Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/UMnaFIP-OZPRmFJgYZc1xM_TgDM.mft
File: UMnaFIP-OZPRmFJgYZc1xM_TgDM.mft (raw, json)
Hash identifier: rqMaeZppZ3GOxQlT/hRzdbV8Tw5iNO2rcMmYnvz/n3Q=
Subject key identifier: 9F:38:BF:E4:64:D9:03:46:E7:12:02:AF:DA:8D:21:57:9A:2F:7F:42
Authority key identifier: 50:C9:DA:14:83:FE:39:93:D1:98:52:60:61:97:35:C4:CF:D3:80:33
Certificate issuer: /CN=50c9da1483fe3993d1985260619735c4cfd38033
Certificate serial: 019A23D36F2CC75849620309350AD48ABD0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UMnaFIP-OZPRmFJgYZc1xM_TgDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/UMnaFIP-OZPRmFJgYZc1xM_TgDM.mft
Manifest number: 16F7
Signing time: Mon 27 Oct 2025 04:00:50 +0000
Manifest this update: Mon 27 Oct 2025 04:00:50 +0000
Manifest next update: Tue 28 Oct 2025 04:00:50 +0000
Files and hashes: 1: UMnaFIP-OZPRmFJgYZc1xM_TgDM.crl (hash: 0lKN0zB1AO7mhIU8oZ6tri/RjHGOGqp73rP25JLI+Wk=)
2: yz-jkDrtoK5DdiijiRq612Hl0rY.roa (hash: gA10Xe4y9yV0Ex9NubvBZaq6eJgKJ0C7ozCvT6S5+sM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/UMnaFIP-OZPRmFJgYZc1xM_TgDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/UMnaFIP-OZPRmFJgYZc1xM_TgDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/UMnaFIP-OZPRmFJgYZc1xM_TgDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 04:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:d3:6f:2c:c7:58:49:62:03:09:35:0a:d4:8a:bd:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50c9da1483fe3993d1985260619735c4cfd38033
Validity
Not Before: Oct 27 04:00:50 2025 GMT
Not After : Oct 28 04:00:50 2025 GMT
Subject: CN=9f38bfe464d90346e71202afda8d21579a2f7f42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9e:af:d9:0a:4d:e0:56:79:81:9b:8f:b9:7b:
93:fc:10:d9:74:b8:1c:21:06:1e:6b:e8:67:fc:5b:
fb:a6:90:64:95:98:a3:05:69:cb:c8:01:3b:09:38:
c7:56:7c:e0:5a:70:12:b4:5d:b8:31:46:b8:88:17:
f9:21:d3:4d:52:2f:90:10:b7:05:76:3c:65:ca:75:
f4:7c:58:ad:d9:b2:c6:6b:16:cc:c7:20:62:6a:1d:
76:00:25:3b:f9:41:6b:84:a2:e4:0a:8e:74:c2:ef:
64:0d:36:5e:b0:d3:06:34:81:a4:28:75:55:e9:d8:
c9:7a:88:64:00:3d:45:92:9b:8d:48:b2:a0:57:24:
69:51:3c:11:79:07:95:2d:aa:f6:52:77:82:c9:5b:
7b:b5:31:5f:45:08:be:45:a4:65:e0:37:cf:da:f6:
fd:cb:d9:b7:fb:84:80:d1:ab:8e:63:f4:3e:e1:62:
0e:42:45:58:03:5d:2c:77:a4:41:17:65:75:fd:55:
12:17:3c:7e:96:fa:ed:90:86:38:4c:80:a3:14:70:
b5:92:03:40:fd:61:15:6b:78:7b:5e:5f:0e:f3:11:
22:be:0a:a5:cf:97:3b:b2:0b:ce:9b:5b:98:1e:71:
e8:f1:60:16:60:f8:9e:5c:3b:25:26:ab:50:ab:de:
30:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:38:BF:E4:64:D9:03:46:E7:12:02:AF:DA:8D:21:57:9A:2F:7F:42
X509v3 Authority Key Identifier:
keyid:50:C9:DA:14:83:FE:39:93:D1:98:52:60:61:97:35:C4:CF:D3:80:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UMnaFIP-OZPRmFJgYZc1xM_TgDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/UMnaFIP-OZPRmFJgYZc1xM_TgDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/UMnaFIP-OZPRmFJgYZc1xM_TgDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:c7:7e:c7:8c:c7:41:d4:aa:2d:72:5f:cb:ef:9c:c8:4e:2f:
6e:c6:50:6e:b5:29:37:50:04:d5:3a:a7:a1:83:7a:0b:44:33:
48:30:4f:d3:18:9d:36:dc:0b:92:d0:c1:97:d0:70:3f:dd:4d:
fb:49:57:2f:81:08:4a:61:f8:68:06:19:7e:56:d7:23:02:dc:
df:07:a8:0d:e5:57:93:de:f7:40:0e:65:1c:95:e0:e8:cf:ff:
3a:16:71:1f:a0:5e:ff:e4:5c:64:cf:f8:a2:bf:e4:8f:c2:c0:
33:e8:13:06:d0:96:dd:6e:ca:80:12:0a:6a:03:95:48:c0:af:
4d:b9:61:26:28:90:ca:ad:28:d6:66:c3:3c:32:f2:e9:83:49:
7e:29:cb:38:d1:de:88:a1:f8:77:7c:fd:ea:2b:42:47:c3:24:
67:59:89:c2:d0:e8:ff:9a:31:d2:10:72:7e:25:96:1e:a3:09:
45:e0:a2:83:de:da:fd:ae:ee:2f:92:79:7a:e9:a3:dc:ef:a1:
48:26:7c:d0:41:97:06:07:cd:fd:b6:77:d7:18:57:eb:d0:75:
ff:36:da:2a:1b:fe:a8:4c:c6:61:eb:21:44:96:8f:34:31:a7:
98:74:bd:3b:4f:3a:e1:d2:d3:41:60:7a:ac:e7:a5:46:45:41:
0a:32:bd:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 14:25:22 2025 by rpki-client