Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft
File: pb7DLWxk_7YB4nDO280-__XOekA.mft (raw, json)
Hash identifier: 8jK/fFmpedLGia7EjuUw1WOGj6RkWMCx7ATOict6yDc=
Subject key identifier: DF:F6:4A:29:52:DB:0E:04:81:2E:21:5F:A3:F0:1F:30:BD:54:65:74
Authority key identifier: A5:BE:C3:2D:6C:64:FF:B6:01:E2:70:CE:DB:CD:3E:FF:F5:CE:7A:40
Certificate issuer: /CN=a5bec32d6c64ffb601e270cedbcd3efff5ce7a40
Certificate serial: 019A4F99067B02EE0A60E560F4C73CB0E97E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pb7DLWxk_7YB4nDO280-__XOekA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 16:00:19 +0000
Manifest this update: Tue 04 Nov 2025 16:00:19 +0000
Manifest next update: Wed 05 Nov 2025 16:00:19 +0000
Files and hashes: 1: pb7DLWxk_7YB4nDO280-__XOekA.crl (hash: dHBewmnjxHM+4JTFcKwO2UBAvriUxEbgIh+LjdzrYY8=)
2: qjNgLrezTzPzPZHoRa0PyC-9c_E.roa (hash: gjQzNWtyWkBxUXT4We5fyARX6Waght/4yDMrIeCr6j8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pb7DLWxk_7YB4nDO280-__XOekA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:06:7b:02:ee:0a:60:e5:60:f4:c7:3c:b0:e9:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5bec32d6c64ffb601e270cedbcd3efff5ce7a40
Validity
Not Before: Nov 4 16:00:19 2025 GMT
Not After : Nov 5 16:00:19 2025 GMT
Subject: CN=dff64a2952db0e04812e215fa3f01f30bd546574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:da:cc:56:67:cf:5b:36:a2:eb:46:a6:7b:62:
5a:55:58:12:38:6a:1e:f3:ed:11:70:22:3e:de:30:
68:3f:4d:f6:96:66:1f:1f:b9:63:5b:c9:76:63:3b:
0b:3d:a5:e4:4a:d8:3c:50:6d:e4:3b:f7:61:64:c3:
67:87:a4:97:c4:1c:34:d9:c1:a4:12:b6:f9:ef:3e:
24:54:58:91:60:2f:6f:07:20:c3:ea:cb:0f:7d:da:
a6:2e:ba:e4:e1:55:a6:c2:ea:71:fa:cb:6d:d4:11:
2e:16:4d:06:33:59:c4:7a:0f:ec:1c:85:98:52:69:
61:da:e9:68:37:a2:4d:d2:9e:8e:6b:f1:2a:de:3c:
58:46:21:86:b6:5e:75:69:df:b6:0e:d2:05:e1:be:
d4:0a:7b:08:a4:97:a9:c0:8d:d5:3d:5a:f5:45:d9:
a5:74:f4:9d:ca:3f:ea:8f:ea:c8:79:83:27:9b:33:
e3:91:02:00:dd:27:5d:d9:fc:67:00:26:1d:a6:ec:
ff:e7:77:ce:30:a0:39:77:1e:4f:cc:4b:71:f8:6b:
68:2a:ac:16:ee:6b:06:4e:11:e1:1e:e3:9d:d5:41:
05:7c:61:b1:6c:b1:db:e3:a3:18:27:0c:d7:b6:b4:
e7:e2:74:00:4e:09:d6:47:0a:f5:b6:0e:cb:13:04:
12:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:F6:4A:29:52:DB:0E:04:81:2E:21:5F:A3:F0:1F:30:BD:54:65:74
X509v3 Authority Key Identifier:
keyid:A5:BE:C3:2D:6C:64:FF:B6:01:E2:70:CE:DB:CD:3E:FF:F5:CE:7A:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pb7DLWxk_7YB4nDO280-__XOekA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:59:f7:93:ad:50:54:81:28:3a:ab:f4:59:b7:51:d1:bd:b8:
c7:32:c6:22:1e:9a:bc:45:7e:08:18:03:d5:1b:2c:cd:4e:b4:
aa:39:8b:9e:63:26:3a:72:e7:32:2c:a1:24:88:7a:64:fc:a6:
6f:bd:ee:3f:de:a6:ba:98:62:7f:ab:76:67:ae:7c:3a:6e:5b:
45:ac:92:5a:3c:bd:d6:7f:2a:05:d5:3b:11:9d:dd:26:ba:cc:
8d:33:c1:04:86:00:ec:66:6a:1b:8d:f3:4b:bf:6c:c8:4e:fc:
9e:ed:9a:ea:d2:f4:d2:c8:cf:84:0a:88:98:5b:d3:6f:50:33:
48:61:34:dd:0c:dc:37:68:de:7d:24:56:0c:7a:fc:85:c4:6e:
41:dd:db:6f:01:f9:0a:c7:e1:3b:00:bc:16:45:f2:a0:fe:24:
dc:c9:cb:46:88:af:54:92:a4:ed:a0:b2:b6:e1:3e:54:fb:43:
0b:42:ed:8e:a9:13:81:4f:29:ef:41:61:1f:1c:f7:b8:4a:d1:
a9:e0:00:83:ad:59:03:51:1f:d2:4b:47:c5:1d:46:8d:2a:94:
4a:11:2c:36:9f:24:25:52:75:40:9b:a1:6d:ab:07:37:1a:54:
e9:45:ac:7c:b4:a8:9a:3c:6b:57:36:34:7a:3c:43:62:0c:17:
d1:83:33:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:23:13 2025 by rpki-client