Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/37529e-d976-47b5-b690-389d214af830/1/13BmKFIPfdrO9yQ276VGNcUs_ck.mft
File: 13BmKFIPfdrO9yQ276VGNcUs_ck.mft (raw, json)
Hash identifier: vEeqpjEhQL98wwZDG9m0eVMCee7gAu1LmR+lMq03Jxk=
Subject key identifier: 69:CB:E7:DB:56:6C:B4:32:73:0E:DF:A9:FD:65:3A:A5:6E:50:82:E0
Authority key identifier: D7:70:66:28:52:0F:7D:DA:CE:F7:24:36:EF:A5:46:35:C5:2C:FD:C9
Certificate issuer: /CN=d7706628520f7ddacef72436efa54635c52cfdc9
Certificate serial: 019A522C8E3B4BF44EF6DAB53D94F826CCFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13BmKFIPfdrO9yQ276VGNcUs_ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/37529e-d976-47b5-b690-389d214af830/1/13BmKFIPfdrO9yQ276VGNcUs_ck.mft
Manifest number: 0DE1
Signing time: Wed 05 Nov 2025 04:00:42 +0000
Manifest this update: Wed 05 Nov 2025 04:00:42 +0000
Manifest next update: Thu 06 Nov 2025 04:00:42 +0000
Files and hashes: 1: 13BmKFIPfdrO9yQ276VGNcUs_ck.crl (hash: yiNIn/uBGsKoV5dHW9sR106KIvhfvUYzkFyLYlIIwvQ=)
2: LWrGDXX6ciAd2Zvp80Iu8-lVS1w.roa (hash: nxBz/fdInsAkI2qFUQ+K8HVyUw7MTfQxJc9ae20ze20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/37529e-d976-47b5-b690-389d214af830/1/13BmKFIPfdrO9yQ276VGNcUs_ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/37529e-d976-47b5-b690-389d214af830/1/13BmKFIPfdrO9yQ276VGNcUs_ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/13BmKFIPfdrO9yQ276VGNcUs_ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:8e:3b:4b:f4:4e:f6:da:b5:3d:94:f8:26:cc:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7706628520f7ddacef72436efa54635c52cfdc9
Validity
Not Before: Nov 5 04:00:42 2025 GMT
Not After : Nov 6 04:00:42 2025 GMT
Subject: CN=69cbe7db566cb432730edfa9fd653aa56e5082e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e6:ed:58:cc:41:d2:56:d0:c9:f5:43:74:91:
29:02:d6:6b:15:78:d9:b7:fb:54:15:a4:fe:65:b0:
c0:fe:35:e2:53:f0:ed:51:f7:3e:9e:9f:a0:44:4e:
41:03:04:90:06:16:5c:d2:46:68:e7:b7:16:a5:ed:
04:02:f3:73:2d:ae:94:5e:73:0b:13:93:07:cd:37:
f4:36:2f:b3:55:67:f0:b9:d0:f0:23:35:9a:72:63:
df:b3:c3:3f:bc:a7:a3:1e:a7:d3:3f:a8:4e:c7:5b:
a3:b7:2b:a7:2b:27:21:ba:6e:0c:c2:46:5c:bf:3a:
0c:d3:7e:da:d9:19:44:58:b0:eb:96:b5:fe:5c:5e:
30:0f:25:ca:86:4b:8e:1b:0e:fd:0d:14:f1:f0:dd:
8d:62:93:39:20:a5:db:1b:2a:2d:76:b5:ea:45:b7:
29:80:d3:5e:fd:34:ca:9c:ef:f3:56:6c:77:09:50:
24:74:da:6a:99:e4:fa:26:a4:b2:0f:19:c3:c7:75:
8e:e9:ed:9c:b6:34:76:5f:6a:d5:1c:06:b3:80:69:
3c:42:15:9f:77:dd:3b:70:1e:f9:66:ec:cb:ec:13:
df:75:89:0a:93:a1:ea:33:d3:87:39:0f:e1:f4:4b:
b5:7f:a9:a0:c3:c8:2e:ff:c8:34:ec:51:f6:26:91:
8c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:CB:E7:DB:56:6C:B4:32:73:0E:DF:A9:FD:65:3A:A5:6E:50:82:E0
X509v3 Authority Key Identifier:
keyid:D7:70:66:28:52:0F:7D:DA:CE:F7:24:36:EF:A5:46:35:C5:2C:FD:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13BmKFIPfdrO9yQ276VGNcUs_ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/37529e-d976-47b5-b690-389d214af830/1/13BmKFIPfdrO9yQ276VGNcUs_ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/37529e-d976-47b5-b690-389d214af830/1/13BmKFIPfdrO9yQ276VGNcUs_ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:01:7c:a1:fd:53:30:9b:68:fc:00:51:b8:cd:76:7a:ee:c8:
51:f0:62:45:06:d6:24:8a:89:3c:2d:c2:44:1d:82:a4:c9:0e:
95:71:59:b1:cd:b8:a7:e3:f1:f8:0b:de:b9:94:e6:ee:6e:5d:
14:35:d3:c1:5a:1c:76:0b:9c:61:b6:5c:b8:1b:62:e4:0d:c9:
45:c3:38:d2:db:9d:5e:12:1b:59:49:f4:b6:65:68:65:3a:44:
9f:5c:2d:13:8f:f5:71:1a:c7:1a:e9:fd:57:02:83:63:21:5e:
3c:0c:16:7b:c1:66:d6:59:5e:01:3f:92:b4:f6:01:bc:b1:24:
dc:d5:c9:14:b2:a6:17:fc:42:e9:f3:c8:1e:02:e7:b6:02:cd:
7c:fc:45:15:22:29:ff:95:7c:75:3d:26:8e:c0:a7:7e:fc:44:
1e:d7:18:ad:b2:39:66:ff:7f:b2:10:f5:05:16:a2:b7:c5:2f:
8a:c5:0b:f0:83:96:22:8e:a1:ae:35:4c:70:bb:ef:0d:c1:96:
27:1d:a3:aa:f9:27:d8:c4:84:4d:d8:4b:ee:46:56:0b:d8:d4:
b8:1a:92:55:41:06:4c:8a:37:cd:da:35:59:96:d2:e6:97:b2:
93:4b:69:0a:48:c7:eb:1d:f8:91:66:ea:68:0c:7f:99:db:a8:
7c:75:38:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:59:12 2025 by rpki-client