Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/UMnaFIP-OZPRmFJgYZc1xM_TgDM.mft
File: UMnaFIP-OZPRmFJgYZc1xM_TgDM.mft (raw, json)
Hash identifier: en7H6ewxcHfOXBF3SeAtwHcOJ4SyUPIe5jovQrEkX3k=
Subject key identifier: 13:7D:CB:EB:C2:C0:CB:15:A9:49:43:BE:47:3E:E3:94:FF:2A:D3:2E
Authority key identifier: 50:C9:DA:14:83:FE:39:93:D1:98:52:60:61:97:35:C4:CF:D3:80:33
Certificate issuer: /CN=50c9da1483fe3993d1985260619735c4cfd38033
Certificate serial: 01984AAF37AD95CA68C20ACFA7965B4393E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UMnaFIP-OZPRmFJgYZc1xM_TgDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/UMnaFIP-OZPRmFJgYZc1xM_TgDM.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 07:00:53 +0000
Manifest this update: Sun 27 Jul 2025 07:00:53 +0000
Manifest next update: Mon 28 Jul 2025 07:00:53 +0000
Files and hashes: 1: UMnaFIP-OZPRmFJgYZc1xM_TgDM.crl (hash: 6b//fF79LUFFm6SIisbj0uFFBajoJrgNF6qEQq0+IS4=)
2: yz-jkDrtoK5DdiijiRq612Hl0rY.roa (hash: gA10Xe4y9yV0Ex9NubvBZaq6eJgKJ0C7ozCvT6S5+sM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/UMnaFIP-OZPRmFJgYZc1xM_TgDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/UMnaFIP-OZPRmFJgYZc1xM_TgDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/UMnaFIP-OZPRmFJgYZc1xM_TgDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:af:37:ad:95:ca:68:c2:0a:cf:a7:96:5b:43:93:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50c9da1483fe3993d1985260619735c4cfd38033
Validity
Not Before: Jul 27 07:00:53 2025 GMT
Not After : Jul 28 07:00:53 2025 GMT
Subject: CN=137dcbebc2c0cb15a94943be473ee394ff2ad32e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b4:56:7a:c6:2a:f6:1f:28:7b:62:27:05:5d:
05:32:4b:a1:4f:27:34:10:44:04:c8:d8:5d:ca:90:
37:94:64:1a:22:6a:19:5c:90:0b:45:96:3b:a4:b4:
33:ab:cc:d5:8c:8b:1a:24:23:a7:c8:ff:dd:b9:ac:
01:51:78:7f:33:dd:e5:e5:a6:7d:ab:a4:6b:f2:9c:
ed:aa:f9:99:f7:94:db:68:63:57:8a:97:21:50:ee:
97:43:13:2b:10:2b:b4:69:70:77:5b:01:85:07:55:
54:1a:ca:e6:61:41:65:75:c9:3f:98:99:7f:b3:f9:
52:a6:a2:fe:85:6c:44:55:9d:44:b2:bb:47:f4:6a:
4d:60:cb:19:c8:bd:69:6d:d4:72:4f:cb:83:9d:32:
3d:50:52:9a:1c:00:8f:37:ca:8c:d0:cb:74:37:6e:
07:ad:c3:d3:65:49:f0:e8:7d:87:ed:65:97:7e:a2:
9a:d5:e6:14:a6:f6:af:0c:95:f3:77:8a:4e:21:bf:
0a:d3:44:a0:ea:d6:9f:67:44:86:2c:49:8c:01:30:
7d:2a:3f:42:3b:c1:28:a1:da:33:02:ea:f6:57:9a:
4c:90:83:3f:da:66:22:c1:3c:c4:ce:79:32:3c:4b:
65:c1:b9:61:e3:91:02:b7:79:e5:88:a0:56:50:9d:
27:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:7D:CB:EB:C2:C0:CB:15:A9:49:43:BE:47:3E:E3:94:FF:2A:D3:2E
X509v3 Authority Key Identifier:
keyid:50:C9:DA:14:83:FE:39:93:D1:98:52:60:61:97:35:C4:CF:D3:80:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UMnaFIP-OZPRmFJgYZc1xM_TgDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/UMnaFIP-OZPRmFJgYZc1xM_TgDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/UMnaFIP-OZPRmFJgYZc1xM_TgDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:d8:8c:68:9f:e5:8c:2a:93:69:d9:46:95:e5:99:a9:97:73:
77:23:87:90:60:57:1e:21:b8:d6:7a:5c:dc:c7:bf:af:b3:68:
e0:9c:1b:91:be:10:a5:cf:49:5b:87:61:2e:e9:fe:d8:05:4e:
33:af:50:b6:f1:c3:d3:ad:49:af:8d:a9:0a:72:17:b8:a7:01:
93:f4:ec:7e:1d:22:e8:d7:ed:ae:cd:03:85:29:79:a4:6c:10:
cd:bc:05:1c:e0:52:7d:2d:c5:fe:49:48:94:29:fd:d3:da:da:
29:19:10:7f:50:22:cb:40:65:a0:5f:2b:7c:a1:ba:92:61:5b:
7b:b4:da:89:b5:52:52:89:bf:15:e6:0b:a5:a0:d2:f1:b7:bb:
ef:3d:a0:6c:ea:dc:0f:91:56:26:52:de:4a:e9:79:93:4e:7f:
bf:2c:0a:d7:77:8e:9b:d7:22:2b:b5:07:b8:ab:a3:72:41:36:
d6:a9:42:a9:16:6a:da:8f:d4:c3:72:19:cc:cc:ec:19:63:d0:
c1:89:f0:aa:72:18:89:1e:25:8e:d5:a4:ac:cc:31:ce:3c:22:
55:3d:57:93:d6:9c:6e:51:e8:c3:1f:45:d4:19:05:65:59:aa:
e2:e2:54:bb:61:bb:21:37:15:a5:83:78:41:ee:39:8d:37:f0:
d8:ba:1c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:24:14 2025 by rpki-client