Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/58c87b-9aa8-48ea-85c3-06b163d359e0/1/13yGmob-yDN5Pu7azNSx98pEM-k.mft
File: 13yGmob-yDN5Pu7azNSx98pEM-k.mft (raw, json)
Hash identifier: /kEDfA7oRw/MUti/09MxncXa3c+Zm0P7eDDwymsgozw=
Subject key identifier: 8F:DD:79:A2:79:1E:3F:20:40:43:33:EE:4F:B6:19:95:4C:02:0D:2A
Authority key identifier: D7:7C:86:9A:86:FE:C8:33:79:3E:EE:DA:CC:D4:B1:F7:CA:44:33:E9
Certificate issuer: /CN=d77c869a86fec833793eeedaccd4b1f7ca4433e9
Certificate serial: 019A7149ACF3412EDD172652558C19042C9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13yGmob-yDN5Pu7azNSx98pEM-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/58c87b-9aa8-48ea-85c3-06b163d359e0/1/13yGmob-yDN5Pu7azNSx98pEM-k.mft
Manifest number: 1505
Signing time: Tue 11 Nov 2025 05:00:45 +0000
Manifest this update: Tue 11 Nov 2025 05:00:45 +0000
Manifest next update: Wed 12 Nov 2025 05:00:45 +0000
Files and hashes: 1: 13yGmob-yDN5Pu7azNSx98pEM-k.crl (hash: 68VD9ACWtH84Ob3CR2jjo8x89UOETagbZYwfEqKFGH0=)
2: Dcjqka0vRB55CJDqEWplWQ0em2k.roa (hash: QNtKb0wVTgOzXABHcHNsksEjhhvzQUkXJ+QzngWUeuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/58c87b-9aa8-48ea-85c3-06b163d359e0/1/13yGmob-yDN5Pu7azNSx98pEM-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/58c87b-9aa8-48ea-85c3-06b163d359e0/1/13yGmob-yDN5Pu7azNSx98pEM-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/13yGmob-yDN5Pu7azNSx98pEM-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:ac:f3:41:2e:dd:17:26:52:55:8c:19:04:2c:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d77c869a86fec833793eeedaccd4b1f7ca4433e9
Validity
Not Before: Nov 11 05:00:45 2025 GMT
Not After : Nov 12 05:00:45 2025 GMT
Subject: CN=8fdd79a2791e3f20404333ee4fb619954c020d2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:68:0b:22:58:d0:cd:5e:63:68:fe:ed:d9:ca:
c4:e5:31:89:15:4a:05:df:99:3c:a6:05:6b:31:60:
d9:36:f9:2b:20:a0:6a:52:61:c8:11:05:b4:29:d9:
78:0b:fe:53:5f:30:b2:69:04:a0:c4:68:c7:5b:56:
de:83:5b:e2:e0:a1:46:9d:39:42:d4:6d:0b:f3:5e:
4c:3b:bd:62:fa:00:28:48:e9:f2:c6:ab:30:08:d7:
12:d4:82:21:b0:38:f2:12:3a:2b:a4:9c:fa:9b:d2:
3b:0b:25:7d:0f:77:4c:14:72:4c:70:07:99:bc:21:
0f:fb:ed:a0:40:2f:f1:9a:99:88:69:66:c6:7e:de:
20:d9:3b:c5:4e:f9:c8:4b:af:c9:43:9b:91:9f:51:
db:cc:d6:61:0f:3f:08:18:2b:85:51:a3:ef:b4:63:
ba:72:a5:51:26:96:31:4d:9b:d2:3c:d4:ba:78:58:
a1:95:35:bb:d4:a4:1d:8b:b7:d6:71:64:78:e7:c9:
fb:37:2a:f9:1f:dd:da:84:d3:54:ef:33:84:f8:b7:
25:2f:91:36:60:9a:1b:8b:29:57:71:31:1a:12:76:
60:11:bf:0f:ea:dc:e0:31:24:60:41:55:15:5b:ca:
96:09:e0:6f:53:b7:3e:d0:d7:c9:c7:2c:fc:ab:a4:
63:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:DD:79:A2:79:1E:3F:20:40:43:33:EE:4F:B6:19:95:4C:02:0D:2A
X509v3 Authority Key Identifier:
keyid:D7:7C:86:9A:86:FE:C8:33:79:3E:EE:DA:CC:D4:B1:F7:CA:44:33:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13yGmob-yDN5Pu7azNSx98pEM-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/58c87b-9aa8-48ea-85c3-06b163d359e0/1/13yGmob-yDN5Pu7azNSx98pEM-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/58c87b-9aa8-48ea-85c3-06b163d359e0/1/13yGmob-yDN5Pu7azNSx98pEM-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:02:72:d4:27:60:58:a4:1a:d8:f5:9b:b9:1a:bc:ef:bb:7f:
e9:06:05:20:dd:7d:8e:80:1c:4d:5f:3f:58:66:26:59:ee:bd:
02:71:34:ab:d8:5f:9b:b9:ad:d3:b0:86:77:1f:34:c0:22:b1:
6a:5a:05:5a:14:5d:17:da:81:54:ee:84:94:d5:d5:63:12:9c:
26:69:ba:4f:49:dd:16:8d:f5:38:f7:4f:e5:65:e8:02:8a:2a:
7f:db:77:e1:28:e6:85:7a:33:ef:74:42:5c:e8:08:df:6f:fb:
2f:6d:24:b4:8f:cd:92:b0:79:70:d0:f5:27:f0:0b:13:1f:94:
ab:1e:ef:bf:73:ec:27:08:37:ed:e1:60:6a:c1:58:38:e2:fe:
14:5b:d5:00:fb:d4:d5:5f:16:b2:10:1f:e6:a0:5d:b2:03:eb:
e6:b9:01:8a:bc:c2:af:45:8b:71:a2:93:d8:af:75:2a:6b:89:
74:b5:a5:07:8e:a1:94:db:bc:75:8b:11:81:27:ae:ff:b0:67:
ed:77:4a:3f:23:a9:87:ce:2d:7e:74:01:8d:be:af:18:50:ea:
ed:b3:32:2d:48:79:6e:01:3b:8c:1a:7e:2c:f0:82:4e:fd:14:
37:36:8f:47:60:4d:06:66:38:83:fa:05:d5:29:fc:50:3b:1c:
5e:d1:a6:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:17:33 2025 by rpki-client