Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/622353-2bcf-4560-9cae-7db20e6fc11d/1/pex__WA9oUiSKAsYN8OgN3Y1LVQ.mft
File: pex__WA9oUiSKAsYN8OgN3Y1LVQ.mft (raw, json)
Hash identifier: mGCZPDxPskbLX0BYIUhF+jNPh2yMX9Du36bTHXnTIT8=
Subject key identifier: 83:F3:FA:04:74:4E:94:D6:20:3A:81:3E:9F:07:7B:A4:BC:55:C3:17
Authority key identifier: A5:EC:7F:FD:60:3D:A1:48:92:28:0B:18:37:C3:A0:37:76:35:2D:54
Certificate issuer: /CN=a5ec7ffd603da14892280b1837c3a03776352d54
Certificate serial: 019A71B799BFED5E9E260A7705AB9E644F10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pex__WA9oUiSKAsYN8OgN3Y1LVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/622353-2bcf-4560-9cae-7db20e6fc11d/1/pex__WA9oUiSKAsYN8OgN3Y1LVQ.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 07:00:49 +0000
Manifest this update: Tue 11 Nov 2025 07:00:49 +0000
Manifest next update: Wed 12 Nov 2025 07:00:49 +0000
Files and hashes: 1: pex__WA9oUiSKAsYN8OgN3Y1LVQ.crl (hash: 2p7A4yHQMM2UxJekqZ4IOvx14Mn8ezowo+S2Lzy04ao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/622353-2bcf-4560-9cae-7db20e6fc11d/1/pex__WA9oUiSKAsYN8OgN3Y1LVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/622353-2bcf-4560-9cae-7db20e6fc11d/1/pex__WA9oUiSKAsYN8OgN3Y1LVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pex__WA9oUiSKAsYN8OgN3Y1LVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:99:bf:ed:5e:9e:26:0a:77:05:ab:9e:64:4f:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5ec7ffd603da14892280b1837c3a03776352d54
Validity
Not Before: Nov 11 07:00:49 2025 GMT
Not After : Nov 12 07:00:49 2025 GMT
Subject: CN=83f3fa04744e94d6203a813e9f077ba4bc55c317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:3b:22:e9:4e:f7:eb:f9:99:ff:50:c9:55:22:
04:a8:b2:84:da:03:29:e7:60:47:56:72:9f:b3:66:
22:e3:3f:79:50:10:de:69:bb:c2:09:db:a0:e0:ec:
62:b3:e3:73:d7:e2:9d:ec:24:d9:53:95:2d:f8:81:
db:88:50:93:9c:0f:84:79:cd:5c:57:21:42:75:e5:
a0:b9:46:c7:c6:3e:42:63:d6:4b:fd:ac:ea:f8:e4:
18:17:86:fd:17:16:38:c4:3f:59:38:de:d2:08:2f:
c0:10:98:65:fe:04:1e:be:37:cd:dc:cc:52:25:33:
1e:74:1d:93:0c:0b:ed:d2:e1:0f:df:02:60:da:0c:
60:00:d6:5c:f5:66:af:05:d7:fe:39:67:10:89:0c:
0a:18:e0:b1:aa:ad:7e:f0:5c:6f:79:6b:98:c6:ec:
9e:6b:58:9e:12:ac:40:22:7c:73:e8:2e:11:5f:65:
91:21:5e:64:e6:72:b0:41:ae:93:22:01:4d:0b:c7:
d4:3e:1f:ec:21:0b:74:65:38:bf:79:89:45:e9:95:
fa:d5:19:27:71:a1:f1:76:15:dd:ae:9c:0a:d8:cf:
a4:6b:6a:02:81:f5:42:dd:68:5e:2a:74:aa:05:bd:
1f:df:26:76:ee:7f:e4:ab:62:e2:6b:4e:55:79:0d:
b3:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:F3:FA:04:74:4E:94:D6:20:3A:81:3E:9F:07:7B:A4:BC:55:C3:17
X509v3 Authority Key Identifier:
keyid:A5:EC:7F:FD:60:3D:A1:48:92:28:0B:18:37:C3:A0:37:76:35:2D:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pex__WA9oUiSKAsYN8OgN3Y1LVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/622353-2bcf-4560-9cae-7db20e6fc11d/1/pex__WA9oUiSKAsYN8OgN3Y1LVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/622353-2bcf-4560-9cae-7db20e6fc11d/1/pex__WA9oUiSKAsYN8OgN3Y1LVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:24:53:69:06:f5:5f:36:db:53:09:7b:36:47:3a:10:d4:9a:
a7:2e:cd:c7:88:d1:92:47:98:19:59:ad:88:7c:fe:ad:19:23:
9e:bb:89:60:f3:c9:c3:9a:28:09:7d:88:ef:5a:b0:13:a5:f8:
34:fe:33:c4:74:a3:a9:92:1b:b7:da:ff:c1:19:dc:68:ab:ba:
e4:3b:e4:7d:ff:07:a1:3a:0e:fa:8e:0f:50:86:a9:f0:21:e7:
f0:1c:86:96:aa:7e:bd:1c:cc:a7:34:e6:e7:de:31:4e:70:4f:
fe:a4:42:14:f0:45:8b:bd:96:90:02:d1:6e:12:ea:eb:6e:96:
23:d9:8c:53:8e:d2:c0:2c:e6:ab:c2:d6:35:04:81:06:10:24:
b3:42:e5:e5:05:68:f2:95:1a:c5:38:d0:68:ae:81:ae:80:33:
2b:3e:2b:e2:ce:f4:e0:ef:de:69:81:0c:3e:15:3b:69:0c:3d:
ed:19:28:df:0d:cf:1a:37:03:fd:c3:0a:85:76:05:67:c0:9c:
93:a9:3c:3a:7d:47:92:c5:2f:31:a3:cd:2b:68:3c:47:ee:3b:
76:54:01:5c:49:a9:f2:bf:ca:74:79:67:7b:2c:1c:a9:9e:f8:
f4:b5:4b:d3:ea:be:fd:ec:85:dd:53:10:ee:ff:22:9c:a6:1f:
c3:4a:c9:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:47:56 2025 by rpki-client