz0UlFr
C8EXNbdiKEY9/1Lrx3lyuqjE5s6J/2H4Mv2c+Gwg0O+ZG1Q5VYX0oBM5Ih9O3riC
mVfNxsbuRfQno4Wnp30iuDNZLyOdOzV952TsCEyBEuf/vdG1cuvHijlI4qVfpZV6
baCTf718eHkFl6Ls8fREPShV2Giss2Mw4lU910DfMI5BBS8+vUIUnkaCv0meZgdv
s3mox50V/qhecbqaOL06PCC6/OgJZa+B+6naWWdtCY7NSdntk2PwT9PdKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD1cS/KSx4jY1OPoWkvmkE2RdXx/MB8GA1UdIwQY
MBaAFHP7poLWnB0QcI7Xtq6qIy7om5AdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY191bWd0YWNIUkJ3anRlMnJxb2pMdWlia0IwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9kMmNlYzUtYjI0NS00NTQ3LWE5Y2Qt
ZjZjNjQ0Yzk0NjA4LzEvY191bWd0YWNIUkJ3anRlMnJxb2pMdWlia0IwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC9kMmNlYzUtYjI0NS00NTQ3LWE5Y2QtZjZjNjQ0Yzk0NjA4
LzEvY191bWd0YWNIUkJ3anRlMnJxb2pMdWlia0IwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnlAC3g7y
b6AecDtj8W5veSeBda1Ptk7AFQcexr1hDkoYdUoV0T3Bqp71RjKOYmuclSVx2INI
eJ1/6y9pobYr6ImQ1mIMefU1OVAvvU47Y3BztdwuDxcqH1xA5w2x/mP+IbCCYzxe
92jYmgocl2W8DCpjL39y2UuVRG1YvEoSSRqkcgKcAcP4BoXJ3wgK5BP5gi5e76MX
9LWsRBsluZGMPwybdbkgW15FdzYpUptUFhHVuF2QjlHwhVLdxCINq6VHM0T0jUXM
HQVddvXeuIUvFTsD41dDWv2C2Z5UORpV6+Ep1Bldh/voSy7zPIXaGbb46L9sRO0N
Hdo0yccZtCp+lw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:41:57 2025 by rpki-client