Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/37529e-d976-47b5-b690-389d214af830/1/13BmKFIPfdrO9yQ276VGNcUs_ck.mft
File: 13BmKFIPfdrO9yQ276VGNcUs_ck.mft (raw, json)
Hash identifier: qvb/BUhevapD86t3CDpsEaitcgMZBAtdia3jeY5cGqQ=
Subject key identifier: E1:86:19:52:AC:B3:5E:62:C9:AF:F6:39:1C:B9:D1:70:F6:63:CD:62
Authority key identifier: D7:70:66:28:52:0F:7D:DA:CE:F7:24:36:EF:A5:46:35:C5:2C:FD:C9
Certificate issuer: /CN=d7706628520f7ddacef72436efa54635c52cfdc9
Certificate serial: 01974DE9E676DCAD5492152823A75FE7D961
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13BmKFIPfdrO9yQ276VGNcUs_ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/37529e-d976-47b5-b690-389d214af830/1/13BmKFIPfdrO9yQ276VGNcUs_ck.mft
Manifest number: 0C51
Signing time: Sun 08 Jun 2025 05:01:03 +0000
Manifest this update: Sun 08 Jun 2025 05:01:03 +0000
Manifest next update: Mon 09 Jun 2025 05:01:03 +0000
Files and hashes: 1: 13BmKFIPfdrO9yQ276VGNcUs_ck.crl (hash: vnqPFSvuB7XBAlFKphkX4AOMyFYWJ0K3N96ADbDat1Y=)
2: LWrGDXX6ciAd2Zvp80Iu8-lVS1w.roa (hash: nxBz/fdInsAkI2qFUQ+K8HVyUw7MTfQxJc9ae20ze20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/37529e-d976-47b5-b690-389d214af830/1/13BmKFIPfdrO9yQ276VGNcUs_ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/37529e-d976-47b5-b690-389d214af830/1/13BmKFIPfdrO9yQ276VGNcUs_ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/13BmKFIPfdrO9yQ276VGNcUs_ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:e9:e6:76:dc:ad:54:92:15:28:23:a7:5f:e7:d9:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7706628520f7ddacef72436efa54635c52cfdc9
Validity
Not Before: Jun 8 05:01:03 2025 GMT
Not After : Jun 9 05:01:03 2025 GMT
Subject: CN=e1861952acb35e62c9aff6391cb9d170f663cd62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:87:fd:55:d8:66:e5:89:db:86:5d:af:f1:0e:
a3:d1:c3:ea:8d:ea:94:d2:5a:c2:03:ae:58:58:ac:
7d:25:6d:bb:f3:6b:1f:51:ad:30:cc:16:46:e4:90:
a7:53:24:13:b5:7d:7e:4e:72:80:f1:fb:6c:e5:5d:
fe:3b:6b:0d:e1:dd:37:8f:3a:eb:56:3b:1d:56:c2:
50:d4:75:94:34:0b:55:a1:57:9e:1e:57:92:41:49:
86:6b:dc:27:dc:ea:fd:c2:71:e5:29:66:e2:09:3e:
92:91:1e:ee:52:c5:44:cc:d7:a7:18:56:b9:2f:f0:
97:7f:c5:76:3f:60:16:2c:74:72:f8:fb:4f:7e:49:
a9:83:ef:17:7f:67:8c:da:df:dd:a6:69:da:57:0a:
3b:bc:9e:bd:f4:af:03:80:7e:57:bb:d7:10:20:48:
c5:d6:eb:cb:ea:cf:80:61:fe:5d:78:10:07:5a:da:
f0:1c:af:a2:c0:5a:83:a1:3c:fa:86:ad:63:e2:4f:
7f:0d:a1:92:b1:67:b0:ab:9c:0d:7a:7c:a1:ac:3b:
8e:10:63:70:2f:cb:89:7b:03:e2:a9:33:92:12:3e:
10:ad:08:62:a2:19:d8:4b:cf:02:56:5a:76:1a:32:
a9:0b:71:5f:c6:28:90:c4:69:6f:3e:0a:dc:74:c5:
9e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:86:19:52:AC:B3:5E:62:C9:AF:F6:39:1C:B9:D1:70:F6:63:CD:62
X509v3 Authority Key Identifier:
keyid:D7:70:66:28:52:0F:7D:DA:CE:F7:24:36:EF:A5:46:35:C5:2C:FD:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13BmKFIPfdrO9yQ276VGNcUs_ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/37529e-d976-47b5-b690-389d214af830/1/13BmKFIPfdrO9yQ276VGNcUs_ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/37529e-d976-47b5-b690-389d214af830/1/13BmKFIPfdrO9yQ276VGNcUs_ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:cf:31:bb:43:9c:1c:8b:49:20:1e:67:26:d7:cd:87:16:a2:
db:8c:a4:8e:12:d8:34:e3:b4:9c:1e:8b:a2:e4:10:b4:e1:c5:
bb:41:9b:15:b8:29:2c:85:f1:02:8d:d4:cf:c4:40:bd:73:d4:
7f:d4:84:97:ec:80:8f:cd:d9:65:e3:19:80:65:8c:75:7c:23:
71:d8:16:26:6e:c3:ce:86:06:3b:11:6b:35:13:f0:43:07:27:
a4:54:b6:a5:f8:e8:62:c8:0a:b1:97:6e:d4:ca:af:b0:8d:36:
af:23:36:8b:70:d8:bf:7a:30:dc:a1:1f:13:44:1e:29:85:71:
62:d1:20:30:c5:aa:f8:52:2f:e9:7c:94:00:27:91:e3:8f:59:
07:0f:5e:5f:42:9c:a9:f5:67:c1:1e:e7:46:58:47:42:18:c3:
6a:1d:67:ee:48:51:eb:f3:64:bd:af:35:78:b0:89:c3:4d:ea:
0f:31:de:ca:08:fc:de:9b:cb:dc:08:af:55:15:2f:ad:8c:ea:
6e:ba:34:38:9b:bd:62:d3:d4:5d:f1:71:51:12:0b:c4:7a:7e:
e0:9f:14:35:af:f5:9e:2f:34:af:1d:be:cb:6b:15:fd:72:cc:
92:74:60:54:b8:63:b3:0d:ff:ba:63:a0:ec:64:f6:b5:f6:d9:
a9:01:e7:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:15:30 2025 by rpki-client