Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.mft
File: 13EApGzEauiWvcLg4HTjBVq4hns.mft (raw, json)
Hash identifier: uH03VeT5fKiPGErV5vMazrmHeewFAWvbiY45skaoLu0=
Subject key identifier: 26:EF:29:12:8C:14:DC:64:37:F6:5E:63:98:18:62:0B:7F:B3:C1:E5
Authority key identifier: D7:71:00:A4:6C:C4:6A:E8:96:BD:C2:E0:E0:74:E3:05:5A:B8:86:7B
Certificate issuer: /CN=d77100a46cc46ae896bdc2e0e074e3055ab8867b
Certificate serial: 0198530D3CA77C3A253E6DDA52EDEC647513
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13EApGzEauiWvcLg4HTjBVq4hns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.mft
Manifest number: 0AC1
Signing time: Mon 28 Jul 2025 22:00:32 +0000
Manifest this update: Mon 28 Jul 2025 22:00:32 +0000
Manifest next update: Tue 29 Jul 2025 22:00:32 +0000
Files and hashes: 1: 13EApGzEauiWvcLg4HTjBVq4hns.crl (hash: dxAx7uofzucQppyTKbTH7pIPqzDJbINikb1UmCzbZUY=)
2: 6MSYGKF8IeOAnuWHzZZC0qhgq04.roa (hash: pb27wRmWoWlrx/SmVVrzytomA3OBU87y85i5bwHixqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.mft
rsync://rpki.ripe.net/repository/DEFAULT/13EApGzEauiWvcLg4HTjBVq4hns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0d:3c:a7:7c:3a:25:3e:6d:da:52:ed:ec:64:75:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d77100a46cc46ae896bdc2e0e074e3055ab8867b
Validity
Not Before: Jul 28 22:00:32 2025 GMT
Not After : Jul 29 22:00:32 2025 GMT
Subject: CN=26ef29128c14dc6437f65e639818620b7fb3c1e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4a:b2:ea:1d:d5:a7:2c:25:9a:76:2f:31:74:
72:60:32:c7:c4:f5:51:8a:bd:0c:d7:10:6c:24:db:
b2:b5:59:ad:68:36:53:84:a6:10:37:9b:f3:59:6a:
02:6b:4a:1e:4e:dc:88:65:df:24:37:d9:a0:28:45:
79:96:dc:ee:70:55:de:f6:a8:90:6d:02:11:f6:2b:
2e:ef:ac:7c:5a:1c:81:0c:ed:13:3e:e3:38:2c:4c:
1a:25:94:da:8e:a1:b7:51:33:5c:d0:5c:b5:f8:13:
4a:e8:94:c1:e8:7a:f3:f5:30:14:62:8c:a0:3c:ff:
8d:36:b0:e7:fb:a5:ec:94:52:09:14:fe:fa:9b:71:
df:c7:ec:45:8f:07:07:87:4f:d4:bc:64:f9:0c:48:
10:e7:4a:28:b6:88:23:96:a0:30:70:1f:9b:90:19:
ea:a0:c7:21:0a:d7:05:98:78:60:ae:2a:0a:dc:4c:
f6:57:94:81:77:7c:0a:01:0b:1d:7b:9a:fa:11:56:
57:ea:b2:b1:1c:56:3d:c8:d3:47:a8:e7:ed:84:92:
f4:76:65:07:b3:d1:11:e1:36:56:b6:27:8e:bd:74:
d3:38:7c:4c:25:cc:e6:fe:31:6f:29:7d:5b:3e:ed:
f3:13:a1:51:d1:6d:99:94:e5:ba:91:ad:05:f3:4d:
79:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:EF:29:12:8C:14:DC:64:37:F6:5E:63:98:18:62:0B:7F:B3:C1:E5
X509v3 Authority Key Identifier:
keyid:D7:71:00:A4:6C:C4:6A:E8:96:BD:C2:E0:E0:74:E3:05:5A:B8:86:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13EApGzEauiWvcLg4HTjBVq4hns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:4f:15:41:f4:8a:7b:43:2c:a5:e5:87:2d:47:3d:50:a0:79:
6e:46:15:4d:18:5d:c3:8d:37:16:86:f5:95:c0:4d:8f:d0:d4:
95:b6:33:07:cb:ee:5b:85:4f:e5:7a:52:96:cb:97:72:98:ae:
fe:15:20:3b:34:00:40:27:84:ef:39:a3:3f:b5:c2:b6:c2:f6:
ce:00:6d:19:41:c1:08:c2:65:f3:56:52:96:d2:5a:b8:db:17:
43:53:9b:57:0a:af:66:ba:63:ef:7b:4f:bd:bd:82:6b:9a:1f:
9b:41:76:bc:b1:e5:74:17:39:5e:ea:f6:e4:35:fb:5f:a0:04:
1d:bd:c1:ef:33:ab:b4:27:8b:3a:1b:83:24:40:64:7a:59:4f:
73:c3:e6:e1:96:dd:b5:9a:5c:5b:e1:8c:f2:8c:6a:4e:1e:61:
dc:11:1f:45:36:09:8e:fc:e3:8d:83:9f:4e:c0:c6:24:44:9f:
c2:2d:0c:d2:15:a3:e9:dd:5e:8b:e4:28:3d:c2:65:f4:4a:19:
3c:95:9f:73:e5:74:2a:f0:12:d3:9d:47:32:00:83:0f:6a:15:
c4:19:99:29:67:ed:58:04:9d:03:3c:ea:55:be:91:c8:49:d9:
ea:8c:6a:48:2b:52:81:89:a4:89:d0:9e:f0:79:8b:7a:05:fc:
f0:db:45:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhTDTynfDolPm3aUu3sZHUTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NzEwMGE0NmNjNDZhZTg5NmJkYzJlMGUwNzRlMzA1NWFi
ODg2N2IwHhcNMjUwNzI4MjIwMDMyWhcNMjUwNzI5MjIwMDMyWjAzMTEwLwYDVQQD
EygyNmVmMjkxMjhjMTRkYzY0MzdmNjVlNjM5ODE4NjIwYjdmYjNjMWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0qy6h3VpywlmnYvMXRyYDLHxPVR
ir0M1xBsJNuytVmtaDZThKYQN5vzWWoCa0oeTtyIZd8kN9mgKEV5ltzucFXe9qiQ
bQIR9isu76x8WhyBDO0TPuM4LEwaJZTajqG3UTNc0Fy1+BNK6JTB6Hrz9TAUYoyg
PP+NNrDn+6XslFIJFP76m3Hfx+xFjwcHh0/UvGT5DEgQ50ootogjlqAwcB+bkBnq
oMchCtcFmHhgrioK3Ez2V5SBd3wKAQsde5r6EVZX6rKxHFY9yNNHqOfthJL0dmUH
s9ER4TZWtieOvXTTOHxMJczm/jFvKX1bPu3zE6FR0W2ZlOW6ka0F8015hQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCbvKRKMFNxkN/ZeY5gYYgt/s8HlMB8GA1UdIwQY
MBaAFNdxAKRsxGrolr3C4OB04wVauIZ7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTNFQXBHekVhdWlXdmNMZzRIVGpCVnE0aG5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8zNmUzODItMmI2Mi00NGRjLThmYjIt
ZGQ1MGJlMDY3NDAxLzEvMTNFQXBHekVhdWlXdmNMZzRIVGpCVnE0aG5zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni8zNmUzODItMmI2Mi00NGRjLThmYjItZGQ1MGJlMDY3NDAx
LzEvMTNFQXBHekVhdWlXdmNMZzRIVGpCVnE0aG5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmU8VQfSK
e0MspeWHLUc9UKB5bkYVTRhdw403Fob1lcBNj9DUlbYzB8vuW4VP5XpSlsuXcpiu
/hUgOzQAQCeE7zmjP7XCtsL2zgBtGUHBCMJl81ZSltJauNsXQ1ObVwqvZrpj73tP
vb2Ca5ofm0F2vLHldBc5Xur25DX7X6AEHb3B7zOrtCeLOhuDJEBkellPc8Pm4Zbd
tZpcW+GM8oxqTh5h3BEfRTYJjvzjjYOfTsDGJESfwi0M0hWj6d1ei+QoPcJl9EoZ
PJWfc+V0KvAS051HMgCDD2oVxBmZKWftWASdAzzqVb6RyEnZ6oxqSCtSgYmkidCe
8HmLegX88NtFQw==
-----END CERTIFICATE-----
Generated at Tue Jul 29 04:10:12 2025 by rpki-client