Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/58c87b-9aa8-48ea-85c3-06b163d359e0/1/13yGmob-yDN5Pu7azNSx98pEM-k.mft
File: 13yGmob-yDN5Pu7azNSx98pEM-k.mft (raw, json)
Hash identifier: hgACgn6WKeRCA0jkJo9UljGSaD38HFTkrdtd5feEiFg=
Subject key identifier: 72:17:5B:EF:CA:8C:49:7D:6F:A9:2B:90:4E:BD:80:FF:85:05:F0:7B
Authority key identifier: D7:7C:86:9A:86:FE:C8:33:79:3E:EE:DA:CC:D4:B1:F7:CA:44:33:E9
Certificate issuer: /CN=d77c869a86fec833793eeedaccd4b1f7ca4433e9
Certificate serial: 0199FD6B205856641AC72CB5934887E67581
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13yGmob-yDN5Pu7azNSx98pEM-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/58c87b-9aa8-48ea-85c3-06b163d359e0/1/13yGmob-yDN5Pu7azNSx98pEM-k.mft
Manifest number: 14C9
Signing time: Sun 19 Oct 2025 17:01:20 +0000
Manifest this update: Sun 19 Oct 2025 17:01:20 +0000
Manifest next update: Mon 20 Oct 2025 17:01:20 +0000
Files and hashes: 1: 13yGmob-yDN5Pu7azNSx98pEM-k.crl (hash: Jaad89YTn0/ZB8uUSwOaZ4Gv8qdjQxQgLkFsbP9clRI=)
2: Dcjqka0vRB55CJDqEWplWQ0em2k.roa (hash: QNtKb0wVTgOzXABHcHNsksEjhhvzQUkXJ+QzngWUeuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/58c87b-9aa8-48ea-85c3-06b163d359e0/1/13yGmob-yDN5Pu7azNSx98pEM-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/58c87b-9aa8-48ea-85c3-06b163d359e0/1/13yGmob-yDN5Pu7azNSx98pEM-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/13yGmob-yDN5Pu7azNSx98pEM-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:20:58:56:64:1a:c7:2c:b5:93:48:87:e6:75:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d77c869a86fec833793eeedaccd4b1f7ca4433e9
Validity
Not Before: Oct 19 17:01:20 2025 GMT
Not After : Oct 20 17:01:20 2025 GMT
Subject: CN=72175befca8c497d6fa92b904ebd80ff8505f07b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c3:50:55:52:db:83:8f:49:67:9c:0a:73:65:
12:90:a4:1e:80:b5:df:70:98:ef:c1:d1:ce:c3:e9:
06:67:23:01:44:ec:dc:15:d5:f1:01:77:c9:d7:86:
78:a3:3f:ff:1c:82:b7:82:f6:91:90:24:1d:67:a8:
85:e2:6b:3e:14:24:ba:0a:23:bb:58:96:2a:ab:66:
72:d9:09:b2:47:8d:ed:2d:e3:32:e9:dc:c1:eb:81:
ce:0e:8f:03:52:b7:ae:82:09:c6:b4:b3:e5:a1:b7:
29:54:a3:b3:bf:90:79:b4:2a:19:7f:db:64:d4:9f:
34:f9:60:06:7a:09:d7:2e:84:d6:a6:ed:85:f4:8b:
e8:c3:a1:48:d1:d0:8a:48:f7:dd:d4:d7:30:e5:31:
76:a8:ff:bc:b5:28:0e:fc:88:ca:33:78:2f:a0:03:
8c:8d:e1:01:83:51:fb:f3:4f:1b:73:0d:34:1f:70:
03:34:74:58:b7:9d:78:71:f6:81:ad:b2:d5:bd:4c:
03:ba:c2:6b:11:3f:24:14:c8:07:be:10:83:11:53:
cb:a1:cf:d8:17:33:95:a8:8b:28:c0:da:66:35:51:
d2:ed:64:d4:7d:88:54:be:78:bb:66:86:51:d3:14:
17:90:2a:74:75:3d:f8:0f:b9:4f:18:fa:bd:fe:be:
da:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:17:5B:EF:CA:8C:49:7D:6F:A9:2B:90:4E:BD:80:FF:85:05:F0:7B
X509v3 Authority Key Identifier:
keyid:D7:7C:86:9A:86:FE:C8:33:79:3E:EE:DA:CC:D4:B1:F7:CA:44:33:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13yGmob-yDN5Pu7azNSx98pEM-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/58c87b-9aa8-48ea-85c3-06b163d359e0/1/13yGmob-yDN5Pu7azNSx98pEM-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/58c87b-9aa8-48ea-85c3-06b163d359e0/1/13yGmob-yDN5Pu7azNSx98pEM-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:2a:90:24:57:83:6e:f8:91:fa:a0:81:a8:8e:70:dc:06:85:
9e:3c:90:60:0d:aa:1b:a4:94:9a:75:11:85:bf:c4:df:9b:ef:
ce:07:a1:b9:fc:4c:b6:a0:9e:55:32:07:22:52:ad:ec:1a:76:
f6:38:03:3e:f4:cf:52:3c:90:4a:3f:50:ce:cc:f1:51:ca:b0:
5c:a9:46:8c:05:e6:36:f3:cc:cd:fa:83:43:e5:f4:a2:40:a2:
db:fc:72:e6:8c:56:f1:2c:01:bb:1d:7b:11:3b:17:e4:e5:a8:
75:4c:e1:b2:3f:90:f7:5e:fa:87:2f:d5:9a:8f:23:42:56:f9:
fa:ce:9a:4b:f3:2c:1d:ad:aa:af:6a:b1:b4:48:c8:cf:2d:db:
0c:80:25:f4:c5:f2:8a:49:3b:04:04:34:72:ef:fc:a7:7e:36:
b1:ed:22:14:29:25:f6:96:cd:1d:fb:35:8d:0e:ee:9c:f1:3c:
ab:e6:dd:3f:85:d1:dc:f3:20:dc:3f:a2:af:79:76:e4:a8:f3:
af:ad:eb:0a:24:4e:73:94:2e:e3:8e:ef:be:d9:57:0f:cd:2c:
72:97:f7:14:7b:d3:0a:56:73:0c:07:59:10:a8:e9:21:2a:ca:
56:7b:38:7b:1f:4e:38:1a:d5:46:a9:55:9d:b5:ff:76:9e:59:
7e:0c:e9:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:38:37 2025 by rpki-client