Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/37529e-d976-47b5-b690-389d214af830/1/13BmKFIPfdrO9yQ276VGNcUs_ck.mft
File: 13BmKFIPfdrO9yQ276VGNcUs_ck.mft (raw, json)
Hash identifier: AUWlTJ9bno92HPEfsq4GXtXymmyxqcFnk2gQMgwEpHg=
Subject key identifier: FD:1F:EE:D2:34:99:82:6A:A9:6C:A6:FB:10:2D:CB:8A:59:D3:93:72
Authority key identifier: D7:70:66:28:52:0F:7D:DA:CE:F7:24:36:EF:A5:46:35:C5:2C:FD:C9
Certificate issuer: /CN=d7706628520f7ddacef72436efa54635c52cfdc9
Certificate serial: 019A7301B86C1B5770BE316AF6FCE4F641FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13BmKFIPfdrO9yQ276VGNcUs_ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/37529e-d976-47b5-b690-389d214af830/1/13BmKFIPfdrO9yQ276VGNcUs_ck.mft
Manifest number: 0DF2
Signing time: Tue 11 Nov 2025 13:01:23 +0000
Manifest this update: Tue 11 Nov 2025 13:01:23 +0000
Manifest next update: Wed 12 Nov 2025 13:01:23 +0000
Files and hashes: 1: 13BmKFIPfdrO9yQ276VGNcUs_ck.crl (hash: IUdPLKpDnpugwcXwC6gRp304nu7VROTWVi8FQA8HEm0=)
2: LWrGDXX6ciAd2Zvp80Iu8-lVS1w.roa (hash: nxBz/fdInsAkI2qFUQ+K8HVyUw7MTfQxJc9ae20ze20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/37529e-d976-47b5-b690-389d214af830/1/13BmKFIPfdrO9yQ276VGNcUs_ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/37529e-d976-47b5-b690-389d214af830/1/13BmKFIPfdrO9yQ276VGNcUs_ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/13BmKFIPfdrO9yQ276VGNcUs_ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:b8:6c:1b:57:70:be:31:6a:f6:fc:e4:f6:41:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7706628520f7ddacef72436efa54635c52cfdc9
Validity
Not Before: Nov 11 13:01:23 2025 GMT
Not After : Nov 12 13:01:23 2025 GMT
Subject: CN=fd1feed23499826aa96ca6fb102dcb8a59d39372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:68:b6:90:2d:97:49:30:69:c3:36:76:4d:8c:
07:dd:02:7e:08:d1:ea:02:68:32:c8:88:0c:5e:2e:
c1:7d:95:aa:d4:62:b2:68:f1:33:30:0a:9b:f5:64:
66:41:24:d4:bb:c8:64:34:60:c9:d5:7f:cd:64:52:
56:f7:23:78:ce:4f:a9:00:22:95:55:e4:dd:3b:5d:
81:08:11:3f:f9:98:bd:18:de:ed:f3:a9:04:39:22:
25:01:ac:19:c4:3c:8d:58:b3:9e:3d:59:4c:7f:d7:
3c:b6:04:37:df:f0:1c:67:7c:c6:d8:bb:c1:e8:96:
c3:33:fd:61:fc:89:74:50:c3:2d:59:7f:cd:e4:b9:
fc:34:cc:e5:2d:e8:73:e7:f2:2b:15:a2:8c:57:4f:
0f:b2:70:cf:02:67:80:93:d8:ef:a4:93:d5:51:b3:
c8:71:d2:6c:31:79:fb:3d:db:ba:50:2f:67:85:c8:
b4:b5:ce:0a:d9:52:50:2f:6e:07:e4:b2:c1:60:85:
27:78:db:68:ac:e2:cb:98:52:83:73:98:31:d9:1f:
3b:71:73:65:6e:1b:4c:73:5e:3c:54:54:83:28:0e:
e4:f1:ab:7e:91:aa:a5:46:ff:2f:b7:00:e4:10:49:
12:5b:6b:ea:08:a5:70:70:1f:71:e1:3a:c7:ab:69:
df:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:1F:EE:D2:34:99:82:6A:A9:6C:A6:FB:10:2D:CB:8A:59:D3:93:72
X509v3 Authority Key Identifier:
keyid:D7:70:66:28:52:0F:7D:DA:CE:F7:24:36:EF:A5:46:35:C5:2C:FD:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13BmKFIPfdrO9yQ276VGNcUs_ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/37529e-d976-47b5-b690-389d214af830/1/13BmKFIPfdrO9yQ276VGNcUs_ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/37529e-d976-47b5-b690-389d214af830/1/13BmKFIPfdrO9yQ276VGNcUs_ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:78:4d:18:8e:1f:ad:7f:78:5d:ad:be:17:80:37:c7:11:35:
ae:e3:27:51:5d:ff:cc:de:1d:9d:8d:66:6a:7d:06:2a:86:d7:
5b:ba:d6:29:08:2a:fb:47:10:9b:7d:b3:ba:9a:89:fa:31:5e:
23:b7:fd:f6:3d:1e:8f:f9:9c:80:16:c8:f0:0e:87:6b:96:43:
ac:0e:db:25:cd:23:77:d9:20:40:e3:a8:5a:64:d1:cc:91:e9:
6c:80:26:a1:94:19:a9:0d:33:7c:94:0e:db:ab:d4:67:66:49:
f8:79:a1:b5:73:63:6c:dd:47:a4:ff:64:90:8e:a5:48:c1:25:
c3:4b:e1:d0:83:be:6b:e5:13:16:50:fa:0c:48:f1:4a:8f:5d:
f7:07:be:00:8d:c0:8b:0d:56:b8:08:49:32:17:84:c1:3f:2f:
ef:6d:40:8f:a7:62:36:25:92:64:1f:36:16:38:62:68:ca:8f:
5d:21:86:8b:07:84:a3:af:4a:ac:b3:7f:77:2c:d5:f0:d0:3a:
2e:f9:8c:6f:3a:cf:f5:d0:f5:36:a5:57:0f:bf:26:07:87:00:
38:71:b7:34:05:7c:aa:7f:e2:bc:36:c2:c2:65:7d:bd:86:31:
1e:46:60:1f:a0:02:4b:de:af:2b:53:fe:dc:ff:36:7d:76:1c:
42:ff:34:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:16:22 2025 by rpki-client