Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/37529e-d976-47b5-b690-389d214af830/1/13BmKFIPfdrO9yQ276VGNcUs_ck.mft
File: 13BmKFIPfdrO9yQ276VGNcUs_ck.mft (raw, json)
Hash identifier: xy+PsnRbfOKsCTXHG+AKvDY9RHP7pwFX5Ex59IB65Hs=
Subject key identifier: D6:05:D8:61:0E:0B:9C:5F:0C:28:AC:85:93:5B:B6:CA:B6:5E:67:9E
Authority key identifier: D7:70:66:28:52:0F:7D:DA:CE:F7:24:36:EF:A5:46:35:C5:2C:FD:C9
Certificate issuer: /CN=d7706628520f7ddacef72436efa54635c52cfdc9
Certificate serial: 01987B2D6B253FA2B4D495612202FC2723DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13BmKFIPfdrO9yQ276VGNcUs_ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/37529e-d976-47b5-b690-389d214af830/1/13BmKFIPfdrO9yQ276VGNcUs_ck.mft
Manifest number: 0CED
Signing time: Tue 05 Aug 2025 17:00:30 +0000
Manifest this update: Tue 05 Aug 2025 17:00:30 +0000
Manifest next update: Wed 06 Aug 2025 17:00:30 +0000
Files and hashes: 1: 13BmKFIPfdrO9yQ276VGNcUs_ck.crl (hash: I0O555No+QrQl3vo6xNBPeNnL3/HTOAgZ8MXOy/2YB4=)
2: LWrGDXX6ciAd2Zvp80Iu8-lVS1w.roa (hash: nxBz/fdInsAkI2qFUQ+K8HVyUw7MTfQxJc9ae20ze20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/37529e-d976-47b5-b690-389d214af830/1/13BmKFIPfdrO9yQ276VGNcUs_ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/37529e-d976-47b5-b690-389d214af830/1/13BmKFIPfdrO9yQ276VGNcUs_ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/13BmKFIPfdrO9yQ276VGNcUs_ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 17:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:2d:6b:25:3f:a2:b4:d4:95:61:22:02:fc:27:23:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7706628520f7ddacef72436efa54635c52cfdc9
Validity
Not Before: Aug 5 17:00:30 2025 GMT
Not After : Aug 6 17:00:30 2025 GMT
Subject: CN=d605d8610e0b9c5f0c28ac85935bb6cab65e679e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:12:3d:09:5c:cc:02:7f:ba:f9:81:fc:45:6a:
62:00:5c:23:24:7a:6c:fb:93:24:a8:a8:0b:c5:43:
bc:e6:2e:b5:45:36:c3:f0:8d:dd:6f:c0:c4:23:ff:
7f:3a:17:63:c8:0e:c1:30:4d:f4:38:e7:f7:02:61:
9d:2a:19:eb:71:9e:b1:e7:5c:44:e3:b6:73:ae:5c:
01:29:8f:23:47:18:64:f1:bf:9d:24:29:3c:b4:a5:
d8:5b:65:cd:4e:a6:10:87:b5:d5:e4:7e:f3:a9:ba:
d6:1d:55:a2:e2:d0:bb:8a:f0:6f:4d:c9:8f:13:89:
c1:48:c1:33:d9:af:ed:80:56:8b:2b:cf:bd:49:97:
bd:fd:13:27:08:49:08:65:5c:95:2f:70:fa:aa:4f:
9b:36:84:9d:bf:87:cb:dd:72:34:ef:bf:da:56:84:
b5:aa:50:70:82:d9:83:a6:9b:aa:41:ac:b4:d9:ed:
83:d3:f6:e9:d9:94:11:27:44:3d:fc:76:23:2b:32:
33:72:e7:54:3e:4e:93:67:e8:52:3c:d8:84:d0:1f:
99:15:61:77:11:f4:91:b3:4e:42:09:dc:be:39:9f:
04:d2:8c:51:f5:f0:14:10:a6:7c:4e:c7:12:2d:b7:
58:c5:58:3e:39:54:a5:ac:49:b4:44:08:87:49:96:
eb:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:05:D8:61:0E:0B:9C:5F:0C:28:AC:85:93:5B:B6:CA:B6:5E:67:9E
X509v3 Authority Key Identifier:
keyid:D7:70:66:28:52:0F:7D:DA:CE:F7:24:36:EF:A5:46:35:C5:2C:FD:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13BmKFIPfdrO9yQ276VGNcUs_ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/37529e-d976-47b5-b690-389d214af830/1/13BmKFIPfdrO9yQ276VGNcUs_ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/37529e-d976-47b5-b690-389d214af830/1/13BmKFIPfdrO9yQ276VGNcUs_ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:b2:f7:3b:ad:1e:7d:88:69:e4:d4:26:aa:70:33:9c:8d:af:
58:55:d2:7b:67:df:18:4f:ee:2c:1a:b5:f9:1d:15:3b:c9:92:
e6:04:54:0d:46:fa:59:ff:84:43:d8:03:d4:be:64:08:24:de:
a7:32:30:ee:75:cf:d9:13:1f:88:13:cd:73:55:9f:24:c3:45:
d2:2c:cf:2c:51:8c:7f:60:0a:9f:ec:45:5a:f2:9f:43:0a:5e:
f8:55:75:f5:38:9d:5c:b1:2c:48:63:4c:f1:c0:bf:8f:d2:34:
e9:6c:11:ba:08:3c:dd:48:4d:5b:0d:ef:5f:1a:dc:07:9f:58:
f6:78:dd:86:53:9b:86:06:ad:fe:59:41:9b:fe:45:63:09:6c:
a1:98:2a:e9:26:2c:94:71:19:07:8c:0d:51:15:c0:eb:d8:8f:
d3:f6:2d:d7:6c:8b:77:0e:fc:97:7c:43:3e:65:c7:1e:c6:e0:
9e:97:76:5a:2e:50:57:7b:98:ae:ec:1d:1c:6f:e5:5c:1b:97:
74:ed:d5:8a:07:73:5c:dd:da:45:7d:03:2f:a5:8b:9c:75:61:
61:97:97:6d:71:d4:4e:44:5e:ac:48:7b:d6:33:6d:8c:43:62:
8f:e4:f2:9d:0a:3d:bb:99:98:0e:21:79:d7:77:2e:58:7a:5e:
b2:81:17:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:42:54 2025 by rpki-client