Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/37529e-d976-47b5-b690-389d214af830/1/13BmKFIPfdrO9yQ276VGNcUs_ck.mft
File: 13BmKFIPfdrO9yQ276VGNcUs_ck.mft (raw, json)
Hash identifier: nYca6sY4qSvRHkVJ3cqtNKbFY32vWUgn/zDTm7jcu7k=
Subject key identifier: 8D:F1:46:90:48:48:8C:AD:36:3F:D2:32:CE:EA:2F:B9:F7:BA:71:74
Authority key identifier: D7:70:66:28:52:0F:7D:DA:CE:F7:24:36:EF:A5:46:35:C5:2C:FD:C9
Certificate issuer: /CN=d7706628520f7ddacef72436efa54635c52cfdc9
Certificate serial: 0197B6329D23E77718E5AB6638D02FB45CD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13BmKFIPfdrO9yQ276VGNcUs_ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/37529e-d976-47b5-b690-389d214af830/1/13BmKFIPfdrO9yQ276VGNcUs_ck.mft
Manifest number: 0C87
Signing time: Sat 28 Jun 2025 11:00:59 +0000
Manifest this update: Sat 28 Jun 2025 11:00:59 +0000
Manifest next update: Sun 29 Jun 2025 11:00:59 +0000
Files and hashes: 1: 13BmKFIPfdrO9yQ276VGNcUs_ck.crl (hash: YAQ4cwmBYj7G854tY9+wy9+KxZiNbJWt9mRQBzk9zmo=)
2: LWrGDXX6ciAd2Zvp80Iu8-lVS1w.roa (hash: nxBz/fdInsAkI2qFUQ+K8HVyUw7MTfQxJc9ae20ze20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/37529e-d976-47b5-b690-389d214af830/1/13BmKFIPfdrO9yQ276VGNcUs_ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/37529e-d976-47b5-b690-389d214af830/1/13BmKFIPfdrO9yQ276VGNcUs_ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/13BmKFIPfdrO9yQ276VGNcUs_ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:9d:23:e7:77:18:e5:ab:66:38:d0:2f:b4:5c:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7706628520f7ddacef72436efa54635c52cfdc9
Validity
Not Before: Jun 28 11:00:59 2025 GMT
Not After : Jun 29 11:00:59 2025 GMT
Subject: CN=8df1469048488cad363fd232ceea2fb9f7ba7174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2a:7d:c9:2f:7b:3b:2d:29:a5:6c:d3:62:10:
84:06:3b:2d:2c:0c:b0:a1:fe:8e:f5:28:ca:4d:b4:
33:e2:6b:b9:64:1d:3a:11:b9:89:6a:3d:b1:72:10:
76:cf:f3:80:18:87:ce:32:b3:6d:98:60:a8:4f:e9:
76:5f:51:24:af:0a:9e:f1:ee:d4:91:2f:f4:5d:c0:
bc:1c:6d:07:ae:47:56:6b:62:18:0e:97:db:21:cf:
99:d9:14:94:bf:41:da:f3:ff:c5:32:89:83:93:7c:
52:03:a5:2b:c3:28:05:4e:dc:7d:4c:12:ff:14:65:
86:01:52:29:b0:bf:ff:d4:40:32:6b:ed:77:75:92:
bb:30:b7:67:05:9e:c3:2d:9a:66:74:89:b4:4d:c6:
66:30:5c:cb:f6:cc:f6:28:17:f3:50:fa:4c:61:cb:
68:92:7f:d6:80:32:b7:d7:88:18:b4:ae:db:9e:c3:
6d:2f:ee:ea:02:32:c8:ad:01:63:a9:01:23:04:5c:
2d:85:0c:8d:ec:69:ef:d1:9f:98:78:d0:51:ad:96:
f0:95:6e:b7:e3:a7:92:2f:06:0b:f5:03:d2:54:ac:
5b:02:b0:d5:db:a6:63:72:76:34:50:b3:d5:e5:6d:
b6:54:55:c2:fa:7d:ce:d3:00:8f:9d:64:b7:18:cd:
58:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:F1:46:90:48:48:8C:AD:36:3F:D2:32:CE:EA:2F:B9:F7:BA:71:74
X509v3 Authority Key Identifier:
keyid:D7:70:66:28:52:0F:7D:DA:CE:F7:24:36:EF:A5:46:35:C5:2C:FD:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13BmKFIPfdrO9yQ276VGNcUs_ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/37529e-d976-47b5-b690-389d214af830/1/13BmKFIPfdrO9yQ276VGNcUs_ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/37529e-d976-47b5-b690-389d214af830/1/13BmKFIPfdrO9yQ276VGNcUs_ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:5a:2e:57:52:bc:05:0f:b6:56:06:b7:ff:ed:62:9c:cf:dd:
55:e5:e6:04:f1:94:75:98:a0:88:0c:32:d9:ec:85:b7:dc:bd:
55:7f:43:e7:d0:08:93:5f:93:71:b7:0d:7e:b7:77:6f:13:61:
e2:c9:1b:6f:a4:10:49:9a:13:7a:be:7f:3a:91:33:a9:02:2f:
cb:f8:a2:f5:2a:60:2b:f7:06:18:5d:07:7d:7b:55:3d:f9:a1:
fd:39:dc:04:b7:6e:dc:fd:58:44:50:6f:9f:26:d8:a2:f2:c1:
a4:f9:bf:c0:cc:04:4a:6f:09:79:46:9e:6c:0b:38:34:64:31:
9d:da:0a:21:3b:f0:3d:9b:a8:2f:2e:57:a3:4e:29:73:95:b4:
6b:ab:28:2c:64:d6:d3:4b:f1:2f:39:d5:6d:17:83:06:2b:11:
4a:03:5c:4b:92:4e:5c:17:1d:bc:14:08:72:b8:23:c0:a8:55:
54:1c:a3:5b:79:32:60:a1:48:6f:09:80:8b:32:d1:a6:81:30:
ca:a9:c2:54:0f:66:94:66:ad:05:ad:8f:59:72:28:26:69:c9:
f7:ec:b3:2b:27:7a:5d:26:46:22:97:4d:7a:1a:a0:54:6d:1e:
8c:02:c1:6a:b6:4e:af:2b:df:0b:55:34:16:64:ff:4f:b0:24:
e7:1a:5e:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:23:48 2025 by rpki-client