Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/13eW4WtWXXJzZphsycqcpj0aTlg.mft
File: 13eW4WtWXXJzZphsycqcpj0aTlg.mft (raw, json)
Hash identifier: uCEoZMQzTO5k1a2QyJg+ZAU+eBWL4YBYWhG47W07ZEY=
Subject key identifier: 77:1D:25:61:D6:5D:AE:59:C2:87:A9:B9:E1:A4:56:DA:90:BA:C6:B0
Authority key identifier: D7:77:96:E1:6B:56:5D:72:73:66:98:6C:C9:CA:9C:A6:3D:1A:4E:58
Certificate issuer: /CN=d77796e16b565d727366986cc9ca9ca63d1a4e58
Certificate serial: 019A4EF5BDB19FA833BD8787FD5242163658
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13eW4WtWXXJzZphsycqcpj0aTlg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/13eW4WtWXXJzZphsycqcpj0aTlg.mft
Manifest number: 042E
Signing time: Tue 04 Nov 2025 13:01:58 +0000
Manifest this update: Tue 04 Nov 2025 13:01:58 +0000
Manifest next update: Wed 05 Nov 2025 13:01:58 +0000
Files and hashes: 1: 13eW4WtWXXJzZphsycqcpj0aTlg.crl (hash: eJ94qnPI3/d8sWPOs5VwoIwce6i7LpNuWK2UPY+/h0c=)
2: NWVCp8Y4Yrwt2l5OQ2N28tAv5Vs.roa (hash: F9PS4+2YWZWixXX0triEKsctJpMJlaT/3wjK6G1EJGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/13eW4WtWXXJzZphsycqcpj0aTlg.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/13eW4WtWXXJzZphsycqcpj0aTlg.mft
rsync://rpki.ripe.net/repository/DEFAULT/13eW4WtWXXJzZphsycqcpj0aTlg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:bd:b1:9f:a8:33:bd:87:87:fd:52:42:16:36:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d77796e16b565d727366986cc9ca9ca63d1a4e58
Validity
Not Before: Nov 4 13:01:58 2025 GMT
Not After : Nov 5 13:01:58 2025 GMT
Subject: CN=771d2561d65dae59c287a9b9e1a456da90bac6b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ea:9a:76:5c:0d:fc:d5:f4:e7:a2:c0:7a:36:
34:85:1e:3e:69:3f:95:8b:2b:99:ea:45:d4:0b:bd:
e5:c1:83:43:39:ff:92:4c:86:84:83:62:e7:99:0d:
b6:26:7a:10:7e:f7:73:8f:76:52:1c:68:34:72:a7:
2e:87:69:65:ba:cd:a5:35:8d:39:87:8b:60:61:93:
e8:60:3a:48:d9:67:5c:eb:4a:cf:cf:96:3e:7a:88:
f4:00:48:82:d3:ff:ca:e9:4b:55:32:2a:9c:76:fc:
95:e4:bf:63:88:51:f1:0f:3d:22:ca:20:6e:64:7f:
39:ad:c2:50:e5:7f:b0:6f:6c:93:42:c2:b4:51:7c:
26:45:09:12:13:af:9c:70:bc:2d:2e:f0:8e:06:d1:
b2:4e:bc:9f:c2:8c:92:45:e3:a1:8d:80:47:e1:d1:
5b:de:3a:2f:09:82:14:6c:85:ed:4b:25:af:85:78:
d7:98:c7:3b:68:30:f9:79:84:f7:7c:4b:c6:a9:87:
bc:91:11:10:57:6d:a2:ea:9d:14:1f:5c:9f:89:24:
9a:a6:33:10:e3:c5:a1:fd:28:3c:ed:41:8f:a8:b2:
57:ab:fe:c6:8e:d4:d7:bd:cc:94:28:27:1b:29:1a:
32:e8:b8:b6:52:18:14:ea:e2:1e:a1:7a:9c:c0:92:
f8:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:1D:25:61:D6:5D:AE:59:C2:87:A9:B9:E1:A4:56:DA:90:BA:C6:B0
X509v3 Authority Key Identifier:
keyid:D7:77:96:E1:6B:56:5D:72:73:66:98:6C:C9:CA:9C:A6:3D:1A:4E:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13eW4WtWXXJzZphsycqcpj0aTlg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/13eW4WtWXXJzZphsycqcpj0aTlg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/13eW4WtWXXJzZphsycqcpj0aTlg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:5b:04:80:7f:21:76:4b:17:45:f9:af:1e:b9:75:6c:de:60:
b7:e3:2e:2f:e8:bf:1a:91:55:d6:1c:8d:e2:5a:1c:da:87:57:
f3:1e:09:bb:19:a7:d2:9b:ff:ca:1c:cf:67:88:19:35:e8:2d:
69:ad:4b:2e:c6:64:63:3e:40:3c:71:ca:37:ca:1a:7e:17:22:
1f:e2:ac:b4:8b:9d:e5:2d:71:33:e9:a7:a7:e4:cd:4d:a1:7a:
ec:41:b3:45:70:d5:b0:28:5f:13:40:f1:6a:c6:e1:05:6b:ae:
d9:49:3c:63:e8:cd:a2:be:ef:0a:b8:75:1a:6f:47:9f:82:39:
9e:3b:37:71:57:fd:37:6b:97:29:11:02:92:18:77:51:0a:40:
5e:2d:1f:0c:3f:e9:94:0c:c6:b6:01:83:d3:c2:df:4b:45:55:
92:06:d7:e1:9c:3c:75:83:c9:af:f7:91:8d:78:63:c4:ea:fa:
16:06:f7:38:64:c3:67:63:0c:ff:21:79:83:17:70:34:32:31:
31:4f:57:09:e7:9c:a0:b9:50:7d:f7:72:eb:ef:91:10:23:d6:
e8:59:b5:12:fd:21:05:42:88:2c:ac:b7:92:83:c9:b9:b9:bd:
8f:81:da:4c:e0:fb:61:12:43:c4:62:9f:02:02:28:b6:50:43:
1c:de:90:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:06:19 2025 by rpki-client