Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.mft
File: fuMgjoGN10wNa0PZJ-oNGJO-1lA.mft (raw, json)
Hash identifier: aMxTwZN09SGKjemAuem4349UR0wI8tzougyilugoLKE=
Subject key identifier: A5:03:31:03:30:1F:0E:45:2E:C3:61:69:2A:2A:CC:4C:E5:11:1C:46
Authority key identifier: 7E:E3:20:8E:81:8D:D7:4C:0D:6B:43:D9:27:EA:0D:18:93:BE:D6:50
Certificate issuer: /CN=7ee3208e818dd74c0d6b43d927ea0d1893bed650
Certificate serial: 019511D9A91A270D562FCAB298509C3739EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fuMgjoGN10wNa0PZJ-oNGJO-1lA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.mft
Manifest number: 1129
Signing time: Mon 17 Feb 2025 03:00:32 +0000
Manifest this update: Mon 17 Feb 2025 03:00:32 +0000
Manifest next update: Tue 18 Feb 2025 03:00:32 +0000
Files and hashes: 1: fuMgjoGN10wNa0PZJ-oNGJO-1lA.crl (hash: Gwma3zXcS4Kd4lPaqu1ove17Zkubcchc5/coy/PXHOM=)
2: utLJ7YGi1SD6bf2E3cIfMW0icz0.roa (hash: bwpJCF2pXOs/NsitTdh/ToVpeQtbypYmGT2uF/B4Dn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.mft
rsync://rpki.ripe.net/repository/DEFAULT/fuMgjoGN10wNa0PZJ-oNGJO-1lA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:a9:1a:27:0d:56:2f:ca:b2:98:50:9c:37:39:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ee3208e818dd74c0d6b43d927ea0d1893bed650
Validity
Not Before: Feb 17 03:00:32 2025 GMT
Not After : Feb 18 03:00:32 2025 GMT
Subject: CN=a5033103301f0e452ec361692a2acc4ce5111c46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:74:bf:0c:f5:c3:8f:50:87:68:f2:b4:1d:ba:
cd:19:96:70:77:6c:3b:6d:a4:14:57:89:80:1a:ac:
b4:cd:38:59:63:1a:0e:ff:aa:9a:64:a0:be:7d:18:
31:1c:25:7f:25:4f:92:8a:4c:f0:df:dc:6f:6b:e1:
d4:1c:3b:84:05:e7:2d:bd:78:de:80:3c:35:f0:83:
0f:25:32:da:ef:f6:25:c4:1d:7a:0b:2a:03:24:20:
cf:b2:b1:3a:01:08:7d:5f:49:ad:cd:68:c2:75:63:
82:a8:18:58:ee:53:ac:d6:f0:e1:bd:b8:92:cb:f9:
fe:84:14:05:7a:ba:df:cb:fe:06:ac:c6:a6:b8:e0:
7c:61:1b:a9:14:39:43:2a:e2:20:03:40:4c:d0:b5:
a7:bd:e2:c7:3d:ca:b4:a4:3a:7c:08:d8:26:3c:3f:
ad:d4:bc:a4:21:42:12:0b:9a:e9:33:e1:ac:6e:51:
07:52:4c:49:cf:ce:ba:8a:25:ce:de:30:c9:f1:1a:
9c:03:00:9e:0a:2e:3b:eb:f1:a0:08:ac:c0:bf:d8:
a4:96:43:a3:59:65:b5:bc:e8:62:a8:78:97:80:fa:
cd:36:2a:f8:09:42:d8:ab:94:49:1b:a1:fa:9f:c8:
1f:85:71:94:3d:0b:4f:06:f3:82:22:c6:57:9c:2f:
63:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:03:31:03:30:1F:0E:45:2E:C3:61:69:2A:2A:CC:4C:E5:11:1C:46
X509v3 Authority Key Identifier:
keyid:7E:E3:20:8E:81:8D:D7:4C:0D:6B:43:D9:27:EA:0D:18:93:BE:D6:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fuMgjoGN10wNa0PZJ-oNGJO-1lA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:fa:d4:a6:0a:0f:ad:77:bd:94:dc:b8:65:d7:95:90:40:02:
65:10:1c:22:4a:c4:23:90:c1:b4:73:0e:69:95:0d:90:ec:6a:
61:1c:81:af:ed:1d:d3:e2:02:74:39:72:b8:66:df:f4:06:3f:
f9:01:78:0d:f1:58:04:f3:2e:25:7f:17:ee:58:fd:bd:e8:76:
65:c0:ab:48:10:2a:14:fd:eb:14:bf:d1:a8:7f:a7:e9:25:6b:
84:4d:aa:de:d8:83:e2:2f:cb:ff:a1:04:a2:1e:40:63:d7:92:
c6:ca:6e:da:9e:9a:70:83:49:33:f3:c1:84:bd:16:de:7e:5f:
ef:59:68:43:e9:15:aa:cf:23:da:f8:2e:8b:f2:0c:0f:3e:24:
6f:9a:c9:5a:19:10:95:25:e4:1f:bc:65:87:5d:8d:01:74:cb:
6e:2a:66:cc:e6:97:a8:af:d4:28:b3:f5:d4:23:74:ca:ae:79:
1b:ce:24:b4:d2:57:1b:d1:54:92:7b:8e:15:c5:11:bf:ac:55:
d3:dd:db:90:45:61:74:f0:f9:5e:88:65:44:29:0f:c7:d6:13:
64:9d:dc:b4:8d:70:ee:b6:ad:d9:2c:34:19:eb:59:12:2c:7a:
63:e5:3a:95:db:88:03:25:72:63:3f:b9:ce:f9:4d:2e:d4:ec:
b0:30:b3:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUR2akaJw1WL8qymFCcNznqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlZTMyMDhlODE4ZGQ3NGMwZDZiNDNkOTI3ZWEwZDE4OTNi
ZWQ2NTAwHhcNMjUwMjE3MDMwMDMyWhcNMjUwMjE4MDMwMDMyWjAzMTEwLwYDVQQD
EyhhNTAzMzEwMzMwMWYwZTQ1MmVjMzYxNjkyYTJhY2M0Y2U1MTExYzQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3S/DPXDj1CHaPK0HbrNGZZwd2w7
baQUV4mAGqy0zThZYxoO/6qaZKC+fRgxHCV/JU+Sikzw39xva+HUHDuEBectvXje
gDw18IMPJTLa7/YlxB16CyoDJCDPsrE6AQh9X0mtzWjCdWOCqBhY7lOs1vDhvbiS
y/n+hBQFerrfy/4GrMamuOB8YRupFDlDKuIgA0BM0LWnveLHPcq0pDp8CNgmPD+t
1LykIUISC5rpM+GsblEHUkxJz866iiXO3jDJ8RqcAwCeCi476/GgCKzAv9iklkOj
WWW1vOhiqHiXgPrNNir4CULYq5RJG6H6n8gfhXGUPQtPBvOCIsZXnC9jQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKUDMQMwHw5FLsNhaSoqzEzlERxGMB8GA1UdIwQY
MBaAFH7jII6BjddMDWtD2SfqDRiTvtZQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnVNZ2pvR04xMHdOYTBQWkotb05HSk8tMWxBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9hNGE4N2EtNGY3ZC00MGJkLWIxZjUt
ZmY0YTk5NzgzYWI0LzEvZnVNZ2pvR04xMHdOYTBQWkotb05HSk8tMWxBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9hNGE4N2EtNGY3ZC00MGJkLWIxZjUtZmY0YTk5NzgzYWI0
LzEvZnVNZ2pvR04xMHdOYTBQWkotb05HSk8tMWxBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACPrUpgoP
rXe9lNy4ZdeVkEACZRAcIkrEI5DBtHMOaZUNkOxqYRyBr+0d0+ICdDlyuGbf9AY/
+QF4DfFYBPMuJX8X7lj9veh2ZcCrSBAqFP3rFL/RqH+n6SVrhE2q3tiD4i/L/6EE
oh5AY9eSxspu2p6acINJM/PBhL0W3n5f71loQ+kVqs8j2vgui/IMDz4kb5rJWhkQ
lSXkH7xlh12NAXTLbipmzOaXqK/UKLP11CN0yq55G84ktNJXG9FUknuOFcURv6xV
093bkEVhdPD5XohlRCkPx9YTZJ3ctI1w7rat2Sw0GetZEix6Y+U6lduIAyVyYz+5
zvlNLtTssDCz1g==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:23:56 2025 by rpki-client