Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/UMnaFIP-OZPRmFJgYZc1xM_TgDM.mft
File: UMnaFIP-OZPRmFJgYZc1xM_TgDM.mft (raw, json)
Hash identifier: OFuZ3LJvi24HeC1A0oMVn+YMBl6nzZ06rW7oqECUfyw=
Subject key identifier: 1B:86:0A:00:50:2E:18:C5:3A:8A:0F:D3:1F:2A:44:E3:B5:71:6C:3A
Authority key identifier: 50:C9:DA:14:83:FE:39:93:D1:98:52:60:61:97:35:C4:CF:D3:80:33
Certificate issuer: /CN=50c9da1483fe3993d1985260619735c4cfd38033
Certificate serial: 0196C8726C4127AE525C6A2008706CAE825C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UMnaFIP-OZPRmFJgYZc1xM_TgDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/UMnaFIP-OZPRmFJgYZc1xM_TgDM.mft
Manifest number: 153A
Signing time: Tue 13 May 2025 07:01:03 +0000
Manifest this update: Tue 13 May 2025 07:01:03 +0000
Manifest next update: Wed 14 May 2025 07:01:03 +0000
Files and hashes: 1: UMnaFIP-OZPRmFJgYZc1xM_TgDM.crl (hash: b3lg/2ws3ql9n88PNohqGeKDox0zLYWUyRVXf7b/99o=)
2: yz-jkDrtoK5DdiijiRq612Hl0rY.roa (hash: gA10Xe4y9yV0Ex9NubvBZaq6eJgKJ0C7ozCvT6S5+sM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/UMnaFIP-OZPRmFJgYZc1xM_TgDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/UMnaFIP-OZPRmFJgYZc1xM_TgDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/UMnaFIP-OZPRmFJgYZc1xM_TgDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 07:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:72:6c:41:27:ae:52:5c:6a:20:08:70:6c:ae:82:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50c9da1483fe3993d1985260619735c4cfd38033
Validity
Not Before: May 13 07:01:03 2025 GMT
Not After : May 14 07:01:03 2025 GMT
Subject: CN=1b860a00502e18c53a8a0fd31f2a44e3b5716c3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:32:4a:29:18:a2:19:a9:be:ec:ce:2c:37:0c:
8a:15:ed:d9:60:d0:42:2e:e2:43:4a:8b:3e:2c:bc:
f9:14:6f:81:8b:27:a8:15:0c:aa:e0:e8:0d:ed:35:
f7:d3:26:3b:c0:f8:29:f0:9f:c1:3a:75:84:f2:24:
6e:d3:af:e3:95:6a:65:0e:c1:d6:48:87:0d:25:4c:
32:4c:d6:b6:77:47:90:a1:2e:3e:2f:a7:d0:c0:33:
37:ec:2e:af:1d:27:e0:e5:32:f0:47:e3:05:9e:c8:
9a:76:75:79:0d:f9:1d:d4:ea:f4:11:1a:69:41:10:
d1:4a:16:ff:10:b1:f5:20:ed:2f:8d:82:f0:a5:37:
fa:ef:a3:ad:aa:fd:6f:af:b4:1e:a6:fe:0a:3d:8c:
73:76:fd:ba:14:0f:3c:48:ca:a7:75:b0:56:ae:12:
74:9a:bc:3b:bd:df:0b:f7:6b:da:18:b6:18:dc:37:
05:18:ec:c3:74:7c:41:82:cf:69:4c:08:d1:07:af:
d9:21:7c:fd:82:17:c7:da:b6:1b:8d:f5:e3:86:2d:
b4:6e:7d:3d:63:ea:a3:2c:79:b5:2a:c3:b8:67:78:
00:64:6c:55:9c:32:bf:b7:10:01:ec:3e:c5:57:6d:
23:18:d5:2a:24:c8:f0:ea:4c:a3:74:71:4b:1c:0e:
77:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:86:0A:00:50:2E:18:C5:3A:8A:0F:D3:1F:2A:44:E3:B5:71:6C:3A
X509v3 Authority Key Identifier:
keyid:50:C9:DA:14:83:FE:39:93:D1:98:52:60:61:97:35:C4:CF:D3:80:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UMnaFIP-OZPRmFJgYZc1xM_TgDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/UMnaFIP-OZPRmFJgYZc1xM_TgDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0fcbb8-2765-46fb-8b6d-c855dafadd5c/1/UMnaFIP-OZPRmFJgYZc1xM_TgDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:68:78:47:cc:85:28:bd:d1:1f:30:4d:a3:58:dc:b1:28:99:
79:2c:66:c4:c4:54:cb:59:a2:c1:7e:47:09:71:52:d0:f3:de:
77:f5:fe:00:2b:95:23:59:48:8f:93:77:da:bb:88:2d:13:a6:
dd:f8:d0:89:ea:e2:c1:77:3c:8c:8e:45:37:7e:1d:e9:a9:9a:
4e:13:78:0c:87:01:90:79:69:54:b0:c8:74:1d:3b:c9:0a:a9:
e3:2a:34:9a:89:ce:47:bc:b4:68:d0:f5:58:f5:f1:16:e7:13:
79:4f:d4:0e:bb:21:6d:b4:0b:0f:2b:c1:d6:55:b8:a3:a0:54:
b3:1f:33:e2:93:ee:85:ad:99:90:7f:66:fb:b5:45:8a:e2:cd:
38:43:b4:ff:79:1d:7c:86:43:a2:ee:f2:61:63:06:d6:15:b7:
70:f2:aa:82:78:39:a2:5d:c0:52:6a:0c:40:c9:cb:2d:b7:c8:
9d:e4:e9:ec:fa:e8:3c:da:80:28:0b:04:fa:5e:26:77:e3:12:
9c:0f:2f:3c:0a:58:a8:62:93:5f:12:1b:c3:5d:c1:7e:85:26:
e4:36:76:2a:67:e2:dd:df:5a:bd:08:53:11:4d:42:17:d1:85:
4f:87:de:3d:5d:c0:0a:15:c4:11:2b:c0:bf:6c:bf:be:1a:c9:
10:7a:a3:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbIcmxBJ65SXGogCHBsroJcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwYzlkYTE0ODNmZTM5OTNkMTk4NTI2MDYxOTczNWM0Y2Zk
MzgwMzMwHhcNMjUwNTEzMDcwMTAzWhcNMjUwNTE0MDcwMTAzWjAzMTEwLwYDVQQD
EygxYjg2MGEwMDUwMmUxOGM1M2E4YTBmZDMxZjJhNDRlM2I1NzE2YzNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjJKKRiiGam+7M4sNwyKFe3ZYNBC
LuJDSos+LLz5FG+BiyeoFQyq4OgN7TX30yY7wPgp8J/BOnWE8iRu06/jlWplDsHW
SIcNJUwyTNa2d0eQoS4+L6fQwDM37C6vHSfg5TLwR+MFnsiadnV5Dfkd1Or0ERpp
QRDRShb/ELH1IO0vjYLwpTf676Otqv1vr7Qepv4KPYxzdv26FA88SMqndbBWrhJ0
mrw7vd8L92vaGLYY3DcFGOzDdHxBgs9pTAjRB6/ZIXz9ghfH2rYbjfXjhi20bn09
Y+qjLHm1KsO4Z3gAZGxVnDK/txAB7D7FV20jGNUqJMjw6kyjdHFLHA53PQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBuGCgBQLhjFOooP0x8qROO1cWw6MB8GA1UdIwQY
MBaAFFDJ2hSD/jmT0ZhSYGGXNcTP04AzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVU1uYUZJUC1PWlBSbUZKZ1laYzF4TV9UZ0RNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8wZmNiYjgtMjc2NS00NmZiLThiNmQt
Yzg1NWRhZmFkZDVjLzEvVU1uYUZJUC1PWlBSbUZKZ1laYzF4TV9UZ0RNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My8wZmNiYjgtMjc2NS00NmZiLThiNmQtYzg1NWRhZmFkZDVj
LzEvVU1uYUZJUC1PWlBSbUZKZ1laYzF4TV9UZ0RNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfGh4R8yF
KL3RHzBNo1jcsSiZeSxmxMRUy1miwX5HCXFS0PPed/X+ACuVI1lIj5N32ruILROm
3fjQieriwXc8jI5FN34d6amaThN4DIcBkHlpVLDIdB07yQqp4yo0monOR7y0aND1
WPXxFucTeU/UDrshbbQLDyvB1lW4o6BUsx8z4pPuha2ZkH9m+7VFiuLNOEO0/3kd
fIZDou7yYWMG1hW3cPKqgng5ol3AUmoMQMnLLbfIneTp7ProPNqAKAsE+l4md+MS
nA8vPApYqGKTXxIbw13BfoUm5DZ2Kmfi3d9avQhTEU1CF9GFT4fePV3AChXEESvA
v2y/vhrJEHqjmQ==
-----END CERTIFICATE-----
Generated at Tue May 13 13:14:27 2025 by rpki-client