Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.mft
File: 13mWjmbtvqNy75W6or9okThWekA.mft (raw, json)
Hash identifier: QnccQCBQi26Lqv47N48gWnXIpBsHxLlat6A6RCmuL78=
Subject key identifier: 16:AD:30:02:D3:66:42:E8:8C:08:CB:C9:80:2A:A4:8D:55:14:0E:0A
Authority key identifier: D7:79:96:8E:66:ED:BE:A3:72:EF:95:BA:A2:BF:68:91:38:56:7A:40
Certificate issuer: /CN=d779968e66edbea372ef95baa2bf689138567a40
Certificate serial: 019A71B7E63958B974E9738E8B7A5242DADC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13mWjmbtvqNy75W6or9okThWekA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 07:01:08 +0000
Manifest this update: Tue 11 Nov 2025 07:01:08 +0000
Manifest next update: Wed 12 Nov 2025 07:01:08 +0000
Files and hashes: 1: 13mWjmbtvqNy75W6or9okThWekA.crl (hash: GVSFgKfFjpqwjk2bl+caNYT4FdJHZSVanpskQMrmRwM=)
2: I4emCne_29V28uUFcYz5hu_Rezg.roa (hash: 96USF7uc276n2Rs/poozBmGnwe39xgiKf2HQGb9xcQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.mft
rsync://rpki.ripe.net/repository/DEFAULT/13mWjmbtvqNy75W6or9okThWekA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:e6:39:58:b9:74:e9:73:8e:8b:7a:52:42:da:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d779968e66edbea372ef95baa2bf689138567a40
Validity
Not Before: Nov 11 07:01:08 2025 GMT
Not After : Nov 12 07:01:08 2025 GMT
Subject: CN=16ad3002d36642e88c08cbc9802aa48d55140e0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:43:59:b8:b4:b0:8e:3d:71:ce:1a:66:35:e3:
d1:cd:0b:75:09:85:db:26:94:bf:1d:58:9b:4a:d8:
3e:cc:c3:3f:6e:7b:51:d8:92:e3:f6:d4:c2:4f:8c:
03:5f:4b:f0:2d:bb:d1:2d:39:48:8b:6a:53:cd:99:
56:48:f5:7a:da:53:35:d7:a1:e6:66:f9:d1:9f:11:
83:27:4d:89:67:d1:65:89:a0:27:29:cf:09:5b:73:
92:a3:56:97:e9:f8:91:be:70:b9:99:48:77:27:2f:
9c:5e:75:6c:9b:d2:db:b2:20:f3:0b:d1:38:4d:e9:
03:7a:6e:90:de:50:d9:54:11:7b:18:ca:05:9a:29:
3d:af:f1:67:ea:42:3f:03:10:b3:5a:93:69:cc:e8:
23:18:d0:4d:10:78:0d:b2:67:f3:17:cc:86:60:73:
95:30:6b:58:0a:0a:a7:66:6e:b1:b6:06:17:85:02:
78:d7:a2:5f:35:45:b7:c8:e2:c6:fc:46:19:65:70:
ef:83:d3:1a:56:78:74:e0:43:aa:2a:41:93:e9:c3:
9a:41:34:c5:07:63:20:43:56:1f:21:b9:6c:96:32:
f4:9a:76:b7:23:d3:af:cc:81:66:a9:c3:04:52:87:
ae:58:96:a4:88:3e:a1:0b:08:87:62:b9:9d:bf:3c:
97:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:AD:30:02:D3:66:42:E8:8C:08:CB:C9:80:2A:A4:8D:55:14:0E:0A
X509v3 Authority Key Identifier:
keyid:D7:79:96:8E:66:ED:BE:A3:72:EF:95:BA:A2:BF:68:91:38:56:7A:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13mWjmbtvqNy75W6or9okThWekA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:7a:71:68:79:f4:c4:1d:a2:f2:41:e8:b9:2a:fc:0e:e5:76:
b9:41:93:a7:d1:61:98:1a:1c:bc:22:f7:e5:aa:8c:77:ad:ee:
71:96:05:58:d8:58:03:99:9f:65:d9:99:00:c6:9e:5b:4f:a5:
86:11:b7:d4:cf:0e:e0:41:a9:9d:82:0e:a9:71:6d:33:e2:91:
2f:0c:db:83:2a:d8:97:50:65:fc:a1:6f:ab:26:a4:f8:a5:f0:
80:af:51:5b:eb:2a:99:38:d9:8a:39:a7:cf:ca:17:1b:2d:77:
41:15:f1:ca:24:2a:93:ab:a7:22:cd:9c:f5:77:bb:83:6d:22:
ca:71:ce:9d:2b:62:b5:bb:40:18:84:cd:0f:98:56:bc:a9:15:
0c:d3:d4:4d:cc:ea:8f:6d:a0:ad:9d:8f:77:db:2a:8f:a2:fe:
25:ca:97:8b:c7:0e:6e:06:ae:43:96:15:23:87:9e:6e:e5:2a:
24:85:75:15:67:11:2c:12:48:db:1b:e2:a6:34:d5:45:72:93:
62:0b:03:b0:27:3f:26:4a:db:1d:31:51:28:35:1c:20:a4:d0:
e5:5d:ce:ef:31:1d:0c:6f:27:7e:48:e4:8d:1b:8a:86:d5:bd:
74:2f:dd:4f:51:9d:c3:d4:c2:20:ec:74:7b:74:70:d1:2c:22:
f8:61:4b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:49:33 2025 by rpki-client