Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.mft
File: fuMgjoGN10wNa0PZJ-oNGJO-1lA.mft (raw, json)
Hash identifier: FlE0dXfWnFKx5gljWguHXTaVAxvgEH/7uOIwDd5EbAI=
Subject key identifier: 9A:EC:2B:6F:91:4D:1A:0F:07:D7:E0:1A:2A:DE:32:1F:36:99:7F:11
Authority key identifier: 7E:E3:20:8E:81:8D:D7:4C:0D:6B:43:D9:27:EA:0D:18:93:BE:D6:50
Certificate issuer: /CN=7ee3208e818dd74c0d6b43d927ea0d1893bed650
Certificate serial: 01968691992EB00995E3EECBA29467D75502
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fuMgjoGN10wNa0PZJ-oNGJO-1lA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.mft
Manifest number: 11EA
Signing time: Wed 30 Apr 2025 12:00:10 +0000
Manifest this update: Wed 30 Apr 2025 12:00:10 +0000
Manifest next update: Thu 01 May 2025 12:00:10 +0000
Files and hashes: 1: fuMgjoGN10wNa0PZJ-oNGJO-1lA.crl (hash: ETlRwvCfyDCwQURWqIG8nE+JbTKf5t2L8Vhv3WtDjCw=)
2: utLJ7YGi1SD6bf2E3cIfMW0icz0.roa (hash: bwpJCF2pXOs/NsitTdh/ToVpeQtbypYmGT2uF/B4Dn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.mft
rsync://rpki.ripe.net/repository/DEFAULT/fuMgjoGN10wNa0PZJ-oNGJO-1lA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:91:99:2e:b0:09:95:e3:ee:cb:a2:94:67:d7:55:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ee3208e818dd74c0d6b43d927ea0d1893bed650
Validity
Not Before: Apr 30 12:00:10 2025 GMT
Not After : May 1 12:00:10 2025 GMT
Subject: CN=9aec2b6f914d1a0f07d7e01a2ade321f36997f11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:49:78:96:75:3e:52:a4:b4:db:cf:0d:98:b9:
0c:7c:22:73:65:76:fc:25:69:14:19:57:90:92:26:
d9:00:9c:18:f7:96:65:6b:70:20:e9:11:04:28:27:
8b:31:c9:07:32:8a:4f:ef:59:30:ba:05:a4:51:2a:
d5:ca:e6:fa:1a:c5:65:82:f3:5b:8a:a5:0e:7d:5e:
81:e2:d8:cf:fa:94:5d:ac:83:76:13:b9:d8:6b:65:
5b:37:2d:34:b3:f3:b6:e6:26:f4:c1:f0:27:1d:5f:
b8:74:7a:96:2a:64:e9:7f:bf:ba:06:af:0d:be:04:
cd:22:a0:4c:8a:5a:7c:01:f4:54:d0:05:7d:53:4a:
85:09:53:aa:03:67:85:da:f7:e2:58:f6:83:00:d6:
38:64:40:ed:c8:31:7a:a4:ed:cc:a5:e2:ed:21:3d:
77:d8:1e:c0:03:80:8c:c1:95:28:4d:35:c8:91:dc:
fe:fc:29:f4:a8:0a:f6:51:a4:a8:7a:78:78:7c:90:
40:e4:31:fd:3f:86:cf:1f:60:3e:64:d6:a8:fe:89:
0d:de:f1:6e:af:3e:6a:34:44:5d:23:7d:15:2a:ff:
56:5e:4e:f9:6a:36:b4:4e:6c:99:5f:a2:8d:f6:a8:
08:44:98:25:1c:67:4f:b3:d5:84:26:43:5e:46:47:
df:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:EC:2B:6F:91:4D:1A:0F:07:D7:E0:1A:2A:DE:32:1F:36:99:7F:11
X509v3 Authority Key Identifier:
keyid:7E:E3:20:8E:81:8D:D7:4C:0D:6B:43:D9:27:EA:0D:18:93:BE:D6:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fuMgjoGN10wNa0PZJ-oNGJO-1lA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:d1:00:75:91:c4:53:1c:3e:68:c3:d2:b0:0b:72:82:6b:fc:
bf:45:e0:13:15:17:5f:d1:e2:09:70:db:c3:6c:00:ea:55:e0:
38:d2:74:83:f9:f9:0a:6d:53:5f:ce:76:5d:14:57:e0:08:3d:
20:64:0c:73:04:ef:13:6b:84:12:81:be:8a:31:47:db:ae:6b:
9b:9c:13:24:33:3a:c0:f5:04:62:60:98:c3:7e:20:fe:df:a8:
f6:6f:71:be:3f:e3:f6:a7:cb:e2:b8:3d:95:25:c7:fe:e5:d4:
2c:25:f9:ab:2e:b3:88:cc:6b:f7:ea:5b:22:a1:2f:f2:5d:17:
14:45:bf:63:24:ee:ef:52:2a:e3:18:1e:86:ef:b5:f8:5e:1c:
24:31:fb:99:03:33:40:dc:f9:a8:96:e2:f7:69:3e:42:b5:8a:
f2:93:31:b2:e2:fd:d0:b2:11:7b:3a:bb:cd:ec:3d:c0:31:c7:
b5:f4:f5:35:d5:ae:87:22:77:f5:9d:a5:69:1a:70:c9:b2:9b:
33:56:b5:1a:7e:26:9d:97:9b:58:a6:71:8c:0e:56:b2:6d:47:
b2:cd:15:fc:d9:48:44:57:85:95:68:09:83:e9:30:94:06:67:
f9:34:f2:b7:8d:32:f2:43:0b:91:f0:e0:b7:20:cc:04:01:a0:
7a:55:f0:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:46:35 2025 by rpki-client