Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft
File: pbIQYaPq10EOBFDbvyFw_gyTi7E.mft (raw, json)
Hash identifier: +9BIjYguIusi9bcAVIeIaQKmZgrzao4kAykobCGhE1E=
Subject key identifier: 5A:1D:DE:EB:B7:F1:96:10:21:44:63:B1:C6:07:AF:D8:74:A5:04:AA
Authority key identifier: A5:B2:10:61:A3:EA:D7:41:0E:04:50:DB:BF:21:70:FE:0C:93:8B:B1
Certificate issuer: /CN=a5b21061a3ead7410e0450dbbf2170fe0c938bb1
Certificate serial: 019930113B495D6B4C01196A7374FBD2A540
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pbIQYaPq10EOBFDbvyFw_gyTi7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft
Manifest number: 1678
Signing time: Tue 09 Sep 2025 20:00:59 +0000
Manifest this update: Tue 09 Sep 2025 20:00:59 +0000
Manifest next update: Wed 10 Sep 2025 20:00:59 +0000
Files and hashes: 1: pbIQYaPq10EOBFDbvyFw_gyTi7E.crl (hash: s8HCRDVN05W6/RgUwNKyk066qTI6lsIItg1MglqZVJ0=)
2: q9uMRJMivdNIUmR3cIXWE4hBpI0.roa (hash: k+Mam0ND2lwJk85PckjyzqHvxu7FYX4bMXDwNQs3Kx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/pbIQYaPq10EOBFDbvyFw_gyTi7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 17:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:30:11:3b:49:5d:6b:4c:01:19:6a:73:74:fb:d2:a5:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5b21061a3ead7410e0450dbbf2170fe0c938bb1
Validity
Not Before: Sep 9 20:00:59 2025 GMT
Not After : Sep 10 20:00:59 2025 GMT
Subject: CN=5a1ddeebb7f19610214463b1c607afd874a504aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b2:db:d2:b7:4b:63:75:7f:44:34:2e:77:c3:
23:f1:08:89:cf:29:51:87:88:2a:be:35:7b:f4:2f:
b5:21:45:25:fa:c0:7b:f0:04:62:5e:ff:98:f2:16:
6f:51:2d:8a:5b:f5:a1:14:f1:72:99:7c:4c:65:9d:
c2:6b:12:af:02:58:04:05:7a:1d:66:8c:90:43:f5:
23:29:74:f9:5a:3d:11:6c:a2:fd:80:08:93:b1:01:
bf:6c:2a:b2:d3:a7:a7:b9:8a:7e:cb:c3:30:ff:74:
e3:95:4b:9f:16:68:32:20:eb:a0:a5:00:ff:75:e2:
77:56:42:b3:b1:c9:56:ee:ed:b0:33:68:84:2c:7c:
64:b8:6f:c8:f1:77:be:e9:ee:00:b8:80:56:f6:cb:
4a:c3:83:d3:99:6f:7e:cb:51:e8:31:ba:d0:05:bf:
1a:24:65:e6:c6:db:e6:d6:16:14:15:d1:24:20:4b:
bf:35:61:c9:bf:7a:2a:05:22:b1:70:b9:50:0f:03:
4f:23:b3:bb:b2:a6:d8:bd:ed:e2:5a:e1:20:ad:68:
11:4f:ea:87:22:f3:38:4e:37:23:39:91:7a:6c:a2:
14:14:ec:53:ec:81:10:81:47:6f:ce:a7:5e:80:1a:
fd:26:ba:9c:e2:60:0d:33:9e:e0:88:25:cc:b1:d0:
76:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:1D:DE:EB:B7:F1:96:10:21:44:63:B1:C6:07:AF:D8:74:A5:04:AA
X509v3 Authority Key Identifier:
keyid:A5:B2:10:61:A3:EA:D7:41:0E:04:50:DB:BF:21:70:FE:0C:93:8B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbIQYaPq10EOBFDbvyFw_gyTi7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:c2:d1:c6:06:01:43:37:24:80:24:84:79:5e:2a:da:9f:a2:
9c:4c:66:e2:5d:4d:f1:11:06:72:2e:8d:a5:7b:ed:56:6a:16:
c7:a0:80:e7:3d:d5:77:5d:22:06:17:f7:dc:b7:82:69:7c:23:
c7:38:e9:96:34:51:54:2e:da:db:89:fb:c8:92:5f:8b:0e:5d:
6c:b1:aa:b1:e8:9d:8d:a8:58:39:94:09:da:64:7d:3c:d1:a1:
ce:7a:25:50:f1:6f:da:e7:a7:74:61:16:fe:8f:19:37:75:70:
ff:9a:e6:81:79:65:bc:c5:5b:7a:53:af:2f:8d:e3:40:da:ee:
9e:01:58:c8:e3:e5:a1:ad:77:49:1a:84:a2:c0:d7:f5:bb:40:
88:4c:7e:a5:ad:91:f8:a3:26:36:03:75:b6:5a:b3:89:8c:0f:
c2:ae:62:3e:80:6e:48:ba:f2:48:fc:57:21:32:6c:3b:ee:84:
d7:7d:eb:ed:bf:62:1e:ee:db:de:7c:50:2c:56:e0:97:cf:97:
80:e2:7c:4e:23:24:04:af:c7:73:8b:cf:b2:c7:8f:11:62:89:
5b:a9:96:ab:ea:4c:30:0c:29:dc:50:0d:50:cd:9e:1e:59:1f:
85:4a:cb:29:a7:59:b4:fc:96:b6:48:68:fe:8c:b1:46:7a:86:
07:55:da:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 03:29:44 2025 by rpki-client