Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/622353-2bcf-4560-9cae-7db20e6fc11d/1/pex__WA9oUiSKAsYN8OgN3Y1LVQ.mft
File: pex__WA9oUiSKAsYN8OgN3Y1LVQ.mft (raw, json)
Hash identifier: yH4ZdGLKx0TM0A3Zy0ov/J+QlD3xH0qBESndqiUXAPg=
Subject key identifier: 06:4C:FE:3D:53:3C:A3:0F:F1:BA:99:DE:0F:AD:08:02:9B:13:93:8A
Authority key identifier: A5:EC:7F:FD:60:3D:A1:48:92:28:0B:18:37:C3:A0:37:76:35:2D:54
Certificate issuer: /CN=a5ec7ffd603da14892280b1837c3a03776352d54
Certificate serial: 019A50E3FADF1D91E3BBA4F78982309364AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pex__WA9oUiSKAsYN8OgN3Y1LVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/622353-2bcf-4560-9cae-7db20e6fc11d/1/pex__WA9oUiSKAsYN8OgN3Y1LVQ.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 22:01:49 +0000
Manifest this update: Tue 04 Nov 2025 22:01:49 +0000
Manifest next update: Wed 05 Nov 2025 22:01:49 +0000
Files and hashes: 1: pex__WA9oUiSKAsYN8OgN3Y1LVQ.crl (hash: ontVYQoiQ8PZHpBUZaz20rBrfFueazLYGepklVFTwVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/622353-2bcf-4560-9cae-7db20e6fc11d/1/pex__WA9oUiSKAsYN8OgN3Y1LVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/622353-2bcf-4560-9cae-7db20e6fc11d/1/pex__WA9oUiSKAsYN8OgN3Y1LVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pex__WA9oUiSKAsYN8OgN3Y1LVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:fa:df:1d:91:e3:bb:a4:f7:89:82:30:93:64:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5ec7ffd603da14892280b1837c3a03776352d54
Validity
Not Before: Nov 4 22:01:49 2025 GMT
Not After : Nov 5 22:01:49 2025 GMT
Subject: CN=064cfe3d533ca30ff1ba99de0fad08029b13938a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:14:e7:5a:36:48:e1:be:60:66:2b:98:8d:20:
de:bc:a2:5b:9c:53:af:97:f9:38:35:55:d8:08:80:
3a:fe:63:d5:e9:31:1b:b4:7a:27:c8:5a:df:7f:01:
3a:3f:3f:9b:a1:85:33:c7:dc:8e:36:87:8a:b0:86:
33:b8:f3:71:f1:79:36:0b:93:01:27:96:3c:3f:90:
d8:19:fe:a7:b6:b5:bf:44:b1:f5:af:31:40:73:08:
50:23:3b:1c:f7:be:97:1f:54:3d:0b:3c:af:02:92:
90:b8:48:51:e5:ee:80:65:65:ff:12:1c:d3:a8:c7:
dd:69:cd:ea:94:7d:68:5b:08:68:29:5c:72:09:b9:
d8:51:5f:e7:43:72:5d:ae:fb:51:38:56:77:1e:8b:
66:46:4d:15:7d:cb:c0:06:d9:12:9f:9f:f3:00:04:
5e:77:74:15:c6:d6:cd:02:d8:f4:af:ea:34:30:b7:
df:10:d3:51:27:77:cc:85:09:6b:a0:24:27:bc:05:
d9:cd:8d:b8:f9:0f:fc:46:c9:50:7e:f2:10:ef:14:
50:64:d7:75:95:06:67:c8:61:ac:a8:cd:e1:87:2e:
22:3f:e3:d2:50:f2:0e:46:c9:8a:7a:53:ea:ce:98:
5c:5a:0f:bb:1e:6d:65:5c:80:f5:5e:d6:b1:6a:85:
96:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:4C:FE:3D:53:3C:A3:0F:F1:BA:99:DE:0F:AD:08:02:9B:13:93:8A
X509v3 Authority Key Identifier:
keyid:A5:EC:7F:FD:60:3D:A1:48:92:28:0B:18:37:C3:A0:37:76:35:2D:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pex__WA9oUiSKAsYN8OgN3Y1LVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/622353-2bcf-4560-9cae-7db20e6fc11d/1/pex__WA9oUiSKAsYN8OgN3Y1LVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/622353-2bcf-4560-9cae-7db20e6fc11d/1/pex__WA9oUiSKAsYN8OgN3Y1LVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:63:d6:7d:99:87:78:17:24:d7:f2:52:a3:15:3e:eb:a6:c8:
18:96:db:95:84:e1:f7:f9:8f:16:65:09:2c:f0:89:c8:e6:45:
ad:3d:f6:ab:97:d3:68:43:72:f9:e1:77:1c:a5:3d:3d:b8:c0:
92:9c:34:70:91:fb:d6:6a:8a:da:94:b3:2f:24:3e:f7:cf:09:
7e:83:9e:42:d4:6a:68:16:ac:e3:79:b1:47:33:54:cb:8c:13:
8b:5b:53:be:e9:87:52:e0:09:1e:f4:6a:aa:82:ea:cc:81:ef:
f6:ae:c7:f0:05:1f:68:a7:7a:91:3b:cb:03:b9:c2:89:8e:b5:
5a:5a:31:75:95:61:ee:98:03:47:fb:45:c4:f0:aa:6e:00:ac:
95:b1:cc:7e:0d:b3:e7:30:5e:56:3c:97:65:fe:df:8f:6f:ca:
a8:9c:10:be:62:10:16:95:88:df:48:6d:45:53:10:91:da:5b:
7d:e2:76:94:10:59:ad:fb:dc:e5:2c:82:ac:e3:43:81:84:03:
f7:90:5a:59:3d:ae:9c:14:f0:14:34:30:ea:fc:bb:be:84:20:
7f:72:b5:24:f0:6c:60:c2:8a:f6:9c:29:85:9d:e9:14:a7:b8:
be:2e:3b:2c:9b:f1:c8:04:05:e7:40:12:f1:60:35:45:53:d2:
fa:96:56:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQ4/rfHZHju6T3iYIwk2SvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1ZWM3ZmZkNjAzZGExNDg5MjI4MGIxODM3YzNhMDM3NzYz
NTJkNTQwHhcNMjUxMTA0MjIwMTQ5WhcNMjUxMTA1MjIwMTQ5WjAzMTEwLwYDVQQD
EygwNjRjZmUzZDUzM2NhMzBmZjFiYTk5ZGUwZmFkMDgwMjliMTM5MzhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7xTnWjZI4b5gZiuYjSDevKJbnFOv
l/k4NVXYCIA6/mPV6TEbtHonyFrffwE6Pz+boYUzx9yONoeKsIYzuPNx8Xk2C5MB
J5Y8P5DYGf6ntrW/RLH1rzFAcwhQIzsc976XH1Q9CzyvApKQuEhR5e6AZWX/EhzT
qMfdac3qlH1oWwhoKVxyCbnYUV/nQ3JdrvtROFZ3HotmRk0VfcvABtkSn5/zAARe
d3QVxtbNAtj0r+o0MLffENNRJ3fMhQlroCQnvAXZzY24+Q/8RslQfvIQ7xRQZNd1
lQZnyGGsqM3hhy4iP+PSUPIORsmKelPqzphcWg+7Hm1lXID1XtaxaoWWSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAZM/j1TPKMP8bqZ3g+tCAKbE5OKMB8GA1UdIwQY
MBaAFKXsf/1gPaFIkigLGDfDoDd2NS1UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGV4X19XQTlvVWlTS0FzWU44T2dOM1kxTFZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS82MjIzNTMtMmJjZi00NTYwLTljYWUt
N2RiMjBlNmZjMTFkLzEvcGV4X19XQTlvVWlTS0FzWU44T2dOM1kxTFZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS82MjIzNTMtMmJjZi00NTYwLTljYWUtN2RiMjBlNmZjMTFk
LzEvcGV4X19XQTlvVWlTS0FzWU44T2dOM1kxTFZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQGPWfZmH
eBck1/JSoxU+66bIGJbblYTh9/mPFmUJLPCJyOZFrT32q5fTaENy+eF3HKU9PbjA
kpw0cJH71mqK2pSzLyQ+988JfoOeQtRqaBas43mxRzNUy4wTi1tTvumHUuAJHvRq
qoLqzIHv9q7H8AUfaKd6kTvLA7nCiY61WloxdZVh7pgDR/tFxPCqbgCslbHMfg2z
5zBeVjyXZf7fj2/KqJwQvmIQFpWI30htRVMQkdpbfeJ2lBBZrfvc5SyCrONDgYQD
95BaWT2unBTwFDQw6vy7voQgf3K1JPBsYMKK9pwphZ3pFKe4vi47LJvxyAQF50AS
8WA1RVPS+pZWvA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 01:57:48 2025 by rpki-client