Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/58c87b-9aa8-48ea-85c3-06b163d359e0/1/13yGmob-yDN5Pu7azNSx98pEM-k.mft
File: 13yGmob-yDN5Pu7azNSx98pEM-k.mft (raw, json)
Hash identifier: qzi8y7vTthEsgtWdCk3s5lWOwL3r8ZWBTCjlpV7alTk=
Subject key identifier: 8A:47:37:F4:72:6A:EB:52:9C:AA:BA:3E:96:A1:73:A2:FF:20:7C:AE
Authority key identifier: D7:7C:86:9A:86:FE:C8:33:79:3E:EE:DA:CC:D4:B1:F7:CA:44:33:E9
Certificate issuer: /CN=d77c869a86fec833793eeedaccd4b1f7ca4433e9
Certificate serial: 0198D5F171E793041DADF22A94EFCCEDE23D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13yGmob-yDN5Pu7azNSx98pEM-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/58c87b-9aa8-48ea-85c3-06b163d359e0/1/13yGmob-yDN5Pu7azNSx98pEM-k.mft
Manifest number: 1430
Signing time: Sat 23 Aug 2025 08:00:27 +0000
Manifest this update: Sat 23 Aug 2025 08:00:27 +0000
Manifest next update: Sun 24 Aug 2025 08:00:27 +0000
Files and hashes: 1: 13yGmob-yDN5Pu7azNSx98pEM-k.crl (hash: DIdkQngxJhhfwXCx0g4KvMJNG8muy8MLmyyeDnHPYPo=)
2: Dcjqka0vRB55CJDqEWplWQ0em2k.roa (hash: QNtKb0wVTgOzXABHcHNsksEjhhvzQUkXJ+QzngWUeuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/58c87b-9aa8-48ea-85c3-06b163d359e0/1/13yGmob-yDN5Pu7azNSx98pEM-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/58c87b-9aa8-48ea-85c3-06b163d359e0/1/13yGmob-yDN5Pu7azNSx98pEM-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/13yGmob-yDN5Pu7azNSx98pEM-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:71:e7:93:04:1d:ad:f2:2a:94:ef:cc:ed:e2:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d77c869a86fec833793eeedaccd4b1f7ca4433e9
Validity
Not Before: Aug 23 08:00:27 2025 GMT
Not After : Aug 24 08:00:27 2025 GMT
Subject: CN=8a4737f4726aeb529caaba3e96a173a2ff207cae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:aa:52:4d:c8:e6:ef:69:86:67:8f:22:2c:65:
62:c8:4e:17:d8:7d:fb:6a:6c:51:cd:2a:75:0c:fc:
56:33:79:9a:c4:20:7f:f6:d1:4d:17:e0:77:c3:30:
b1:ad:ca:3e:e3:0c:26:96:d1:d5:85:4f:91:a8:bb:
b5:bd:c2:73:45:c4:7c:19:8e:13:2b:4f:2a:79:f1:
76:d9:08:28:c7:02:02:44:e3:f8:fc:0a:10:71:98:
44:4a:38:53:14:b0:96:bf:e1:51:0e:f1:00:06:e8:
29:d7:10:a9:99:29:54:3f:9b:50:ca:3d:4a:98:6a:
e2:69:c3:5e:e0:41:ac:63:2f:d8:e5:b2:97:5f:ee:
f4:38:d9:2e:07:d5:58:b7:a8:fd:9a:88:a7:cc:65:
8b:27:9d:11:59:80:fd:77:dd:47:49:6c:97:ff:c9:
05:65:c0:7c:6c:b7:cb:91:dd:7e:66:fe:2e:0c:f3:
ca:0d:67:39:56:b6:5a:3c:09:02:4b:30:6e:82:01:
59:0b:a7:84:a0:ea:12:4b:4e:e6:b6:1a:83:34:dd:
fd:2e:64:eb:b9:96:ff:8a:17:36:e1:3d:68:a3:ed:
84:18:b1:e8:d9:e8:6b:df:a0:35:64:60:3c:6a:e9:
45:a3:22:0d:3f:93:0a:0c:b7:5e:1f:d4:48:15:35:
86:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:47:37:F4:72:6A:EB:52:9C:AA:BA:3E:96:A1:73:A2:FF:20:7C:AE
X509v3 Authority Key Identifier:
keyid:D7:7C:86:9A:86:FE:C8:33:79:3E:EE:DA:CC:D4:B1:F7:CA:44:33:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13yGmob-yDN5Pu7azNSx98pEM-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/58c87b-9aa8-48ea-85c3-06b163d359e0/1/13yGmob-yDN5Pu7azNSx98pEM-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/58c87b-9aa8-48ea-85c3-06b163d359e0/1/13yGmob-yDN5Pu7azNSx98pEM-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:84:0a:de:0d:8a:55:1e:5d:8a:20:5b:b4:73:cd:90:ed:c5:
c7:59:d1:51:81:43:37:ea:3f:b8:c6:a1:e9:b5:00:15:37:86:
ad:65:b5:90:95:61:f3:2e:44:c7:44:25:ea:9a:b9:0c:73:12:
a0:c1:fe:ed:d6:ba:81:3c:e6:e4:54:23:94:b1:65:57:a7:79:
65:0d:c9:86:94:f6:c3:70:3b:de:3c:01:fb:a2:81:ec:16:97:
a2:92:a2:a0:26:62:a7:2c:f0:f6:42:6a:c0:61:cb:e8:c4:1c:
91:cc:dc:10:82:17:38:0f:43:48:f0:a0:34:5a:7e:01:b2:30:
fd:f7:29:d4:74:f5:e5:04:45:12:1f:f9:70:3f:dd:3c:50:73:
22:fa:e5:58:31:52:d8:bb:d1:c3:d7:60:c5:db:bb:73:24:4e:
4c:b0:c0:59:d8:11:0a:b6:37:1a:59:0b:32:32:0d:f9:82:5f:
e1:58:b6:1a:fa:54:7f:38:7b:ae:93:fb:8b:40:12:e8:53:f5:
4e:21:05:79:09:7e:2b:37:a2:fa:64:e2:77:9a:42:a4:9d:f3:
3d:21:4d:fd:dc:a5:e0:03:ec:88:7d:de:77:2b:1a:54:1d:b5:
39:06:e5:40:2d:83:56:b1:48:8e:7a:cb:6a:1c:6f:ba:2b:ef:
84:2d:03:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:59:13 2025 by rpki-client