Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/61fcb4-5574-4e2e-b259-ae05794c8e13/1/b13p-du9RhiFe1gQXGdDcgoRvG4.mft
File: b13p-du9RhiFe1gQXGdDcgoRvG4.mft (raw, json)
Hash identifier: t+vV9YLfHYcaCv3QO7r9gp9gzhXIyImMCaysIyKc2lo=
Subject key identifier: B0:01:3B:CE:76:06:8A:63:5D:EA:18:66:C7:CC:12:69:B1:9C:8E:4E
Authority key identifier: 6F:5D:E9:F9:DB:BD:46:18:85:7B:58:10:5C:67:43:72:0A:11:BC:6E
Certificate issuer: /CN=6f5de9f9dbbd4618857b58105c6743720a11bc6e
Certificate serial: 019874504764297D2A720A1536DDCEB9BB98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b13p-du9RhiFe1gQXGdDcgoRvG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/61fcb4-5574-4e2e-b259-ae05794c8e13/1/b13p-du9RhiFe1gQXGdDcgoRvG4.mft
Manifest number: 1619
Signing time: Mon 04 Aug 2025 09:01:14 +0000
Manifest this update: Mon 04 Aug 2025 09:01:14 +0000
Manifest next update: Tue 05 Aug 2025 09:01:14 +0000
Files and hashes: 1: 8DoxxFomKD_zymJ7maQao4Dgi38.roa (hash: AGu4l/EpDaIWVAApJov5+PsDhMXLA5NiuSkK6swCSP4=)
2: GgF2VUQVgZHdiRVSGdZfQ62lDlI.roa (hash: pE2Dj5yrvDRhlXyXHQIl24tLKcXekRo8xAVslPDVPZ0=)
3: b13p-du9RhiFe1gQXGdDcgoRvG4.crl (hash: IrnsPOANlkAv7Kdu4dSsD7aO5yyI31msZMrGoztOsr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/61fcb4-5574-4e2e-b259-ae05794c8e13/1/b13p-du9RhiFe1gQXGdDcgoRvG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/61fcb4-5574-4e2e-b259-ae05794c8e13/1/b13p-du9RhiFe1gQXGdDcgoRvG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/b13p-du9RhiFe1gQXGdDcgoRvG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:47:64:29:7d:2a:72:0a:15:36:dd:ce:b9:bb:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5de9f9dbbd4618857b58105c6743720a11bc6e
Validity
Not Before: Aug 4 09:01:14 2025 GMT
Not After : Aug 5 09:01:14 2025 GMT
Subject: CN=b0013bce76068a635dea1866c7cc1269b19c8e4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8c:80:64:e5:d5:b7:7e:20:a7:ea:f1:13:8e:
6e:2c:df:bd:08:1a:7b:8d:71:7c:10:c4:99:8a:44:
a7:7b:3e:ff:37:16:d1:1b:ba:5d:47:bb:da:b8:a6:
91:b9:b7:a6:76:7c:72:5d:98:10:9d:08:4e:ff:ad:
38:11:1c:c6:cd:13:8e:89:bb:d8:c6:ff:ee:99:6d:
4e:76:46:98:1b:d5:99:60:28:ef:f7:53:68:46:c4:
35:96:fc:6c:03:55:64:ba:1d:35:30:84:db:f0:86:
07:9a:34:0b:5e:58:5e:06:b9:e4:e3:03:9b:58:22:
54:00:76:13:6b:df:57:62:6f:1d:01:cb:ce:d5:66:
af:b6:b3:c1:17:5d:fb:10:54:41:2d:bf:97:6a:e4:
ae:e9:5a:71:76:00:d0:46:a5:9b:0d:df:dd:aa:64:
eb:b2:62:22:96:53:7e:f4:2d:81:a2:6b:f1:97:31:
12:31:8d:73:01:78:94:4f:0d:8b:70:22:e6:80:ea:
f3:14:7c:d9:11:9c:c0:40:60:ac:76:91:ff:c8:08:
40:47:da:a9:e8:39:be:18:dd:bf:af:77:d7:15:8c:
c1:bb:f1:17:65:80:34:d8:b1:ef:b1:ca:9e:80:29:
07:34:df:81:fd:35:c6:cb:90:a7:fc:43:48:a5:e1:
69:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:01:3B:CE:76:06:8A:63:5D:EA:18:66:C7:CC:12:69:B1:9C:8E:4E
X509v3 Authority Key Identifier:
keyid:6F:5D:E9:F9:DB:BD:46:18:85:7B:58:10:5C:67:43:72:0A:11:BC:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b13p-du9RhiFe1gQXGdDcgoRvG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/61fcb4-5574-4e2e-b259-ae05794c8e13/1/b13p-du9RhiFe1gQXGdDcgoRvG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/61fcb4-5574-4e2e-b259-ae05794c8e13/1/b13p-du9RhiFe1gQXGdDcgoRvG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:23:0f:9e:08:ee:ce:86:26:d4:c2:86:9b:61:31:a9:d3:e2:
c1:9d:9a:27:9a:3e:07:c7:a2:98:86:df:cc:df:dc:36:4b:9f:
6d:ad:14:a0:c1:b2:05:66:c2:8a:c5:89:21:e0:02:3c:5f:f4:
74:a8:d7:9d:e4:fc:40:7b:d3:1e:9c:9e:46:60:51:b4:65:93:
ef:03:75:07:9f:57:4f:8a:6f:b2:c1:10:30:fd:1d:41:65:38:
05:15:2d:78:6c:00:8b:7d:e5:35:78:2d:47:ed:8a:91:74:09:
fd:cf:86:18:72:70:bd:16:99:71:dc:cf:3a:01:fc:dd:ec:fc:
62:30:87:51:f1:58:e8:ae:62:93:76:56:1f:67:22:3f:82:7e:
92:76:aa:8b:a1:03:c7:42:45:9b:b5:15:f8:ae:b2:8a:99:64:
37:5b:d8:cb:1c:96:9b:04:47:a8:45:29:f8:fc:d6:43:4d:88:
6a:8c:37:85:2d:d4:55:a9:1b:13:7b:6f:6e:70:8b:2e:13:5a:
d6:92:21:eb:0c:b5:05:f4:d8:b4:24:59:b5:5b:a7:be:5a:2c:
89:16:bf:c6:6c:c4:0d:62:85:96:9a:87:9a:73:6a:eb:68:fc:
6e:27:16:a3:87:cf:df:76:7c:59:12:f9:af:21:60:39:4d:5e:
61:be:61:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:07:21 2025 by rpki-client