Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/58c87b-9aa8-48ea-85c3-06b163d359e0/1/13yGmob-yDN5Pu7azNSx98pEM-k.mft
File: 13yGmob-yDN5Pu7azNSx98pEM-k.mft (raw, json)
Hash identifier: tB/u/PyLd9ckFe9nSI0z/Y0WVseeT2Za1MTHb3T+N6c=
Subject key identifier: F1:1E:30:4F:2E:42:E9:2F:30:85:ED:E8:88:AC:24:77:3D:A2:48:AF
Authority key identifier: D7:7C:86:9A:86:FE:C8:33:79:3E:EE:DA:CC:D4:B1:F7:CA:44:33:E9
Certificate issuer: /CN=d77c869a86fec833793eeedaccd4b1f7ca4433e9
Certificate serial: 019637D22E8A41A24D018296234A56F6AEAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13yGmob-yDN5Pu7azNSx98pEM-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/58c87b-9aa8-48ea-85c3-06b163d359e0/1/13yGmob-yDN5Pu7azNSx98pEM-k.mft
Manifest number: 12D5
Signing time: Tue 15 Apr 2025 05:00:43 +0000
Manifest this update: Tue 15 Apr 2025 05:00:43 +0000
Manifest next update: Wed 16 Apr 2025 05:00:43 +0000
Files and hashes: 1: 13yGmob-yDN5Pu7azNSx98pEM-k.crl (hash: kcIf//o3o5pY/gHtu9OSPvE3bfRXHdDNcWxvAfaTs1U=)
2: Dcjqka0vRB55CJDqEWplWQ0em2k.roa (hash: QNtKb0wVTgOzXABHcHNsksEjhhvzQUkXJ+QzngWUeuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/58c87b-9aa8-48ea-85c3-06b163d359e0/1/13yGmob-yDN5Pu7azNSx98pEM-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/58c87b-9aa8-48ea-85c3-06b163d359e0/1/13yGmob-yDN5Pu7azNSx98pEM-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/13yGmob-yDN5Pu7azNSx98pEM-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:37:d2:2e:8a:41:a2:4d:01:82:96:23:4a:56:f6:ae:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d77c869a86fec833793eeedaccd4b1f7ca4433e9
Validity
Not Before: Apr 15 05:00:43 2025 GMT
Not After : Apr 16 05:00:43 2025 GMT
Subject: CN=f11e304f2e42e92f3085ede888ac24773da248af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:39:a7:27:8a:0d:61:0e:7f:99:83:96:67:22:
cc:58:bf:c9:31:ec:00:96:54:cd:ea:b2:36:8a:97:
7e:01:c4:81:79:b3:41:02:42:ec:cd:da:9d:93:18:
ff:a5:7c:34:71:35:a8:b1:49:3c:bb:06:66:55:06:
ce:a0:1d:1f:ed:cc:6c:e8:9d:71:17:e5:15:c6:f0:
d5:5e:05:41:05:8d:50:10:73:53:a5:45:7f:24:07:
b4:ec:24:b4:2c:fe:5a:72:4a:46:fb:c3:99:78:63:
32:02:b3:d1:31:b1:4d:1f:39:78:d3:72:a9:1f:09:
7b:4a:23:0e:1f:1d:fa:7f:43:d0:49:86:01:49:c4:
9b:3e:a7:f7:cf:c2:69:25:70:65:14:d9:aa:a0:6e:
d1:1f:be:c3:c9:2c:a6:99:58:88:13:84:d9:1d:66:
10:ee:9d:d9:fd:3c:73:ec:20:0e:28:cd:b4:47:97:
8f:56:11:03:3c:3e:be:64:68:dd:ee:a0:38:e4:e2:
58:8b:10:a3:63:a9:6d:df:ce:b4:85:e6:13:6e:23:
ca:30:26:c8:23:cf:0a:4f:b8:b8:33:5d:1d:0e:69:
d5:72:c3:8d:f4:b4:da:2b:b4:dc:c2:2f:a9:6c:1a:
6b:41:54:b0:33:ca:db:99:80:be:e1:02:db:44:3f:
33:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:1E:30:4F:2E:42:E9:2F:30:85:ED:E8:88:AC:24:77:3D:A2:48:AF
X509v3 Authority Key Identifier:
keyid:D7:7C:86:9A:86:FE:C8:33:79:3E:EE:DA:CC:D4:B1:F7:CA:44:33:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13yGmob-yDN5Pu7azNSx98pEM-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/58c87b-9aa8-48ea-85c3-06b163d359e0/1/13yGmob-yDN5Pu7azNSx98pEM-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/58c87b-9aa8-48ea-85c3-06b163d359e0/1/13yGmob-yDN5Pu7azNSx98pEM-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:07:cf:71:56:33:40:44:31:8e:c1:c4:40:ca:5d:27:5b:4c:
ad:e5:ac:fc:9a:a1:ba:53:6b:37:74:3b:a6:89:0b:12:9a:29:
d9:86:9e:d1:6f:1c:55:67:b1:7b:f5:13:de:f5:33:48:2d:37:
53:97:bf:57:c8:f7:62:38:9a:81:9d:f2:23:6f:65:ae:5d:4d:
8c:77:99:34:14:ae:07:24:cf:3e:09:4a:4a:37:b1:e7:ab:a9:
13:3c:33:e5:92:90:09:c3:70:51:5b:ba:de:e1:2c:e1:87:2f:
d6:e1:96:f6:e2:4d:3c:42:16:8c:9d:43:35:c0:f5:38:63:b7:
02:07:d1:e8:3a:1b:2a:d9:b6:e9:12:8d:ff:b6:ec:23:19:ed:
28:f4:66:5f:dd:9c:25:06:d8:61:9e:5c:7b:0b:de:fe:64:98:
b3:18:50:4c:83:39:ed:b2:52:c8:0a:4c:74:ce:6d:89:be:82:
1f:fa:8c:32:66:26:44:2d:7b:06:75:fa:e5:55:0d:9c:a1:9c:
4a:f4:2a:0a:25:ae:1e:e5:a8:26:d9:8b:0c:c0:7b:1b:c1:d3:
dd:0d:84:bf:f3:a1:28:dd:9d:65:2d:07:a9:12:2a:0a:72:79:
2d:17:cd:f1:0f:96:76:1b:77:63:47:7f:9a:b6:41:76:30:71:
31:3c:50:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 11:39:41 2025 by rpki-client