Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.mft
File: 13mWjmbtvqNy75W6or9okThWekA.mft (raw, json)
Hash identifier: BXN5c5lGEZDM7GGKyiNNk4loCGE6zh0X9k05PAvUda0=
Subject key identifier: 09:5E:3C:09:C7:AA:DF:A9:20:71:41:BD:B6:22:1C:D9:37:81:4D:CF
Authority key identifier: D7:79:96:8E:66:ED:BE:A3:72:EF:95:BA:A2:BF:68:91:38:56:7A:40
Certificate issuer: /CN=d779968e66edbea372ef95baa2bf689138567a40
Certificate serial: 01976D3E397BD20A4D3C7D6181DC50F68B17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13mWjmbtvqNy75W6or9okThWekA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.mft
Manifest number: 1591
Signing time: Sat 14 Jun 2025 07:01:23 +0000
Manifest this update: Sat 14 Jun 2025 07:01:23 +0000
Manifest next update: Sun 15 Jun 2025 07:01:23 +0000
Files and hashes: 1: 13mWjmbtvqNy75W6or9okThWekA.crl (hash: CaoBQwjFzjTyVnU2gozT0v28aDxU38ifBOgUL9099RA=)
2: I4emCne_29V28uUFcYz5hu_Rezg.roa (hash: 96USF7uc276n2Rs/poozBmGnwe39xgiKf2HQGb9xcQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.mft
rsync://rpki.ripe.net/repository/DEFAULT/13mWjmbtvqNy75W6or9okThWekA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:39:7b:d2:0a:4d:3c:7d:61:81:dc:50:f6:8b:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d779968e66edbea372ef95baa2bf689138567a40
Validity
Not Before: Jun 14 07:01:23 2025 GMT
Not After : Jun 15 07:01:23 2025 GMT
Subject: CN=095e3c09c7aadfa9207141bdb6221cd937814dcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:0e:70:0d:5e:40:01:97:38:77:d6:e1:94:c1:
8f:24:53:94:80:c6:f8:0f:b7:bc:51:8e:6c:d4:bb:
6a:a9:a9:b1:22:b9:2a:d2:6b:52:f1:f8:3e:85:2c:
9c:b9:bf:68:fb:1b:18:10:db:cb:3f:d2:40:f1:9c:
c1:18:05:71:29:e0:7c:39:aa:dc:9a:7b:6e:bc:d0:
90:98:60:b9:0d:4b:e4:b0:dc:4a:2a:76:30:b1:51:
74:a0:1d:72:78:56:97:78:0c:c8:f7:78:40:b9:ee:
79:4f:2c:d0:b5:d2:c0:8c:8d:1e:7c:f1:04:b3:0d:
28:17:9b:90:93:2c:73:43:62:c1:3a:2b:f2:6b:1c:
e4:1f:1e:0c:6e:60:61:fc:78:db:cd:3a:4e:60:af:
af:b5:d7:fe:dd:45:3c:d5:13:d0:c4:5f:15:d0:60:
a6:66:9e:ce:70:d9:bd:91:88:cf:a2:e1:1d:ac:c6:
8b:8b:70:61:ad:5a:d2:1e:46:a8:31:7c:b6:04:cf:
85:48:73:1e:c0:a8:ff:77:66:ca:4e:f0:b8:64:e6:
7c:b0:29:6f:73:65:74:ee:93:d2:9b:3b:15:9f:cd:
3f:36:80:cc:ec:8b:c2:16:20:22:b5:bd:cc:ad:e6:
c6:32:e9:45:56:ab:8c:d2:38:ae:9f:51:0f:dd:cd:
3f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:5E:3C:09:C7:AA:DF:A9:20:71:41:BD:B6:22:1C:D9:37:81:4D:CF
X509v3 Authority Key Identifier:
keyid:D7:79:96:8E:66:ED:BE:A3:72:EF:95:BA:A2:BF:68:91:38:56:7A:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13mWjmbtvqNy75W6or9okThWekA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:9e:d7:be:5c:fb:b5:fd:64:45:7d:bb:b9:61:99:21:07:ca:
17:b6:80:8e:6d:69:0e:55:4f:5a:9d:6a:ab:0a:ad:86:cc:aa:
f9:ac:21:64:47:71:be:e3:1d:ac:72:ab:e0:08:58:17:5c:ac:
0a:4b:28:11:49:74:70:e3:b4:fd:21:1f:18:46:f1:21:b9:e5:
94:7b:97:c5:38:d1:52:44:61:c7:54:1d:26:b7:56:af:cd:91:
b1:86:1d:81:39:2f:97:5b:c4:be:50:a5:ac:58:07:d9:44:c4:
4e:e8:b7:76:7c:32:25:4d:44:c6:b2:83:5d:02:80:6b:bc:2a:
a3:ce:fb:79:1e:f8:00:f6:09:ac:9a:7b:da:b1:3e:e6:ed:77:
8b:f9:69:1f:63:bc:e1:f9:85:1e:94:50:c2:5e:69:e2:18:fa:
4b:f2:4b:54:5f:1f:59:b2:9a:cf:c6:4b:05:90:b0:5e:bd:53:
a2:d6:68:4d:df:4f:09:fb:d5:83:08:46:0f:19:06:e8:a4:90:
4b:dc:62:1f:69:11:f2:b9:fb:62:04:3b:5e:a0:23:ae:b7:19:
3c:84:d8:37:1c:fe:0d:b5:26:b8:1c:7e:fe:38:ea:45:07:b5:
a7:1a:43:e6:99:b9:c7:98:45:01:1e:29:0d:f9:66:11:10:b4:
82:f4:f7:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtPjl70gpNPH1hgdxQ9osXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3Nzk5NjhlNjZlZGJlYTM3MmVmOTViYWEyYmY2ODkxMzg1
NjdhNDAwHhcNMjUwNjE0MDcwMTIzWhcNMjUwNjE1MDcwMTIzWjAzMTEwLwYDVQQD
EygwOTVlM2MwOWM3YWFkZmE5MjA3MTQxYmRiNjIyMWNkOTM3ODE0ZGNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7g5wDV5AAZc4d9bhlMGPJFOUgMb4
D7e8UY5s1LtqqamxIrkq0mtS8fg+hSycub9o+xsYENvLP9JA8ZzBGAVxKeB8Oarc
mntuvNCQmGC5DUvksNxKKnYwsVF0oB1yeFaXeAzI93hAue55TyzQtdLAjI0efPEE
sw0oF5uQkyxzQ2LBOivyaxzkHx4MbmBh/HjbzTpOYK+vtdf+3UU81RPQxF8V0GCm
Zp7OcNm9kYjPouEdrMaLi3BhrVrSHkaoMXy2BM+FSHMewKj/d2bKTvC4ZOZ8sClv
c2V07pPSmzsVn80/NoDM7IvCFiAitb3MrebGMulFVquM0jiun1EP3c0/mQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAlePAnHqt+pIHFBvbYiHNk3gU3PMB8GA1UdIwQY
MBaAFNd5lo5m7b6jcu+VuqK/aJE4VnpAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTNtV2ptYnR2cU55NzVXNm9yOW9rVGhXZWtBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC85NGJmNWItZDM4YS00Yzc2LWIwMWYt
NmU2ZmEzOWJiMWVjLzEvMTNtV2ptYnR2cU55NzVXNm9yOW9rVGhXZWtBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC85NGJmNWItZDM4YS00Yzc2LWIwMWYtNmU2ZmEzOWJiMWVj
LzEvMTNtV2ptYnR2cU55NzVXNm9yOW9rVGhXZWtBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJZ7Xvlz7
tf1kRX27uWGZIQfKF7aAjm1pDlVPWp1qqwqthsyq+awhZEdxvuMdrHKr4AhYF1ys
CksoEUl0cOO0/SEfGEbxIbnllHuXxTjRUkRhx1QdJrdWr82RsYYdgTkvl1vEvlCl
rFgH2UTETui3dnwyJU1ExrKDXQKAa7wqo877eR74APYJrJp72rE+5u13i/lpH2O8
4fmFHpRQwl5p4hj6S/JLVF8fWbKaz8ZLBZCwXr1TotZoTd9PCfvVgwhGDxkG6KSQ
S9xiH2kR8rn7YgQ7XqAjrrcZPITYNxz+DbUmuBx+/jjqRQe1pxpD5pm5x5hFAR4p
DflmERC0gvT3NA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 10:33:37 2025 by rpki-client