Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/58c87b-9aa8-48ea-85c3-06b163d359e0/1/13yGmob-yDN5Pu7azNSx98pEM-k.mft
File: 13yGmob-yDN5Pu7azNSx98pEM-k.mft (raw, json)
Hash identifier: aovTfztQi/TOuWn3b52pNfXfBJeLeeLz/ShxmbWLJ5c=
Subject key identifier: 57:D7:B1:6E:86:6C:45:82:E4:22:BF:F7:D9:7C:48:04:E9:DC:A2:86
Authority key identifier: D7:7C:86:9A:86:FE:C8:33:79:3E:EE:DA:CC:D4:B1:F7:CA:44:33:E9
Certificate issuer: /CN=d77c869a86fec833793eeedaccd4b1f7ca4433e9
Certificate serial: 019686FF9230953A4843B25F0E7169F8AD49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13yGmob-yDN5Pu7azNSx98pEM-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/58c87b-9aa8-48ea-85c3-06b163d359e0/1/13yGmob-yDN5Pu7azNSx98pEM-k.mft
Manifest number: 12FE
Signing time: Wed 30 Apr 2025 14:00:17 +0000
Manifest this update: Wed 30 Apr 2025 14:00:17 +0000
Manifest next update: Thu 01 May 2025 14:00:17 +0000
Files and hashes: 1: 13yGmob-yDN5Pu7azNSx98pEM-k.crl (hash: baJafQj5M94qgCdWUX1/YWhJA80dP0rXReJf1+vHkOI=)
2: Dcjqka0vRB55CJDqEWplWQ0em2k.roa (hash: QNtKb0wVTgOzXABHcHNsksEjhhvzQUkXJ+QzngWUeuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/58c87b-9aa8-48ea-85c3-06b163d359e0/1/13yGmob-yDN5Pu7azNSx98pEM-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/58c87b-9aa8-48ea-85c3-06b163d359e0/1/13yGmob-yDN5Pu7azNSx98pEM-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/13yGmob-yDN5Pu7azNSx98pEM-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:ff:92:30:95:3a:48:43:b2:5f:0e:71:69:f8:ad:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d77c869a86fec833793eeedaccd4b1f7ca4433e9
Validity
Not Before: Apr 30 14:00:17 2025 GMT
Not After : May 1 14:00:17 2025 GMT
Subject: CN=57d7b16e866c4582e422bff7d97c4804e9dca286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:96:b1:a6:ac:42:f9:32:1e:c8:a6:68:ea:fc:
42:8d:3d:17:75:08:66:14:3f:34:ab:f4:40:16:3e:
f8:5a:ee:11:69:54:f3:79:0e:65:54:62:43:85:60:
aa:d1:4c:04:3b:48:3f:31:98:ee:35:13:5d:8e:79:
ea:d1:a5:85:6e:44:fd:d9:f5:15:03:44:42:81:e9:
39:34:67:d7:fb:a3:80:16:4b:d1:b1:ce:1b:8c:d4:
d6:55:8d:2b:da:c2:ff:a2:17:f3:e8:bc:da:2f:9d:
b9:78:b8:96:f4:b4:59:88:a6:6e:33:5e:dc:61:78:
29:88:ad:9c:c8:25:a6:1d:47:48:0b:c7:10:38:6a:
d1:92:04:46:6b:48:d9:5a:8b:62:58:fb:81:b1:94:
dd:47:f8:3b:c7:e9:a9:69:98:46:6d:8f:16:a2:2c:
07:1d:f3:5d:85:91:7b:60:81:07:28:83:0e:df:59:
13:be:da:fe:34:47:4f:f9:34:69:e7:fb:6f:ca:72:
9e:4f:4d:46:96:4a:88:42:d1:cd:34:fd:3e:84:86:
1d:d3:19:b9:9f:16:21:37:3f:aa:0a:90:4d:5a:c7:
77:8b:79:21:03:80:21:de:b3:10:3c:2d:04:12:9f:
5a:5c:b6:f0:07:ca:64:4a:f6:3e:69:d0:7a:b1:67:
1a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:D7:B1:6E:86:6C:45:82:E4:22:BF:F7:D9:7C:48:04:E9:DC:A2:86
X509v3 Authority Key Identifier:
keyid:D7:7C:86:9A:86:FE:C8:33:79:3E:EE:DA:CC:D4:B1:F7:CA:44:33:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13yGmob-yDN5Pu7azNSx98pEM-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/58c87b-9aa8-48ea-85c3-06b163d359e0/1/13yGmob-yDN5Pu7azNSx98pEM-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/58c87b-9aa8-48ea-85c3-06b163d359e0/1/13yGmob-yDN5Pu7azNSx98pEM-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:d8:4c:36:4e:6d:29:72:73:d1:fc:3c:81:83:70:d9:e5:40:
a6:2c:71:50:eb:fe:ae:77:be:0e:fb:6e:4f:00:66:d9:ee:df:
16:bf:4b:0a:9f:92:99:1a:dc:04:f2:8b:93:f3:47:d2:3c:b8:
d3:e7:d2:b0:1e:81:d4:ca:c2:39:97:31:90:83:a8:9b:c0:26:
60:2d:e4:fc:79:67:87:93:a4:31:09:f5:64:7b:d3:34:20:59:
15:7e:de:85:09:00:87:6b:60:90:25:b4:78:20:88:03:15:a1:
1b:54:4d:c5:6d:fe:c0:ea:6e:2c:c8:23:b7:b5:79:87:15:4e:
17:12:25:f7:8e:27:6e:22:82:33:b1:ba:0d:92:2b:eb:d0:75:
92:4a:60:06:b3:51:35:be:5d:5e:c6:b0:65:33:90:55:e4:f7:
df:06:d4:0b:96:b6:82:25:18:43:91:b2:2a:71:cb:88:a8:bc:
50:90:7a:6e:b4:87:af:f3:5b:9e:cd:aa:09:ba:4b:64:fe:a4:
e6:0e:ab:fb:77:bc:47:00:52:6e:76:1f:fd:2c:8b:22:f6:7f:
af:4b:88:48:a6:72:61:87:6b:ca:69:8a:db:d9:74:59:a5:ca:
51:51:d6:80:6a:5f:c9:2e:cc:42:e7:38:78:b9:6d:c6:2b:95:
f3:4a:ce:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaG/5IwlTpIQ7JfDnFp+K1JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3N2M4NjlhODZmZWM4MzM3OTNlZWVkYWNjZDRiMWY3Y2E0
NDMzZTkwHhcNMjUwNDMwMTQwMDE3WhcNMjUwNTAxMTQwMDE3WjAzMTEwLwYDVQQD
Eyg1N2Q3YjE2ZTg2NmM0NTgyZTQyMmJmZjdkOTdjNDgwNGU5ZGNhMjg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA55axpqxC+TIeyKZo6vxCjT0XdQhm
FD80q/RAFj74Wu4RaVTzeQ5lVGJDhWCq0UwEO0g/MZjuNRNdjnnq0aWFbkT92fUV
A0RCgek5NGfX+6OAFkvRsc4bjNTWVY0r2sL/ohfz6LzaL525eLiW9LRZiKZuM17c
YXgpiK2cyCWmHUdIC8cQOGrRkgRGa0jZWotiWPuBsZTdR/g7x+mpaZhGbY8WoiwH
HfNdhZF7YIEHKIMO31kTvtr+NEdP+TRp5/tvynKeT01GlkqIQtHNNP0+hIYd0xm5
nxYhNz+qCpBNWsd3i3khA4Ah3rMQPC0EEp9aXLbwB8pkSvY+adB6sWcaUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFfXsW6GbEWC5CK/99l8SATp3KKGMB8GA1UdIwQY
MBaAFNd8hpqG/sgzeT7u2szUsffKRDPpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTN5R21vYi15RE41UHU3YXpOU3g5OHBFTS1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy81OGM4N2ItOWFhOC00OGVhLTg1YzMt
MDZiMTYzZDM1OWUwLzEvMTN5R21vYi15RE41UHU3YXpOU3g5OHBFTS1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy81OGM4N2ItOWFhOC00OGVhLTg1YzMtMDZiMTYzZDM1OWUw
LzEvMTN5R21vYi15RE41UHU3YXpOU3g5OHBFTS1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdthMNk5t
KXJz0fw8gYNw2eVApixxUOv+rne+DvtuTwBm2e7fFr9LCp+SmRrcBPKLk/NH0jy4
0+fSsB6B1MrCOZcxkIOom8AmYC3k/Hlnh5OkMQn1ZHvTNCBZFX7ehQkAh2tgkCW0
eCCIAxWhG1RNxW3+wOpuLMgjt7V5hxVOFxIl944nbiKCM7G6DZIr69B1kkpgBrNR
Nb5dXsawZTOQVeT33wbUC5a2giUYQ5GyKnHLiKi8UJB6brSHr/Nbns2qCbpLZP6k
5g6r+3e8RwBSbnYf/SyLIvZ/r0uISKZyYYdrymmK29l0WaXKUVHWgGpfyS7MQuc4
eLltxiuV80rOAg==
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:34:15 2025 by rpki-client