Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft
File: pbIQYaPq10EOBFDbvyFw_gyTi7E.mft (raw, json)
Hash identifier: T9ikv91zpYt/NCza7KP2RQ1L4j6L0uZHR4ZjYG/e9yA=
Subject key identifier: F1:8D:CC:59:59:6F:E0:55:16:04:51:E8:95:FE:A2:2E:08:ED:10:2F
Authority key identifier: A5:B2:10:61:A3:EA:D7:41:0E:04:50:DB:BF:21:70:FE:0C:93:8B:B1
Certificate issuer: /CN=a5b21061a3ead7410e0450dbbf2170fe0c938bb1
Certificate serial: 019A29308B32139C2D3E9AFA89BF6BAB025F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pbIQYaPq10EOBFDbvyFw_gyTi7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft
Manifest number: 16F9
Signing time: Tue 28 Oct 2025 05:00:38 +0000
Manifest this update: Tue 28 Oct 2025 05:00:38 +0000
Manifest next update: Wed 29 Oct 2025 05:00:38 +0000
Files and hashes: 1: pbIQYaPq10EOBFDbvyFw_gyTi7E.crl (hash: ZBoLgbcAaRjsNyzEltmG1pSo4EfPjn0zibQgOKZIc68=)
2: q9uMRJMivdNIUmR3cIXWE4hBpI0.roa (hash: k+Mam0ND2lwJk85PckjyzqHvxu7FYX4bMXDwNQs3Kx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/pbIQYaPq10EOBFDbvyFw_gyTi7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 05:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:30:8b:32:13:9c:2d:3e:9a:fa:89:bf:6b:ab:02:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5b21061a3ead7410e0450dbbf2170fe0c938bb1
Validity
Not Before: Oct 28 05:00:38 2025 GMT
Not After : Oct 29 05:00:38 2025 GMT
Subject: CN=f18dcc59596fe055160451e895fea22e08ed102f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4e:02:8d:3c:2a:c6:4e:87:c8:67:a0:d5:5c:
fa:7c:36:7b:fa:29:2a:ff:30:5d:43:4b:94:be:ce:
7c:33:14:d7:82:9b:53:e0:bf:0a:fe:a5:2f:70:ba:
39:b4:bf:cb:77:46:71:58:c8:15:77:35:97:4e:a0:
53:ae:11:19:83:93:bb:20:8f:3b:be:3e:22:eb:17:
b6:39:87:d4:a5:39:1c:e4:a5:06:c9:58:74:f6:9b:
c5:6a:ce:ba:4b:e0:e8:51:0c:d2:76:06:91:04:31:
5d:ad:83:83:2f:23:55:65:e7:91:71:3f:05:ae:d0:
a4:86:18:b1:3a:b8:9e:9e:c8:ad:e3:44:c0:b1:86:
6d:6e:dd:f8:b5:f2:6a:ab:a7:15:99:27:b2:44:5a:
bf:9a:d1:e9:c9:69:b6:ff:aa:b0:f2:60:45:84:ee:
14:a0:5a:1d:66:7b:1a:90:30:18:71:89:5b:26:d8:
56:78:19:42:18:26:43:b6:ff:88:4c:02:cc:d2:1c:
0e:f5:f0:c2:f6:2c:0b:15:a9:c2:fd:98:14:eb:97:
1c:f2:f3:5c:65:0b:6f:a4:fb:4f:60:82:4d:de:98:
45:c1:53:54:a7:96:f4:81:39:e2:1d:ff:93:57:99:
21:dc:a4:50:48:a8:a5:75:9c:88:38:04:89:91:8e:
be:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:8D:CC:59:59:6F:E0:55:16:04:51:E8:95:FE:A2:2E:08:ED:10:2F
X509v3 Authority Key Identifier:
keyid:A5:B2:10:61:A3:EA:D7:41:0E:04:50:DB:BF:21:70:FE:0C:93:8B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbIQYaPq10EOBFDbvyFw_gyTi7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:11:f0:0d:d5:06:c0:30:30:c5:db:15:d9:cb:cc:02:61:20:
7f:1f:6e:ac:a5:96:38:ae:c6:1d:44:42:c3:45:8c:d9:6a:9e:
c8:ab:3e:aa:8b:74:44:9e:94:f3:fe:a8:3d:ee:aa:0c:d0:39:
f7:dd:94:76:71:4f:cc:06:8c:81:ae:4e:98:d7:ed:71:7a:43:
60:d3:c8:d0:9b:12:76:6a:3d:f9:d0:13:7a:d2:26:22:71:c4:
72:a9:13:27:67:6c:5a:c7:24:bc:70:8f:1d:d8:96:53:40:4e:
75:61:22:14:ae:9e:7e:f4:02:ce:3c:41:17:d9:82:39:ff:65:
d5:c1:ae:e0:87:9c:6c:53:b2:7c:e1:f5:af:50:69:d8:ab:5a:
7c:a6:bf:c4:9a:2f:39:a6:8f:a5:3d:df:58:0c:b9:14:6a:6c:
83:8f:dd:48:d1:5a:64:4a:d9:7a:81:58:5b:e7:1f:3e:85:8f:
6a:df:a2:30:da:8d:94:97:ce:54:e8:0a:45:d3:01:a0:21:44:
81:31:73:ed:67:15:62:0b:11:38:4c:2a:7a:84:fe:9f:5f:5b:
29:9e:ef:64:28:fa:df:01:cb:30:69:09:21:b6:26:cd:47:2d:
69:52:5d:c0:8b:0c:b6:57:13:77:2f:26:38:ff:cb:1f:f3:8a:
9d:b3:74:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 14:09:26 2025 by rpki-client