Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/622353-2bcf-4560-9cae-7db20e6fc11d/1/pex__WA9oUiSKAsYN8OgN3Y1LVQ.mft
File: pex__WA9oUiSKAsYN8OgN3Y1LVQ.mft (raw, json)
Hash identifier: PNu19b3Y/xA9VdlGvxKlNyAZcn/zPFyPSGMlldpIA0c=
Subject key identifier: B6:DF:A0:E7:D9:3A:3E:A2:42:A6:0F:54:6E:62:57:D9:D1:05:9A:AB
Authority key identifier: A5:EC:7F:FD:60:3D:A1:48:92:28:0B:18:37:C3:A0:37:76:35:2D:54
Certificate issuer: /CN=a5ec7ffd603da14892280b1837c3a03776352d54
Certificate serial: 0199239F205392E6AA98EFAE0735A96862B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pex__WA9oUiSKAsYN8OgN3Y1LVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/622353-2bcf-4560-9cae-7db20e6fc11d/1/pex__WA9oUiSKAsYN8OgN3Y1LVQ.mft
Manifest number: 1670
Signing time: Sun 07 Sep 2025 10:00:55 +0000
Manifest this update: Sun 07 Sep 2025 10:00:55 +0000
Manifest next update: Mon 08 Sep 2025 10:00:55 +0000
Files and hashes: 1: pex__WA9oUiSKAsYN8OgN3Y1LVQ.crl (hash: 9lLFlpZshewYcqDRfIil2Jq6Xe4auFXE1ZOIj1vE43o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/622353-2bcf-4560-9cae-7db20e6fc11d/1/pex__WA9oUiSKAsYN8OgN3Y1LVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/622353-2bcf-4560-9cae-7db20e6fc11d/1/pex__WA9oUiSKAsYN8OgN3Y1LVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pex__WA9oUiSKAsYN8OgN3Y1LVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:20:53:92:e6:aa:98:ef:ae:07:35:a9:68:62:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5ec7ffd603da14892280b1837c3a03776352d54
Validity
Not Before: Sep 7 10:00:55 2025 GMT
Not After : Sep 8 10:00:55 2025 GMT
Subject: CN=b6dfa0e7d93a3ea242a60f546e6257d9d1059aab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:79:16:99:0f:eb:60:68:a1:59:c3:6f:0e:64:
a1:35:5c:17:96:48:f6:01:10:e8:ad:f9:52:8f:3e:
d6:8a:63:14:1b:c0:02:47:08:f0:a8:55:5a:ce:7c:
bd:de:68:82:85:ba:a4:49:2c:f6:c2:50:c9:0e:01:
80:95:e8:8c:0e:74:fc:9f:4e:7f:55:20:36:62:58:
78:e3:90:0b:e6:b6:c0:40:53:6e:ac:7b:8b:79:75:
f3:18:a4:af:59:a0:24:4d:8a:cb:c1:d7:80:50:76:
5a:29:f2:5a:39:de:2d:40:ad:0e:87:ec:40:2c:e7:
49:3d:ec:c9:66:12:d1:43:38:c0:18:41:b3:f2:cb:
e3:1a:8e:5e:8f:70:a0:16:97:ca:ae:e1:33:e0:ec:
31:de:1a:bf:1d:35:20:66:64:32:18:bd:5a:5a:b0:
40:7e:b5:90:71:9c:8e:d6:86:a5:ec:e4:6b:24:8b:
cc:00:ae:b1:79:a2:7d:6e:55:19:2b:c0:f7:e1:ec:
ec:2c:8a:5c:94:59:ff:a0:56:1b:cc:6b:f4:34:12:
c2:9c:91:8d:f3:dd:21:0f:71:95:57:d9:a8:2d:60:
12:23:a4:89:2e:a1:1b:aa:49:83:33:80:2b:45:1e:
a1:17:6a:1c:94:22:9d:20:2e:4a:ce:1b:dc:00:29:
6c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:DF:A0:E7:D9:3A:3E:A2:42:A6:0F:54:6E:62:57:D9:D1:05:9A:AB
X509v3 Authority Key Identifier:
keyid:A5:EC:7F:FD:60:3D:A1:48:92:28:0B:18:37:C3:A0:37:76:35:2D:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pex__WA9oUiSKAsYN8OgN3Y1LVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/622353-2bcf-4560-9cae-7db20e6fc11d/1/pex__WA9oUiSKAsYN8OgN3Y1LVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/622353-2bcf-4560-9cae-7db20e6fc11d/1/pex__WA9oUiSKAsYN8OgN3Y1LVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:78:43:ff:fb:ee:db:3f:95:ec:8d:31:cd:f8:78:c1:45:53:
4f:7d:39:d4:1d:33:f7:d8:30:6f:05:bc:28:aa:e0:92:e7:e4:
c3:04:74:28:3b:bd:39:fc:fe:e3:bd:86:0c:39:c5:9f:17:40:
9d:63:17:64:c7:1c:97:2a:19:05:f8:a9:c7:33:5b:3d:fa:d4:
ad:90:ce:18:51:f6:ff:16:e1:5c:88:c7:d1:b9:52:46:13:9d:
9e:f6:5a:5b:c5:fd:88:d4:18:0e:3a:19:d6:8d:1d:a6:b9:53:
10:9a:09:61:91:42:3b:1c:39:cc:0c:35:fc:81:94:61:aa:2d:
e5:66:a1:75:d5:a6:f0:1f:e3:b4:81:e5:58:70:d3:76:c0:dd:
39:91:3f:c1:94:88:15:10:2c:5d:15:c8:5b:cc:76:eb:66:17:
03:87:49:51:c8:6f:6b:38:fc:59:87:fa:d6:b1:b6:b6:79:46:
a4:38:03:c1:94:43:a3:49:f6:88:46:6e:80:62:29:3a:10:a5:
f0:95:d7:15:96:b0:06:ab:0f:a6:7d:50:b0:cd:87:08:07:00:
14:78:5f:8f:1f:2d:ba:f8:8d:03:61:d7:86:de:4b:87:79:2b:
c1:17:1d:10:f0:15:27:eb:94:79:30:bd:92:8c:89:fc:a4:34:
5e:5b:6a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:51:07 2025 by rpki-client