Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d59e98-210f-4b55-ac4a-0268381107af/1/pWT0IqqXs96coPZ5Gfv4LrH93dI.mft
File: pWT0IqqXs96coPZ5Gfv4LrH93dI.mft (raw, json)
Hash identifier: PnbZT+XS4VBe1l13rL2jXxA6qxIprQcEXd/ayb/pmgQ=
Subject key identifier: 98:C3:D7:EA:A6:16:C8:26:DD:B6:2F:7C:C9:D5:AB:04:45:BC:83:BB
Authority key identifier: A5:64:F4:22:AA:97:B3:DE:9C:A0:F6:79:19:FB:F8:2E:B1:FD:DD:D2
Certificate issuer: /CN=a564f422aa97b3de9ca0f67919fbf82eb1fdddd2
Certificate serial: 019A71B91470CAD30402327B977BCB7CB9CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pWT0IqqXs96coPZ5Gfv4LrH93dI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d59e98-210f-4b55-ac4a-0268381107af/1/pWT0IqqXs96coPZ5Gfv4LrH93dI.mft
Manifest number: 0749
Signing time: Tue 11 Nov 2025 07:02:26 +0000
Manifest this update: Tue 11 Nov 2025 07:02:26 +0000
Manifest next update: Wed 12 Nov 2025 07:02:26 +0000
Files and hashes: 1: pWT0IqqXs96coPZ5Gfv4LrH93dI.crl (hash: V8aNiakvLwQB3nMK8a1yQvKipsq9BePuVMJf2QY9N0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/d59e98-210f-4b55-ac4a-0268381107af/1/pWT0IqqXs96coPZ5Gfv4LrH93dI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/d59e98-210f-4b55-ac4a-0268381107af/1/pWT0IqqXs96coPZ5Gfv4LrH93dI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pWT0IqqXs96coPZ5Gfv4LrH93dI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:14:70:ca:d3:04:02:32:7b:97:7b:cb:7c:b9:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a564f422aa97b3de9ca0f67919fbf82eb1fdddd2
Validity
Not Before: Nov 11 07:02:26 2025 GMT
Not After : Nov 12 07:02:26 2025 GMT
Subject: CN=98c3d7eaa616c826ddb62f7cc9d5ab0445bc83bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:96:85:e1:d3:e4:03:6d:5f:8b:c0:56:25:bf:
38:a4:f2:62:21:a7:59:88:86:31:f3:47:8e:20:b7:
e1:3e:f9:73:87:57:a9:a1:3a:d6:7f:3d:a8:40:f4:
92:d8:85:bd:7c:87:8a:e5:85:2c:0f:6f:62:c4:eb:
54:3f:d5:9c:bb:35:27:e0:aa:63:86:38:46:f1:98:
5e:0a:78:08:d5:0b:b9:4f:4f:f9:d5:7c:c3:c4:3d:
76:9a:e7:f1:7e:0a:df:8d:b2:c1:65:db:87:1b:87:
60:c8:f7:ae:b6:61:04:01:f1:46:9a:64:26:d0:8c:
f5:91:fd:b6:f7:b9:24:e8:a5:b1:8c:5a:8d:a4:ec:
c5:c3:12:3f:12:0b:a1:8c:1a:d8:67:85:23:47:e0:
bf:3a:e1:73:2c:91:0a:4f:bc:76:65:93:bc:ce:6e:
be:a4:e5:a2:fd:02:52:4f:08:65:ef:a4:ae:b5:fa:
21:b0:b4:93:2e:f8:ea:68:54:a0:48:d0:3c:1c:87:
a7:a4:94:fb:6f:b3:0d:f1:49:e9:95:5f:95:9f:fc:
42:3f:ae:e5:52:87:b4:39:f3:35:f1:94:70:cf:c9:
0a:4c:49:84:a9:92:79:4d:41:42:76:b4:73:f5:08:
90:ff:19:14:00:5d:3f:2f:21:0d:12:b5:d3:a9:62:
00:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:C3:D7:EA:A6:16:C8:26:DD:B6:2F:7C:C9:D5:AB:04:45:BC:83:BB
X509v3 Authority Key Identifier:
keyid:A5:64:F4:22:AA:97:B3:DE:9C:A0:F6:79:19:FB:F8:2E:B1:FD:DD:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pWT0IqqXs96coPZ5Gfv4LrH93dI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d59e98-210f-4b55-ac4a-0268381107af/1/pWT0IqqXs96coPZ5Gfv4LrH93dI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d59e98-210f-4b55-ac4a-0268381107af/1/pWT0IqqXs96coPZ5Gfv4LrH93dI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:84:a4:17:b7:ba:15:e1:83:b9:26:d5:2c:48:96:39:fd:35:
63:2c:43:9f:5f:72:20:bf:95:fa:0e:f5:4d:a4:2a:6a:d3:06:
3c:d7:05:3f:23:41:f1:e2:bc:58:58:ad:67:51:f1:7b:c0:cc:
4f:de:06:77:9e:c8:5a:d6:37:a6:83:e8:f3:b4:ff:d4:31:c6:
2b:c9:b3:20:c6:f9:72:c7:6c:e0:6e:14:76:36:7b:c5:7b:3d:
4a:96:4c:bd:45:d1:11:8d:6f:73:a7:a8:21:0b:84:16:08:19:
2c:71:d7:6d:17:4b:3a:e0:db:6c:42:d8:9e:e7:e5:35:3a:f1:
ee:e0:6f:ac:27:b4:7d:bd:42:11:ba:02:ea:6c:6f:d3:1b:83:
f5:e7:21:03:93:69:7c:cf:a8:1b:00:71:38:ac:1c:9d:a7:99:
aa:85:3c:09:60:d7:62:c1:6d:c1:47:3a:56:b1:5a:18:62:0d:
2a:15:a0:2c:bc:8e:bf:44:37:1f:68:ee:3e:8d:fe:f8:9c:34:
04:a0:54:61:a1:22:91:7d:fa:fc:d4:2f:86:ee:c8:c8:da:22:
a5:1e:fe:12:65:f0:e0:bd:67:43:28:da:11:8a:b7:67:33:07:
7d:a7:fe:51:d7:a7:b0:94:aa:45:87:85:f5:30:df:8c:c3:ae:
04:7f:7d:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:03 2025 by rpki-client