Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.mft
File: 13EApGzEauiWvcLg4HTjBVq4hns.mft (raw, json)
Hash identifier: mGiRey/iWt/lIDVL415oO9uPpnP1AAlMx7yRz14o850=
Subject key identifier: A0:BD:85:B5:41:79:87:19:F0:FB:B0:BB:20:CA:1C:61:07:CF:18:A8
Authority key identifier: D7:71:00:A4:6C:C4:6A:E8:96:BD:C2:E0:E0:74:E3:05:5A:B8:86:7B
Certificate issuer: /CN=d77100a46cc46ae896bdc2e0e074e3055ab8867b
Certificate serial: 019A4EF49844EC614C0A038362901559B5EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13EApGzEauiWvcLg4HTjBVq4hns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.mft
Manifest number: 0BC8
Signing time: Tue 04 Nov 2025 13:00:43 +0000
Manifest this update: Tue 04 Nov 2025 13:00:43 +0000
Manifest next update: Wed 05 Nov 2025 13:00:43 +0000
Files and hashes: 1: 13EApGzEauiWvcLg4HTjBVq4hns.crl (hash: bhASkwxMUR+oBuyOvfvFpGky6x+op1t1tsouQwMSVlM=)
2: 6MSYGKF8IeOAnuWHzZZC0qhgq04.roa (hash: pb27wRmWoWlrx/SmVVrzytomA3OBU87y85i5bwHixqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.mft
rsync://rpki.ripe.net/repository/DEFAULT/13EApGzEauiWvcLg4HTjBVq4hns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:98:44:ec:61:4c:0a:03:83:62:90:15:59:b5:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d77100a46cc46ae896bdc2e0e074e3055ab8867b
Validity
Not Before: Nov 4 13:00:43 2025 GMT
Not After : Nov 5 13:00:43 2025 GMT
Subject: CN=a0bd85b541798719f0fbb0bb20ca1c6107cf18a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:6e:c4:c6:4a:a5:39:47:e8:06:57:c0:9e:9e:
53:44:fe:f5:5e:bd:3e:2d:cb:db:e2:0d:39:3e:59:
48:99:b1:88:f7:a3:06:d2:d2:69:7c:fb:55:9e:01:
ae:cf:b3:b7:0c:f1:09:5e:50:dd:cd:2c:ad:da:57:
1e:ac:be:55:93:d2:1e:0b:2f:01:c3:d4:91:a9:1e:
b3:30:e8:3b:6e:24:f8:b0:1e:9e:eb:51:6c:75:1c:
2c:f1:ab:6d:58:d9:b5:70:62:3d:3f:ea:d5:5d:ee:
06:99:8b:e4:d3:c1:92:40:fa:69:df:33:15:0e:b6:
67:b7:8c:b8:2d:4c:8b:db:ec:f4:8b:cd:1e:23:76:
d7:8d:c5:52:67:bb:d0:cd:3c:f4:34:80:9c:b9:31:
6b:9a:76:ae:55:ef:ee:0e:1e:2c:42:b7:c5:8d:ba:
cd:ee:a6:4e:9d:3c:b2:26:54:de:57:19:26:a9:ca:
24:f9:93:ae:18:6f:b3:d1:b6:6b:23:b1:ab:27:6a:
52:d7:1d:eb:ab:c9:27:23:f3:bc:c1:41:ba:7d:78:
64:fe:dc:2b:39:ab:fa:11:b5:03:ac:03:1b:21:9d:
90:61:81:67:50:f7:92:70:47:0e:d9:6d:31:0c:de:
f0:8e:ac:2e:5d:a2:13:18:78:05:d0:ef:87:7d:ec:
77:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:BD:85:B5:41:79:87:19:F0:FB:B0:BB:20:CA:1C:61:07:CF:18:A8
X509v3 Authority Key Identifier:
keyid:D7:71:00:A4:6C:C4:6A:E8:96:BD:C2:E0:E0:74:E3:05:5A:B8:86:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13EApGzEauiWvcLg4HTjBVq4hns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:18:6a:6f:6a:45:cc:37:7e:a0:75:be:9f:40:0a:30:a7:36:
1e:47:bc:83:61:83:9d:35:93:7d:0a:3e:6d:c0:7c:0e:a9:4c:
f1:63:91:d2:c3:68:59:93:63:a1:a9:21:63:e5:cb:22:c5:b2:
84:b8:a4:dc:b9:de:61:ec:ed:9e:2b:f6:a1:b5:3e:ea:79:5e:
29:b0:05:f1:78:a9:d8:1f:61:73:88:38:c4:9b:00:24:82:2a:
20:cb:1c:df:f3:4d:bb:64:18:d7:e2:73:53:fa:ba:42:5c:7b:
91:9a:dc:84:ed:d4:d8:a4:ae:f9:87:0e:5b:f5:33:f7:ad:4c:
5e:d0:90:f4:49:80:e8:95:dc:fd:c5:0a:42:95:10:58:17:8c:
7d:6b:8b:35:bf:f4:b0:6a:26:0e:fa:64:d8:32:cd:d2:2c:fd:
30:8a:3d:96:fb:4d:0a:a0:d9:c4:c2:36:6b:70:6c:60:6a:5e:
30:f7:d3:19:09:c9:ee:99:30:f3:fc:8c:99:73:77:20:85:8b:
6c:5c:90:24:8a:7e:10:d7:a1:b0:df:a2:76:a2:8d:c5:fe:86:
fc:9c:32:15:97:a0:0b:89:33:56:29:b4:99:89:5d:37:47:f0:
78:6c:3c:c8:67:c5:fd:8e:c3:9f:84:d8:83:41:a5:73:07:76:
ce:b6:19:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:22:12 2025 by rpki-client