Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.mft
File: 13mWjmbtvqNy75W6or9okThWekA.mft (raw, json)
Hash identifier: ig+cY3hhbXZJLD7YguU/Oqpe1vQVQlKnL/W5SdKFq/I=
Subject key identifier: 64:EE:F3:40:AB:96:D1:F7:51:36:60:73:3C:36:2D:8E:29:9D:B5:B5
Authority key identifier: D7:79:96:8E:66:ED:BE:A3:72:EF:95:BA:A2:BF:68:91:38:56:7A:40
Certificate issuer: /CN=d779968e66edbea372ef95baa2bf689138567a40
Certificate serial: 019896A6EA0BFF63A9FCCDD094FA624790AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13mWjmbtvqNy75W6or9okThWekA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.mft
Manifest number: 162B
Signing time: Mon 11 Aug 2025 01:02:57 +0000
Manifest this update: Mon 11 Aug 2025 01:02:57 +0000
Manifest next update: Tue 12 Aug 2025 01:02:57 +0000
Files and hashes: 1: 13mWjmbtvqNy75W6or9okThWekA.crl (hash: brSxJuU9Pm4F4f3ut25eYpvJAQmxpslY6TmIU2NsmZE=)
2: I4emCne_29V28uUFcYz5hu_Rezg.roa (hash: 96USF7uc276n2Rs/poozBmGnwe39xgiKf2HQGb9xcQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.mft
rsync://rpki.ripe.net/repository/DEFAULT/13mWjmbtvqNy75W6or9okThWekA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:02:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a6:ea:0b:ff:63:a9:fc:cd:d0:94:fa:62:47:90:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d779968e66edbea372ef95baa2bf689138567a40
Validity
Not Before: Aug 11 01:02:57 2025 GMT
Not After : Aug 12 01:02:57 2025 GMT
Subject: CN=64eef340ab96d1f7513660733c362d8e299db5b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bb:3a:9e:7f:2f:74:63:a0:d9:4e:49:90:05:
f4:54:d3:77:4a:b4:4b:72:67:3d:b0:0c:24:5a:ee:
9d:5c:57:a3:19:c2:24:27:b4:1c:c4:ab:bb:d6:aa:
d8:c5:3e:55:ec:a1:68:1a:ae:39:4e:d1:8f:3c:1d:
03:87:ce:c3:5c:eb:02:a7:52:67:20:5a:64:a4:e6:
57:c2:0e:64:85:8f:79:72:7f:33:43:ae:96:01:10:
9a:9a:1a:98:0c:a0:c5:a4:69:ee:96:85:f5:ce:a8:
43:fd:1f:4a:f7:f5:97:7f:9c:33:1c:89:20:d2:5e:
7d:e9:42:c5:10:23:c5:a5:bf:35:d0:f7:2c:8b:b6:
bb:82:8d:19:6c:cc:39:4f:85:e7:a6:e1:0c:fe:05:
2a:2e:ab:b9:9f:f2:95:10:2c:92:73:90:ed:a8:9e:
f3:8e:99:65:8e:37:86:a8:e5:ce:53:4e:30:9a:6e:
c3:4e:6d:c0:82:7b:8a:68:71:35:a4:f9:59:b3:76:
7a:4d:07:29:6a:0c:6c:e6:d7:a9:50:87:0f:47:f9:
b9:f3:9d:89:1b:a7:41:5e:b3:47:32:9a:a1:38:14:
87:03:0a:9d:4d:2e:0a:ba:18:7d:ba:f2:59:62:8f:
f0:f5:af:e0:4a:a9:7c:44:79:a1:26:a6:28:f6:62:
86:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:EE:F3:40:AB:96:D1:F7:51:36:60:73:3C:36:2D:8E:29:9D:B5:B5
X509v3 Authority Key Identifier:
keyid:D7:79:96:8E:66:ED:BE:A3:72:EF:95:BA:A2:BF:68:91:38:56:7A:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13mWjmbtvqNy75W6or9okThWekA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:6a:91:0c:75:44:90:d2:0b:72:08:06:82:56:e9:02:a8:a2:
22:4f:b8:ec:76:10:3c:eb:dd:49:e8:d0:f6:c4:8b:bb:24:c4:
bb:b7:20:37:3d:a9:f7:35:95:7b:ec:ae:28:8c:c0:ff:94:6c:
35:9e:47:93:e2:68:fe:61:4e:81:61:fb:c4:19:94:a8:21:ce:
3b:2b:32:64:10:e8:6c:d2:c2:c9:7e:71:32:19:79:91:7a:fa:
20:01:12:ae:48:7f:2d:20:6f:27:6b:4e:2c:75:5c:38:8d:4a:
b1:ea:15:10:bc:b1:6a:9c:cd:d2:43:3f:75:04:fc:0b:af:5b:
6a:8e:8a:e3:5f:50:5b:bc:40:03:a2:4a:76:2a:61:d7:b6:bf:
a6:67:90:e7:e9:32:a9:6d:5a:e1:61:45:c9:5d:90:36:7c:f2:
24:03:f3:2f:ca:35:5d:c8:25:3d:c8:55:22:23:61:f3:2d:c2:
f1:d0:d0:3f:ea:11:cf:d7:6a:cc:be:95:4b:a8:91:b4:08:a3:
55:60:a6:ab:66:b4:a4:b3:1e:75:64:88:a3:1f:e7:a1:13:67:
ee:c9:f2:79:ed:79:ab:b2:d8:4f:92:c5:fa:d3:6b:f0:5a:55:
50:9d:76:7b:a5:3d:80:2a:54:46:c6:21:f2:be:4c:c7:f9:54:
24:f1:40:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiWpuoL/2Op/M3QlPpiR5CtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3Nzk5NjhlNjZlZGJlYTM3MmVmOTViYWEyYmY2ODkxMzg1
NjdhNDAwHhcNMjUwODExMDEwMjU3WhcNMjUwODEyMDEwMjU3WjAzMTEwLwYDVQQD
Eyg2NGVlZjM0MGFiOTZkMWY3NTEzNjYwNzMzYzM2MmQ4ZTI5OWRiNWI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbs6nn8vdGOg2U5JkAX0VNN3SrRL
cmc9sAwkWu6dXFejGcIkJ7QcxKu71qrYxT5V7KFoGq45TtGPPB0Dh87DXOsCp1Jn
IFpkpOZXwg5khY95cn8zQ66WARCamhqYDKDFpGnuloX1zqhD/R9K9/WXf5wzHIkg
0l596ULFECPFpb810Pcsi7a7go0ZbMw5T4XnpuEM/gUqLqu5n/KVECySc5DtqJ7z
jplljjeGqOXOU04wmm7DTm3AgnuKaHE1pPlZs3Z6TQcpagxs5tepUIcPR/m5852J
G6dBXrNHMpqhOBSHAwqdTS4Kuhh9uvJZYo/w9a/gSql8RHmhJqYo9mKGRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGTu80CrltH3UTZgczw2LY4pnbW1MB8GA1UdIwQY
MBaAFNd5lo5m7b6jcu+VuqK/aJE4VnpAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTNtV2ptYnR2cU55NzVXNm9yOW9rVGhXZWtBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC85NGJmNWItZDM4YS00Yzc2LWIwMWYt
NmU2ZmEzOWJiMWVjLzEvMTNtV2ptYnR2cU55NzVXNm9yOW9rVGhXZWtBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC85NGJmNWItZDM4YS00Yzc2LWIwMWYtNmU2ZmEzOWJiMWVj
LzEvMTNtV2ptYnR2cU55NzVXNm9yOW9rVGhXZWtBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu2qRDHVE
kNILcggGglbpAqiiIk+47HYQPOvdSejQ9sSLuyTEu7cgNz2p9zWVe+yuKIzA/5Rs
NZ5Hk+Jo/mFOgWH7xBmUqCHOOysyZBDobNLCyX5xMhl5kXr6IAESrkh/LSBvJ2tO
LHVcOI1KseoVELyxapzN0kM/dQT8C69bao6K419QW7xAA6JKdiph17a/pmeQ5+ky
qW1a4WFFyV2QNnzyJAPzL8o1XcglPchVIiNh8y3C8dDQP+oRz9dqzL6VS6iRtAij
VWCmq2a0pLMedWSIox/noRNn7snyee15q7LYT5LF+tNr8FpVUJ12e6U9gCpURsYh
8r5Mx/lUJPFA7g==
-----END CERTIFICATE-----
Generated at Mon Aug 11 07:23:28 2025 by rpki-client