Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft
File: pb7DLWxk_7YB4nDO280-__XOekA.mft (raw, json)
Hash identifier: wUErDgiRVMBVFSougUmnFdv+OpOze/PvVIhFi3UYj6Y=
Subject key identifier: EE:54:C3:74:93:0A:7B:98:45:93:FC:C2:25:AC:D9:B2:6B:A0:54:18
Authority key identifier: A5:BE:C3:2D:6C:64:FF:B6:01:E2:70:CE:DB:CD:3E:FF:F5:CE:7A:40
Certificate issuer: /CN=a5bec32d6c64ffb601e270cedbcd3efff5ce7a40
Certificate serial: 019A706E866F98F71E2C96938BA8EA93B569
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pb7DLWxk_7YB4nDO280-__XOekA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 01:01:22 +0000
Manifest this update: Tue 11 Nov 2025 01:01:22 +0000
Manifest next update: Wed 12 Nov 2025 01:01:22 +0000
Files and hashes: 1: pb7DLWxk_7YB4nDO280-__XOekA.crl (hash: 4nz1AqcfDL/SgGhcc47ljuqHIHLlR9GSD2Lgnj8e7ok=)
2: qjNgLrezTzPzPZHoRa0PyC-9c_E.roa (hash: gjQzNWtyWkBxUXT4We5fyARX6Waght/4yDMrIeCr6j8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pb7DLWxk_7YB4nDO280-__XOekA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:86:6f:98:f7:1e:2c:96:93:8b:a8:ea:93:b5:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5bec32d6c64ffb601e270cedbcd3efff5ce7a40
Validity
Not Before: Nov 11 01:01:22 2025 GMT
Not After : Nov 12 01:01:22 2025 GMT
Subject: CN=ee54c374930a7b984593fcc225acd9b26ba05418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:9b:ea:a0:94:d9:15:12:71:7e:c0:52:29:2d:
55:f3:0c:4a:a6:71:2b:80:2b:a9:c9:a8:d0:a3:1a:
47:9d:c2:63:8e:55:21:7d:b4:d5:ee:2c:91:6b:ad:
65:8e:a3:0f:90:2f:f6:74:d2:81:78:25:de:b1:47:
cd:af:70:5e:c4:38:a3:63:ac:e7:b2:2f:1f:09:09:
0e:da:e8:1a:5e:ee:22:4c:89:83:c3:c2:8c:26:d9:
16:e0:6e:f2:b5:64:22:80:30:a7:db:ea:98:a5:ae:
ab:2e:9f:9a:77:ee:84:cd:92:45:1b:76:d0:3a:51:
c9:19:67:b8:fe:d8:40:82:e6:bf:5e:91:88:3e:13:
ff:1c:f7:2d:b9:ad:95:b5:d4:75:27:84:d8:e9:10:
af:73:06:2c:c1:3e:3f:b6:b4:de:4c:67:35:0c:88:
3c:73:1f:6a:0f:8d:05:0b:b8:8a:25:f8:dc:f8:26:
38:97:60:56:03:fe:02:d0:38:a7:b7:36:44:0a:49:
b8:c1:02:a1:c3:51:65:3b:c2:d2:d2:e4:cf:67:4e:
a8:4a:e6:4d:46:d1:50:c4:b0:8e:a3:f4:fd:4f:cd:
de:6d:c3:f2:1e:27:ab:6a:3f:dd:4f:54:65:c8:d5:
83:bd:f8:b0:cf:10:64:c0:d7:97:19:5a:79:54:20:
d3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:54:C3:74:93:0A:7B:98:45:93:FC:C2:25:AC:D9:B2:6B:A0:54:18
X509v3 Authority Key Identifier:
keyid:A5:BE:C3:2D:6C:64:FF:B6:01:E2:70:CE:DB:CD:3E:FF:F5:CE:7A:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pb7DLWxk_7YB4nDO280-__XOekA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:af:e2:a2:17:80:8a:fe:91:38:1f:b5:bc:04:dc:b4:a6:f1:
66:1f:54:b4:0c:ec:43:11:5b:4c:e4:15:e2:3c:d7:e1:37:c2:
d6:1e:75:dd:3e:44:6a:a1:c4:89:3b:05:30:00:5b:63:22:eb:
ba:bf:f6:34:ea:da:c5:ef:40:d4:17:df:8d:b1:b9:e1:23:9b:
a7:d2:e9:ec:12:1a:8f:5f:b3:8d:33:bb:1c:58:6d:55:8c:ad:
79:ef:c3:99:65:fa:dd:a4:48:14:f9:92:9f:83:31:fc:f2:a1:
f7:85:f1:37:ce:4a:f9:00:0c:22:32:b1:40:08:8e:b1:9d:11:
1b:74:8d:46:44:d0:07:5b:59:82:97:a2:72:43:db:27:62:9e:
19:b5:55:79:c5:4d:c0:b2:00:0a:04:b6:05:8b:b5:d6:25:38:
ca:e8:00:25:08:38:2a:02:3d:17:dc:74:3e:52:fb:75:d7:f7:
d8:4b:aa:2a:a3:8d:df:3d:ac:68:fa:fe:29:b6:91:ff:72:4d:
63:d1:fe:76:43:89:0f:4c:30:56:fd:e3:9d:66:5d:fc:71:c9:
81:ff:5e:62:b2:2b:18:0a:39:de:3d:85:c5:6b:77:8f:22:81:
42:a9:9b:67:30:3e:92:ba:d3:d3:9f:c9:7b:f9:3b:0e:3f:8d:
c3:62:9a:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:00 2025 by rpki-client