Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.mft
File: 13mWjmbtvqNy75W6or9okThWekA.mft (raw, json)
Hash identifier: 8G3Pvf/AwvLFeeU5LsDgqDXivSIABAQvETE8mWIJaZk=
Subject key identifier: 6E:07:EC:35:E7:B9:B4:8B:E5:D7:70:06:A9:82:4D:62:99:22:26:40
Authority key identifier: D7:79:96:8E:66:ED:BE:A3:72:EF:95:BA:A2:BF:68:91:38:56:7A:40
Certificate issuer: /CN=d779968e66edbea372ef95baa2bf689138567a40
Certificate serial: 019A4EF50D367604D04C8C2C16F21E660F81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13mWjmbtvqNy75W6or9okThWekA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 13:01:13 +0000
Manifest this update: Tue 04 Nov 2025 13:01:13 +0000
Manifest next update: Wed 05 Nov 2025 13:01:13 +0000
Files and hashes: 1: 13mWjmbtvqNy75W6or9okThWekA.crl (hash: uaw9PBx6lr612ZEOWLGklvMWkbLLSh01folaoPTySdE=)
2: I4emCne_29V28uUFcYz5hu_Rezg.roa (hash: 96USF7uc276n2Rs/poozBmGnwe39xgiKf2HQGb9xcQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.mft
rsync://rpki.ripe.net/repository/DEFAULT/13mWjmbtvqNy75W6or9okThWekA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:0d:36:76:04:d0:4c:8c:2c:16:f2:1e:66:0f:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d779968e66edbea372ef95baa2bf689138567a40
Validity
Not Before: Nov 4 13:01:13 2025 GMT
Not After : Nov 5 13:01:13 2025 GMT
Subject: CN=6e07ec35e7b9b48be5d77006a9824d6299222640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:30:6e:f0:68:56:26:f1:61:5f:a0:bc:70:77:
b7:03:72:02:57:df:54:1d:a3:33:e7:82:7f:db:40:
43:0e:93:3d:d6:f8:f7:db:d1:5b:31:12:78:4d:67:
c3:5e:b1:b5:f5:82:64:38:d9:08:22:0d:f5:ac:df:
25:56:db:5c:ca:30:e0:29:c4:20:1c:e8:31:a0:9b:
97:07:aa:a1:6d:50:e0:53:54:bb:4d:36:1c:97:55:
a0:01:cd:8d:dd:4c:9e:c8:64:73:20:d6:6d:c6:e5:
d0:ee:e3:7f:ac:4b:9d:3b:48:e1:8f:3b:28:cf:4e:
20:a7:c2:57:62:44:fc:0e:99:c7:08:19:b7:55:88:
7b:64:a3:09:ec:17:8d:84:ec:80:cc:17:2e:2f:60:
8b:b2:3a:c0:4a:db:2d:4e:2b:72:8c:e7:0c:a0:4a:
8f:cc:77:ed:6f:38:f1:ea:6d:39:e8:37:5c:cf:bc:
d0:dc:5b:fe:12:ce:80:e4:6b:10:df:47:69:11:71:
b8:85:5e:fd:26:9c:62:db:a3:3e:e6:2c:a6:35:9f:
45:75:7e:39:39:59:0c:9a:6a:c4:6a:75:63:3e:27:
a8:98:e4:45:10:0e:c7:67:82:ef:67:22:20:fe:e3:
a8:9f:00:26:6c:7f:51:4c:62:2a:97:4a:63:0f:da:
7b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:07:EC:35:E7:B9:B4:8B:E5:D7:70:06:A9:82:4D:62:99:22:26:40
X509v3 Authority Key Identifier:
keyid:D7:79:96:8E:66:ED:BE:A3:72:EF:95:BA:A2:BF:68:91:38:56:7A:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13mWjmbtvqNy75W6or9okThWekA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:63:91:42:1a:2f:88:ab:38:17:9f:f4:07:53:08:30:bd:77:
45:31:0c:09:e7:23:df:92:a0:67:97:ec:f6:7d:49:89:28:66:
bd:23:92:83:ca:42:78:c9:a4:12:4c:97:8d:f4:02:30:94:ba:
3f:6c:ae:a4:42:4d:03:35:1a:36:7f:bd:05:0a:c0:d6:1c:9a:
bc:dd:02:f7:28:7d:4f:c1:22:82:41:08:d0:5c:88:56:1c:a1:
b1:51:64:8a:06:1e:19:de:72:57:10:c5:60:0b:66:97:dc:ec:
8d:d1:1f:06:f4:8f:0a:fa:35:ea:d2:c7:01:67:c1:d2:a8:0d:
a4:5f:96:97:d3:4e:8f:28:02:62:a5:50:2c:57:4e:d9:ac:31:
9f:a4:ef:39:da:2d:fb:1f:08:5a:a7:05:a1:82:13:2c:8d:62:
9d:d4:79:1c:18:20:1a:2c:fa:da:07:50:c7:78:a4:1f:64:0b:
0b:cc:7c:30:7d:bf:7e:c5:39:35:07:1a:83:bf:96:87:f8:ad:
cb:a7:e3:75:89:d9:e8:ee:92:06:44:52:92:ae:b8:3a:c7:92:
e8:56:b0:79:5b:c4:8e:08:2b:78:5d:cf:a3:f0:45:22:a3:65:
9f:8f:5c:44:81:86:5e:87:f4:19:f9:29:e6:6e:73:09:b0:6a:
39:fb:1b:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:47 2025 by rpki-client