Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/58c87b-9aa8-48ea-85c3-06b163d359e0/1/13yGmob-yDN5Pu7azNSx98pEM-k.mft
File: 13yGmob-yDN5Pu7azNSx98pEM-k.mft (raw, json)
Hash identifier: afw8G1uy8J0unPgIn6R9b1ik7/TpkK5k9rxydJuFye4=
Subject key identifier: DE:37:FD:FE:1A:39:29:D5:A9:B4:F7:C2:84:77:DE:EB:C6:23:7A:86
Authority key identifier: D7:7C:86:9A:86:FE:C8:33:79:3E:EE:DA:CC:D4:B1:F7:CA:44:33:E9
Certificate issuer: /CN=d77c869a86fec833793eeedaccd4b1f7ca4433e9
Certificate serial: 019A4E86336B1E85BCF15178789EFDECC8FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13yGmob-yDN5Pu7azNSx98pEM-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/58c87b-9aa8-48ea-85c3-06b163d359e0/1/13yGmob-yDN5Pu7azNSx98pEM-k.mft
Manifest number: 14F3
Signing time: Tue 04 Nov 2025 11:00:09 +0000
Manifest this update: Tue 04 Nov 2025 11:00:09 +0000
Manifest next update: Wed 05 Nov 2025 11:00:09 +0000
Files and hashes: 1: 13yGmob-yDN5Pu7azNSx98pEM-k.crl (hash: uG3qvkVwTgSzR/V4KZpmr/UVo5eplqLxj+5d9MFDwYQ=)
2: Dcjqka0vRB55CJDqEWplWQ0em2k.roa (hash: QNtKb0wVTgOzXABHcHNsksEjhhvzQUkXJ+QzngWUeuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/58c87b-9aa8-48ea-85c3-06b163d359e0/1/13yGmob-yDN5Pu7azNSx98pEM-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/58c87b-9aa8-48ea-85c3-06b163d359e0/1/13yGmob-yDN5Pu7azNSx98pEM-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/13yGmob-yDN5Pu7azNSx98pEM-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:33:6b:1e:85:bc:f1:51:78:78:9e:fd:ec:c8:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d77c869a86fec833793eeedaccd4b1f7ca4433e9
Validity
Not Before: Nov 4 11:00:09 2025 GMT
Not After : Nov 5 11:00:09 2025 GMT
Subject: CN=de37fdfe1a3929d5a9b4f7c28477deebc6237a86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:58:5c:25:30:fb:91:4d:18:f6:b4:6d:02:f6:
5b:34:b8:04:8c:92:98:16:a6:6b:bb:9a:6b:7d:ae:
c2:35:47:43:e4:a9:98:af:f7:9d:09:ca:73:d1:12:
ee:10:8f:35:72:02:71:9d:2e:b0:d6:0c:b4:0d:36:
ab:43:28:19:53:ef:62:0c:c2:5c:e9:6a:ab:12:ae:
66:5b:ce:ef:f6:95:cb:0a:90:41:14:dd:56:96:c2:
b0:dc:87:12:e0:63:4a:52:d5:bd:44:52:76:11:a4:
9b:14:f3:97:4c:b3:01:a8:39:9b:37:92:a5:a1:e7:
7c:96:e4:2e:e2:12:ca:2d:5a:cc:78:cb:c3:39:d6:
23:e2:3a:38:41:6c:d7:49:66:d7:83:b2:52:ef:1a:
66:38:da:37:a2:89:fd:e5:81:ab:01:53:96:fd:0e:
18:70:3b:ee:6d:7c:fc:a9:ed:d6:b0:48:77:c7:b1:
de:29:40:83:13:ca:05:cd:a9:0a:c1:ac:b8:0b:8f:
34:ea:f9:b6:60:b4:80:9e:9d:cd:87:ef:84:e7:6a:
d8:18:1e:7f:7a:b0:88:86:da:59:12:d0:e0:b9:2a:
5c:ba:16:d6:aa:8d:51:c9:af:e7:c4:bb:40:8b:05:
e0:ac:82:77:f8:4c:6a:e5:d5:cd:5c:42:ff:79:17:
53:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:37:FD:FE:1A:39:29:D5:A9:B4:F7:C2:84:77:DE:EB:C6:23:7A:86
X509v3 Authority Key Identifier:
keyid:D7:7C:86:9A:86:FE:C8:33:79:3E:EE:DA:CC:D4:B1:F7:CA:44:33:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13yGmob-yDN5Pu7azNSx98pEM-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/58c87b-9aa8-48ea-85c3-06b163d359e0/1/13yGmob-yDN5Pu7azNSx98pEM-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/58c87b-9aa8-48ea-85c3-06b163d359e0/1/13yGmob-yDN5Pu7azNSx98pEM-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:75:50:cf:e3:2b:c2:00:1f:91:73:5b:99:6e:a6:fb:73:51:
c2:fd:59:4f:ed:7a:3a:45:d7:f4:39:86:cf:c3:fc:6d:d7:f5:
49:88:58:c4:28:b6:7e:40:43:a8:44:75:01:c5:9b:df:40:2c:
6c:5c:64:e6:ff:c3:5b:1b:9a:0f:a5:d7:aa:e1:94:78:3a:b7:
83:7e:25:d7:16:18:5a:ca:4b:9f:99:eb:57:00:c1:02:2d:b1:
03:d3:7d:61:d3:ef:09:40:45:f1:d8:27:1e:ab:e9:85:85:53:
70:60:ce:55:3a:b4:0c:df:9f:b4:57:7b:ae:81:42:f2:e0:20:
94:0e:80:9e:0a:c8:2e:6c:3c:ee:f9:4e:13:76:2d:70:8b:0a:
d9:f9:7b:6e:20:b3:56:de:9c:f2:04:91:32:93:a8:47:2b:03:
e2:9a:ac:c6:6f:48:43:72:ae:78:19:76:85:8f:3f:7f:0a:e1:
b6:4e:8a:48:66:fb:c5:04:3a:30:f4:43:24:8c:ac:e2:dd:b6:
4f:87:e7:5d:44:a7:69:e1:67:c7:0e:75:b7:1e:49:04:90:21:
09:19:42:d8:18:6a:a3:30:a3:1a:74:ae:95:b2:2b:f9:8e:b3:
81:85:c5:16:bb:11:12:71:f2:09:a9:2a:5e:39:29:0e:98:67:
bc:0c:2e:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:52:50 2025 by rpki-client