Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/58c87b-9aa8-48ea-85c3-06b163d359e0/1/13yGmob-yDN5Pu7azNSx98pEM-k.mft
File: 13yGmob-yDN5Pu7azNSx98pEM-k.mft (raw, json)
Hash identifier: j/1l7fWHGAfL487ZXsjhOo4W6kUj5G6r9ydwjixIL1k=
Subject key identifier: 11:59:60:68:7A:A0:B9:4C:7A:63:DA:F2:C1:5A:2A:88:9D:C3:77:4D
Authority key identifier: D7:7C:86:9A:86:FE:C8:33:79:3E:EE:DA:CC:D4:B1:F7:CA:44:33:E9
Certificate issuer: /CN=d77c869a86fec833793eeedaccd4b1f7ca4433e9
Certificate serial: 01984708FEF8D51EB1B6BF5A106602660783
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13yGmob-yDN5Pu7azNSx98pEM-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/58c87b-9aa8-48ea-85c3-06b163d359e0/1/13yGmob-yDN5Pu7azNSx98pEM-k.mft
Manifest number: 13E6
Signing time: Sat 26 Jul 2025 14:00:28 +0000
Manifest this update: Sat 26 Jul 2025 14:00:28 +0000
Manifest next update: Sun 27 Jul 2025 14:00:28 +0000
Files and hashes: 1: 13yGmob-yDN5Pu7azNSx98pEM-k.crl (hash: cwwQ/5BDV4rW1aQLX8mfTMntQIX4myC4428ktvQEW0Y=)
2: Dcjqka0vRB55CJDqEWplWQ0em2k.roa (hash: QNtKb0wVTgOzXABHcHNsksEjhhvzQUkXJ+QzngWUeuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/58c87b-9aa8-48ea-85c3-06b163d359e0/1/13yGmob-yDN5Pu7azNSx98pEM-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/58c87b-9aa8-48ea-85c3-06b163d359e0/1/13yGmob-yDN5Pu7azNSx98pEM-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/13yGmob-yDN5Pu7azNSx98pEM-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:08:fe:f8:d5:1e:b1:b6:bf:5a:10:66:02:66:07:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d77c869a86fec833793eeedaccd4b1f7ca4433e9
Validity
Not Before: Jul 26 14:00:28 2025 GMT
Not After : Jul 27 14:00:28 2025 GMT
Subject: CN=115960687aa0b94c7a63daf2c15a2a889dc3774d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:cf:22:2c:4c:e7:ea:06:5a:f8:fa:ae:71:2f:
4d:18:14:c2:b5:71:8e:db:f8:eb:e2:9a:e9:d3:6e:
dd:66:39:31:ea:56:a6:ff:61:92:8d:e6:1a:32:cc:
8b:aa:d2:ee:76:7f:04:19:64:d8:6f:73:bd:da:51:
fa:eb:cf:c8:03:01:e9:9c:ef:1c:29:7f:7b:4c:93:
9c:67:dc:ba:5e:fb:ef:51:a3:d7:a4:8b:9d:ae:be:
d1:1a:76:c3:6d:53:8a:ce:6e:70:fb:bc:0e:7a:fd:
9e:19:d3:a2:af:42:04:30:d9:60:90:46:0d:d9:a7:
9f:08:26:71:ba:46:8f:41:b2:29:39:61:36:22:66:
2e:5c:ae:d5:dd:d6:3a:9f:1f:2f:d2:04:d7:93:13:
81:f9:45:81:aa:ab:eb:5c:35:8f:95:1e:78:4e:f9:
5d:08:a0:b9:11:35:ee:b1:ff:b6:1c:ed:79:2b:bb:
7f:b9:0d:60:25:31:c3:b7:89:27:c8:91:32:b3:98:
f3:eb:02:53:aa:e3:03:16:62:0a:88:b4:db:7d:ed:
c7:03:77:96:62:00:af:19:70:db:09:21:69:65:fa:
a2:9e:e2:7e:9c:7a:9f:0a:3b:b8:40:47:28:5a:5f:
81:37:98:72:ef:e9:97:94:65:e0:cf:3c:17:11:c9:
31:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:59:60:68:7A:A0:B9:4C:7A:63:DA:F2:C1:5A:2A:88:9D:C3:77:4D
X509v3 Authority Key Identifier:
keyid:D7:7C:86:9A:86:FE:C8:33:79:3E:EE:DA:CC:D4:B1:F7:CA:44:33:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13yGmob-yDN5Pu7azNSx98pEM-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/58c87b-9aa8-48ea-85c3-06b163d359e0/1/13yGmob-yDN5Pu7azNSx98pEM-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/58c87b-9aa8-48ea-85c3-06b163d359e0/1/13yGmob-yDN5Pu7azNSx98pEM-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:ae:37:24:92:14:8a:0a:bd:c1:08:f9:a9:3f:bf:c6:20:69:
ee:ae:6e:1b:79:e4:b6:27:a2:b8:6e:af:35:4a:c7:11:ac:e9:
24:0e:46:86:ea:7b:a9:da:f6:46:99:94:69:61:70:0f:74:de:
ce:a9:29:96:5a:a7:8e:6f:01:ce:64:de:b7:e2:11:6b:7f:2e:
aa:a9:d6:98:58:3e:9d:4a:04:3d:77:5e:69:fe:c4:fc:63:45:
71:7a:43:0d:63:0b:f7:c1:0f:7d:45:67:5a:c4:31:58:30:66:
9f:44:f1:4c:26:5d:c0:c4:9f:3c:18:fb:93:fe:2f:2c:3c:47:
cd:92:6d:04:cc:00:6e:01:eb:66:4c:85:f6:1a:2d:55:59:2c:
f3:ee:f3:d8:3a:45:e3:84:6b:cd:8d:34:f7:ec:cd:db:62:b9:
f6:63:43:2d:94:61:b8:2e:6d:2b:21:01:f3:d2:0d:46:36:ae:
e3:41:94:39:a2:85:64:37:57:cd:26:94:3b:df:2d:30:67:d1:
71:dd:75:58:c5:29:4c:93:98:45:d6:cd:22:7d:53:6a:69:ef:
ab:e2:8f:38:b7:2c:9b:92:80:87:d1:ff:62:8f:49:2f:89:67:
87:9b:bb:22:fd:18:5f:06:94:d7:e1:90:bc:5e:df:93:2a:ec:
3c:07:c5:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:53:45 2025 by rpki-client