Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/2f8d71-eec5-4d3d-a7a1-b032112051b1/1/pTW_JFBXN0H5Q16UghAWoi5rwUc.mft
File: pTW_JFBXN0H5Q16UghAWoi5rwUc.mft (raw, json)
Hash identifier: V8TqiEJnxbiijJU8g4s7g0RHgybuSj7K0SHP5gFAoVs=
Subject key identifier: B1:F1:9C:D5:12:9E:70:AE:A7:A7:4D:9D:E9:B0:80:D5:8B:58:13:E4
Authority key identifier: A5:35:BF:24:50:57:37:41:F9:43:5E:94:82:10:16:A2:2E:6B:C1:47
Certificate issuer: /CN=a535bf2450573741f9435e94821016a22e6bc147
Certificate serial: 019A70DBDF8DC03E0A44C93DC712174690B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pTW_JFBXN0H5Q16UghAWoi5rwUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/2f8d71-eec5-4d3d-a7a1-b032112051b1/1/pTW_JFBXN0H5Q16UghAWoi5rwUc.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 03:00:48 +0000
Manifest this update: Tue 11 Nov 2025 03:00:48 +0000
Manifest next update: Wed 12 Nov 2025 03:00:48 +0000
Files and hashes: 1: pTW_JFBXN0H5Q16UghAWoi5rwUc.crl (hash: CbRPR98Zig5mdj4WkBRdnmElAs4xvqZ6XGmtgXMVi4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/2f8d71-eec5-4d3d-a7a1-b032112051b1/1/pTW_JFBXN0H5Q16UghAWoi5rwUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/2f8d71-eec5-4d3d-a7a1-b032112051b1/1/pTW_JFBXN0H5Q16UghAWoi5rwUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/pTW_JFBXN0H5Q16UghAWoi5rwUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:db:df:8d:c0:3e:0a:44:c9:3d:c7:12:17:46:90:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a535bf2450573741f9435e94821016a22e6bc147
Validity
Not Before: Nov 11 03:00:48 2025 GMT
Not After : Nov 12 03:00:48 2025 GMT
Subject: CN=b1f19cd5129e70aea7a74d9de9b080d58b5813e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:13:a7:19:3f:13:b8:41:35:9e:a9:0b:80:01:
ea:89:78:69:19:e6:43:e9:74:63:f3:37:e7:47:5e:
03:24:87:35:58:83:d9:9b:de:ab:9c:e8:cb:ca:90:
f9:4b:92:7d:fa:b9:50:70:90:fc:1d:ba:61:98:08:
dd:80:5e:12:2f:89:b9:c4:69:84:61:7a:c3:53:9e:
0d:5c:9c:86:81:85:78:5d:9a:d2:67:6c:4f:c9:3b:
88:67:7b:b0:c5:0b:2d:23:0c:c6:b0:d1:c7:81:50:
bd:99:ad:8a:90:01:6a:fa:cb:b7:36:e6:ab:be:f1:
68:f1:03:57:17:64:59:54:18:11:76:34:be:ed:04:
57:dd:3f:db:a9:18:c3:11:55:27:d4:1c:6b:1d:fb:
93:05:51:c4:72:c7:51:a1:7f:b1:24:e2:9e:b2:c5:
35:ad:7e:f5:c8:56:28:9f:17:63:26:0a:1d:97:97:
d9:07:f1:0f:31:a4:52:0d:dc:52:32:a3:7e:41:77:
0d:72:67:8b:bf:ac:f6:6d:1b:be:2a:6f:6c:2a:c2:
ef:c3:99:b8:c1:57:6f:96:7b:17:21:46:57:38:4f:
d2:f5:55:84:fe:5c:47:90:4c:59:d8:74:0a:bb:a5:
be:eb:9c:14:3c:e8:57:bd:4e:99:f6:b4:66:9a:21:
54:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:F1:9C:D5:12:9E:70:AE:A7:A7:4D:9D:E9:B0:80:D5:8B:58:13:E4
X509v3 Authority Key Identifier:
keyid:A5:35:BF:24:50:57:37:41:F9:43:5E:94:82:10:16:A2:2E:6B:C1:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTW_JFBXN0H5Q16UghAWoi5rwUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2f8d71-eec5-4d3d-a7a1-b032112051b1/1/pTW_JFBXN0H5Q16UghAWoi5rwUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2f8d71-eec5-4d3d-a7a1-b032112051b1/1/pTW_JFBXN0H5Q16UghAWoi5rwUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:35:a9:2a:bd:f9:8b:4a:f4:66:d5:4d:be:41:99:c0:d3:2a:
cb:eb:b2:a1:f5:36:24:87:21:b2:e2:3f:e6:28:68:3e:5e:8a:
0f:31:08:be:13:df:c2:ae:b0:5b:01:ba:48:49:8f:c3:a8:f0:
25:4f:91:6a:f6:09:20:12:5c:cd:1d:9b:57:81:cf:23:db:f3:
d5:28:11:a5:38:e6:61:aa:a5:a8:3c:e6:fe:0a:ce:c5:6e:49:
dd:c3:74:77:7f:00:ed:56:54:bf:a5:af:49:b8:e2:c7:0c:a5:
1e:9c:03:52:18:b8:48:9a:bd:1c:03:59:a4:6f:5f:6b:46:24:
6a:7d:ad:b0:6e:9f:4f:b8:bb:8c:9b:ce:65:3f:e1:09:93:8b:
96:f3:3c:c9:2f:c0:d0:3c:23:dd:77:9f:dc:85:ad:2c:2d:7c:
ca:42:c3:71:e5:73:8e:75:7f:df:63:dc:3a:04:94:a1:04:f6:
1d:b6:ba:ad:a9:2e:f2:bb:35:bb:b3:c8:ea:c5:68:16:09:21:
dc:96:a5:96:75:91:f0:65:75:8c:b2:51:63:c4:4c:2c:dd:88:
e3:93:99:66:31:18:04:0f:84:8b:32:c0:ec:cf:f0:c5:52:d8:
64:dd:9b:5d:92:f9:6f:b8:5d:9f:0b:73:dc:e0:f9:e8:ce:8d:
59:31:f6:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:41:43 2025 by rpki-client