Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.mft
File: fuMgjoGN10wNa0PZJ-oNGJO-1lA.mft (raw, json)
Hash identifier: EdvKC4w13yjvY8X+5+pA4qUpI0pvLPyrv/KfEj6hUJg=
Subject key identifier: A7:85:35:29:F1:EA:AD:94:C2:53:67:47:AC:81:A3:D1:64:5B:43:B4
Authority key identifier: 7E:E3:20:8E:81:8D:D7:4C:0D:6B:43:D9:27:EA:0D:18:93:BE:D6:50
Certificate issuer: /CN=7ee3208e818dd74c0d6b43d927ea0d1893bed650
Certificate serial: 019A04B5F01C52656E5B0CFAD41F20B63FE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fuMgjoGN10wNa0PZJ-oNGJO-1lA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.mft
Manifest number: 13B9
Signing time: Tue 21 Oct 2025 03:00:23 +0000
Manifest this update: Tue 21 Oct 2025 03:00:23 +0000
Manifest next update: Wed 22 Oct 2025 03:00:23 +0000
Files and hashes: 1: fuMgjoGN10wNa0PZJ-oNGJO-1lA.crl (hash: 1lBuT/MRvuR/aS+39KXUAdnsL/8xxs9lmx7+K0+4d78=)
2: utLJ7YGi1SD6bf2E3cIfMW0icz0.roa (hash: bwpJCF2pXOs/NsitTdh/ToVpeQtbypYmGT2uF/B4Dn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.mft
rsync://rpki.ripe.net/repository/DEFAULT/fuMgjoGN10wNa0PZJ-oNGJO-1lA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 03:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:04:b5:f0:1c:52:65:6e:5b:0c:fa:d4:1f:20:b6:3f:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ee3208e818dd74c0d6b43d927ea0d1893bed650
Validity
Not Before: Oct 21 03:00:23 2025 GMT
Not After : Oct 22 03:00:23 2025 GMT
Subject: CN=a7853529f1eaad94c2536747ac81a3d1645b43b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ce:5c:dc:f0:d1:6f:a4:d0:c3:f5:ea:03:25:
58:b8:0d:cc:07:f2:4d:2f:68:cf:f8:b5:5e:53:0f:
5f:19:c8:59:b8:36:c0:d9:62:fb:17:75:55:a6:9f:
1e:c0:70:c5:cb:9c:40:e4:5b:39:ea:1f:05:00:ce:
2d:b8:4f:6d:82:93:e4:22:bc:ee:ac:84:d1:fc:96:
d2:98:4d:22:15:0f:62:f9:c1:65:ce:c7:ff:de:11:
b3:ab:90:8c:36:9b:09:10:e7:8e:db:e2:71:5f:4e:
b0:4d:2f:de:ae:de:42:0a:99:d5:3e:2f:33:45:14:
1f:0b:e5:0c:bf:3b:99:9a:53:56:ff:86:97:72:7e:
1e:4b:bd:7d:21:50:14:f7:7c:9b:44:b0:6e:bb:ed:
92:6d:5b:95:76:78:33:7e:d4:9c:40:8c:84:55:30:
22:c8:f9:03:40:f3:4f:c4:9c:e3:f2:03:2b:76:bf:
a0:88:e3:9d:b3:ff:51:d2:34:16:c2:c7:40:2e:a6:
0a:09:c0:79:93:03:98:b4:51:45:53:8a:f7:cb:b4:
3d:17:3b:cf:f3:1c:31:16:49:62:ee:83:2e:b7:0d:
48:76:b6:91:ee:28:06:94:c5:aa:b5:18:76:a5:db:
0f:85:c1:b0:c2:18:ca:45:9a:e4:ab:e5:26:9a:1e:
e5:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:85:35:29:F1:EA:AD:94:C2:53:67:47:AC:81:A3:D1:64:5B:43:B4
X509v3 Authority Key Identifier:
keyid:7E:E3:20:8E:81:8D:D7:4C:0D:6B:43:D9:27:EA:0D:18:93:BE:D6:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fuMgjoGN10wNa0PZJ-oNGJO-1lA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:77:ad:1f:18:c6:18:67:16:b4:64:27:cd:a4:d1:2f:3c:ba:
5e:00:1f:f8:79:47:49:73:bd:92:d9:22:8f:07:0f:1d:d0:ff:
dc:65:ef:c8:cc:78:65:d8:bc:d1:c8:bb:62:3f:bf:8b:41:d9:
60:6b:78:58:3a:cd:dd:36:dd:11:ba:a7:b9:20:eb:57:a1:ed:
d7:27:5b:51:61:f5:c6:f3:bd:aa:88:fc:9d:f7:62:c4:e9:47:
27:8f:af:13:39:0c:e0:5c:93:b0:4b:2f:c7:7b:61:5d:98:b4:
e0:90:0f:9f:0b:e4:85:5f:82:e1:8a:dc:06:ae:4f:cc:de:31:
33:75:08:49:bc:b7:dd:9b:20:7d:7b:5d:28:c5:b2:1d:81:43:
37:32:a2:58:f9:9d:4a:d3:86:8b:14:b5:13:77:11:ef:98:ce:
f1:b8:35:8b:69:8c:f4:24:5e:f6:12:37:1c:ad:5d:71:65:cc:
ed:35:8f:9c:eb:82:34:8e:97:9c:74:1a:6b:87:1b:1a:e4:9d:
05:17:56:f8:07:dd:46:6c:b4:42:0f:91:f7:40:3a:12:79:33:
c2:33:cb:be:a7:6c:85:96:7e:4d:6c:e8:d7:c2:40:90:8a:d0:
d3:7c:a6:9e:e0:ff:c6:a5:a4:44:60:b6:e0:f1:9c:6a:34:25:
15:7c:47:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 13:07:20 2025 by rpki-client