Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.mft
File: 13EApGzEauiWvcLg4HTjBVq4hns.mft (raw, json)
Hash identifier: XKdO5/cQI6cRGipTOjG1PZEOB++HP8S9w2Is0rbcIws=
Subject key identifier: DC:06:32:19:AD:AF:18:BA:59:FF:B7:F3:55:E4:D3:95:16:FC:85:BF
Authority key identifier: D7:71:00:A4:6C:C4:6A:E8:96:BD:C2:E0:E0:74:E3:05:5A:B8:86:7B
Certificate issuer: /CN=d77100a46cc46ae896bdc2e0e074e3055ab8867b
Certificate serial: 019A0B5CFDDA127119B7CE2E0929EF226D8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13EApGzEauiWvcLg4HTjBVq4hns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.mft
Manifest number: 0BA5
Signing time: Wed 22 Oct 2025 10:00:34 +0000
Manifest this update: Wed 22 Oct 2025 10:00:34 +0000
Manifest next update: Thu 23 Oct 2025 10:00:34 +0000
Files and hashes: 1: 13EApGzEauiWvcLg4HTjBVq4hns.crl (hash: wOZrXU+PsqeH4xzlBLEtiHcYejRVkunRQzZhrIDCcOM=)
2: 6MSYGKF8IeOAnuWHzZZC0qhgq04.roa (hash: pb27wRmWoWlrx/SmVVrzytomA3OBU87y85i5bwHixqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.mft
rsync://rpki.ripe.net/repository/DEFAULT/13EApGzEauiWvcLg4HTjBVq4hns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 10:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0b:5c:fd:da:12:71:19:b7:ce:2e:09:29:ef:22:6d:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d77100a46cc46ae896bdc2e0e074e3055ab8867b
Validity
Not Before: Oct 22 10:00:34 2025 GMT
Not After : Oct 23 10:00:34 2025 GMT
Subject: CN=dc063219adaf18ba59ffb7f355e4d39516fc85bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:1b:30:45:a6:b5:be:62:01:01:f8:7c:a0:76:
de:2d:ab:52:a5:b5:46:a8:6b:f8:a9:a7:98:c5:71:
c8:b7:8f:01:89:f2:77:74:08:56:13:d5:b5:13:71:
04:04:93:fd:59:01:61:0a:c1:94:d5:ec:13:7f:57:
a2:7e:ef:60:b6:af:4a:73:43:9e:1c:10:2f:e6:70:
be:75:e6:67:8a:97:db:f3:96:2a:e6:97:73:61:8b:
67:3a:af:40:25:a0:ea:3d:f3:57:0b:74:ab:e8:ea:
93:2f:4f:b4:69:a0:bc:bc:ed:65:82:c6:6c:7e:4b:
43:45:7a:15:2b:7a:e5:12:6e:cf:f8:35:ed:a8:19:
8b:09:88:a7:a5:83:c2:a3:0a:96:1c:b1:d4:7d:ac:
17:49:fa:2a:8a:fb:48:15:c3:22:9c:f2:68:a8:59:
8c:c4:bb:74:c8:5b:79:b6:50:28:88:75:ad:1c:dd:
ef:39:09:45:c4:74:8a:23:29:45:46:ed:04:f8:4d:
9a:c4:1c:d4:2f:44:f9:a2:de:00:f4:d2:42:bb:3f:
f6:36:d3:5e:d3:ed:55:95:32:2c:f3:f6:d9:54:91:
ff:5f:4f:03:67:77:f5:f7:0a:29:16:21:9b:9d:68:
0a:eb:21:d5:f4:b2:67:c0:16:98:e3:42:48:51:e3:
c9:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:06:32:19:AD:AF:18:BA:59:FF:B7:F3:55:E4:D3:95:16:FC:85:BF
X509v3 Authority Key Identifier:
keyid:D7:71:00:A4:6C:C4:6A:E8:96:BD:C2:E0:E0:74:E3:05:5A:B8:86:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13EApGzEauiWvcLg4HTjBVq4hns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:9e:66:de:56:2b:34:9c:67:cf:e8:6e:3e:84:e0:40:ef:7f:
2c:c6:a0:fa:d4:e9:ef:5e:99:ea:ea:d5:6a:c1:13:56:14:d8:
7c:c5:d0:5f:46:24:07:a3:19:fb:40:bf:d1:60:f4:93:9e:40:
e0:27:1b:70:22:e1:e6:1b:54:3c:75:db:15:79:91:a5:f5:6a:
44:c7:ff:64:ba:73:d4:4d:19:d9:d5:83:3c:e2:a4:ec:c4:7b:
90:9c:5c:e1:e9:4b:6b:a6:9d:38:13:ec:33:ad:6a:11:51:9a:
29:31:9f:9e:fc:01:27:66:3a:98:e4:97:c8:ae:ce:61:5d:ed:
85:61:6c:9f:1f:65:59:e0:60:40:6a:96:be:76:29:46:dd:1d:
82:10:6d:88:39:ca:24:9f:6a:2e:e3:f3:7a:14:4a:64:e6:fc:
b4:60:24:00:33:ba:3e:c3:87:7e:93:11:9a:82:0a:52:25:0a:
0f:64:29:0e:e5:66:a2:f4:a1:21:ad:e3:20:2b:6b:46:2b:14:
bd:29:2e:42:b6:9e:da:a8:0b:e3:aa:16:91:27:88:eb:bd:f1:
18:81:c3:36:ce:87:6d:96:ca:dd:2c:14:cf:de:f6:57:8b:fc:
46:f1:1c:32:8e:0d:31:8d:dd:f5:8a:22:95:df:32:33:c3:ae:
5f:31:23:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 16:33:40 2025 by rpki-client