Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.mft
File: 13eUOzQRiOnNLpPeKIsz_-BBx9I.mft (raw, json)
Hash identifier: oTNrl4TZ1jwWFivqCmcyAm569h6Cn6s+HESqKOGQE+U=
Subject key identifier: 85:04:E6:54:09:8C:30:A0:D2:FD:BD:80:4C:DB:D0:7B:1B:E0:2B:69
Authority key identifier: D7:77:94:3B:34:11:88:E9:CD:2E:93:DE:28:8B:33:FF:E0:41:C7:D2
Certificate issuer: /CN=d777943b341188e9cd2e93de288b33ffe041c7d2
Certificate serial: 019A71B7B1872F03E516DB5BE9202FE6B52E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13eUOzQRiOnNLpPeKIsz_-BBx9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 07:00:55 +0000
Manifest this update: Tue 11 Nov 2025 07:00:55 +0000
Manifest next update: Wed 12 Nov 2025 07:00:55 +0000
Files and hashes: 1: 13eUOzQRiOnNLpPeKIsz_-BBx9I.crl (hash: 3RhYY0VKQ+w0QoeNwC8QIswdvi0SOS1Zu8iz1knkHS8=)
2: f0gof4jxw94Oa83YFTdbTbKjLPk.roa (hash: TTuzPsw9kpuOO/S82uUhytdELCayKcLt12jYeRdVVIg=)
3: fI_1hDVc0AIsq5nMQmL9xfz1kXA.roa (hash: 89mtvnCyTjJUBdmS9eZxdF32JISfZjUl73RykEZkqVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/13eUOzQRiOnNLpPeKIsz_-BBx9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:b1:87:2f:03:e5:16:db:5b:e9:20:2f:e6:b5:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d777943b341188e9cd2e93de288b33ffe041c7d2
Validity
Not Before: Nov 11 07:00:55 2025 GMT
Not After : Nov 12 07:00:55 2025 GMT
Subject: CN=8504e654098c30a0d2fdbd804cdbd07b1be02b69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b6:e7:30:6f:39:63:e6:ac:18:6a:80:e5:f6:
1b:a3:42:a5:f4:00:e6:22:83:f5:0c:3c:ee:2f:ca:
35:5e:80:fc:e2:fb:ca:46:b0:7e:4b:8d:e4:84:df:
71:a4:8e:c3:a9:4d:5e:c3:56:2d:a0:59:60:cc:33:
90:fb:49:9b:62:ca:09:cb:fc:c0:d6:24:f5:69:45:
54:f2:79:00:70:0e:85:34:b5:2b:2d:e6:70:26:61:
76:bf:b3:85:1c:16:d5:b0:64:50:77:9f:cf:0e:c7:
a3:28:e0:23:68:86:91:e0:53:aa:67:62:31:33:0c:
a2:76:64:52:2b:2d:38:c3:6a:a6:5e:69:f5:3d:8d:
6a:6a:ce:29:1c:24:ed:37:59:e1:de:84:c8:d3:56:
65:75:56:d6:a3:45:f3:a7:3d:84:86:66:62:de:47:
b2:64:82:43:8d:ad:4c:a8:c5:ea:93:28:68:cc:4d:
79:3a:f1:72:79:80:df:66:21:e3:74:8f:79:ae:08:
2a:8b:16:29:25:5e:10:78:4c:56:d5:17:08:f2:72:
6e:56:08:61:03:b5:d1:97:08:70:f0:88:68:2d:43:
95:a6:c5:e3:b6:af:37:00:9f:7d:7e:79:b2:64:1f:
34:09:4b:63:f1:66:32:46:d2:d6:7b:5d:70:86:fc:
e0:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:04:E6:54:09:8C:30:A0:D2:FD:BD:80:4C:DB:D0:7B:1B:E0:2B:69
X509v3 Authority Key Identifier:
keyid:D7:77:94:3B:34:11:88:E9:CD:2E:93:DE:28:8B:33:FF:E0:41:C7:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13eUOzQRiOnNLpPeKIsz_-BBx9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:ab:dc:34:ea:4f:a3:3c:70:6d:30:61:ca:e5:2a:3c:dc:22:
13:4a:5d:a8:40:bc:5d:de:29:1b:3b:a0:d9:52:e1:31:fc:b7:
c7:61:6c:c9:c7:6f:aa:df:69:d9:44:b8:79:f5:64:47:97:9b:
2e:e6:71:5f:1d:63:42:2b:83:b1:a4:38:f3:45:ea:16:bf:e9:
ed:e3:f3:66:91:4c:0f:d4:b3:eb:46:e3:ff:3d:15:f2:fd:7f:
71:5f:c9:1e:ec:c5:14:6d:00:0e:60:85:ba:3e:21:b1:cb:10:
8c:9e:1b:70:51:4e:d5:04:af:89:97:8e:b2:e7:d3:c8:b1:5b:
c7:f0:85:63:a4:23:52:d0:e0:47:67:a4:b7:25:c2:c3:c5:91:
b2:f9:42:7e:2a:8d:20:de:d5:79:b1:50:ff:65:69:ab:8d:6d:
50:5b:4c:cf:e2:f1:a5:55:d0:a4:46:cf:82:2e:96:99:73:2b:
d2:0c:25:1b:62:0f:0e:07:0c:29:af:2f:c7:31:3d:44:9f:d8:
05:65:dc:56:64:7f:c9:c1:3d:dc:5f:52:41:4d:26:c2:44:b5:
d2:96:c9:f7:86:ee:ce:36:09:69:3b:a2:6d:9d:24:cc:f9:ad:
6f:b7:c4:ec:a6:01:ba:bb:4a:fd:2d:69:04:62:e9:71:47:22:
67:70:18:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:16:04 2025 by rpki-client