Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/13eW4WtWXXJzZphsycqcpj0aTlg.mft
File: 13eW4WtWXXJzZphsycqcpj0aTlg.mft (raw, json)
Hash identifier: 7fbeBKxaLK+vFXexBoj7qvgNjkJDrwzmw80LclkKwqo=
Subject key identifier: 2B:9C:B6:69:28:5F:B3:EB:D3:F9:5E:30:AB:F4:E8:9E:FA:DB:47:89
Authority key identifier: D7:77:96:E1:6B:56:5D:72:73:66:98:6C:C9:CA:9C:A6:3D:1A:4E:58
Certificate issuer: /CN=d77796e16b565d727366986cc9ca9ca63d1a4e58
Certificate serial: 01984B54028B8B97F844DB9C7F702AFB60C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13eW4WtWXXJzZphsycqcpj0aTlg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/13eW4WtWXXJzZphsycqcpj0aTlg.mft
Manifest number: 0323
Signing time: Sun 27 Jul 2025 10:00:53 +0000
Manifest this update: Sun 27 Jul 2025 10:00:53 +0000
Manifest next update: Mon 28 Jul 2025 10:00:53 +0000
Files and hashes: 1: 13eW4WtWXXJzZphsycqcpj0aTlg.crl (hash: GgPzuhh+/Yn7lV8zWsuqQTZV2vPbq7q/2qXgWNssPpk=)
2: NWVCp8Y4Yrwt2l5OQ2N28tAv5Vs.roa (hash: F9PS4+2YWZWixXX0triEKsctJpMJlaT/3wjK6G1EJGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/13eW4WtWXXJzZphsycqcpj0aTlg.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/13eW4WtWXXJzZphsycqcpj0aTlg.mft
rsync://rpki.ripe.net/repository/DEFAULT/13eW4WtWXXJzZphsycqcpj0aTlg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:02:8b:8b:97:f8:44:db:9c:7f:70:2a:fb:60:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d77796e16b565d727366986cc9ca9ca63d1a4e58
Validity
Not Before: Jul 27 10:00:53 2025 GMT
Not After : Jul 28 10:00:53 2025 GMT
Subject: CN=2b9cb669285fb3ebd3f95e30abf4e89efadb4789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5e:cd:4f:72:06:fe:9a:83:30:18:f5:41:dc:
01:b4:13:83:13:c2:ad:8e:93:a0:27:7f:2e:5a:9a:
f8:5f:2d:ff:46:13:e0:a3:d3:18:0c:c8:26:1d:d0:
c4:35:61:27:ef:62:f4:09:33:29:f9:29:da:2f:bd:
02:1b:d2:d0:e5:78:87:c4:0b:a1:56:32:9e:3c:7a:
2f:1a:8e:f0:03:a9:1f:2c:54:98:f9:5e:69:72:5e:
e4:a6:a7:3f:c5:6f:ed:e3:d8:74:16:fc:6b:d5:4e:
52:76:8e:bb:dd:f1:40:95:55:e6:c9:fa:6d:ad:fd:
54:4f:8a:92:fa:aa:45:da:23:52:72:d2:75:10:2c:
9c:a9:39:54:11:50:36:b6:67:c6:ba:08:44:a2:da:
35:0f:95:84:f6:7d:c4:f9:c4:f3:5f:d6:83:23:66:
b5:73:2b:02:2c:96:9b:c1:e1:d5:41:b1:03:b7:29:
bb:cd:38:5e:70:f1:f9:30:c4:8e:39:90:87:75:bf:
14:52:f6:e5:b9:d9:e1:df:36:0e:a7:03:78:aa:ba:
a9:b7:ff:69:7c:58:89:82:4d:b4:50:be:c9:f1:a8:
ff:db:e9:55:23:a9:51:62:96:d2:87:b7:13:65:bc:
15:0b:45:2e:68:33:65:27:ca:81:12:b7:f4:06:be:
ec:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:9C:B6:69:28:5F:B3:EB:D3:F9:5E:30:AB:F4:E8:9E:FA:DB:47:89
X509v3 Authority Key Identifier:
keyid:D7:77:96:E1:6B:56:5D:72:73:66:98:6C:C9:CA:9C:A6:3D:1A:4E:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13eW4WtWXXJzZphsycqcpj0aTlg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/13eW4WtWXXJzZphsycqcpj0aTlg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/13eW4WtWXXJzZphsycqcpj0aTlg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:19:c8:28:e3:a8:60:4e:4d:72:f2:43:6a:6e:88:11:dc:d6:
fc:5a:f4:e3:dd:04:27:cb:7b:98:0a:5c:ea:fc:ce:a1:1e:6c:
5c:ba:a7:02:9e:0a:15:ed:25:9a:76:71:0b:43:1d:8e:4b:f5:
a4:d7:f2:1c:a0:34:12:e2:ed:2e:ae:2f:94:36:3b:a7:f4:1a:
80:e7:b0:e6:68:bc:e9:53:3e:de:66:3a:35:d8:bb:36:c2:97:
22:f2:a6:cc:ae:cf:88:1e:ac:61:58:13:4e:81:68:e8:35:3e:
f7:18:0f:f4:33:bc:fe:86:a3:1d:87:11:91:f9:2b:62:dc:d9:
8d:13:b6:ee:cf:99:db:a7:f1:2b:cd:db:3c:fa:c5:a2:dc:38:
9e:b0:10:7e:31:19:f3:ac:32:0a:ee:6c:66:b6:85:d1:1c:5b:
21:c2:20:c5:8c:1f:db:79:98:fa:5a:69:ac:a2:c7:68:f0:76:
3c:33:28:56:a1:41:34:a9:f8:b7:8d:a8:1c:bb:86:45:47:72:
96:80:33:05:d8:6a:f8:df:bc:76:aa:ff:4a:cd:12:66:0d:ef:
60:54:b0:8b:a0:3f:0f:55:1f:45:03:b2:3c:6b:96:d1:ae:19:
a1:be:9a:39:5c:e3:8d:5f:4e:da:ac:32:57:a4:0d:19:ee:29:
b5:a0:81:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 16:48:11 2025 by rpki-client