Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.mft
File: 13eUOzQRiOnNLpPeKIsz_-BBx9I.mft (raw, json)
Hash identifier: WzEpoyQCvfzdx5oJpEvD/6KDHbv77DDaBEj6IQoL/Hw=
Subject key identifier: D0:22:7E:D1:DE:DB:44:D2:45:38:86:39:11:E0:DA:4A:61:4D:93:20
Authority key identifier: D7:77:94:3B:34:11:88:E9:CD:2E:93:DE:28:8B:33:FF:E0:41:C7:D2
Certificate issuer: /CN=d777943b341188e9cd2e93de288b33ffe041c7d2
Certificate serial: 019A03A324F451F31E8A3E8BA55F8D2B9988
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13eUOzQRiOnNLpPeKIsz_-BBx9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.mft
Manifest number: 16E6
Signing time: Mon 20 Oct 2025 22:00:14 +0000
Manifest this update: Mon 20 Oct 2025 22:00:14 +0000
Manifest next update: Tue 21 Oct 2025 22:00:14 +0000
Files and hashes: 1: 13eUOzQRiOnNLpPeKIsz_-BBx9I.crl (hash: ku1E4DC67GL/5xfnuLtaKHl/jRAqJKi+N2YW3EWvcpo=)
2: f0gof4jxw94Oa83YFTdbTbKjLPk.roa (hash: TTuzPsw9kpuOO/S82uUhytdELCayKcLt12jYeRdVVIg=)
3: fI_1hDVc0AIsq5nMQmL9xfz1kXA.roa (hash: 89mtvnCyTjJUBdmS9eZxdF32JISfZjUl73RykEZkqVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/13eUOzQRiOnNLpPeKIsz_-BBx9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 15:16:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:03:a3:24:f4:51:f3:1e:8a:3e:8b:a5:5f:8d:2b:99:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d777943b341188e9cd2e93de288b33ffe041c7d2
Validity
Not Before: Oct 20 22:00:14 2025 GMT
Not After : Oct 21 22:00:14 2025 GMT
Subject: CN=d0227ed1dedb44d24538863911e0da4a614d9320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:f5:06:a2:1c:84:05:9c:19:ae:23:27:e8:99:
55:b9:45:94:8c:b6:03:45:41:2b:23:d9:cd:5b:d3:
6d:af:1a:a0:ec:1b:c5:cd:79:25:da:8d:10:d4:45:
03:a8:d0:35:96:a4:21:dc:4c:1e:79:c1:ef:0a:3e:
59:1d:d3:52:62:9b:65:97:6f:28:26:96:51:b4:e0:
74:94:90:6c:a2:cf:46:cb:01:cc:13:8d:80:53:d1:
3a:7a:0b:1c:3d:c5:44:2b:f7:ab:a9:06:8b:93:f3:
5e:2e:c7:60:56:32:5e:f8:c2:51:83:3b:72:4e:ac:
11:ff:b7:59:33:ef:12:14:d4:08:fb:e0:07:4a:eb:
19:9e:f3:a0:9e:4e:1a:8b:65:00:26:e0:fe:f3:8c:
40:59:bc:25:c6:5b:0d:f6:ed:8e:6f:db:9a:ce:90:
2b:9f:b3:39:64:d6:8f:3a:e6:69:d2:14:fa:fe:87:
57:83:28:75:ce:de:f5:60:81:7d:87:42:69:c9:b8:
94:f3:cb:9b:bb:a1:58:c4:cc:8c:f5:67:f2:7f:a2:
68:0e:40:8b:79:20:3c:e8:01:c9:58:14:82:b1:49:
ea:fc:b3:bf:d0:54:56:e9:4e:20:80:e6:16:d1:ec:
62:88:e8:92:21:ab:9d:79:13:94:d6:59:fd:21:11:
60:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:22:7E:D1:DE:DB:44:D2:45:38:86:39:11:E0:DA:4A:61:4D:93:20
X509v3 Authority Key Identifier:
keyid:D7:77:94:3B:34:11:88:E9:CD:2E:93:DE:28:8B:33:FF:E0:41:C7:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13eUOzQRiOnNLpPeKIsz_-BBx9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:15:c4:7b:ed:ce:df:aa:ac:40:0a:38:d2:29:71:fe:88:fd:
e5:e4:52:dd:7a:fd:17:ba:70:4c:bc:57:04:ce:53:00:04:f7:
a2:84:4a:4d:54:d2:89:1a:4b:41:1f:20:5d:ca:e9:95:31:28:
1c:89:56:0c:ea:1b:bd:0e:e4:30:cf:a4:e0:62:43:47:0d:d9:
5d:59:a3:9b:8b:89:26:5c:1e:fb:b1:48:23:14:82:23:63:f3:
61:ce:ce:47:ef:27:ea:c2:18:23:d6:de:61:fc:93:01:3e:0d:
5f:28:92:6d:ea:af:5a:5d:0d:c1:9a:bd:ff:35:09:8a:91:56:
90:97:f5:5f:89:ec:0b:2e:ad:f2:6e:fb:1b:ef:d8:a8:99:e4:
02:b5:4f:e2:21:a5:41:1e:d3:41:13:92:68:9f:33:22:cd:d2:
62:68:bb:36:ad:d0:55:4d:3b:0e:d3:80:64:15:c6:0e:32:93:
98:e0:0d:9d:82:1f:1f:d0:c1:ca:5f:97:64:7d:ba:b4:a4:27:
cf:a9:83:36:4f:77:16:d6:42:dc:c1:ec:ca:e5:8e:91:7a:63:
55:1e:b3:6e:ce:27:3e:6e:07:b3:c0:5b:6e:18:d4:78:0f:32:
32:85:2f:cd:fc:ec:71:af:cc:15:01:b4:4a:f2:14:e5:58:4f:
a6:85:63:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:39:00 2025 by rpki-client