Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft
File: pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft (raw, json)
Hash identifier: SD3NQjUsTLCUFi6bi5VOD4YdeSObCJIvJJhTtZtDnIs=
Subject key identifier: DF:DC:B9:1F:0D:CF:73:7E:3C:1A:0A:AA:BD:E7:55:78:67:67:96:71
Authority key identifier: A6:30:75:CB:B7:EB:16:93:EE:71:BC:90:E5:F7:3D:AD:C2:25:D9:1A
Certificate issuer: /CN=a63075cbb7eb1693ee71bc90e5f73dadc225d91a
Certificate serial: 019A71B78A9EBEEC3F3A32359486FD3B0F2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjB1y7frFpPucbyQ5fc9rcIl2Ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 07:00:45 +0000
Manifest this update: Tue 11 Nov 2025 07:00:45 +0000
Manifest next update: Wed 12 Nov 2025 07:00:45 +0000
Files and hashes: 1: pjB1y7frFpPucbyQ5fc9rcIl2Ro.crl (hash: jUeYFWgqH8Je9fT18MNxslXEpyOC6zr4rUczFsk+e/Y=)
2: t403LtXkOSW8w7w_vK-2ppXvWVA.roa (hash: kUS7ckaNEkh4qS4uYt0WI3yhqZiJYbt1KK2dO98adJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft
rsync://rpki.ripe.net/repository/DEFAULT/pjB1y7frFpPucbyQ5fc9rcIl2Ro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:8a:9e:be:ec:3f:3a:32:35:94:86:fd:3b:0f:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a63075cbb7eb1693ee71bc90e5f73dadc225d91a
Validity
Not Before: Nov 11 07:00:45 2025 GMT
Not After : Nov 12 07:00:45 2025 GMT
Subject: CN=dfdcb91f0dcf737e3c1a0aaabde7557867679671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f9:d9:ff:90:77:33:93:64:8d:84:23:c6:fa:
55:ba:57:7d:e0:ab:86:3b:e2:67:ec:12:5d:51:2f:
a2:bf:01:5e:d7:24:1e:40:88:72:cc:9a:a0:c6:35:
56:13:e2:a2:b5:2d:ac:20:9b:2a:fc:f1:f1:39:cf:
43:40:a0:6e:29:8c:5a:78:46:bf:94:14:07:57:a7:
bc:d2:73:a5:27:57:5f:fa:0d:c7:2d:63:bf:82:1c:
16:c5:a2:92:b7:ac:6c:92:d9:5e:da:2c:7f:d8:fe:
9d:94:9c:4c:76:bc:a2:30:4f:b0:49:fc:ed:bb:d0:
a2:3d:13:12:40:0a:04:c4:2d:4f:64:56:36:d3:31:
d2:d8:74:d7:69:dd:b3:02:0f:dd:68:93:53:9b:d8:
fa:73:9b:99:f4:9d:e7:4a:61:9f:c4:54:d6:5c:7c:
6d:51:e7:2c:53:6d:1f:a4:91:0b:d1:c2:06:42:2b:
31:31:4d:0b:c9:2a:02:e4:1c:bc:80:ec:f7:83:95:
3d:70:b2:26:c5:3a:05:c6:61:e1:b8:25:d2:65:88:
f8:8e:15:ba:6c:51:bd:34:72:c6:74:ba:c1:86:b0:
cd:96:6f:df:ca:6a:ea:4f:57:51:1a:8b:18:bc:8e:
ee:f0:6d:6e:4b:47:19:65:5c:ed:8c:45:5a:e1:99:
41:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:DC:B9:1F:0D:CF:73:7E:3C:1A:0A:AA:BD:E7:55:78:67:67:96:71
X509v3 Authority Key Identifier:
keyid:A6:30:75:CB:B7:EB:16:93:EE:71:BC:90:E5:F7:3D:AD:C2:25:D9:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjB1y7frFpPucbyQ5fc9rcIl2Ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:de:c0:5b:56:1b:3c:b4:fe:2f:c9:89:36:72:05:46:6c:19:
11:ab:83:35:8e:e1:1d:5a:c4:00:00:06:91:28:ef:31:06:9b:
39:b5:02:5a:59:a5:d5:7d:aa:c8:83:e7:58:40:cf:6b:62:1f:
01:0e:02:a7:45:bc:60:27:f4:87:a8:40:1d:3f:62:b0:37:43:
00:e6:ce:8b:2f:10:22:75:5a:75:71:f7:1e:16:9d:2d:47:49:
88:e5:56:47:cb:8f:a1:1b:5f:ec:b0:4b:0d:bd:23:19:79:52:
63:34:7b:5b:01:26:84:04:3e:c1:50:b4:b1:a0:b9:d2:50:92:
5a:30:59:02:dc:e2:2d:76:1c:fc:69:24:6d:36:5e:03:ab:c4:
c0:34:51:81:44:ad:35:3a:3c:e6:00:c6:06:e8:c5:7a:3d:5c:
7e:78:b6:35:2f:b2:55:b6:38:89:51:15:75:0f:26:db:4c:44:
b4:40:14:05:2e:af:6a:38:52:32:3d:a3:e3:d1:ac:b5:58:18:
9c:d5:5a:27:0e:dc:a8:b8:f8:24:22:1f:61:3f:36:5e:82:95:
b8:2d:a4:c5:d4:41:2e:f6:9f:96:8f:71:e1:b2:56:67:81:a9:
44:0f:d6:da:ae:fd:a8:08:f9:be:70:31:20:5d:0b:2f:ca:5c:
d5:0c:be:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:50 2025 by rpki-client