Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft
File: pb7DLWxk_7YB4nDO280-__XOekA.mft (raw, json)
Hash identifier: gLteSvLuRizG4zM1Es2KAdCg2ZQjlyIcpDoOhBlhMeE=
Subject key identifier: 05:10:70:75:92:2B:0C:94:DA:80:3C:6C:E1:A9:73:83:1A:F3:1A:C2
Authority key identifier: A5:BE:C3:2D:6C:64:FF:B6:01:E2:70:CE:DB:CD:3E:FF:F5:CE:7A:40
Certificate issuer: /CN=a5bec32d6c64ffb601e270cedbcd3efff5ce7a40
Certificate serial: 019889C510ABD7D6E621998FAA7D6C847BD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pb7DLWxk_7YB4nDO280-__XOekA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft
Manifest number: 1624
Signing time: Fri 08 Aug 2025 13:00:50 +0000
Manifest this update: Fri 08 Aug 2025 13:00:50 +0000
Manifest next update: Sat 09 Aug 2025 13:00:50 +0000
Files and hashes: 1: pb7DLWxk_7YB4nDO280-__XOekA.crl (hash: pQKQoArUmZkXKrlHK/hjWiwfQ5VHRD3yw4u8iEGtitc=)
2: qjNgLrezTzPzPZHoRa0PyC-9c_E.roa (hash: gjQzNWtyWkBxUXT4We5fyARX6Waght/4yDMrIeCr6j8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pb7DLWxk_7YB4nDO280-__XOekA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:c5:10:ab:d7:d6:e6:21:99:8f:aa:7d:6c:84:7b:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5bec32d6c64ffb601e270cedbcd3efff5ce7a40
Validity
Not Before: Aug 8 13:00:50 2025 GMT
Not After : Aug 9 13:00:50 2025 GMT
Subject: CN=05107075922b0c94da803c6ce1a973831af31ac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a0:94:eb:f6:8a:2d:94:41:c9:12:d2:58:9e:
08:81:3c:b0:5b:db:b6:f3:c9:f2:14:2e:d2:28:b8:
db:11:26:9a:a9:5c:2c:2f:66:e7:3c:f5:a1:bd:75:
8c:4c:11:9b:69:82:8a:30:a0:f4:d6:2f:19:13:51:
19:51:81:c1:66:c2:e8:71:5a:ce:1d:be:c9:0b:e8:
e1:6c:68:5a:a3:ae:ca:b4:82:8a:43:cb:12:89:47:
ea:25:17:d0:0a:54:7d:ac:bc:bd:e1:85:0d:45:37:
6e:d7:5c:66:2d:77:e4:d6:ce:53:bd:88:d1:d3:bf:
00:ea:80:bc:a1:ed:43:81:e9:23:dd:08:50:4f:bd:
b7:4c:6d:41:0e:ac:72:c6:e8:25:f9:5d:83:98:5c:
8b:51:e8:ce:b0:dd:c0:9c:e8:b8:84:c5:47:41:d3:
95:ca:6c:c4:b8:d8:53:52:64:0b:e0:68:aa:c6:9a:
df:3a:da:40:d0:ad:4c:97:b2:fa:97:a8:77:0d:8a:
f7:9b:66:36:65:e6:f5:31:21:7a:c5:a0:47:23:36:
c7:63:a1:f5:2b:2c:e7:e8:39:a9:14:d0:88:d2:31:
6f:de:5d:ba:c5:3d:0a:e8:54:1d:26:d0:4a:a0:e1:
30:74:0b:21:0a:c1:65:57:45:3b:0a:2b:bc:fa:39:
66:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:10:70:75:92:2B:0C:94:DA:80:3C:6C:E1:A9:73:83:1A:F3:1A:C2
X509v3 Authority Key Identifier:
keyid:A5:BE:C3:2D:6C:64:FF:B6:01:E2:70:CE:DB:CD:3E:FF:F5:CE:7A:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pb7DLWxk_7YB4nDO280-__XOekA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:e7:1c:1f:aa:f0:86:04:87:da:e3:ac:ea:d2:2c:fe:db:64:
75:2c:ca:3b:60:59:7d:ba:f4:08:68:c0:e6:1f:9d:11:b3:e2:
83:d7:78:6d:af:56:8a:69:d2:67:23:b9:4c:52:d5:55:86:a6:
9a:77:6f:0e:0f:ee:71:ce:da:98:ec:f4:18:90:51:08:0f:c3:
fd:6c:69:4b:86:7c:d8:87:3e:6e:f4:94:c1:3f:d9:c8:a7:b4:
2b:e5:c2:df:49:83:71:e9:7b:b5:21:24:f4:e0:00:29:0e:1d:
2d:e6:22:af:13:2b:5f:4d:e0:21:e4:35:4b:37:b4:bd:fa:31:
18:13:30:a0:73:ab:88:da:88:0a:39:2a:80:c5:94:af:ba:28:
90:8e:c4:62:ab:89:c1:19:5e:d6:ae:07:01:ba:74:24:91:9e:
b4:61:ec:a5:d9:2c:7f:c7:8c:2c:71:9c:ec:7e:48:e7:ee:08:
cb:49:c2:6b:17:20:de:52:aa:16:31:ab:e7:d9:73:6f:e9:11:
80:7e:c6:35:a7:c4:e2:20:5b:bb:7c:c2:c4:94:b6:96:89:49:
19:a9:88:1d:a6:76:68:26:48:b2:3f:5b:61:bc:eb:23:9f:5f:
1b:7c:8d:09:cd:06:d9:42:1c:3c:e9:b4:39:e0:62:35:6c:61:
7d:72:97:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:57:29 2025 by rpki-client