Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/a284f7-aade-4168-a9d0-58be927f42e9/1/13j4yccHK3MEiPnjISjdiVveMtM.mft
File: 13j4yccHK3MEiPnjISjdiVveMtM.mft (raw, json)
Hash identifier: AvIVjmKRFZrv+/yZ/+Jdag0/UIa0wi0lDknwW7yLBOg=
Subject key identifier: 36:EF:85:66:86:52:F9:2D:3A:56:CA:AD:FD:33:AD:F3:7A:A1:D4:33
Authority key identifier: D7:78:F8:C9:C7:07:2B:73:04:88:F9:E3:21:28:DD:89:5B:DE:32:D3
Certificate issuer: /CN=d778f8c9c7072b730488f9e32128dd895bde32d3
Certificate serial: 01989F71118470401B37317301EADFD67C5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13j4yccHK3MEiPnjISjdiVveMtM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/a284f7-aade-4168-a9d0-58be927f42e9/1/13j4yccHK3MEiPnjISjdiVveMtM.mft
Manifest number: 0647
Signing time: Tue 12 Aug 2025 18:00:43 +0000
Manifest this update: Tue 12 Aug 2025 18:00:43 +0000
Manifest next update: Wed 13 Aug 2025 18:00:43 +0000
Files and hashes: 1: 13j4yccHK3MEiPnjISjdiVveMtM.crl (hash: osbRQvAki8tKDtbBCNlRKOJqpC+3+jKgOWNZPezIJ4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/a284f7-aade-4168-a9d0-58be927f42e9/1/13j4yccHK3MEiPnjISjdiVveMtM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/a284f7-aade-4168-a9d0-58be927f42e9/1/13j4yccHK3MEiPnjISjdiVveMtM.mft
rsync://rpki.ripe.net/repository/DEFAULT/13j4yccHK3MEiPnjISjdiVveMtM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:24:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:71:11:84:70:40:1b:37:31:73:01:ea:df:d6:7c:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d778f8c9c7072b730488f9e32128dd895bde32d3
Validity
Not Before: Aug 12 18:00:43 2025 GMT
Not After : Aug 13 18:00:43 2025 GMT
Subject: CN=36ef85668652f92d3a56caadfd33adf37aa1d433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:05:4d:19:61:75:73:64:87:00:e6:e7:e9:0c:
8d:f7:db:5c:98:20:be:5b:ad:c1:a7:c8:6f:16:e9:
67:58:ee:8a:b2:1b:e0:c4:fc:21:f8:02:99:89:ed:
50:8f:60:e1:62:84:29:f3:dd:db:50:e4:ad:e8:55:
d7:6a:f0:90:61:11:7c:cb:c9:dc:bd:63:04:43:60:
a3:6d:2d:5b:b0:09:47:93:14:dc:23:47:20:d7:02:
d2:eb:9c:5d:51:97:62:80:0c:c6:45:db:34:58:41:
a5:3c:5d:eb:f7:bd:e3:a7:c5:15:59:32:76:9d:b3:
3a:44:12:34:b1:67:4c:be:a1:8f:dd:ba:9a:39:be:
6b:0b:ea:d3:80:87:77:d3:53:47:cc:80:03:c2:32:
06:72:ae:32:f6:fc:89:66:5f:84:4c:23:5f:45:ad:
fa:cc:f4:35:07:be:03:63:a1:4c:52:91:d7:29:89:
90:92:3d:a4:cd:94:52:a6:ef:09:26:f4:8a:23:3a:
7e:90:24:0c:ac:60:50:75:78:df:7b:01:ce:63:4f:
16:ec:84:75:fc:8c:11:84:37:f7:cd:0e:cb:d9:42:
a6:f4:65:84:59:b7:4d:d4:62:e4:cb:a9:8a:d8:e0:
e7:34:17:7e:70:91:eb:23:dd:a9:e3:8e:2c:5c:7b:
8f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:EF:85:66:86:52:F9:2D:3A:56:CA:AD:FD:33:AD:F3:7A:A1:D4:33
X509v3 Authority Key Identifier:
keyid:D7:78:F8:C9:C7:07:2B:73:04:88:F9:E3:21:28:DD:89:5B:DE:32:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13j4yccHK3MEiPnjISjdiVveMtM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/a284f7-aade-4168-a9d0-58be927f42e9/1/13j4yccHK3MEiPnjISjdiVveMtM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/a284f7-aade-4168-a9d0-58be927f42e9/1/13j4yccHK3MEiPnjISjdiVveMtM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:39:72:e9:0c:c0:a4:8d:e7:1d:19:7a:90:3a:d4:bc:ad:30:
a9:3f:1d:a7:13:67:cd:9e:b9:14:bd:94:75:80:88:be:c3:da:
f4:12:0d:38:c4:6e:2e:e4:ef:84:80:cd:89:59:d4:16:37:9e:
fc:47:35:d4:ca:67:fb:91:e8:b4:82:2c:1b:41:3e:b2:31:c6:
b1:77:18:41:b7:05:56:7f:ac:c2:bb:a1:4f:66:2a:1f:c2:85:
86:83:ac:c5:3c:ae:c9:ba:61:67:6c:aa:94:91:bb:b4:16:40:
aa:10:59:92:b2:19:03:89:47:2d:0e:12:f4:88:29:cf:61:b5:
eb:b0:1a:68:1f:62:a9:49:08:6a:61:d4:36:7a:cd:95:a1:8a:
22:0c:11:25:ef:c4:0f:07:d0:50:cf:e3:81:f9:d0:3e:69:ba:
95:68:8a:6a:13:76:45:5b:12:ac:14:22:50:d3:aa:43:e9:63:
a8:24:4a:fd:50:20:20:18:1a:b3:38:3f:ea:3e:62:36:00:1c:
3a:57:9a:93:62:05:50:99:34:bc:b8:fe:e3:6f:ec:ca:51:d8:
40:ee:5f:22:0f:c7:f5:aa:39:8c:f6:d3:e2:c4:93:3b:c9:0d:
a8:97:c9:af:ba:6f:fb:87:b6:92:d7:ee:31:89:e3:82:7a:6d:
01:e6:2b:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 22:40:31 2025 by rpki-client