Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.mft
File: fuMgjoGN10wNa0PZJ-oNGJO-1lA.mft (raw, json)
Hash identifier: lZwiKHuKdA7PsFcE0CbP8/svoEUB5FrzXiuqbGG/pgw=
Subject key identifier: 29:AA:C9:1E:B9:C9:51:3F:BD:7D:3F:02:E3:19:12:1E:1B:E5:9F:E3
Authority key identifier: 7E:E3:20:8E:81:8D:D7:4C:0D:6B:43:D9:27:EA:0D:18:93:BE:D6:50
Certificate issuer: /CN=7ee3208e818dd74c0d6b43d927ea0d1893bed650
Certificate serial: 0199FB0EF7CFE731D8B195EC3D60CFC9B52C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fuMgjoGN10wNa0PZJ-oNGJO-1lA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.mft
Manifest number: 13B4
Signing time: Sun 19 Oct 2025 06:01:26 +0000
Manifest this update: Sun 19 Oct 2025 06:01:26 +0000
Manifest next update: Mon 20 Oct 2025 06:01:26 +0000
Files and hashes: 1: fuMgjoGN10wNa0PZJ-oNGJO-1lA.crl (hash: QSOhK1dwRWypsBp9LyH8Kj41+aPrL2hYuOgs8i5w1+8=)
2: utLJ7YGi1SD6bf2E3cIfMW0icz0.roa (hash: bwpJCF2pXOs/NsitTdh/ToVpeQtbypYmGT2uF/B4Dn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.mft
rsync://rpki.ripe.net/repository/DEFAULT/fuMgjoGN10wNa0PZJ-oNGJO-1lA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0e:f7:cf:e7:31:d8:b1:95:ec:3d:60:cf:c9:b5:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ee3208e818dd74c0d6b43d927ea0d1893bed650
Validity
Not Before: Oct 19 06:01:26 2025 GMT
Not After : Oct 20 06:01:26 2025 GMT
Subject: CN=29aac91eb9c9513fbd7d3f02e319121e1be59fe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e4:ed:0e:31:b6:14:8e:e7:91:d3:ae:50:de:
df:9c:e9:af:08:f0:c0:f1:ef:bc:f7:ba:f7:b8:ea:
25:2f:4f:85:08:5b:69:31:ca:fe:12:df:98:65:c8:
aa:43:0e:05:89:ba:1f:5c:9f:1b:93:58:7c:7e:0d:
52:e4:13:66:36:e0:08:eb:b7:00:e0:a8:c7:84:fb:
77:9a:8e:ea:06:86:b1:d2:a5:bc:30:27:a5:43:a2:
77:97:36:f2:02:d2:a8:24:73:45:a5:e8:68:ce:2c:
27:ed:18:84:f5:15:ee:cc:21:ca:38:14:a5:3e:21:
b6:ad:6f:5a:96:ab:80:7e:d5:87:33:57:b0:e3:4e:
f2:42:53:d8:de:02:f3:f6:57:d2:a5:de:45:f8:34:
d0:29:c5:b7:b1:62:5f:e0:ae:68:fc:99:87:f3:50:
b5:17:94:96:36:2e:9e:d8:d6:a2:82:e3:59:dc:6f:
3f:06:c4:36:23:57:d9:fb:f7:ab:8d:b1:35:b0:e5:
a1:50:f3:a5:9f:2b:b4:a2:d8:71:ed:83:0f:7e:0d:
e1:ae:69:5b:c8:d6:cf:92:75:e4:c9:6e:3a:24:46:
2f:f7:f2:67:1b:e5:20:78:0f:89:92:80:e6:b5:53:
26:76:8b:d9:86:6e:09:9c:a4:99:bf:11:a1:ac:86:
0c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:AA:C9:1E:B9:C9:51:3F:BD:7D:3F:02:E3:19:12:1E:1B:E5:9F:E3
X509v3 Authority Key Identifier:
keyid:7E:E3:20:8E:81:8D:D7:4C:0D:6B:43:D9:27:EA:0D:18:93:BE:D6:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fuMgjoGN10wNa0PZJ-oNGJO-1lA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:a5:17:e6:5c:9e:13:23:5b:93:89:a0:bd:f1:f8:c8:a2:a8:
9a:be:ca:06:b9:23:db:3c:10:ca:71:2c:cf:30:15:c9:fb:ce:
6b:6b:0f:ed:67:0a:e3:fe:b5:b8:fe:45:bc:4e:15:4a:41:1b:
80:35:41:9d:30:c6:78:d9:b8:a4:af:00:7a:2a:f2:b3:f5:48:
d0:50:a1:13:5a:a6:ec:56:76:73:50:9e:6a:cc:cc:bc:c5:56:
09:82:26:9d:24:4a:50:6b:51:05:ce:e0:02:48:b5:74:37:e8:
61:41:c1:c8:26:05:05:77:0e:e8:98:a0:7a:7c:fe:08:f1:2b:
b4:10:56:70:d1:f6:e2:a1:af:13:76:7e:fc:27:4c:40:b0:42:
6f:ee:ab:ad:7b:84:89:f3:f2:a0:bd:c5:6c:32:1e:ac:d8:aa:
3a:01:4a:9d:1b:bd:1f:bd:88:e5:ec:f1:cd:ba:cf:aa:fc:9e:
f1:ac:55:e3:7a:a2:ed:6e:4e:a5:0a:4f:fb:53:fb:18:b1:07:
38:2b:20:62:85:74:32:34:56:c3:c5:5e:b4:f2:76:92:d3:8e:
e9:d4:53:58:93:fe:61:83:d3:72:8c:60:cf:f0:e2:22:e3:ff:
8d:6b:4a:49:40:a0:71:bf:49:e7:94:60:cd:3b:3b:7e:02:f1:
15:fb:0f:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7DvfP5zHYsZXsPWDPybUsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlZTMyMDhlODE4ZGQ3NGMwZDZiNDNkOTI3ZWEwZDE4OTNi
ZWQ2NTAwHhcNMjUxMDE5MDYwMTI2WhcNMjUxMDIwMDYwMTI2WjAzMTEwLwYDVQQD
EygyOWFhYzkxZWI5Yzk1MTNmYmQ3ZDNmMDJlMzE5MTIxZTFiZTU5ZmUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+TtDjG2FI7nkdOuUN7fnOmvCPDA
8e+897r3uOolL0+FCFtpMcr+Et+YZciqQw4FibofXJ8bk1h8fg1S5BNmNuAI67cA
4KjHhPt3mo7qBoax0qW8MCelQ6J3lzbyAtKoJHNFpehoziwn7RiE9RXuzCHKOBSl
PiG2rW9alquAftWHM1ew407yQlPY3gLz9lfSpd5F+DTQKcW3sWJf4K5o/JmH81C1
F5SWNi6e2NaiguNZ3G8/BsQ2I1fZ+/erjbE1sOWhUPOlnyu0othx7YMPfg3hrmlb
yNbPknXkyW46JEYv9/JnG+UgeA+JkoDmtVMmdovZhm4JnKSZvxGhrIYM8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCmqyR65yVE/vX0/AuMZEh4b5Z/jMB8GA1UdIwQY
MBaAFH7jII6BjddMDWtD2SfqDRiTvtZQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnVNZ2pvR04xMHdOYTBQWkotb05HSk8tMWxBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9hNGE4N2EtNGY3ZC00MGJkLWIxZjUt
ZmY0YTk5NzgzYWI0LzEvZnVNZ2pvR04xMHdOYTBQWkotb05HSk8tMWxBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9hNGE4N2EtNGY3ZC00MGJkLWIxZjUtZmY0YTk5NzgzYWI0
LzEvZnVNZ2pvR04xMHdOYTBQWkotb05HSk8tMWxBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs6UX5lye
EyNbk4mgvfH4yKKomr7KBrkj2zwQynEszzAVyfvOa2sP7WcK4/61uP5FvE4VSkEb
gDVBnTDGeNm4pK8Aeirys/VI0FChE1qm7FZ2c1CeaszMvMVWCYImnSRKUGtRBc7g
Aki1dDfoYUHByCYFBXcO6Jigenz+CPErtBBWcNH24qGvE3Z+/CdMQLBCb+6rrXuE
ifPyoL3FbDIerNiqOgFKnRu9H72I5ezxzbrPqvye8axV43qi7W5OpQpP+1P7GLEH
OCsgYoV0MjRWw8VetPJ2ktOO6dRTWJP+YYPTcoxgz/DiIuP/jWtKSUCgcb9J55Rg
zTs7fgLxFfsPPw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:10 2025 by rpki-client