Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/58c87b-9aa8-48ea-85c3-06b163d359e0/1/13yGmob-yDN5Pu7azNSx98pEM-k.mft
File: 13yGmob-yDN5Pu7azNSx98pEM-k.mft (raw, json)
Hash identifier: 1lIgYzMhvSKyfMW40WQI0SBqJO8n2a/abVKiGWPglxI=
Subject key identifier: E5:0E:61:44:A7:04:91:C6:A5:5E:78:07:A9:35:7A:3C:C3:1E:75:DA
Authority key identifier: D7:7C:86:9A:86:FE:C8:33:79:3E:EE:DA:CC:D4:B1:F7:CA:44:33:E9
Certificate issuer: /CN=d77c869a86fec833793eeedaccd4b1f7ca4433e9
Certificate serial: 019898256874B4DFEBA8F5740993B093CF6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13yGmob-yDN5Pu7azNSx98pEM-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/58c87b-9aa8-48ea-85c3-06b163d359e0/1/13yGmob-yDN5Pu7azNSx98pEM-k.mft
Manifest number: 1410
Signing time: Mon 11 Aug 2025 08:00:44 +0000
Manifest this update: Mon 11 Aug 2025 08:00:44 +0000
Manifest next update: Tue 12 Aug 2025 08:00:44 +0000
Files and hashes: 1: 13yGmob-yDN5Pu7azNSx98pEM-k.crl (hash: pxIf4ie4D0KeKAVToNYzOBmYr8+eRX3XyF8fadrlmbw=)
2: Dcjqka0vRB55CJDqEWplWQ0em2k.roa (hash: QNtKb0wVTgOzXABHcHNsksEjhhvzQUkXJ+QzngWUeuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/58c87b-9aa8-48ea-85c3-06b163d359e0/1/13yGmob-yDN5Pu7azNSx98pEM-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/58c87b-9aa8-48ea-85c3-06b163d359e0/1/13yGmob-yDN5Pu7azNSx98pEM-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/13yGmob-yDN5Pu7azNSx98pEM-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:98:25:68:74:b4:df:eb:a8:f5:74:09:93:b0:93:cf:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d77c869a86fec833793eeedaccd4b1f7ca4433e9
Validity
Not Before: Aug 11 08:00:44 2025 GMT
Not After : Aug 12 08:00:44 2025 GMT
Subject: CN=e50e6144a70491c6a55e7807a9357a3cc31e75da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7b:7c:f1:d9:29:02:68:08:13:a5:36:f2:33:
02:46:b0:6c:82:ae:b3:9c:1b:ab:b7:e3:94:1f:86:
23:ff:22:e5:d3:47:2e:7b:53:4d:97:d9:45:e1:2a:
c7:bf:ae:e8:ff:b1:04:37:6e:26:96:e0:31:32:a3:
da:30:db:24:4c:e0:fc:ef:7f:25:94:22:45:b1:5a:
29:01:96:28:e9:46:f5:7d:b9:ca:2c:bc:65:56:b4:
bc:82:2c:32:13:16:b5:47:ea:9d:a8:aa:dc:46:06:
2c:f8:ae:b9:f5:87:40:5b:4d:27:ec:77:df:c2:e7:
f1:13:15:7d:df:c7:ac:28:f4:ac:b6:b2:be:b1:4a:
a7:6e:53:89:7d:ac:cc:4e:8e:34:df:5f:ef:c5:07:
4a:48:63:8b:d9:f1:97:08:fc:c1:66:55:25:75:bb:
6b:d9:9c:2b:53:ad:d1:c9:62:8a:d3:4d:79:b9:05:
1f:14:ca:9e:17:4d:bf:97:83:0c:d0:e6:7e:b3:61:
d1:de:36:6d:30:65:d2:6b:25:ef:3e:59:e3:c1:c6:
5b:6e:e4:60:eb:1c:74:1b:9d:e0:ff:38:9b:bb:26:
c5:81:75:2f:fc:13:0c:6d:d6:6a:d1:96:79:1b:74:
d9:f8:f0:d4:42:1e:af:3e:a8:1e:5c:44:ed:0f:fb:
35:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:0E:61:44:A7:04:91:C6:A5:5E:78:07:A9:35:7A:3C:C3:1E:75:DA
X509v3 Authority Key Identifier:
keyid:D7:7C:86:9A:86:FE:C8:33:79:3E:EE:DA:CC:D4:B1:F7:CA:44:33:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13yGmob-yDN5Pu7azNSx98pEM-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/58c87b-9aa8-48ea-85c3-06b163d359e0/1/13yGmob-yDN5Pu7azNSx98pEM-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/58c87b-9aa8-48ea-85c3-06b163d359e0/1/13yGmob-yDN5Pu7azNSx98pEM-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:65:cf:59:a4:8d:48:80:b6:d2:d2:71:1c:99:3d:54:74:4b:
6e:4d:b5:d5:bb:48:ac:21:63:b6:21:1a:5e:77:74:52:68:87:
23:d1:a3:0c:7f:17:46:6a:40:d6:b4:4e:4f:ec:75:63:a8:57:
d3:a2:bd:d3:54:45:6e:98:69:79:a9:12:31:24:f7:8d:1a:08:
5d:6b:4a:ad:aa:9b:a8:f3:a0:63:38:f6:35:c0:13:00:2b:39:
f2:a3:f8:f1:4c:cd:1e:20:67:45:dd:f7:e3:a3:78:62:0e:80:
d3:bd:a7:99:a6:f1:86:f6:28:2e:de:be:9b:31:c7:03:1a:ab:
11:92:e2:dc:47:76:78:c3:c4:b1:cf:01:06:3d:58:46:81:94:
19:de:44:b8:27:53:25:69:06:df:55:b7:d4:a3:e0:ff:fc:d1:
9d:8d:3d:cf:b0:c1:f1:a1:0d:7c:68:48:cc:1e:34:d4:b0:ca:
22:d7:f1:0d:d7:21:e4:b8:ea:66:fc:f5:de:00:ed:0d:d4:3e:
18:4a:b4:df:1b:11:62:fb:4c:87:17:2b:7a:39:53:8b:d0:d5:
e5:ca:1d:b1:76:eb:25:5f:e5:b5:84:35:5a:e2:8b:b8:e8:3a:
fa:73:79:2d:9e:6f:ce:24:b9:82:b8:bd:c0:31:f1:07:ae:1b:
90:0b:65:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:50:41 2025 by rpki-client