
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/13eW4WtWXXJzZphsycqcpj0aTlg.mft
File: 13eW4WtWXXJzZphsycqcpj0aTlg.mft (raw, json)
Hash identifier: hatMjzfLwpUPl59UjEYzTp0o/UwOvawa1QXgILvWjpM=
Subject key identifier: 70:1B:65:81:15:BB:78:C6:A9:47:0B:C4:5C:CA:35:88:41:3C:DD:D9
Authority key identifier: D7:77:96:E1:6B:56:5D:72:73:66:98:6C:C9:CA:9C:A6:3D:1A:4E:58
Certificate issuer: /CN=d77796e16b565d727366986cc9ca9ca63d1a4e58
Certificate serial: 0198A04D3FBB79F9678E8C309C97EDE90CFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13eW4WtWXXJzZphsycqcpj0aTlg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/13eW4WtWXXJzZphsycqcpj0aTlg.mft
Manifest number: 034F
Signing time: Tue 12 Aug 2025 22:01:13 +0000
Manifest this update: Tue 12 Aug 2025 22:01:13 +0000
Manifest next update: Wed 13 Aug 2025 22:01:13 +0000
Files and hashes: 1: 13eW4WtWXXJzZphsycqcpj0aTlg.crl (hash: E4xkdtp7HkGr/KQoMA4jhW2g9+KCoqq7+yskdt3/imY=)
2: NWVCp8Y4Yrwt2l5OQ2N28tAv5Vs.roa (hash: F9PS4+2YWZWixXX0triEKsctJpMJlaT/3wjK6G1EJGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/13eW4WtWXXJzZphsycqcpj0aTlg.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/13eW4WtWXXJzZphsycqcpj0aTlg.mft
rsync://rpki.ripe.net/repository/DEFAULT/13eW4WtWXXJzZphsycqcpj0aTlg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4d:3f:bb:79:f9:67:8e:8c:30:9c:97:ed:e9:0c:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d77796e16b565d727366986cc9ca9ca63d1a4e58
Validity
Not Before: Aug 12 22:01:13 2025 GMT
Not After : Aug 13 22:01:13 2025 GMT
Subject: CN=701b658115bb78c6a9470bc45cca3588413cddd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:25:46:38:cd:2f:bd:74:bb:73:a6:21:a6:e8:
df:b2:c0:1b:2f:53:a4:24:55:e1:fc:e9:19:b0:e3:
00:70:5c:54:45:e4:a0:47:be:0b:95:64:c7:9d:19:
bc:8d:41:97:d8:a6:0e:10:7a:c6:a1:5f:23:9e:19:
88:0a:8d:65:59:de:4c:61:e1:ec:da:e7:d1:80:36:
1a:fb:eb:32:0e:f8:ea:9c:0c:db:23:26:39:7d:45:
b6:07:43:b8:70:d6:f2:95:9a:32:58:73:a1:67:dc:
c9:cb:e7:09:28:91:ea:93:5b:5c:88:b2:92:f1:84:
4b:5f:8e:d2:7b:9a:8d:ef:22:7d:9f:f3:be:9a:18:
88:36:3a:2b:42:cc:9a:26:e2:9e:0f:0a:92:a9:40:
8a:71:aa:4e:8d:ce:46:7f:33:d0:81:8a:aa:1c:08:
ea:5c:cb:aa:21:f7:fe:f3:95:60:ab:bb:be:d0:61:
61:08:e0:e7:fc:6c:69:db:44:64:83:59:aa:c0:f6:
b9:ec:a5:c5:ff:86:c9:f2:29:f7:b8:bd:ba:37:1f:
4e:e9:08:21:d9:aa:c3:bf:f6:bd:5c:ab:51:69:cb:
55:56:09:50:e2:e7:58:88:0e:a5:3f:5b:f8:20:42:
52:0f:41:81:f0:e1:4b:25:b7:03:d7:ef:28:d0:ee:
42:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:1B:65:81:15:BB:78:C6:A9:47:0B:C4:5C:CA:35:88:41:3C:DD:D9
X509v3 Authority Key Identifier:
keyid:D7:77:96:E1:6B:56:5D:72:73:66:98:6C:C9:CA:9C:A6:3D:1A:4E:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13eW4WtWXXJzZphsycqcpj0aTlg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/13eW4WtWXXJzZphsycqcpj0aTlg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/13eW4WtWXXJzZphsycqcpj0aTlg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:3f:e4:e6:63:87:f8:ba:61:b5:42:b2:23:0b:70:a4:c6:34:
cb:80:b7:35:c8:b6:da:3d:9b:07:71:aa:30:77:e8:08:a3:4e:
d0:c4:fc:da:2f:4e:51:c8:df:3e:ef:9c:bc:06:27:15:3b:6f:
f6:99:1e:97:6f:b4:6f:f1:aa:f0:c5:3d:ff:c7:ba:8e:04:b9:
df:2c:c8:06:e0:11:24:9b:48:ab:ff:70:1a:20:d1:81:ea:63:
c3:02:99:db:80:74:31:6b:0e:8a:c9:31:a7:39:db:32:cc:8c:
e0:2d:5e:c3:89:d0:4a:32:f0:6e:8a:a1:a9:8d:b7:52:10:14:
33:d7:3e:7b:28:3f:60:53:1b:e3:3d:08:4e:0f:a8:e8:5b:b7:
2b:da:aa:3c:31:21:c1:c7:00:fd:b8:bb:44:80:b2:8e:08:b6:
7e:02:42:a6:f7:0f:6b:81:83:c3:fa:ca:9c:5e:0d:1f:ba:e1:
c6:05:02:f6:4c:42:33:0a:9f:52:37:af:2d:02:c1:d7:e9:f8:
cf:38:64:53:d0:32:bd:b7:8e:a0:c1:d7:34:92:9b:4e:e8:5c:
5b:64:a6:90:30:92:25:5b:99:14:51:d0:cd:01:cb:43:1e:ae:
1d:1e:4a:a8:52:ff:50:56:34:59:e9:0d:5a:06:56:b9:d5:13:
ac:c2:e8:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 07:57:43 2025 by rpki-client