Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/1a09bb-01de-4be5-bce1-908648a20bc8/1/13auCasbyUrOg_pv02rFIoZ7kuo.mft
File: 13auCasbyUrOg_pv02rFIoZ7kuo.mft (raw, json)
Hash identifier: odXlP5EOeFwavxytcI6dEtG8Aizfa2eLfKXZemoeRg4=
Subject key identifier: B3:99:1E:7E:A2:71:BC:A5:5B:3D:F5:5C:00:0A:65:3D:D8:71:03:11
Authority key identifier: D7:76:AE:09:AB:1B:C9:4A:CE:83:FA:6F:D3:6A:C5:22:86:7B:92:EA
Certificate issuer: /CN=d776ae09ab1bc94ace83fa6fd36ac522867b92ea
Certificate serial: 019A71809C24894C9F84BC20FE305D3E8D6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13auCasbyUrOg_pv02rFIoZ7kuo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/1a09bb-01de-4be5-bce1-908648a20bc8/1/13auCasbyUrOg_pv02rFIoZ7kuo.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 06:00:45 +0000
Manifest this update: Tue 11 Nov 2025 06:00:45 +0000
Manifest next update: Wed 12 Nov 2025 06:00:45 +0000
Files and hashes: 1: 13auCasbyUrOg_pv02rFIoZ7kuo.crl (hash: RN3L80u07b2dLlH0/lbK1bPfCa6mGd1gdWPq2+fGhQc=)
2: 3J6u_zYJ7Y8Ll0yocqGaWf6DfUg.roa (hash: ALMRzRIN48A1/6B9bYTNcvthe8nl2VpZFs9P6rEV/zs=)
3: pQEKlsHKZvyCzhry4IGka8Bo9wI.roa (hash: G6tdo3cOGBpxAVBJYaOYN4vtqsUYuOOcWC30vr8lJRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/1a09bb-01de-4be5-bce1-908648a20bc8/1/13auCasbyUrOg_pv02rFIoZ7kuo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/1a09bb-01de-4be5-bce1-908648a20bc8/1/13auCasbyUrOg_pv02rFIoZ7kuo.mft
rsync://rpki.ripe.net/repository/DEFAULT/13auCasbyUrOg_pv02rFIoZ7kuo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 06:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:80:9c:24:89:4c:9f:84:bc:20:fe:30:5d:3e:8d:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d776ae09ab1bc94ace83fa6fd36ac522867b92ea
Validity
Not Before: Nov 11 06:00:45 2025 GMT
Not After : Nov 12 06:00:45 2025 GMT
Subject: CN=b3991e7ea271bca55b3df55c000a653dd8710311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:58:bc:a0:80:36:dd:12:0a:86:53:87:0a:81:
24:0c:5b:e3:40:c2:4b:28:ec:8a:00:5b:1f:69:2b:
53:76:94:1c:09:3f:16:08:b4:90:2c:e4:f8:ca:ff:
e7:ee:2f:0e:74:92:68:1d:78:5b:b2:1e:b4:79:0b:
75:51:68:be:0e:b1:2e:2d:a8:38:92:c0:17:70:1e:
c0:8c:b9:cf:0b:bc:80:d7:5b:98:bd:64:44:be:fe:
08:cd:5c:2f:88:cc:08:90:0b:66:94:a9:a1:47:34:
d7:72:e0:f3:bc:d5:d1:6d:11:16:f1:7e:69:f1:7d:
38:34:23:1c:f9:f8:5d:87:cf:0e:35:d5:52:7e:28:
46:66:9f:4b:3d:2d:62:8c:71:76:0d:11:2d:f2:50:
21:f0:31:2d:99:17:ca:f2:5a:1d:38:b3:1c:bf:61:
82:c3:c9:63:78:44:98:5e:da:5c:98:66:60:e2:ac:
41:66:70:53:c8:01:ad:7e:1e:b6:c2:11:9e:48:35:
20:9d:4b:f3:bb:e6:f5:f6:5f:6d:08:20:70:a4:ff:
b5:66:4b:67:8a:cf:7e:3c:d1:f9:03:30:3d:3c:76:
d5:b2:cd:03:5e:6b:1a:8a:58:32:33:42:12:99:57:
7a:ed:0d:d5:45:a6:83:74:93:2e:41:d2:98:37:0a:
cd:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:99:1E:7E:A2:71:BC:A5:5B:3D:F5:5C:00:0A:65:3D:D8:71:03:11
X509v3 Authority Key Identifier:
keyid:D7:76:AE:09:AB:1B:C9:4A:CE:83:FA:6F:D3:6A:C5:22:86:7B:92:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13auCasbyUrOg_pv02rFIoZ7kuo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1a09bb-01de-4be5-bce1-908648a20bc8/1/13auCasbyUrOg_pv02rFIoZ7kuo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1a09bb-01de-4be5-bce1-908648a20bc8/1/13auCasbyUrOg_pv02rFIoZ7kuo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:ca:d1:a3:42:83:9b:10:7f:20:ec:ad:8c:b2:c4:b1:d7:b8:
13:52:80:77:20:c6:7c:6d:52:57:f7:65:8a:1a:a4:d1:82:6e:
7c:f3:a7:c3:21:03:48:8c:e7:f5:76:92:6b:c6:b3:72:68:68:
d2:df:a4:35:cb:5b:ae:d0:5e:09:eb:14:2c:f5:2b:79:e3:0d:
65:33:28:ef:57:89:72:85:5c:76:ea:cd:ac:bb:c8:da:8d:e2:
e6:6d:e2:8b:f4:5d:5b:e9:cd:a7:c2:9d:1e:55:b2:d9:1b:9f:
f3:2a:b1:53:c6:31:db:bb:d2:19:24:d9:e9:7b:43:d1:ff:c3:
d8:34:f8:f3:2a:74:b5:16:1e:f4:36:da:7e:f0:90:9d:37:d5:
37:a5:87:92:dc:e6:4c:15:75:0a:d9:dd:66:cc:5d:f3:e7:4a:
6d:79:2b:85:22:de:87:5b:95:a2:b3:00:7d:49:3b:85:32:4c:
26:a5:f3:17:a0:f7:6e:35:e2:4d:c9:b9:26:69:91:e3:88:1b:
2c:68:59:eb:18:21:99:e4:cd:7f:cb:b4:dc:6a:73:5e:ea:aa:
ff:13:27:ee:77:28:dc:8e:f3:db:5a:1a:6a:5f:b7:ac:d9:76:
0a:77:a5:95:68:bb:3f:55:ff:63:0e:8c:45:d2:d0:87:b0:a5:
6f:dd:d2:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:09:48 2025 by rpki-client