Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/UMnaFIP-OZPRmFJgYZc1xM_TgDM.mft
File: UMnaFIP-OZPRmFJgYZc1xM_TgDM.mft (raw, json)
Hash identifier: wtUZKERZMo8uHyCO4Ix32TObMRo8q1yZxqiks+GE9lc=
Subject key identifier: 3B:FB:C2:8B:CF:C6:1F:C0:0B:B7:64:D4:28:D3:94:75:3B:6C:39:F3
Authority key identifier: 50:C9:DA:14:83:FE:39:93:D1:98:52:60:61:97:35:C4:CF:D3:80:33
Certificate issuer: /CN=50c9da1483fe3993d1985260619735c4cfd38033
Certificate serial: 019A503E0421BB71F94490C9800E1E7F4DD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UMnaFIP-OZPRmFJgYZc1xM_TgDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/UMnaFIP-OZPRmFJgYZc1xM_TgDM.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 19:00:32 +0000
Manifest this update: Tue 04 Nov 2025 19:00:32 +0000
Manifest next update: Wed 05 Nov 2025 19:00:32 +0000
Files and hashes: 1: UMnaFIP-OZPRmFJgYZc1xM_TgDM.crl (hash: cYWCwJ9XzUFdQRF09+U8QGyWpIvnfTkbIJ4UxerR5T0=)
2: yz-jkDrtoK5DdiijiRq612Hl0rY.roa (hash: gA10Xe4y9yV0Ex9NubvBZaq6eJgKJ0C7ozCvT6S5+sM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/UMnaFIP-OZPRmFJgYZc1xM_TgDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/UMnaFIP-OZPRmFJgYZc1xM_TgDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/UMnaFIP-OZPRmFJgYZc1xM_TgDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:04:21:bb:71:f9:44:90:c9:80:0e:1e:7f:4d:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50c9da1483fe3993d1985260619735c4cfd38033
Validity
Not Before: Nov 4 19:00:32 2025 GMT
Not After : Nov 5 19:00:32 2025 GMT
Subject: CN=3bfbc28bcfc61fc00bb764d428d394753b6c39f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d2:87:43:79:6d:0e:d7:50:27:20:33:18:14:
e9:23:7c:c5:f6:64:fb:a2:3c:c8:8e:97:c7:38:c7:
95:ae:e4:ba:72:16:ab:65:4e:6f:0e:64:8e:90:3e:
f0:53:fe:6d:51:d9:94:5e:4b:e5:e8:1c:14:56:5b:
85:c4:e8:dc:81:85:48:bc:f4:58:d0:05:c8:26:d0:
88:c0:62:f5:de:2e:61:63:00:01:94:8d:f4:31:96:
95:54:b7:2a:3f:9d:ef:3d:a7:60:3e:07:88:a9:8c:
26:54:4e:f8:95:76:4b:03:63:7a:f9:c5:6e:27:3a:
1f:a2:c9:28:58:ba:49:46:46:61:4e:9d:3b:5b:ec:
2b:3e:9e:6a:b6:3d:12:b5:ab:e3:50:39:bf:45:79:
a4:eb:8c:18:db:da:48:b3:fd:9a:06:77:8a:23:0a:
62:1e:ed:4b:53:16:6d:fd:f0:18:94:bd:8d:e3:0c:
23:0e:24:de:b5:e0:b9:08:35:92:00:91:fc:46:27:
ba:93:f2:d0:e2:7d:34:90:6f:42:3d:70:6d:7a:dc:
c1:fb:00:68:88:2e:aa:1f:d3:19:a7:6d:d6:c0:d4:
53:a4:f0:98:53:70:4a:75:e2:4f:ac:31:49:23:f1:
bb:37:a2:1d:ac:ab:1f:d1:61:93:36:c6:7f:5a:18:
42:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:FB:C2:8B:CF:C6:1F:C0:0B:B7:64:D4:28:D3:94:75:3B:6C:39:F3
X509v3 Authority Key Identifier:
keyid:50:C9:DA:14:83:FE:39:93:D1:98:52:60:61:97:35:C4:CF:D3:80:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UMnaFIP-OZPRmFJgYZc1xM_TgDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/UMnaFIP-OZPRmFJgYZc1xM_TgDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/UMnaFIP-OZPRmFJgYZc1xM_TgDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:3d:19:88:9a:f3:b6:db:97:46:ce:06:78:a1:c6:33:86:c6:
07:40:a5:cb:67:f5:f7:8f:77:cd:19:72:1e:6c:6f:0b:df:63:
fc:11:b7:50:ef:07:7b:21:7f:64:45:3b:04:b8:b9:4c:12:6c:
25:f9:3e:3f:db:ec:f7:08:cc:9c:e3:ea:00:69:23:a0:20:a7:
b1:f5:6a:38:4a:a3:00:7c:ff:a3:98:83:bf:12:e9:ba:4e:d2:
fd:e4:5a:72:e8:c1:fc:ea:ff:7f:a2:8c:82:e8:b0:35:13:b2:
50:2c:35:3e:0d:3d:15:4e:36:fd:98:d7:aa:52:5d:ec:75:ba:
b2:0e:b1:8f:82:4d:3b:f1:7c:ff:b9:f0:65:ed:db:88:e6:68:
0e:b4:3e:25:00:89:5b:9f:64:55:56:fb:12:58:ea:62:67:30:
3c:67:f0:2f:1d:33:c5:81:4c:f1:d5:ed:5c:7f:2a:c8:9b:79:
fa:be:97:c8:a2:3c:68:a4:8a:22:78:2d:12:22:6a:11:11:40:
45:e2:a5:fe:9e:37:41:e3:9a:e8:37:c4:61:7e:b8:05:9b:43:
d7:6c:15:85:92:71:4f:10:4c:1e:43:ff:c1:e3:47:e9:8c:c7:
71:00:f0:be:cd:f6:52:08:35:24:ec:51:64:83:c9:c6:92:23:
4b:07:42:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:38:25 2025 by rpki-client