Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/37529e-d976-47b5-b690-389d214af830/1/13BmKFIPfdrO9yQ276VGNcUs_ck.mft
File: 13BmKFIPfdrO9yQ276VGNcUs_ck.mft (raw, json)
Hash identifier: SYEJ2mi2U9VMYTxvFkDYS+PMLmPpCVQXGIpGsuZgvAQ=
Subject key identifier: 7E:C6:85:48:51:1E:9E:86:EA:7A:8B:F0:22:25:A7:9C:3D:35:20:B4
Authority key identifier: D7:70:66:28:52:0F:7D:DA:CE:F7:24:36:EF:A5:46:35:C5:2C:FD:C9
Certificate issuer: /CN=d7706628520f7ddacef72436efa54635c52cfdc9
Certificate serial: 0198D5F11C3D374578034F9405AD57D237ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13BmKFIPfdrO9yQ276VGNcUs_ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/37529e-d976-47b5-b690-389d214af830/1/13BmKFIPfdrO9yQ276VGNcUs_ck.mft
Manifest number: 0D1C
Signing time: Sat 23 Aug 2025 08:00:05 +0000
Manifest this update: Sat 23 Aug 2025 08:00:05 +0000
Manifest next update: Sun 24 Aug 2025 08:00:05 +0000
Files and hashes: 1: 13BmKFIPfdrO9yQ276VGNcUs_ck.crl (hash: Y04kb++Wren4roQLjUzR/D81svs1klbX5R0kq5ARs5w=)
2: LWrGDXX6ciAd2Zvp80Iu8-lVS1w.roa (hash: nxBz/fdInsAkI2qFUQ+K8HVyUw7MTfQxJc9ae20ze20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/37529e-d976-47b5-b690-389d214af830/1/13BmKFIPfdrO9yQ276VGNcUs_ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/37529e-d976-47b5-b690-389d214af830/1/13BmKFIPfdrO9yQ276VGNcUs_ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/13BmKFIPfdrO9yQ276VGNcUs_ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:1c:3d:37:45:78:03:4f:94:05:ad:57:d2:37:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7706628520f7ddacef72436efa54635c52cfdc9
Validity
Not Before: Aug 23 08:00:05 2025 GMT
Not After : Aug 24 08:00:05 2025 GMT
Subject: CN=7ec68548511e9e86ea7a8bf02225a79c3d3520b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b5:b4:06:e6:3e:1c:12:08:45:ac:03:e7:f4:
46:28:dd:5f:f1:94:e8:bb:bb:2e:30:0f:a9:d1:da:
1c:01:62:f5:77:59:7a:28:cf:f1:8a:5c:a0:f8:9f:
8c:5d:e2:77:f4:e4:34:fa:d1:2e:79:e7:ee:cb:6a:
88:e0:28:09:bf:d1:ac:e1:56:01:89:da:78:d8:59:
7f:04:5f:a0:c1:47:69:6c:1f:03:76:98:c5:2b:52:
c6:6a:7c:af:31:4a:c2:c0:d2:82:fd:18:14:0a:b2:
8b:4f:50:6a:99:74:d3:8c:3b:c9:85:f1:9d:e0:f8:
fe:39:cb:89:b1:a1:92:79:2e:b9:e4:98:dd:6b:58:
e0:11:ed:ec:e3:1d:a0:ec:25:80:08:8c:02:cb:fd:
80:cd:e3:0d:18:52:fa:02:53:ef:ce:00:4e:a8:f9:
7f:15:1b:42:2b:db:04:23:b8:ed:f1:32:b2:fd:b5:
7a:1a:63:9b:d9:61:be:43:24:61:5d:9d:07:1f:70:
62:28:c2:71:e3:10:61:2a:58:20:42:7c:e7:57:c7:
38:98:19:0f:84:8f:71:10:10:46:bf:09:8d:88:cb:
6b:98:0a:25:80:1d:8d:35:b1:9c:56:86:c5:17:c0:
59:b0:cc:d0:92:93:c0:96:54:8e:a0:29:38:58:c3:
91:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:C6:85:48:51:1E:9E:86:EA:7A:8B:F0:22:25:A7:9C:3D:35:20:B4
X509v3 Authority Key Identifier:
keyid:D7:70:66:28:52:0F:7D:DA:CE:F7:24:36:EF:A5:46:35:C5:2C:FD:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13BmKFIPfdrO9yQ276VGNcUs_ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/37529e-d976-47b5-b690-389d214af830/1/13BmKFIPfdrO9yQ276VGNcUs_ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/37529e-d976-47b5-b690-389d214af830/1/13BmKFIPfdrO9yQ276VGNcUs_ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:a6:14:d4:73:32:a8:86:15:85:f0:34:17:e3:8d:4a:c9:a8:
1f:6c:0b:71:b1:df:1d:b5:dc:74:f8:08:ca:00:7d:9c:df:5b:
45:de:47:56:ee:39:dd:b8:ad:93:c7:78:f1:5a:49:0b:2d:ee:
30:15:ea:c9:47:83:98:cd:cb:d7:b7:89:52:50:ec:ed:74:ec:
fe:d7:58:0f:ab:bc:ea:65:78:77:31:d3:34:40:70:0a:b8:b0:
18:1e:94:1d:31:94:fe:d3:1d:2f:5b:6c:4d:6f:72:9c:06:50:
a9:2d:e2:28:90:88:51:80:70:77:f7:3f:a5:fd:5d:77:0b:bb:
7a:05:f7:cf:52:ac:05:8f:c1:b0:31:32:1d:86:7d:ee:d2:11:
14:a7:ae:08:1b:b0:9b:e9:f0:26:18:de:1f:bc:b0:a5:dd:22:
5a:77:04:fc:7d:47:c7:94:c9:a6:84:f5:5c:ea:03:6b:77:37:
29:0f:2a:41:4f:25:f3:ca:69:b7:c4:6f:f8:1a:5c:46:14:b3:
68:b9:e3:70:f5:21:6c:06:83:b4:b9:94:97:2b:16:d1:0b:95:
22:db:bd:99:2d:31:4a:96:5f:84:63:51:a0:68:37:7d:1a:79:
b5:25:70:c1:32:62:37:ca:6b:28:52:19:94:f8:c0:9e:22:6d:
1b:d0:d7:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:38:46 2025 by rpki-client