Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.mft
File: 13eUOzQRiOnNLpPeKIsz_-BBx9I.mft (raw, json)
Hash identifier: /jR66kTSg3fkTgLOJElSUQiHDy4SpOO/DNIrhF/y6kw=
Subject key identifier: D6:CF:11:4D:D5:02:B4:56:15:F3:14:96:4A:8A:D1:92:06:F7:AA:85
Authority key identifier: D7:77:94:3B:34:11:88:E9:CD:2E:93:DE:28:8B:33:FF:E0:41:C7:D2
Certificate issuer: /CN=d777943b341188e9cd2e93de288b33ffe041c7d2
Certificate serial: 019921B272FCA7E12C0B4F36380F1B6E09BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13eUOzQRiOnNLpPeKIsz_-BBx9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 01:02:46 +0000
Manifest this update: Sun 07 Sep 2025 01:02:46 +0000
Manifest next update: Mon 08 Sep 2025 01:02:46 +0000
Files and hashes: 1: 13eUOzQRiOnNLpPeKIsz_-BBx9I.crl (hash: rSjap1OXriBeM2DQ+flvEHX5rax2fxh0/5ZwkrnZraw=)
2: f0gof4jxw94Oa83YFTdbTbKjLPk.roa (hash: TTuzPsw9kpuOO/S82uUhytdELCayKcLt12jYeRdVVIg=)
3: fI_1hDVc0AIsq5nMQmL9xfz1kXA.roa (hash: 89mtvnCyTjJUBdmS9eZxdF32JISfZjUl73RykEZkqVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/13eUOzQRiOnNLpPeKIsz_-BBx9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b2:72:fc:a7:e1:2c:0b:4f:36:38:0f:1b:6e:09:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d777943b341188e9cd2e93de288b33ffe041c7d2
Validity
Not Before: Sep 7 01:02:46 2025 GMT
Not After : Sep 8 01:02:46 2025 GMT
Subject: CN=d6cf114dd502b45615f314964a8ad19206f7aa85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:41:b5:14:16:75:f8:c7:fb:a1:35:11:95:69:
49:73:14:a7:6c:4f:ea:33:3d:4b:f2:70:25:03:07:
b3:68:2e:08:51:b8:d2:a4:fd:e5:6a:8c:ba:e7:75:
78:bf:75:d3:42:d9:5f:8b:69:e1:d7:a0:ec:d4:a0:
49:a0:07:48:e7:e8:f5:a3:43:74:06:9b:91:77:58:
96:17:3d:0d:5a:05:b8:a7:de:29:92:a4:ab:0b:0b:
78:0d:0c:1d:ce:d0:c5:14:21:74:eb:dd:5c:6b:0f:
d4:47:7b:8f:d4:df:5b:b4:59:53:6f:e1:5f:31:d3:
7d:ec:02:89:e2:c5:f0:5c:8d:34:d0:6d:8b:13:ac:
2c:50:d4:59:9d:62:89:9e:50:9c:a8:3a:77:73:a4:
3a:0b:05:2e:c5:12:b0:d5:7d:76:fb:82:6b:46:bf:
78:c6:55:96:df:0a:9e:96:fb:99:24:37:58:cd:c7:
29:a3:cb:67:a7:36:98:7d:8a:3e:3b:a3:eb:9c:b4:
58:2c:a8:72:a4:b6:2b:76:ac:af:ca:c2:b1:82:c5:
a8:f9:5b:5f:88:de:88:1f:35:31:fc:59:2f:fa:8d:
02:2e:25:eb:b3:99:c0:5a:d2:e1:19:4f:66:81:35:
5c:1c:49:79:8d:ef:f0:80:67:0e:79:73:09:7c:25:
78:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:CF:11:4D:D5:02:B4:56:15:F3:14:96:4A:8A:D1:92:06:F7:AA:85
X509v3 Authority Key Identifier:
keyid:D7:77:94:3B:34:11:88:E9:CD:2E:93:DE:28:8B:33:FF:E0:41:C7:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13eUOzQRiOnNLpPeKIsz_-BBx9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:df:12:bd:96:a0:de:bc:c0:97:6b:bf:dd:3f:2f:97:a9:c7:
0d:a4:1f:ed:a6:c2:d2:fe:93:11:58:91:34:11:a1:12:ee:54:
fb:a9:9a:c0:af:60:32:c6:24:fc:e8:20:1e:a7:cf:44:02:3a:
de:b9:3a:ec:ee:c8:5e:24:e2:c0:ac:6b:e9:5e:44:e6:52:e8:
e4:fa:60:68:16:e6:f5:4a:1e:95:06:2d:67:f0:17:61:3d:9a:
95:e1:89:1d:74:ec:96:5a:3c:5e:46:a9:b6:54:3c:87:68:6d:
34:57:dc:fb:af:ba:9c:a3:b1:3f:80:76:01:9a:9b:94:d2:26:
94:99:e8:fe:be:83:cc:ab:9b:1a:1f:15:6a:17:97:f3:91:8f:
f8:aa:3e:1f:fb:e8:0f:4c:c9:1e:ca:db:d6:86:5b:8b:8f:77:
9a:67:e4:e6:6b:7d:79:33:42:fd:d5:47:ed:94:13:8c:e2:a8:
d7:28:65:4d:d2:cf:0d:9e:db:95:81:d3:55:d0:32:38:ca:fe:
a9:24:16:58:71:15:97:8b:e4:07:0e:fb:9f:ea:9d:d3:99:2a:
22:94:d0:23:63:48:36:9f:15:d5:d4:bb:55:f3:c4:cc:95:6e:
eb:48:f7:a6:6f:0a:01:61:17:3a:f0:82:94:08:b1:46:05:d8:
b2:81:00:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:54:00 2025 by rpki-client