Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft
File: pbIQYaPq10EOBFDbvyFw_gyTi7E.mft (raw, json)
Hash identifier: 9QhcKf1T51QSaW0guGBpTDhQPf0naaXoI5gMlrQT65o=
Subject key identifier: 99:AB:88:D8:08:1E:E1:87:C2:5E:51:E0:F6:77:33:D1:CF:3C:DE:B7
Authority key identifier: A5:B2:10:61:A3:EA:D7:41:0E:04:50:DB:BF:21:70:FE:0C:93:8B:B1
Certificate issuer: /CN=a5b21061a3ead7410e0450dbbf2170fe0c938bb1
Certificate serial: 01984475DC066E552EB34A5BA273C1B99F22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pbIQYaPq10EOBFDbvyFw_gyTi7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft
Manifest number: 15FE
Signing time: Sat 26 Jul 2025 02:00:31 +0000
Manifest this update: Sat 26 Jul 2025 02:00:31 +0000
Manifest next update: Sun 27 Jul 2025 02:00:31 +0000
Files and hashes: 1: pbIQYaPq10EOBFDbvyFw_gyTi7E.crl (hash: oVYAgmTwBEPV4V1P7TycC1mF41ivUVC/pLZM07gBWlY=)
2: q9uMRJMivdNIUmR3cIXWE4hBpI0.roa (hash: k+Mam0ND2lwJk85PckjyzqHvxu7FYX4bMXDwNQs3Kx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/pbIQYaPq10EOBFDbvyFw_gyTi7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:75:dc:06:6e:55:2e:b3:4a:5b:a2:73:c1:b9:9f:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5b21061a3ead7410e0450dbbf2170fe0c938bb1
Validity
Not Before: Jul 26 02:00:31 2025 GMT
Not After : Jul 27 02:00:31 2025 GMT
Subject: CN=99ab88d8081ee187c25e51e0f67733d1cf3cdeb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:64:98:43:59:dc:e3:4d:a6:03:03:f2:b1:dc:
63:77:04:80:6b:60:ac:94:89:3d:9f:39:58:f0:a2:
5c:d8:ca:62:25:e1:53:3a:c1:dd:c3:85:85:10:32:
43:c3:41:b6:5b:2b:86:69:21:20:35:98:16:31:de:
41:1f:d1:30:fd:ab:ab:8c:f1:35:28:17:1f:a8:f3:
29:cf:3a:39:74:b8:87:b9:8c:c7:05:a9:14:ae:6b:
9b:d6:0d:f3:85:af:57:7c:af:99:26:bd:9a:4f:88:
cd:69:94:cf:09:c4:67:27:60:00:63:4f:be:ff:05:
94:b1:c2:82:0d:a8:6a:65:68:18:0b:e6:d7:28:88:
c3:dd:1a:42:2c:be:de:d7:9b:e7:2d:a0:31:f0:f0:
6d:47:44:71:ae:fc:b7:e9:2a:ac:6b:a0:bb:08:c2:
0d:d0:d8:70:f9:a8:fe:98:1f:99:b8:6f:7d:c0:16:
27:30:8b:9b:b7:16:30:be:25:c9:f9:e5:31:70:83:
91:2d:13:99:4a:f7:0d:3f:f5:43:1c:f4:e8:eb:25:
9a:c2:80:aa:1c:22:4c:d3:0d:46:55:c0:fc:21:d6:
fd:b8:de:4d:f3:26:21:40:e4:fc:e3:e7:20:81:d3:
56:b7:27:4e:a9:96:36:0c:5d:82:70:fd:2d:44:9c:
b7:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:AB:88:D8:08:1E:E1:87:C2:5E:51:E0:F6:77:33:D1:CF:3C:DE:B7
X509v3 Authority Key Identifier:
keyid:A5:B2:10:61:A3:EA:D7:41:0E:04:50:DB:BF:21:70:FE:0C:93:8B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbIQYaPq10EOBFDbvyFw_gyTi7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:e9:1b:6b:24:65:35:8c:ce:0a:b9:10:4b:4d:31:05:bb:bb:
9c:07:70:c5:53:b2:d3:04:c6:da:e0:44:94:4c:e3:90:72:69:
99:7d:e1:84:17:18:ae:60:04:2f:4b:74:24:fc:82:62:a5:fc:
78:75:3b:04:eb:d2:cd:ac:c7:76:71:02:bb:63:ce:2a:ea:68:
18:c3:58:33:09:65:90:c0:6e:37:98:d4:6f:15:ee:e7:d5:b8:
d4:68:bb:48:62:d3:96:19:b9:b4:97:da:dc:29:15:b2:67:5f:
54:bc:ca:fe:b3:59:56:f9:6f:09:e3:53:f1:43:79:00:6b:f0:
bd:7e:8f:f0:fa:60:12:5e:00:93:9f:0a:ab:d4:79:b4:fc:fd:
aa:51:77:38:ad:98:30:f0:c3:7c:8b:21:7f:dc:5d:ef:96:d2:
81:d3:2e:7e:bf:14:f2:eb:42:e7:ba:28:80:09:29:74:1b:fb:
e0:70:77:b5:20:70:9d:c1:47:d7:c3:61:69:ec:81:54:f2:33:
74:35:97:c9:06:2b:40:5b:2d:57:6d:e3:1d:fe:10:c6:ce:3a:
ae:31:67:dd:7c:72:90:b6:a5:fb:4e:4d:39:82:e9:dc:52:3f:
79:1d:f5:96:68:3a:77:53:c5:ad:98:49:22:4c:71:c3:eb:7b:
d8:cc:cd:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 10:30:24 2025 by rpki-client