Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/a284f7-aade-4168-a9d0-58be927f42e9/1/13j4yccHK3MEiPnjISjdiVveMtM.mft
File: 13j4yccHK3MEiPnjISjdiVveMtM.mft (raw, json)
Hash identifier: FjqSOLp1Q00l/1LXOR/t+2gIkdaE4sjVmotiSjYCoEc=
Subject key identifier: 1D:B8:B4:22:54:7F:C7:A7:4D:5B:EE:B5:C3:D4:BD:26:09:53:84:FC
Authority key identifier: D7:78:F8:C9:C7:07:2B:73:04:88:F9:E3:21:28:DD:89:5B:DE:32:D3
Certificate issuer: /CN=d778f8c9c7072b730488f9e32128dd895bde32d3
Certificate serial: 019A72CACE3CDA69E4FA2F9C9E63F8C7633E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13j4yccHK3MEiPnjISjdiVveMtM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/a284f7-aade-4168-a9d0-58be927f42e9/1/13j4yccHK3MEiPnjISjdiVveMtM.mft
Manifest number: 0739
Signing time: Tue 11 Nov 2025 12:01:24 +0000
Manifest this update: Tue 11 Nov 2025 12:01:24 +0000
Manifest next update: Wed 12 Nov 2025 12:01:24 +0000
Files and hashes: 1: 13j4yccHK3MEiPnjISjdiVveMtM.crl (hash: X9fMQcg5vuV3ykPIF4TPzR+6RSNt7pPLU51DujXbYM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/a284f7-aade-4168-a9d0-58be927f42e9/1/13j4yccHK3MEiPnjISjdiVveMtM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/a284f7-aade-4168-a9d0-58be927f42e9/1/13j4yccHK3MEiPnjISjdiVveMtM.mft
rsync://rpki.ripe.net/repository/DEFAULT/13j4yccHK3MEiPnjISjdiVveMtM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:ce:3c:da:69:e4:fa:2f:9c:9e:63:f8:c7:63:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d778f8c9c7072b730488f9e32128dd895bde32d3
Validity
Not Before: Nov 11 12:01:24 2025 GMT
Not After : Nov 12 12:01:24 2025 GMT
Subject: CN=1db8b422547fc7a74d5beeb5c3d4bd26095384fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4d:5b:a1:12:09:9d:43:88:c6:1e:ea:4e:c9:
c3:e1:91:1e:51:a7:b6:82:96:11:d0:ae:d6:bd:f7:
a4:6c:55:a6:b5:26:1c:75:d5:d6:d2:f2:4e:55:f2:
0c:4c:0c:cc:0a:fa:90:ac:c7:21:8e:a0:39:50:d8:
2c:d0:e3:4d:0b:30:fd:85:55:29:1a:66:ab:de:61:
02:06:fd:fe:7c:2c:eb:09:f8:d8:7f:6e:5e:a3:b3:
49:c8:5f:14:a8:b5:37:c9:75:b8:68:46:39:1f:79:
1d:77:d0:2f:be:2f:7c:d3:68:65:9d:d9:48:6c:5a:
55:3d:61:07:6d:9b:81:b6:8e:b6:c6:46:ac:30:c8:
00:a8:ec:f2:42:a8:f5:dd:75:0d:22:f1:2b:71:0e:
e4:81:d1:4f:25:2d:63:52:18:e2:16:cd:34:0b:6c:
7c:f7:55:c7:88:77:6a:9d:2e:28:34:f1:00:57:d5:
d3:28:23:7e:fa:58:8d:fc:51:db:73:ee:2c:6e:f0:
ca:e8:94:e1:b9:b5:6b:1b:26:c3:06:da:89:b3:97:
03:4e:bf:c6:3b:41:b7:81:d6:ee:63:77:82:44:a5:
bc:f1:bf:0f:9d:d6:8c:f3:70:4f:38:db:27:a4:b9:
ea:f8:25:4a:d8:19:46:81:ac:2a:c0:85:af:28:93:
4c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:B8:B4:22:54:7F:C7:A7:4D:5B:EE:B5:C3:D4:BD:26:09:53:84:FC
X509v3 Authority Key Identifier:
keyid:D7:78:F8:C9:C7:07:2B:73:04:88:F9:E3:21:28:DD:89:5B:DE:32:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13j4yccHK3MEiPnjISjdiVveMtM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/a284f7-aade-4168-a9d0-58be927f42e9/1/13j4yccHK3MEiPnjISjdiVveMtM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/a284f7-aade-4168-a9d0-58be927f42e9/1/13j4yccHK3MEiPnjISjdiVveMtM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:ff:e3:8f:78:be:74:53:aa:c3:34:51:0a:08:c5:dd:79:9c:
f5:aa:6f:1d:d7:a4:7e:f4:05:71:8a:1c:2d:94:6c:80:ba:03:
da:ee:4a:f2:bf:ee:0d:14:50:40:43:0d:6e:97:75:48:8b:6a:
18:52:e9:52:1b:00:0b:17:38:e8:eb:02:90:9b:07:65:f2:5d:
39:94:d4:a1:f2:46:29:4a:b4:e8:f4:6c:1c:40:74:e5:3f:6b:
46:2a:e5:5e:03:2c:92:f8:93:4f:61:5b:4d:84:2c:fd:45:87:
5d:ef:da:bd:a7:15:89:c6:ea:97:df:5b:f9:57:3e:9f:35:c0:
86:2f:11:4a:56:be:ec:6d:87:ff:af:fc:c1:80:51:2e:e4:af:
b4:f2:6c:70:81:2d:78:99:0b:53:5b:ae:b3:67:10:86:fc:89:
c3:fe:26:54:3a:19:d8:e1:0d:58:38:7c:0a:64:8b:aa:1f:f1:
0c:84:08:68:59:cc:44:e5:f0:bd:82:81:c1:6e:25:8f:9a:00:
a1:ef:05:84:be:92:1f:e7:4d:e2:2c:a9:2a:91:7d:02:8f:0b:
c0:a9:e6:c1:f2:b4:96:1d:b8:45:6d:17:5b:13:c2:71:75:6e:
58:12:a2:02:bd:3e:14:d2:33:f4:04:01:1a:9d:35:2c:19:8e:
f6:a8:ae:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:16:06 2025 by rpki-client