Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/UMnaFIP-OZPRmFJgYZc1xM_TgDM.mft
File: UMnaFIP-OZPRmFJgYZc1xM_TgDM.mft (raw, json)
Hash identifier: vuyZtc6U8TUDxFsbt1rlDJ8/lwWTh1U6a7JRx21HwnY=
Subject key identifier: 73:BC:C4:BB:C2:EB:A4:12:2B:89:1F:D9:8D:38:BF:D2:BE:01:87:64
Authority key identifier: 50:C9:DA:14:83:FE:39:93:D1:98:52:60:61:97:35:C4:CF:D3:80:33
Certificate issuer: /CN=50c9da1483fe3993d1985260619735c4cfd38033
Certificate serial: 01964CD9BB2EFE3E508C23FD86BCCE43AD80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UMnaFIP-OZPRmFJgYZc1xM_TgDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/UMnaFIP-OZPRmFJgYZc1xM_TgDM.mft
Manifest number: 14FA
Signing time: Sat 19 Apr 2025 07:00:59 +0000
Manifest this update: Sat 19 Apr 2025 07:00:59 +0000
Manifest next update: Sun 20 Apr 2025 07:00:59 +0000
Files and hashes: 1: UMnaFIP-OZPRmFJgYZc1xM_TgDM.crl (hash: UPg+RcdTPXrmyhwTghutWeIOnl2l57eN1ztsuRL2QmA=)
2: yz-jkDrtoK5DdiijiRq612Hl0rY.roa (hash: gA10Xe4y9yV0Ex9NubvBZaq6eJgKJ0C7ozCvT6S5+sM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/UMnaFIP-OZPRmFJgYZc1xM_TgDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/UMnaFIP-OZPRmFJgYZc1xM_TgDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/UMnaFIP-OZPRmFJgYZc1xM_TgDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:d9:bb:2e:fe:3e:50:8c:23:fd:86:bc:ce:43:ad:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50c9da1483fe3993d1985260619735c4cfd38033
Validity
Not Before: Apr 19 07:00:59 2025 GMT
Not After : Apr 20 07:00:59 2025 GMT
Subject: CN=73bcc4bbc2eba4122b891fd98d38bfd2be018764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c7:7e:d7:0e:58:3f:78:58:db:15:77:ca:66:
b5:9c:49:f4:8b:41:78:b7:bd:e8:6e:80:cc:04:5f:
95:2d:90:b2:90:ba:37:6a:06:a8:85:52:4d:59:b0:
7d:25:04:0f:fa:10:04:a7:d4:fc:17:18:41:0d:44:
5f:f7:3f:a6:49:88:af:4c:82:b8:b9:a8:a8:c0:db:
1c:6b:f2:cd:8c:da:5e:c1:c0:b4:1d:8d:4e:ff:b6:
98:45:26:12:97:33:34:fb:50:11:24:e1:6f:24:e4:
48:e9:84:c5:e1:f3:be:13:a9:8a:4d:8a:e0:b5:2f:
be:56:6d:1b:8a:35:15:a0:93:ec:66:36:5e:97:ee:
61:e8:6a:19:23:5c:cd:7b:64:6c:66:4e:6d:be:ab:
e3:2c:64:9f:7b:3b:e0:76:c7:32:24:bd:94:46:e9:
35:72:51:53:5c:68:1f:a0:76:d5:d5:82:ff:7d:60:
cb:8f:71:0a:40:71:28:40:3c:07:cb:72:9d:ab:70:
0c:1d:ff:a5:2d:2d:ec:7f:81:bd:90:cf:0d:46:23:
b4:f0:7f:13:33:dc:3e:4a:1d:d0:58:38:9d:90:76:
8c:37:1d:b0:ba:48:4e:07:58:75:ab:f6:0f:bf:64:
a5:cb:c9:b9:1e:1c:51:81:03:03:ac:9f:62:9b:2c:
48:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:BC:C4:BB:C2:EB:A4:12:2B:89:1F:D9:8D:38:BF:D2:BE:01:87:64
X509v3 Authority Key Identifier:
keyid:50:C9:DA:14:83:FE:39:93:D1:98:52:60:61:97:35:C4:CF:D3:80:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UMnaFIP-OZPRmFJgYZc1xM_TgDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/UMnaFIP-OZPRmFJgYZc1xM_TgDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/UMnaFIP-OZPRmFJgYZc1xM_TgDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:fb:f1:69:78:21:cc:9e:83:5f:2c:21:76:25:ea:99:a9:d7:
2e:33:db:ab:1d:34:54:3a:c3:4c:22:e6:08:7f:52:d4:c1:67:
59:31:75:5a:35:1b:c1:97:bb:b6:6a:f4:26:7f:e7:da:43:84:
65:d5:f5:f6:9b:61:85:03:f0:3a:9f:bc:95:55:d8:ee:02:9a:
26:e9:35:f5:be:79:6e:ad:14:4c:38:91:10:f9:3d:de:11:86:
32:2a:ce:86:53:df:1f:1b:5f:6f:54:cb:bb:35:c0:a3:19:92:
d4:9e:d0:69:a8:8d:69:85:53:03:f4:5b:30:08:12:26:b0:23:
d3:f1:c4:b3:59:5a:ab:6a:ab:b1:66:2e:77:43:26:65:5b:1f:
b8:ed:f9:2d:d4:b0:c8:16:e6:d0:b2:b6:a5:0d:f9:f9:ff:22:
2c:be:7a:3b:da:17:e4:90:85:d1:0f:23:fc:6e:f7:8e:1c:a7:
6e:e3:08:65:8f:4f:7e:1e:74:d0:98:fd:c6:ab:2b:79:5f:91:
0b:f9:7d:9c:9c:74:ac:ea:c2:b8:16:db:ed:f6:03:87:69:db:
28:40:34:2b:7f:47:c4:e0:86:9e:8c:1c:af:e2:29:c2:bc:d8:
6f:f4:6c:58:2a:69:e8:13:8c:aa:33:2e:2e:10:0f:02:b9:1d:
0d:50:fd:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:13:25 2025 by rpki-client