Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/2f8d71-eec5-4d3d-a7a1-b032112051b1/1/pTW_JFBXN0H5Q16UghAWoi5rwUc.mft
File: pTW_JFBXN0H5Q16UghAWoi5rwUc.mft (raw, json)
Hash identifier: fwiOJ40MLnEwr6kFqIs5XsIzeVHrzNEC1ap7tYZoqEk=
Subject key identifier: F8:3E:60:84:42:34:1D:AA:B4:ED:8D:D2:3F:0B:EA:43:51:02:1C:67
Authority key identifier: A5:35:BF:24:50:57:37:41:F9:43:5E:94:82:10:16:A2:2E:6B:C1:47
Certificate issuer: /CN=a535bf2450573741f9435e94821016a22e6bc147
Certificate serial: 019A500728EAEA535F100C152C842929E29B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pTW_JFBXN0H5Q16UghAWoi5rwUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/2f8d71-eec5-4d3d-a7a1-b032112051b1/1/pTW_JFBXN0H5Q16UghAWoi5rwUc.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 18:00:37 +0000
Manifest this update: Tue 04 Nov 2025 18:00:37 +0000
Manifest next update: Wed 05 Nov 2025 18:00:37 +0000
Files and hashes: 1: pTW_JFBXN0H5Q16UghAWoi5rwUc.crl (hash: vmelZbOhWjwP0g0BAFlZtXC/PGo0TLC9yn+4FFIRu+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/2f8d71-eec5-4d3d-a7a1-b032112051b1/1/pTW_JFBXN0H5Q16UghAWoi5rwUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/2f8d71-eec5-4d3d-a7a1-b032112051b1/1/pTW_JFBXN0H5Q16UghAWoi5rwUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/pTW_JFBXN0H5Q16UghAWoi5rwUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:28:ea:ea:53:5f:10:0c:15:2c:84:29:29:e2:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a535bf2450573741f9435e94821016a22e6bc147
Validity
Not Before: Nov 4 18:00:37 2025 GMT
Not After : Nov 5 18:00:37 2025 GMT
Subject: CN=f83e608442341daab4ed8dd23f0bea4351021c67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:4c:76:30:ab:0c:43:40:c5:01:1c:e2:f2:4c:
9d:f9:e5:0a:bc:21:4c:1d:7a:ba:8b:09:4d:cd:ad:
b8:a1:ad:8c:c9:df:40:8f:49:74:6d:43:7c:d6:51:
a0:6c:69:4f:2d:56:07:3b:5c:23:44:ed:38:33:a3:
fc:c3:34:aa:6b:60:57:a0:c2:3f:df:39:31:bc:6e:
16:eb:34:a8:aa:2d:d4:b4:a0:6c:16:e5:eb:ab:9e:
c7:4e:5c:6e:9d:5a:1d:3f:18:17:87:81:6c:25:60:
ae:4a:4f:16:60:d6:39:47:cc:72:4b:cd:c8:31:f4:
0f:42:bb:02:10:25:0d:38:74:9e:32:ea:ef:67:d0:
23:08:0e:88:cc:64:cf:87:bc:f2:21:7f:73:ac:c3:
06:d3:17:aa:2a:d0:aa:43:09:d3:a6:7c:c6:cd:02:
e0:97:ba:8d:19:3a:52:f8:ad:af:6e:30:dd:83:30:
1a:6e:10:71:e5:4c:36:e6:5d:94:c0:eb:14:5b:86:
f1:4f:88:af:70:f9:fc:50:23:ef:74:27:17:60:73:
fb:2c:bc:bf:5c:c7:aa:ae:5f:0f:80:c3:2e:d5:c9:
0e:bf:37:83:64:87:6a:4c:20:d8:1a:9b:59:f1:8f:
0d:5e:c6:7a:dc:e0:20:52:75:d8:4a:e2:12:32:08:
14:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:3E:60:84:42:34:1D:AA:B4:ED:8D:D2:3F:0B:EA:43:51:02:1C:67
X509v3 Authority Key Identifier:
keyid:A5:35:BF:24:50:57:37:41:F9:43:5E:94:82:10:16:A2:2E:6B:C1:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTW_JFBXN0H5Q16UghAWoi5rwUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2f8d71-eec5-4d3d-a7a1-b032112051b1/1/pTW_JFBXN0H5Q16UghAWoi5rwUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2f8d71-eec5-4d3d-a7a1-b032112051b1/1/pTW_JFBXN0H5Q16UghAWoi5rwUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:6b:86:53:03:64:d5:9a:3f:51:06:28:96:ae:95:4d:49:de:
ee:e0:1d:fe:5c:e5:00:04:10:ca:b6:38:a3:9c:6c:c9:1a:99:
4a:bb:d2:99:d2:db:4d:fc:90:34:ea:fb:52:25:67:f0:9c:9f:
48:5c:33:af:ac:62:25:1a:90:88:a0:ab:83:79:a5:04:8a:c1:
52:32:38:32:a4:36:b8:65:2f:36:0d:6e:69:df:c3:2f:b6:11:
61:a0:57:6b:71:e8:8f:44:df:94:6e:6d:f3:1e:db:59:c7:54:
29:60:7a:57:f1:e2:41:90:8a:c6:7d:d6:96:a5:cc:a8:d2:85:
03:79:4c:d1:6a:1c:b1:41:f7:d7:eb:5a:ce:b4:57:64:93:50:
56:a5:36:dd:98:e2:d9:a5:4e:f7:4f:47:b8:6f:32:a6:4f:b6:
9e:8a:56:02:4a:5a:7f:ce:54:e5:f6:20:4c:15:b5:c0:ae:44:
e4:83:47:c5:63:c3:79:34:bf:74:33:35:56:ab:92:c6:e0:4e:
af:b4:6e:e5:13:97:95:ff:f1:2a:07:8d:0c:68:b4:26:44:8e:
e2:2d:69:c6:ba:3f:04:ec:d4:51:53:d3:2f:71:36:a8:f1:32:
30:7c:1c:3b:b4:b3:7d:95:6c:f6:35:8d:a7:f2:ed:a1:66:5c:
05:04:57:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:01:36 2025 by rpki-client