Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.mft
File: 13EApGzEauiWvcLg4HTjBVq4hns.mft (raw, json)
Hash identifier: uSJPhd7WpYrAsu8QGrSCk1ijYBr+3KFbJ6dx3y3S+s4=
Subject key identifier: 97:15:94:EF:8D:E8:31:A7:5B:E7:32:48:18:25:F4:64:67:66:CB:62
Authority key identifier: D7:71:00:A4:6C:C4:6A:E8:96:BD:C2:E0:E0:74:E3:05:5A:B8:86:7B
Certificate issuer: /CN=d77100a46cc46ae896bdc2e0e074e3055ab8867b
Certificate serial: 0199FBEA97992087750C2D558E9F2CA638FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13EApGzEauiWvcLg4HTjBVq4hns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.mft
Manifest number: 0B9D
Signing time: Sun 19 Oct 2025 10:01:19 +0000
Manifest this update: Sun 19 Oct 2025 10:01:19 +0000
Manifest next update: Mon 20 Oct 2025 10:01:19 +0000
Files and hashes: 1: 13EApGzEauiWvcLg4HTjBVq4hns.crl (hash: /5/tK+0v/LcIGlwl9IQRN7oI6zOpVj76ecPXFcMS1iE=)
2: 6MSYGKF8IeOAnuWHzZZC0qhgq04.roa (hash: pb27wRmWoWlrx/SmVVrzytomA3OBU87y85i5bwHixqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.mft
rsync://rpki.ripe.net/repository/DEFAULT/13EApGzEauiWvcLg4HTjBVq4hns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:97:99:20:87:75:0c:2d:55:8e:9f:2c:a6:38:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d77100a46cc46ae896bdc2e0e074e3055ab8867b
Validity
Not Before: Oct 19 10:01:19 2025 GMT
Not After : Oct 20 10:01:19 2025 GMT
Subject: CN=971594ef8de831a75be732481825f4646766cb62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:50:0c:03:4a:8c:52:93:84:a7:8e:5b:96:f8:
55:c4:36:79:c4:79:f0:65:63:7e:8b:82:29:9e:29:
e0:33:0a:67:ed:1d:8c:f3:4f:fe:79:f3:1b:88:a5:
d6:86:ac:df:50:b3:82:6a:a4:1c:2d:c7:a6:e6:62:
31:79:d0:97:49:20:00:47:b9:c2:d7:67:8f:93:28:
d6:24:66:6c:7c:f6:6f:30:21:c8:d8:0a:25:b5:36:
95:94:92:f4:cb:cf:b2:93:ea:09:d1:e8:bd:b7:fa:
af:69:b4:a0:b8:7f:e0:0b:db:cf:55:62:08:2c:34:
79:72:a1:6e:49:56:25:85:88:68:6c:a8:cf:20:0f:
07:8e:24:b5:41:e0:a1:fc:f7:cb:b5:01:b2:6f:35:
e9:87:ef:67:af:00:67:e4:f7:1e:e6:6e:e0:2e:e5:
f9:16:c9:f9:7b:8a:36:4e:c1:a8:cd:97:c6:a3:fd:
f2:13:00:d1:bb:2c:95:07:fd:e1:cb:b6:8a:b6:5e:
96:90:4b:bf:db:9a:d0:05:ef:06:d6:76:25:03:cc:
69:78:76:25:08:99:9d:ac:05:f7:6c:9e:cc:69:74:
c1:54:b3:cc:99:25:b9:cf:59:af:ee:2a:6b:fa:7b:
51:48:95:ae:3a:1d:0a:62:79:99:55:82:b2:14:2c:
b7:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:15:94:EF:8D:E8:31:A7:5B:E7:32:48:18:25:F4:64:67:66:CB:62
X509v3 Authority Key Identifier:
keyid:D7:71:00:A4:6C:C4:6A:E8:96:BD:C2:E0:E0:74:E3:05:5A:B8:86:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13EApGzEauiWvcLg4HTjBVq4hns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:fb:c7:b2:b2:39:76:b2:a5:86:9f:b9:a7:e1:e0:82:9a:a7:
56:86:dc:17:04:90:ce:73:0b:b9:17:92:74:8a:7c:dc:73:01:
b3:98:84:ad:88:9f:18:4e:40:1e:79:75:39:90:64:60:ab:25:
b8:49:c8:a9:7b:56:69:7e:36:10:fd:6b:f4:11:b5:c3:39:82:
8a:30:d0:b7:9b:2b:92:99:a5:1b:0c:20:2a:1d:3e:b3:72:94:
56:43:60:a3:0c:7e:d4:e7:cf:e4:f2:f4:58:e3:a6:43:13:89:
64:f1:e6:30:56:03:9e:c0:ee:ae:cf:79:5c:9d:44:e7:2f:7b:
97:c9:a4:90:88:d8:bb:fd:cf:31:a1:4c:6f:43:22:af:2e:57:
19:2a:96:c8:25:f4:22:c0:80:17:8b:3a:10:6e:f6:e0:c9:ba:
02:9e:58:b0:bd:7d:5b:a1:ca:9f:a2:9e:a4:65:38:2d:75:5c:
48:2a:c3:ab:f6:9f:b3:a1:7f:08:3e:c3:d1:f2:d3:8f:7b:4f:
7e:3c:78:78:6f:94:d4:65:7a:e2:35:ae:9b:63:c8:2e:e7:23:
ae:68:01:f3:35:63:a5:27:f1:93:9e:5c:ea:5d:4c:d5:ff:63:
b8:00:29:4f:1c:ca:5a:7e:ca:27:70:e6:4a:c0:b7:33:77:8d:
14:06:f5:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 12:57:15 2025 by rpki-client