Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft
File: pbIQYaPq10EOBFDbvyFw_gyTi7E.mft (raw, json)
Hash identifier: vr0dj34vh/8UpEWV6394cNw6JE7/plmQyhCZCqGM/Z4=
Subject key identifier: 7A:7F:F9:18:7C:F3:C9:54:79:5B:2E:D8:55:FE:6B:96:FA:1F:18:2B
Authority key identifier: A5:B2:10:61:A3:EA:D7:41:0E:04:50:DB:BF:21:70:FE:0C:93:8B:B1
Certificate issuer: /CN=a5b21061a3ead7410e0450dbbf2170fe0c938bb1
Certificate serial: 019872CF800C1F0903810B14A7A42629A6D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pbIQYaPq10EOBFDbvyFw_gyTi7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft
Manifest number: 1616
Signing time: Mon 04 Aug 2025 02:00:58 +0000
Manifest this update: Mon 04 Aug 2025 02:00:58 +0000
Manifest next update: Tue 05 Aug 2025 02:00:58 +0000
Files and hashes: 1: pbIQYaPq10EOBFDbvyFw_gyTi7E.crl (hash: lSYYX2lncslUQ7Zc9Y6czsQV9WIk+17rxOpG49znPJc=)
2: q9uMRJMivdNIUmR3cIXWE4hBpI0.roa (hash: k+Mam0ND2lwJk85PckjyzqHvxu7FYX4bMXDwNQs3Kx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/pbIQYaPq10EOBFDbvyFw_gyTi7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:80:0c:1f:09:03:81:0b:14:a7:a4:26:29:a6:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5b21061a3ead7410e0450dbbf2170fe0c938bb1
Validity
Not Before: Aug 4 02:00:58 2025 GMT
Not After : Aug 5 02:00:58 2025 GMT
Subject: CN=7a7ff9187cf3c954795b2ed855fe6b96fa1f182b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:85:e4:d5:10:b9:56:28:9a:61:0f:e6:ad:a8:
b9:ae:23:e7:cd:44:d7:bc:ed:ec:d7:70:a7:a4:16:
be:7f:b6:e1:f3:b5:82:91:45:6b:c8:a0:80:d5:2c:
00:06:8d:68:54:fb:5d:e1:06:60:3c:23:d7:47:01:
7f:86:ac:8a:a3:7f:e0:7c:0c:b4:4f:4f:e3:89:af:
d5:b8:67:78:3a:98:b3:b9:cb:87:85:e2:45:e7:16:
50:e3:50:19:be:0b:31:0a:8d:b4:0a:0b:d7:3d:ec:
bf:33:04:63:e0:26:04:9a:8f:b0:b0:c6:2e:3e:7a:
6d:45:5c:93:80:83:8d:2c:5a:b2:88:cf:7f:c7:6c:
f2:2a:4b:4a:03:5a:dc:7f:17:70:db:6a:62:ed:6c:
93:3f:b0:6a:ea:d2:2c:69:50:02:1b:d8:18:73:03:
10:5e:e7:cf:b4:d3:bc:e1:19:89:bb:8c:63:30:f5:
aa:61:7e:23:f9:33:fa:cc:19:f4:05:86:e5:e0:0a:
da:a6:ff:71:db:4e:c5:8a:68:c1:41:44:df:56:67:
95:29:a7:90:5d:80:2e:c6:07:16:e2:e2:e6:50:bd:
03:e6:65:51:3d:85:90:af:7f:43:5a:d7:7f:77:0a:
c4:2c:fd:1d:20:1c:b1:7e:5b:8f:ad:0e:f6:fe:69:
d4:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:7F:F9:18:7C:F3:C9:54:79:5B:2E:D8:55:FE:6B:96:FA:1F:18:2B
X509v3 Authority Key Identifier:
keyid:A5:B2:10:61:A3:EA:D7:41:0E:04:50:DB:BF:21:70:FE:0C:93:8B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbIQYaPq10EOBFDbvyFw_gyTi7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:4f:a5:6f:ad:1b:94:b4:00:8d:0e:3c:b8:71:01:88:28:9a:
22:07:7f:01:d1:cf:6d:f1:c1:9c:ae:a3:cd:49:c8:da:85:eb:
d3:43:0e:00:78:31:b2:d7:1a:cb:a7:2c:06:b4:f7:de:25:80:
3a:0f:cf:b8:15:b3:82:24:c9:8e:d4:cc:b1:55:1b:34:a9:15:
3d:d9:fc:3b:2e:aa:dd:5f:56:35:1a:28:2b:02:64:4a:96:47:
35:92:79:3c:19:37:0c:c4:67:f9:ce:ac:ad:39:ac:49:fe:0b:
15:1e:a1:90:33:34:1f:be:d3:d4:dd:24:de:c5:c3:86:1c:b5:
2b:2a:ba:c0:84:02:8f:93:12:63:f4:af:98:23:c1:9d:4c:e1:
61:fe:2b:49:7b:d1:79:38:6b:97:13:50:5f:1a:66:f1:e2:98:
30:fc:f7:51:59:7d:24:ba:ac:b7:64:20:b7:16:5e:ce:b3:7d:
ea:aa:54:4d:a8:5d:08:5a:14:d4:22:ee:b3:bf:34:65:20:b0:
85:33:2d:e3:30:3b:a2:e5:76:b1:ac:d6:12:e5:3f:88:9f:18:
af:a5:d6:b5:e1:b6:cc:ab:a6:19:a1:39:14:51:6d:d9:f7:bf:
41:a4:9a:86:86:fe:21:fc:16:0b:5d:22:d9:fa:25:a8:c5:a8:
c7:cc:4a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:09:25 2025 by rpki-client