Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.mft
File: 13eUOzQRiOnNLpPeKIsz_-BBx9I.mft (raw, json)
Hash identifier: E38XRRFZGF+CRmW/zxBQb43CxKFBUKV5Hcsy7+R8Xp0=
Subject key identifier: 60:21:E3:EF:4C:77:B8:2D:CC:94:1C:A5:F5:AE:71:29:CF:98:6A:49
Authority key identifier: D7:77:94:3B:34:11:88:E9:CD:2E:93:DE:28:8B:33:FF:E0:41:C7:D2
Certificate issuer: /CN=d777943b341188e9cd2e93de288b33ffe041c7d2
Certificate serial: 0198D65F387E7379255A269F53EC08F58B8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13eUOzQRiOnNLpPeKIsz_-BBx9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 10:00:20 +0000
Manifest this update: Sat 23 Aug 2025 10:00:20 +0000
Manifest next update: Sun 24 Aug 2025 10:00:20 +0000
Files and hashes: 1: 13eUOzQRiOnNLpPeKIsz_-BBx9I.crl (hash: Epnz33CzlQ/EZLjvejWsBNZ76zQHgivSlexa1SuA+BI=)
2: f0gof4jxw94Oa83YFTdbTbKjLPk.roa (hash: TTuzPsw9kpuOO/S82uUhytdELCayKcLt12jYeRdVVIg=)
3: fI_1hDVc0AIsq5nMQmL9xfz1kXA.roa (hash: 89mtvnCyTjJUBdmS9eZxdF32JISfZjUl73RykEZkqVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/13eUOzQRiOnNLpPeKIsz_-BBx9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:38:7e:73:79:25:5a:26:9f:53:ec:08:f5:8b:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d777943b341188e9cd2e93de288b33ffe041c7d2
Validity
Not Before: Aug 23 10:00:20 2025 GMT
Not After : Aug 24 10:00:20 2025 GMT
Subject: CN=6021e3ef4c77b82dcc941ca5f5ae7129cf986a49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:35:a5:2c:38:17:be:33:a1:0f:6c:63:06:87:
f4:06:b9:95:84:65:2f:60:56:a6:26:7b:c4:8c:ea:
aa:72:92:97:e4:4e:e4:a9:03:1f:92:e1:2f:cb:ca:
21:fd:9f:6e:32:ee:c3:16:1f:60:00:2e:55:6e:43:
2e:1d:7c:73:87:4c:b9:8f:de:9b:5a:3c:6c:4a:0d:
77:4e:4f:38:93:b5:3e:1b:69:ff:6d:b7:5e:5d:27:
52:87:d0:f9:53:98:e1:46:39:c9:9f:35:df:d1:9b:
a3:b2:e9:8e:71:99:e9:3e:33:f8:4a:57:96:14:af:
59:bb:be:22:bd:c3:e1:dc:52:12:06:01:3a:03:b7:
c7:40:32:9e:8a:56:63:d0:ff:c6:39:ba:3b:ba:23:
8a:f1:c5:09:51:64:97:bb:25:76:be:2b:ec:e6:b3:
dc:e0:4a:ff:57:08:f0:81:ec:ac:81:28:4d:3f:f6:
6e:87:ba:ce:37:19:2d:68:4f:5b:d2:ae:62:02:71:
81:86:8d:ee:d1:c8:a7:a6:86:b1:29:a5:2a:ab:16:
a9:45:2f:a4:1b:87:4e:d9:8a:8e:6a:9a:f4:4e:6d:
e9:27:23:5d:00:f1:df:4a:f7:94:68:3e:b3:e2:9b:
88:3d:9c:05:a0:31:d6:08:9f:10:23:f8:df:8e:2f:
1d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:21:E3:EF:4C:77:B8:2D:CC:94:1C:A5:F5:AE:71:29:CF:98:6A:49
X509v3 Authority Key Identifier:
keyid:D7:77:94:3B:34:11:88:E9:CD:2E:93:DE:28:8B:33:FF:E0:41:C7:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13eUOzQRiOnNLpPeKIsz_-BBx9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:7d:a0:b9:bd:97:48:ec:3b:de:65:46:2e:52:5d:fd:81:87:
25:50:c8:b7:b5:4c:38:38:46:38:bb:f5:3a:61:db:18:98:32:
a7:6f:8b:9b:e6:4a:a2:e0:04:1f:5d:92:2d:3d:1c:bd:c1:fc:
0e:0a:bd:01:93:43:30:05:ee:93:fb:01:fa:ee:3f:8c:48:c4:
37:1a:6e:59:18:34:99:73:77:3e:70:b5:6d:50:94:28:22:72:
ac:bb:da:eb:44:23:22:23:38:d0:11:eb:0f:64:42:8e:d4:17:
8a:83:f2:ba:46:71:6e:71:5d:65:36:8e:b7:51:09:6b:b4:9e:
93:63:4c:5b:95:dd:4c:db:12:ab:d2:04:83:cd:68:81:66:c3:
e4:c9:56:50:07:19:78:70:a2:69:30:5a:97:a1:b9:6f:e1:fd:
67:22:30:61:98:8e:8e:f1:d1:33:60:41:02:c3:21:41:8c:2f:
a3:a4:0c:2c:5b:01:7b:f6:93:90:0e:86:05:1f:8b:96:42:bf:
84:3b:a5:12:98:80:d0:02:74:4e:2e:86:51:fe:06:0f:9c:47:
65:04:12:c0:89:fb:cc:fb:72:48:ea:6c:4d:56:43:bd:47:ef:
d1:f2:98:1a:e7:12:3d:f8:91:04:3d:80:b2:f7:9f:6c:af:07:
ce:03:f7:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:37:20 2025 by rpki-client