Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/13eW4WtWXXJzZphsycqcpj0aTlg.mft
File: 13eW4WtWXXJzZphsycqcpj0aTlg.mft (raw, json)
Hash identifier: sfc0mVYcN37boO79vLAsJIWds9x9MbjlMmbL1zNLyWs=
Subject key identifier: A0:DC:59:FA:AA:20:26:95:6A:C0:FA:FA:DD:00:9D:E8:88:7E:1E:47
Authority key identifier: D7:77:96:E1:6B:56:5D:72:73:66:98:6C:C9:CA:9C:A6:3D:1A:4E:58
Certificate issuer: /CN=d77796e16b565d727366986cc9ca9ca63d1a4e58
Certificate serial: 0199FBEB8866BECA67E66BD00C4261889B82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13eW4WtWXXJzZphsycqcpj0aTlg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/13eW4WtWXXJzZphsycqcpj0aTlg.mft
Manifest number: 0403
Signing time: Sun 19 Oct 2025 10:02:21 +0000
Manifest this update: Sun 19 Oct 2025 10:02:21 +0000
Manifest next update: Mon 20 Oct 2025 10:02:21 +0000
Files and hashes: 1: 13eW4WtWXXJzZphsycqcpj0aTlg.crl (hash: o6jkOITVkhFfrI0hh7DNft8tDOPfpAZ/ChnbUfICbgo=)
2: NWVCp8Y4Yrwt2l5OQ2N28tAv5Vs.roa (hash: F9PS4+2YWZWixXX0triEKsctJpMJlaT/3wjK6G1EJGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/13eW4WtWXXJzZphsycqcpj0aTlg.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/13eW4WtWXXJzZphsycqcpj0aTlg.mft
rsync://rpki.ripe.net/repository/DEFAULT/13eW4WtWXXJzZphsycqcpj0aTlg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:88:66:be:ca:67:e6:6b:d0:0c:42:61:88:9b:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d77796e16b565d727366986cc9ca9ca63d1a4e58
Validity
Not Before: Oct 19 10:02:21 2025 GMT
Not After : Oct 20 10:02:21 2025 GMT
Subject: CN=a0dc59faaa2026956ac0fafadd009de8887e1e47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cd:2a:e8:f0:ab:09:c9:8b:79:ab:71:22:48:
f8:35:82:e7:b1:09:af:66:98:b3:73:90:ef:30:8b:
d9:b3:58:ec:15:bb:ed:37:2b:e8:9b:38:4b:8a:9a:
c0:ea:58:15:9f:6e:f0:c5:19:ae:73:d2:6a:b9:2c:
ef:57:76:bf:3b:cc:b0:2d:83:e8:68:3f:af:ad:6a:
22:11:7c:96:57:1d:ef:6f:b3:7e:a1:06:11:c4:7c:
3a:5b:95:55:82:1c:f6:f6:46:4b:78:2e:3f:84:bc:
a6:83:ab:26:93:6c:f6:9d:cc:e6:6f:95:35:5e:bb:
09:23:70:4c:30:0f:af:0e:e5:14:65:6f:be:a7:e5:
2a:73:4c:22:e9:d8:83:12:22:f7:32:94:a1:76:54:
a2:56:1d:f7:db:e8:a6:22:e7:22:5f:5f:86:0c:d6:
47:03:82:50:e6:0d:65:bf:80:de:c3:41:33:ba:a2:
2f:b1:a8:79:d2:11:b6:23:03:28:ee:24:16:54:95:
ab:16:71:60:37:ed:01:85:ef:0a:c8:25:d9:35:a8:
1e:18:66:ee:64:d4:ef:a5:22:b1:da:a9:c8:3b:1e:
18:63:4d:a8:17:55:53:7a:c1:08:ce:04:90:99:51:
7b:9e:6c:73:2d:be:68:0e:c6:94:23:de:f6:58:9a:
00:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:DC:59:FA:AA:20:26:95:6A:C0:FA:FA:DD:00:9D:E8:88:7E:1E:47
X509v3 Authority Key Identifier:
keyid:D7:77:96:E1:6B:56:5D:72:73:66:98:6C:C9:CA:9C:A6:3D:1A:4E:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13eW4WtWXXJzZphsycqcpj0aTlg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/13eW4WtWXXJzZphsycqcpj0aTlg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/13eW4WtWXXJzZphsycqcpj0aTlg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:c0:6c:dd:a0:e5:91:56:5a:1b:b2:47:3f:ca:2d:da:72:12:
5e:2e:14:80:f9:99:30:43:5d:aa:48:6e:9c:54:48:9f:e0:f2:
67:61:4d:5f:55:a0:13:e1:5a:c9:ff:85:c6:10:de:26:0c:20:
2d:98:33:26:bd:ed:eb:b7:6b:fc:48:eb:d7:92:14:c0:e8:f6:
62:b4:b8:2f:13:2e:6f:c0:5d:b3:89:da:10:02:87:e3:0b:f7:
7d:43:0d:06:37:da:e8:14:b3:70:f9:8a:c6:20:87:a9:e5:99:
6f:28:7b:34:9f:1c:8a:ef:cb:bc:fe:f3:bd:97:66:58:3b:3a:
2b:b5:8d:4d:03:17:9e:89:a3:a8:c9:e0:a5:47:56:53:b6:2a:
22:0c:82:83:65:b8:b7:d9:83:21:ac:e1:f5:03:19:fb:fc:96:
f6:60:bd:ef:47:b5:21:f9:d3:1d:fd:d6:95:70:c8:b3:a5:b4:
0f:10:2e:b3:00:ec:7a:fa:9c:4f:a7:43:d6:c5:bf:61:28:ac:
4a:48:79:78:a5:e9:83:eb:78:32:15:3c:80:6b:7a:47:31:3c:
22:fc:f3:16:a1:ff:69:92:1d:73:9a:a0:01:93:cd:e8:7e:f8:
34:b1:59:18:4e:3b:67:14:45:49:9d:8e:2c:b5:7c:a6:b5:31:
03:09:52:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn764hmvspn5mvQDEJhiJuCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3Nzc5NmUxNmI1NjVkNzI3MzY2OTg2Y2M5Y2E5Y2E2M2Qx
YTRlNTgwHhcNMjUxMDE5MTAwMjIxWhcNMjUxMDIwMTAwMjIxWjAzMTEwLwYDVQQD
EyhhMGRjNTlmYWFhMjAyNjk1NmFjMGZhZmFkZDAwOWRlODg4N2UxZTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqc0q6PCrCcmLeatxIkj4NYLnsQmv
Zpizc5DvMIvZs1jsFbvtNyvomzhLiprA6lgVn27wxRmuc9JquSzvV3a/O8ywLYPo
aD+vrWoiEXyWVx3vb7N+oQYRxHw6W5VVghz29kZLeC4/hLymg6smk2z2nczmb5U1
XrsJI3BMMA+vDuUUZW++p+Uqc0wi6diDEiL3MpShdlSiVh332+imIuciX1+GDNZH
A4JQ5g1lv4Dew0EzuqIvsah50hG2IwMo7iQWVJWrFnFgN+0Bhe8KyCXZNageGGbu
ZNTvpSKx2qnIOx4YY02oF1VTesEIzgSQmVF7nmxzLb5oDsaUI972WJoARQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKDcWfqqICaVasD6+t0AneiIfh5HMB8GA1UdIwQY
MBaAFNd3luFrVl1yc2aYbMnKnKY9Gk5YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTNlVzRXdFdYWEp6WnBoc3ljcWNwajBhVGxnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My81NDI5ZDgtZjQxMS00NjkyLWIwYTct
MTU1ZmQwYjQzZjlmLzEvMTNlVzRXdFdYWEp6WnBoc3ljcWNwajBhVGxnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My81NDI5ZDgtZjQxMS00NjkyLWIwYTctMTU1ZmQwYjQzZjlm
LzEvMTNlVzRXdFdYWEp6WnBoc3ljcWNwajBhVGxnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbcBs3aDl
kVZaG7JHP8ot2nISXi4UgPmZMENdqkhunFRIn+DyZ2FNX1WgE+Fayf+FxhDeJgwg
LZgzJr3t67dr/Ejr15IUwOj2YrS4LxMub8Bds4naEAKH4wv3fUMNBjfa6BSzcPmK
xiCHqeWZbyh7NJ8ciu/LvP7zvZdmWDs6K7WNTQMXnomjqMngpUdWU7YqIgyCg2W4
t9mDIazh9QMZ+/yW9mC970e1IfnTHf3WlXDIs6W0DxAuswDsevqcT6dD1sW/YSis
Skh5eKXpg+t4MhU8gGt6RzE8IvzzFqH/aZIdc5qgAZPN6H74NLFZGE47ZxRFSZ2O
LLV8prUxAwlSSQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:24:19 2025 by rpki-client