Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.mft
File: fuMgjoGN10wNa0PZJ-oNGJO-1lA.mft (raw, json)
Hash identifier: RSZOWrwmtTv5adjwPTFYGcGaG6wSS5omFDoEb8lxTrs=
Subject key identifier: 2C:96:DD:3B:A4:DF:DE:4F:5B:5D:57:BA:F1:11:50:A2:C5:35:8C:9D
Authority key identifier: 7E:E3:20:8E:81:8D:D7:4C:0D:6B:43:D9:27:EA:0D:18:93:BE:D6:50
Certificate issuer: /CN=7ee3208e818dd74c0d6b43d927ea0d1893bed650
Certificate serial: 019A4E18B9CBE2A7294EA56A44961662DD52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fuMgjoGN10wNa0PZJ-oNGJO-1lA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.mft
Manifest number: 13DF
Signing time: Tue 04 Nov 2025 09:00:34 +0000
Manifest this update: Tue 04 Nov 2025 09:00:34 +0000
Manifest next update: Wed 05 Nov 2025 09:00:34 +0000
Files and hashes: 1: fuMgjoGN10wNa0PZJ-oNGJO-1lA.crl (hash: 844qdATcV9k4fRrgzLVGbhBZM+jVEpH/SVZPIcbaG+o=)
2: utLJ7YGi1SD6bf2E3cIfMW0icz0.roa (hash: bwpJCF2pXOs/NsitTdh/ToVpeQtbypYmGT2uF/B4Dn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.mft
rsync://rpki.ripe.net/repository/DEFAULT/fuMgjoGN10wNa0PZJ-oNGJO-1lA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:b9:cb:e2:a7:29:4e:a5:6a:44:96:16:62:dd:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ee3208e818dd74c0d6b43d927ea0d1893bed650
Validity
Not Before: Nov 4 09:00:34 2025 GMT
Not After : Nov 5 09:00:34 2025 GMT
Subject: CN=2c96dd3ba4dfde4f5b5d57baf11150a2c5358c9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e0:6d:8b:02:cc:62:52:b1:7d:d7:1b:3c:41:
0b:22:f3:7e:e5:93:53:2d:83:89:06:14:8d:a7:c7:
8f:74:c8:3b:55:76:ea:8d:0c:b6:43:d6:21:b7:12:
7f:22:5c:ea:2d:30:0f:c2:ec:22:e5:a4:93:d6:69:
aa:04:52:62:16:35:e8:09:b9:aa:04:fe:ae:dc:12:
39:e0:e4:fc:6f:b5:19:7b:66:d6:ef:f3:08:02:ca:
5f:c3:bc:9b:ea:bb:2a:8b:1e:66:c0:36:52:4b:d2:
bb:dd:9a:e5:71:e3:82:82:f2:7e:e6:86:c5:5a:1d:
4f:f9:a2:68:07:5c:70:9d:1a:87:af:00:c6:3c:d1:
ad:69:4f:11:f7:78:79:23:65:d3:e2:10:3d:1c:df:
f9:fd:7d:14:59:fa:ab:63:fb:16:97:ae:30:a3:5c:
1d:08:c2:66:35:ed:a0:6b:56:89:e0:ca:77:29:22:
4f:99:95:0a:a8:2f:b2:d6:0f:b9:af:15:eb:b7:2a:
06:26:9a:1b:16:b5:67:e2:65:80:63:8e:7e:d3:37:
83:2c:d6:bc:a1:c2:99:97:64:3b:52:29:6a:4f:aa:
3a:e9:99:7a:e9:69:2a:19:ad:45:72:3a:c4:a6:2f:
17:ef:73:81:bb:2b:1c:46:12:12:65:e5:f0:44:b3:
ae:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:96:DD:3B:A4:DF:DE:4F:5B:5D:57:BA:F1:11:50:A2:C5:35:8C:9D
X509v3 Authority Key Identifier:
keyid:7E:E3:20:8E:81:8D:D7:4C:0D:6B:43:D9:27:EA:0D:18:93:BE:D6:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fuMgjoGN10wNa0PZJ-oNGJO-1lA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:9d:bb:ee:ba:b5:1f:85:c5:30:d6:dc:78:23:8a:e3:9e:5f:
21:a2:b2:b0:d2:ed:02:2a:64:51:6b:98:b2:d5:d5:74:f4:36:
e4:2e:c1:bb:f2:8e:11:08:c1:b1:a2:7e:7c:17:7d:20:d8:f6:
63:b7:32:69:0d:73:e8:af:07:34:44:c4:52:4f:f7:8a:ec:ff:
58:df:18:c8:7b:3a:91:ff:58:ff:bb:cd:ae:01:07:1b:f9:48:
a1:5a:e2:75:9a:e2:10:87:51:52:24:9d:3d:cd:59:23:77:03:
8b:84:d6:6f:f6:03:ba:e5:a0:34:60:a0:c2:a6:1f:02:06:23:
e3:52:1e:a4:15:53:26:c1:b1:76:75:3f:25:4d:ea:19:51:c1:
61:c5:a4:ac:76:e9:a3:3f:e4:f0:74:d7:e2:dc:26:28:b5:4f:
c3:7d:d9:89:38:89:f2:09:91:b7:4f:66:c8:27:2c:48:a4:cc:
7d:e8:b8:f8:06:43:0e:d2:9e:f3:9f:a0:c1:87:6e:a5:e4:0b:
d7:44:90:54:41:1f:19:51:0a:be:ea:50:d2:75:e4:0b:08:60:
31:49:46:98:51:b7:ab:a3:47:e3:aa:c1:27:b3:45:94:a0:57:
0d:39:ca:ad:0d:2d:b5:2a:13:aa:45:71:c6:72:11:c6:c4:af:
86:a0:1c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:35 2025 by rpki-client