Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/13eW4WtWXXJzZphsycqcpj0aTlg.mft
File: 13eW4WtWXXJzZphsycqcpj0aTlg.mft (raw, json)
Hash identifier: gxJFEILENG6R2qQifjTBiGMhsBVxOF5DhCImPuMHHcs=
Subject key identifier: 15:F3:52:FB:7F:C0:CE:39:59:11:A6:73:3C:BC:9D:FE:31:2D:1B:E0
Authority key identifier: D7:77:96:E1:6B:56:5D:72:73:66:98:6C:C9:CA:9C:A6:3D:1A:4E:58
Certificate issuer: /CN=d77796e16b565d727366986cc9ca9ca63d1a4e58
Certificate serial: 0197884821B0DC201E6248963ABA14372777
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13eW4WtWXXJzZphsycqcpj0aTlg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/13eW4WtWXXJzZphsycqcpj0aTlg.mft
Manifest number: 02BE
Signing time: Thu 19 Jun 2025 13:01:57 +0000
Manifest this update: Thu 19 Jun 2025 13:01:57 +0000
Manifest next update: Fri 20 Jun 2025 13:01:57 +0000
Files and hashes: 1: 13eW4WtWXXJzZphsycqcpj0aTlg.crl (hash: vTVF3io42N+xFxCxmlgBe1dSsvJiuIEwqKeUMmMP/+o=)
2: NWVCp8Y4Yrwt2l5OQ2N28tAv5Vs.roa (hash: F9PS4+2YWZWixXX0triEKsctJpMJlaT/3wjK6G1EJGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/13eW4WtWXXJzZphsycqcpj0aTlg.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/13eW4WtWXXJzZphsycqcpj0aTlg.mft
rsync://rpki.ripe.net/repository/DEFAULT/13eW4WtWXXJzZphsycqcpj0aTlg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 10:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:88:48:21:b0:dc:20:1e:62:48:96:3a:ba:14:37:27:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d77796e16b565d727366986cc9ca9ca63d1a4e58
Validity
Not Before: Jun 19 13:01:57 2025 GMT
Not After : Jun 20 13:01:57 2025 GMT
Subject: CN=15f352fb7fc0ce395911a6733cbc9dfe312d1be0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:90:f3:7f:4b:0e:8c:fc:5e:7e:30:9b:e2:d5:
ed:14:3e:0d:09:5d:13:be:77:aa:68:72:18:6b:d4:
9b:6e:3d:fb:2e:e3:cf:d0:e7:f2:d9:4b:eb:5f:c4:
07:1e:9d:87:5c:e1:29:c1:79:2d:a7:a8:16:64:6b:
61:76:a4:1c:da:6f:db:39:53:23:64:8e:d4:9d:b9:
e6:c6:fe:18:ee:4f:15:3a:e4:98:95:d7:64:f4:af:
50:b3:59:dd:1d:99:05:97:b0:92:37:cc:36:dc:29:
52:d5:66:d9:a4:0c:a0:63:1f:3f:52:8c:15:04:75:
c3:52:7f:0a:fd:a1:d9:ae:d7:82:35:95:c3:a7:d5:
19:49:7a:e2:f4:9c:37:ec:a5:2a:47:ed:56:20:e9:
b5:d8:b6:2e:13:57:bb:4e:a2:cf:34:15:99:b3:a1:
5a:be:bf:e4:45:27:d1:ec:bb:0b:d4:c0:ed:5a:ca:
68:19:ef:04:a0:d2:3c:84:6c:70:c2:56:a9:5f:fe:
67:a4:b6:ce:b8:b3:13:e8:36:19:34:b2:d3:06:9f:
cb:97:e9:20:81:be:87:2a:a8:38:9c:bd:ac:b4:7a:
9c:60:f6:04:74:b9:1d:f3:28:5f:74:a9:c4:67:73:
5b:49:e8:a3:9e:d1:09:ce:ab:24:ca:fd:fd:03:0d:
55:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:F3:52:FB:7F:C0:CE:39:59:11:A6:73:3C:BC:9D:FE:31:2D:1B:E0
X509v3 Authority Key Identifier:
keyid:D7:77:96:E1:6B:56:5D:72:73:66:98:6C:C9:CA:9C:A6:3D:1A:4E:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13eW4WtWXXJzZphsycqcpj0aTlg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/13eW4WtWXXJzZphsycqcpj0aTlg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/13eW4WtWXXJzZphsycqcpj0aTlg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:fe:50:0c:63:25:7a:9f:fd:33:e5:fd:ab:9a:cf:1d:46:8d:
35:f7:a2:ee:70:fd:41:ce:ad:49:c8:39:88:43:c1:71:04:b7:
12:46:82:e0:64:5a:9f:5a:07:f6:f1:b1:86:2f:e3:0e:13:5f:
4a:db:67:04:19:f4:d5:3d:5c:7c:b1:bd:3a:c5:b8:6e:23:9e:
cb:a3:6a:e7:ce:1e:cf:55:fe:f1:db:8a:69:a7:89:68:89:03:
ab:e4:32:2a:3a:e2:eb:86:be:28:71:39:8c:b4:51:1c:39:ca:
6f:e2:26:8a:4d:52:1e:91:59:29:8f:94:c6:89:2f:76:96:6c:
c3:32:0a:20:dd:12:20:f6:30:e7:0a:1a:d1:2b:04:e8:13:0e:
48:f7:e5:f8:a1:c0:8f:70:9b:47:d4:6c:13:69:25:ce:73:6f:
2a:75:d2:ca:df:d7:e0:00:b0:61:ff:45:62:3a:28:88:71:13:
ec:9d:6c:21:98:9e:9d:bb:7a:ea:81:98:64:ba:fb:cf:06:da:
07:e9:60:52:e5:4d:82:cf:d7:e6:a5:79:e8:a1:12:c9:e5:8d:
8f:40:72:52:a8:e9:f2:3a:91:91:11:ef:d2:06:39:ec:c6:22:
57:95:30:4f:66:d4:e5:13:2a:21:2b:37:5b:a7:bc:2f:be:c7:
54:70:fd:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 20:08:52 2025 by rpki-client