Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/b69811-cf3f-49bc-82ae-e55f9f9169db/1/pbJlTkMrdNyNpm2BayYM_8gXMXU.mft
File: pbJlTkMrdNyNpm2BayYM_8gXMXU.mft (raw, json)
Hash identifier: NIMV8vDDbFfLWL2JAzUpAH/SvjLQkz7C+Cywg3Pl4bY=
Subject key identifier: 47:49:17:7E:F2:21:5B:4D:B9:C8:0D:DE:5D:44:72:CC:87:7F:87:66
Authority key identifier: A5:B2:65:4E:43:2B:74:DC:8D:A6:6D:81:6B:26:0C:FF:C8:17:31:75
Certificate issuer: /CN=a5b2654e432b74dc8da66d816b260cffc8173175
Certificate serial: 019A729387A840DE37E3D4C09031A0BA3FA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pbJlTkMrdNyNpm2BayYM_8gXMXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/b69811-cf3f-49bc-82ae-e55f9f9169db/1/pbJlTkMrdNyNpm2BayYM_8gXMXU.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 11:01:02 +0000
Manifest this update: Tue 11 Nov 2025 11:01:02 +0000
Manifest next update: Wed 12 Nov 2025 11:01:02 +0000
Files and hashes: 1: pbJlTkMrdNyNpm2BayYM_8gXMXU.crl (hash: fQyib0tu9Zl9bhoioFTe4UBaYrHZMPX3WZxwnTzIx+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/b69811-cf3f-49bc-82ae-e55f9f9169db/1/pbJlTkMrdNyNpm2BayYM_8gXMXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/b69811-cf3f-49bc-82ae-e55f9f9169db/1/pbJlTkMrdNyNpm2BayYM_8gXMXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pbJlTkMrdNyNpm2BayYM_8gXMXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:87:a8:40:de:37:e3:d4:c0:90:31:a0:ba:3f:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5b2654e432b74dc8da66d816b260cffc8173175
Validity
Not Before: Nov 11 11:01:02 2025 GMT
Not After : Nov 12 11:01:02 2025 GMT
Subject: CN=4749177ef2215b4db9c80dde5d4472cc877f8766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9e:80:e6:87:84:61:3b:2f:cb:63:c9:27:31:
d2:15:c6:ac:f4:04:06:aa:8d:c5:c0:80:68:67:09:
01:a4:b2:3d:bc:08:b4:39:b3:af:63:e9:fb:e0:bd:
de:36:13:ea:3b:6f:7b:7b:f2:36:15:1e:82:e8:34:
be:e2:e8:ae:fa:1e:1b:18:d0:e7:8f:d9:b6:fa:ca:
a8:aa:17:78:75:71:05:f9:ac:8d:11:80:f6:8b:6f:
9b:a8:8f:22:ec:e0:16:24:06:77:4e:5a:99:f3:c4:
42:bb:28:a0:ec:c1:fd:9a:f1:88:02:5f:6b:54:5e:
59:c6:19:f6:1e:cd:2e:58:7d:5c:7f:1c:db:00:58:
5c:62:76:59:12:66:e9:ea:fb:08:e3:be:9c:0d:c8:
30:28:9f:d1:8a:d4:13:96:27:0d:c5:d2:17:36:86:
7a:5e:26:0c:33:e7:90:2c:fd:1a:b5:7d:af:50:a4:
c7:63:ac:07:77:92:68:87:4f:fa:54:84:39:15:f1:
bf:79:c1:e1:c3:b2:f6:50:e2:42:3c:ea:43:b0:36:
70:73:72:43:12:82:5c:b1:b9:8e:0d:6e:43:32:8c:
4c:95:d1:18:40:ca:32:f9:ef:ad:08:d1:98:ff:22:
7f:3d:b1:55:31:79:c2:3b:07:43:60:b1:e3:f7:31:
dd:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:49:17:7E:F2:21:5B:4D:B9:C8:0D:DE:5D:44:72:CC:87:7F:87:66
X509v3 Authority Key Identifier:
keyid:A5:B2:65:4E:43:2B:74:DC:8D:A6:6D:81:6B:26:0C:FF:C8:17:31:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbJlTkMrdNyNpm2BayYM_8gXMXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/b69811-cf3f-49bc-82ae-e55f9f9169db/1/pbJlTkMrdNyNpm2BayYM_8gXMXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/b69811-cf3f-49bc-82ae-e55f9f9169db/1/pbJlTkMrdNyNpm2BayYM_8gXMXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:7f:93:99:34:67:0b:97:36:0f:9f:6e:16:40:62:98:d3:ee:
54:7e:56:cc:25:b8:69:48:45:70:c6:64:57:65:cf:21:fa:d2:
b0:b8:63:85:0b:7c:98:85:03:de:1d:65:25:2e:54:94:ce:77:
d0:c7:65:bc:3d:1d:ed:3e:57:64:6a:6c:75:8f:b4:ff:60:05:
a0:9e:71:c0:32:42:0d:dc:41:61:cd:9f:f8:f0:9c:3e:a3:67:
43:ca:18:ce:c0:63:99:f7:2a:87:49:0a:d2:e5:87:aa:f5:66:
62:14:ac:b5:30:41:08:86:8a:2f:4f:dc:b5:ef:db:d1:eb:8b:
61:0d:08:f6:6a:15:cf:b3:1f:df:2e:6d:d5:91:6d:b8:48:f5:
36:fe:1c:4e:0a:72:52:ad:6a:19:a0:e0:1d:7c:dd:c6:9f:02:
c7:b0:7a:84:e4:fb:db:ed:6c:4b:a6:80:19:a2:01:29:7c:b3:
3c:1c:65:4c:5d:83:d9:71:93:b2:66:f5:0f:ad:59:ec:33:5d:
45:eb:00:c2:52:17:71:34:88:8f:52:0c:a1:29:4e:b3:b1:55:
8b:17:9e:92:4b:e0:be:4f:14:7c:5c:37:33:4c:68:0f:cb:0e:
83:2b:86:13:5d:ba:f5:9f:7c:d4:b5:f8:bd:19:c3:8e:38:e4:
f4:1e:4c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:19:00 2025 by rpki-client