Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.mft
File: 13eUOzQRiOnNLpPeKIsz_-BBx9I.mft (raw, json)
Hash identifier: Y8gHb/gsJMnSWoxvCa+0za3UJFTV1kKJ1sS6Pe8UW1Q=
Subject key identifier: 4F:2E:8A:F6:69:FF:97:B8:FE:8A:72:55:0C:48:67:28:93:8A:F6:11
Authority key identifier: D7:77:94:3B:34:11:88:E9:CD:2E:93:DE:28:8B:33:FF:E0:41:C7:D2
Certificate issuer: /CN=d777943b341188e9cd2e93de288b33ffe041c7d2
Certificate serial: 019894B7018193ACDF05E38B11B9AD596B3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13eUOzQRiOnNLpPeKIsz_-BBx9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.mft
Manifest number: 1628
Signing time: Sun 10 Aug 2025 16:01:17 +0000
Manifest this update: Sun 10 Aug 2025 16:01:17 +0000
Manifest next update: Mon 11 Aug 2025 16:01:17 +0000
Files and hashes: 1: 13eUOzQRiOnNLpPeKIsz_-BBx9I.crl (hash: QggF23ueDMaMaz0HJTqz/5wVmNvDDtcjtyXyN2FmLpQ=)
2: f0gof4jxw94Oa83YFTdbTbKjLPk.roa (hash: TTuzPsw9kpuOO/S82uUhytdELCayKcLt12jYeRdVVIg=)
3: fI_1hDVc0AIsq5nMQmL9xfz1kXA.roa (hash: 89mtvnCyTjJUBdmS9eZxdF32JISfZjUl73RykEZkqVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/13eUOzQRiOnNLpPeKIsz_-BBx9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 16:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:b7:01:81:93:ac:df:05:e3:8b:11:b9:ad:59:6b:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d777943b341188e9cd2e93de288b33ffe041c7d2
Validity
Not Before: Aug 10 16:01:17 2025 GMT
Not After : Aug 11 16:01:17 2025 GMT
Subject: CN=4f2e8af669ff97b8fe8a72550c486728938af611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d3:ee:f3:41:4d:ae:d2:54:a1:3a:8b:87:16:
4b:74:70:9c:33:6b:32:9b:89:b2:73:15:5c:b6:6d:
0c:e3:0c:45:e8:00:4c:9c:f4:4b:61:09:17:02:9f:
f5:2b:45:24:aa:e0:d2:85:31:d6:70:8f:61:7c:2a:
92:c0:e1:7b:20:c5:9f:9f:6f:51:87:0d:7e:2a:4e:
11:b2:3c:85:5b:ad:d0:75:32:24:99:2d:bc:89:2a:
92:0e:98:76:43:7f:e8:dc:c9:fb:21:c9:d8:30:32:
34:64:5e:7b:96:c3:ee:32:2e:94:c0:d0:45:ea:7d:
d3:b6:16:5e:84:d8:53:41:1d:dc:d2:2e:51:85:e5:
63:24:76:fa:71:19:1b:3e:9d:ce:50:50:01:22:08:
d9:dd:4c:6e:5f:3a:58:6e:e2:64:08:c8:c7:60:eb:
89:a5:5e:65:27:1e:b4:0b:2f:3a:7f:b1:8f:4e:fe:
9b:3e:b9:39:8c:bb:17:64:02:fd:fb:d5:3a:18:06:
9c:02:5c:83:0e:36:3b:0b:ea:11:2f:ae:15:80:0d:
59:a9:42:90:be:1e:02:7a:fe:8b:fa:b8:b5:02:32:
d4:33:67:63:73:a2:5b:d4:82:63:7f:36:48:f3:86:
2e:35:29:89:d7:45:b0:69:a9:81:69:d4:c5:cd:f6:
f9:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:2E:8A:F6:69:FF:97:B8:FE:8A:72:55:0C:48:67:28:93:8A:F6:11
X509v3 Authority Key Identifier:
keyid:D7:77:94:3B:34:11:88:E9:CD:2E:93:DE:28:8B:33:FF:E0:41:C7:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13eUOzQRiOnNLpPeKIsz_-BBx9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:b4:fd:03:85:05:1a:b8:1d:9c:f1:f4:e8:70:98:ae:ca:1b:
71:e9:59:50:7d:f2:64:19:13:7d:eb:a8:a3:1e:d0:f9:3e:2f:
2b:63:18:84:cc:86:ce:bc:ee:9c:20:79:44:b9:b2:a6:97:d5:
a3:28:5b:06:d7:f1:51:f2:2c:07:23:1e:e9:67:3b:ad:67:1e:
a9:a6:24:50:32:16:aa:e5:01:02:db:5b:3e:05:dc:ce:49:f5:
5d:39:4e:f2:46:f5:56:c1:e1:62:ca:60:57:3e:85:53:7a:8e:
f4:57:c9:b5:7a:6a:c5:21:c7:cc:dd:c1:b6:cf:0c:db:b0:dd:
25:ca:16:58:cc:7b:37:3d:05:73:82:6a:4e:1f:4d:77:91:19:
46:68:a8:cd:da:49:a5:d4:fb:3c:44:34:9b:98:f0:44:e2:e5:
dc:24:d5:db:5d:0d:13:6a:2b:a2:f4:91:b7:ad:be:85:33:70:
22:c2:06:6e:d0:c7:1f:35:69:2d:8d:5f:8c:50:36:fa:25:8d:
35:26:2b:35:f4:e6:5f:ba:82:4e:c9:28:3f:67:4a:68:5e:8a:
01:19:e6:f4:29:7c:c9:d9:49:14:8d:e1:5e:14:37:3b:50:d4:
31:2b:04:f1:b1:34:19:72:8e:f7:86:41:85:69:2d:87:97:5a:
79:df:b3:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 21:00:30 2025 by rpki-client