Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.mft
File: fuMgjoGN10wNa0PZJ-oNGJO-1lA.mft (raw, json)
Hash identifier: 1A1N5E36cfd4bL2BjN4Kbi6XvsUeoxl40PBtqV9S7xg=
Subject key identifier: 4A:4A:9D:4B:06:E1:5C:50:24:AE:10:C9:C0:FC:FC:77:49:E6:8E:A2
Authority key identifier: 7E:E3:20:8E:81:8D:D7:4C:0D:6B:43:D9:27:EA:0D:18:93:BE:D6:50
Certificate issuer: /CN=7ee3208e818dd74c0d6b43d927ea0d1893bed650
Certificate serial: 0197B9A177CBC2A770CD1C139A6953B6BF1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fuMgjoGN10wNa0PZJ-oNGJO-1lA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.mft
Manifest number: 1289
Signing time: Sun 29 Jun 2025 03:00:56 +0000
Manifest this update: Sun 29 Jun 2025 03:00:56 +0000
Manifest next update: Mon 30 Jun 2025 03:00:56 +0000
Files and hashes: 1: fuMgjoGN10wNa0PZJ-oNGJO-1lA.crl (hash: T7VspFgIYZQKYNkLWzKXMldu7RcMsjzFPIDYW+g2NgI=)
2: utLJ7YGi1SD6bf2E3cIfMW0icz0.roa (hash: bwpJCF2pXOs/NsitTdh/ToVpeQtbypYmGT2uF/B4Dn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.mft
rsync://rpki.ripe.net/repository/DEFAULT/fuMgjoGN10wNa0PZJ-oNGJO-1lA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 03:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:a1:77:cb:c2:a7:70:cd:1c:13:9a:69:53:b6:bf:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ee3208e818dd74c0d6b43d927ea0d1893bed650
Validity
Not Before: Jun 29 03:00:56 2025 GMT
Not After : Jun 30 03:00:56 2025 GMT
Subject: CN=4a4a9d4b06e15c5024ae10c9c0fcfc7749e68ea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ef:7b:91:35:f0:bd:b6:6e:97:41:a2:2c:08:
a1:26:12:12:83:25:41:cc:98:db:62:d7:0b:46:c2:
6d:f9:0d:7b:ea:ac:0f:b3:9a:ca:11:5b:ef:6e:66:
1c:ff:b9:f4:1a:7a:4f:f6:b1:f7:c8:bd:b3:06:f8:
4f:98:0d:8e:af:32:38:29:64:e1:8c:b0:e1:f4:83:
63:29:08:da:8c:22:dd:83:9e:49:a2:95:61:0a:9c:
4f:5d:4f:e8:e2:5a:fc:8e:2d:df:85:4a:54:ec:33:
d0:95:6b:fa:e4:d5:0f:68:ee:20:99:89:20:78:8c:
37:81:17:2a:ef:36:92:30:19:08:c7:03:75:86:7b:
b0:54:f3:db:d5:e2:cf:13:bc:e8:59:68:f6:24:22:
a6:d9:90:c4:59:86:0e:5f:16:68:1e:fb:b9:af:32:
a5:23:76:8d:d3:60:61:d1:36:66:5e:25:2e:de:19:
7e:a4:8d:a1:30:85:c7:3e:52:b3:31:41:b9:2e:10:
93:0c:8a:19:06:dd:e2:f0:7b:71:d1:df:fd:39:9d:
cb:7a:6b:90:95:22:3a:fb:da:e1:74:a7:ff:6b:d8:
34:71:b8:14:e0:0d:dd:9c:11:2f:14:7c:3b:5a:17:
c6:14:aa:ca:d9:09:dc:da:7e:7d:6d:77:eb:71:e9:
46:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:4A:9D:4B:06:E1:5C:50:24:AE:10:C9:C0:FC:FC:77:49:E6:8E:A2
X509v3 Authority Key Identifier:
keyid:7E:E3:20:8E:81:8D:D7:4C:0D:6B:43:D9:27:EA:0D:18:93:BE:D6:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fuMgjoGN10wNa0PZJ-oNGJO-1lA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:81:08:92:be:41:95:89:31:29:44:06:94:bd:0f:e4:0a:70:
74:f9:17:24:3e:27:ec:6c:b1:7e:48:de:f0:52:e2:12:45:85:
fe:44:1d:27:f6:27:51:8a:6b:dd:08:0c:3a:f4:5b:68:20:e1:
2d:66:99:4b:f6:72:03:c7:dd:a5:3b:0f:45:07:8e:1f:ee:71:
cd:80:78:6a:ff:83:73:f5:9a:67:93:c4:79:0a:ed:94:59:ea:
3a:8d:09:78:88:cb:39:fd:0c:21:24:8f:8d:20:22:e8:67:57:
a4:4f:5f:1b:c6:58:4a:05:b1:f8:c5:c2:d6:d3:79:b9:2f:b2:
54:1c:5f:68:bb:aa:49:f9:55:8d:09:31:6d:b0:08:da:ef:2e:
a6:76:d8:2c:9a:2b:05:22:12:74:ef:25:a8:82:55:7f:22:8e:
bc:53:53:16:eb:89:7e:4d:86:ef:d1:65:68:1c:ac:a8:dd:af:
4f:b4:4a:19:7f:92:12:b3:91:56:95:fc:d2:8f:c1:32:d6:24:
0d:73:a0:28:7b:4c:9c:6d:9d:c8:b8:ac:60:b5:1a:04:9e:1b:
25:00:06:f0:c3:da:8f:96:c4:1c:cd:fb:e5:16:cd:2d:d0:fa:
13:e9:48:72:28:76:80:32:b4:79:4b:ff:f7:7f:c5:2d:51:9e:
58:36:8e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:51:28 2025 by rpki-client