Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/58c87b-9aa8-48ea-85c3-06b163d359e0/1/13yGmob-yDN5Pu7azNSx98pEM-k.mft
File: 13yGmob-yDN5Pu7azNSx98pEM-k.mft (raw, json)
Hash identifier: k5QO9ZITQKJYiL8U31XEyeJ5nKA4mP5IINr2fRTKTGg=
Subject key identifier: 57:2F:73:71:E6:EF:AB:8F:A6:87:48:44:BA:0C:89:58:2A:20:F2:DB
Authority key identifier: D7:7C:86:9A:86:FE:C8:33:79:3E:EE:DA:CC:D4:B1:F7:CA:44:33:E9
Certificate issuer: /CN=d77c869a86fec833793eeedaccd4b1f7ca4433e9
Certificate serial: 0197B820E6A5824C677B315CBC3F6BAE6D60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13yGmob-yDN5Pu7azNSx98pEM-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/58c87b-9aa8-48ea-85c3-06b163d359e0/1/13yGmob-yDN5Pu7azNSx98pEM-k.mft
Manifest number: 139C
Signing time: Sat 28 Jun 2025 20:00:53 +0000
Manifest this update: Sat 28 Jun 2025 20:00:53 +0000
Manifest next update: Sun 29 Jun 2025 20:00:53 +0000
Files and hashes: 1: 13yGmob-yDN5Pu7azNSx98pEM-k.crl (hash: hSocnWZ/eGJMlWmWI8I0fH0ofH3QO/ZzWtQwt08GyBo=)
2: Dcjqka0vRB55CJDqEWplWQ0em2k.roa (hash: QNtKb0wVTgOzXABHcHNsksEjhhvzQUkXJ+QzngWUeuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/58c87b-9aa8-48ea-85c3-06b163d359e0/1/13yGmob-yDN5Pu7azNSx98pEM-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/58c87b-9aa8-48ea-85c3-06b163d359e0/1/13yGmob-yDN5Pu7azNSx98pEM-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/13yGmob-yDN5Pu7azNSx98pEM-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:e6:a5:82:4c:67:7b:31:5c:bc:3f:6b:ae:6d:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d77c869a86fec833793eeedaccd4b1f7ca4433e9
Validity
Not Before: Jun 28 20:00:53 2025 GMT
Not After : Jun 29 20:00:53 2025 GMT
Subject: CN=572f7371e6efab8fa6874844ba0c89582a20f2db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9c:57:54:b2:24:8a:2b:79:2e:71:04:0f:a0:
d5:c6:6e:08:a4:a5:5e:08:ca:91:39:5e:5b:ca:84:
33:a4:54:1f:62:47:a4:78:8d:54:77:03:dc:25:fd:
6d:3a:db:0b:af:5d:dd:1a:85:cb:dc:48:7d:14:be:
f9:7f:ef:35:e3:d9:26:cb:8b:46:e3:45:6e:27:f0:
97:00:0a:aa:c2:c7:18:91:16:fe:6a:67:ab:a5:22:
18:d5:5c:bc:60:fa:03:00:a6:e2:60:2a:0c:ba:3d:
41:21:36:4a:d2:2f:a9:24:45:04:12:f6:48:69:96:
28:33:09:51:61:ff:94:85:f9:02:0c:32:71:c3:03:
fe:c4:40:45:9a:8e:67:48:86:5b:df:34:27:2c:27:
3b:4d:9b:f7:fc:92:76:d7:c7:51:3b:f3:60:15:55:
c9:3c:35:14:ae:d5:ba:ba:25:b3:16:96:13:5d:3f:
11:e4:27:ee:bf:45:71:58:44:0c:d1:e4:86:e7:b4:
6b:ff:2a:54:76:d7:22:cf:38:f8:4e:ff:7a:77:e8:
d1:54:3f:df:34:e5:03:a1:c4:39:a9:4a:d7:ac:4f:
22:fc:c3:de:6d:0a:8f:dc:62:68:f6:80:45:0e:92:
ea:6e:a8:ae:37:13:85:d6:1f:ff:d2:b0:82:61:9a:
11:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:2F:73:71:E6:EF:AB:8F:A6:87:48:44:BA:0C:89:58:2A:20:F2:DB
X509v3 Authority Key Identifier:
keyid:D7:7C:86:9A:86:FE:C8:33:79:3E:EE:DA:CC:D4:B1:F7:CA:44:33:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13yGmob-yDN5Pu7azNSx98pEM-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/58c87b-9aa8-48ea-85c3-06b163d359e0/1/13yGmob-yDN5Pu7azNSx98pEM-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/58c87b-9aa8-48ea-85c3-06b163d359e0/1/13yGmob-yDN5Pu7azNSx98pEM-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:8e:03:e9:5a:17:d2:7c:1f:85:b7:01:a7:dd:26:db:36:cf:
50:b3:85:f6:0f:c1:fa:b4:30:17:6a:92:5d:70:29:13:0d:e5:
48:20:7a:be:12:93:cb:bc:ac:33:71:bf:98:79:81:72:4e:2a:
aa:71:ff:41:db:4d:90:2d:16:af:e0:44:48:db:3b:ae:06:d6:
3b:b7:0e:f7:54:2c:ec:b6:c9:ec:a2:c0:80:b3:82:fb:0c:33:
5d:b6:95:b2:06:30:48:81:9a:e9:65:52:81:5c:92:19:97:24:
4c:27:ac:2c:08:05:15:0d:bb:15:b7:ff:33:db:07:86:18:bd:
63:32:28:da:cf:44:0b:b1:9a:4b:ad:6c:3d:30:59:cf:ec:f6:
5f:11:db:eb:6b:41:8f:70:bc:79:b6:d9:bd:47:cf:78:39:7f:
8e:73:cb:0e:f6:7b:d8:aa:1a:13:05:0c:b2:b1:9f:fc:16:f7:
ba:23:94:16:6e:83:01:47:84:80:dd:b7:58:13:aa:2e:11:9d:
0c:c7:f0:5f:27:f6:ec:9c:ef:86:09:a9:2b:5f:11:fa:80:32:
fa:18:94:0c:85:1d:b3:3e:48:17:e2:a6:2c:56:06:e7:2e:62:
e1:87:be:ae:d5:91:49:52:d8:53:a9:1d:36:b4:0e:3c:41:8b:
a6:77:da:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:03:47 2025 by rpki-client