Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.mft
File: 13mWjmbtvqNy75W6or9okThWekA.mft (raw, json)
Hash identifier: OQk40q0vD0tSlGhjKMDBlrEheNn29Hu7SakXMbpnqUk=
Subject key identifier: 26:DD:24:32:F8:C5:FF:96:78:C0:B6:9E:F3:4F:E5:6C:A3:D1:E5:C4
Authority key identifier: D7:79:96:8E:66:ED:BE:A3:72:EF:95:BA:A2:BF:68:91:38:56:7A:40
Certificate issuer: /CN=d779968e66edbea372ef95baa2bf689138567a40
Certificate serial: 019921B0FFF33B30AF7355CF1DD995AEAD88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13mWjmbtvqNy75W6or9okThWekA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 01:01:11 +0000
Manifest this update: Sun 07 Sep 2025 01:01:11 +0000
Manifest next update: Mon 08 Sep 2025 01:01:11 +0000
Files and hashes: 1: 13mWjmbtvqNy75W6or9okThWekA.crl (hash: /Oml5maJ2iTkkm3ML3w8kuEN9GsGxj1FEan/jZOt12I=)
2: I4emCne_29V28uUFcYz5hu_Rezg.roa (hash: 96USF7uc276n2Rs/poozBmGnwe39xgiKf2HQGb9xcQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.mft
rsync://rpki.ripe.net/repository/DEFAULT/13mWjmbtvqNy75W6or9okThWekA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b0:ff:f3:3b:30:af:73:55:cf:1d:d9:95:ae:ad:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d779968e66edbea372ef95baa2bf689138567a40
Validity
Not Before: Sep 7 01:01:11 2025 GMT
Not After : Sep 8 01:01:11 2025 GMT
Subject: CN=26dd2432f8c5ff9678c0b69ef34fe56ca3d1e5c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f8:87:d3:4e:1c:0a:d6:7a:44:89:1e:60:a8:
47:ff:91:18:63:39:29:06:1e:2b:75:c7:e5:eb:13:
c3:3b:5d:03:ef:50:3b:d7:90:40:d5:83:1a:df:30:
60:e5:02:63:33:2d:f8:42:8b:a9:4d:be:56:78:a7:
c2:1b:81:e7:c0:70:a3:08:5b:c1:a8:0b:b9:47:ee:
fb:98:3e:65:3a:23:66:48:cd:20:28:a0:26:12:0b:
23:70:d5:c8:44:b1:26:be:10:95:eb:d0:cd:97:d0:
55:66:b2:bd:2a:78:65:17:b8:fc:c7:f3:1f:4c:04:
ca:d7:c3:1b:26:f5:a1:9e:f9:b4:ed:76:48:26:40:
c2:25:77:7b:68:27:00:e1:80:3d:eb:aa:bc:30:81:
fb:07:3c:16:45:8f:19:80:32:f9:52:6f:28:2f:47:
fd:93:94:a3:6c:6b:b8:39:6a:07:9c:24:0b:b6:99:
2e:74:e5:7e:ba:60:31:6b:51:4b:82:e5:fb:a4:e9:
f7:28:08:5d:5c:ab:f4:d1:25:83:42:9a:0c:f7:63:
6a:e1:6b:0b:3d:bf:bb:61:e1:38:fc:dc:e3:b6:40:
77:e3:74:16:b2:7b:70:c1:b1:ba:95:e9:b1:c4:ab:
60:29:15:b6:d4:4c:6a:51:6e:92:23:4d:44:e2:75:
2d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:DD:24:32:F8:C5:FF:96:78:C0:B6:9E:F3:4F:E5:6C:A3:D1:E5:C4
X509v3 Authority Key Identifier:
keyid:D7:79:96:8E:66:ED:BE:A3:72:EF:95:BA:A2:BF:68:91:38:56:7A:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13mWjmbtvqNy75W6or9okThWekA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:33:50:82:82:e3:46:2e:14:c0:3a:3f:4f:46:93:02:da:e6:
e1:55:06:b7:be:f4:6e:d2:b5:d8:52:6a:db:ef:da:8a:32:09:
29:ec:01:79:5e:7e:8a:e1:89:73:34:3e:20:32:2a:bb:46:76:
e4:d4:50:ad:76:0b:0d:a3:54:f5:fb:fa:a4:2e:1d:77:6d:94:
89:1f:6c:b4:42:d6:1a:b3:76:f1:b7:ed:c2:f1:73:e0:8a:87:
9e:1a:7b:67:f0:14:dc:0b:48:ae:91:57:67:4c:ec:14:9a:7f:
37:f6:43:2a:b5:7b:95:40:1d:f1:ae:28:50:62:f6:0e:70:c8:
76:61:0c:a3:e4:50:70:58:5a:b2:8c:2e:5c:fa:e9:36:7b:cc:
0c:8f:ac:2e:9f:ba:28:72:57:07:9c:f8:4b:57:ca:db:70:0d:
94:ca:f6:df:9d:d1:53:80:88:09:91:3a:bf:c1:4c:fd:06:72:
db:df:c1:30:40:41:27:3b:d0:02:5b:d9:22:8e:79:18:32:13:
fc:31:e4:85:f9:3b:c3:55:28:96:48:48:fe:a0:8c:17:aa:93:
8f:7b:d1:e1:83:43:cd:c0:69:27:a3:7a:10:4c:a2:08:87:3c:
2b:9f:0e:54:87:83:a4:64:d0:d6:81:7b:42:f5:e3:86:cd:cb:
d1:6f:83:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:07:34 2025 by rpki-client