Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/b69811-cf3f-49bc-82ae-e55f9f9169db/1/pbJlTkMrdNyNpm2BayYM_8gXMXU.mft
File: pbJlTkMrdNyNpm2BayYM_8gXMXU.mft (raw, json)
Hash identifier: wmbTkN72HHKXpT24ogvCq9O03apFpDJDqDSc0Ma4NJQ=
Subject key identifier: 48:E1:CA:CD:42:F2:C4:9F:D7:66:42:D5:2A:A0:EB:6B:F1:28:2D:1E
Authority key identifier: A5:B2:65:4E:43:2B:74:DC:8D:A6:6D:81:6B:26:0C:FF:C8:17:31:75
Certificate issuer: /CN=a5b2654e432b74dc8da66d816b260cffc8173175
Certificate serial: 0199FCC66FCB85E8B712D0C87585C34E487D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pbJlTkMrdNyNpm2BayYM_8gXMXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/b69811-cf3f-49bc-82ae-e55f9f9169db/1/pbJlTkMrdNyNpm2BayYM_8gXMXU.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 14:01:27 +0000
Manifest this update: Sun 19 Oct 2025 14:01:27 +0000
Manifest next update: Mon 20 Oct 2025 14:01:27 +0000
Files and hashes: 1: pbJlTkMrdNyNpm2BayYM_8gXMXU.crl (hash: n8mUV0/WnF8trrcqP5Ub6LW9w00yFiwFkQq+XqHouHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/b69811-cf3f-49bc-82ae-e55f9f9169db/1/pbJlTkMrdNyNpm2BayYM_8gXMXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/b69811-cf3f-49bc-82ae-e55f9f9169db/1/pbJlTkMrdNyNpm2BayYM_8gXMXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pbJlTkMrdNyNpm2BayYM_8gXMXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:6f:cb:85:e8:b7:12:d0:c8:75:85:c3:4e:48:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5b2654e432b74dc8da66d816b260cffc8173175
Validity
Not Before: Oct 19 14:01:27 2025 GMT
Not After : Oct 20 14:01:27 2025 GMT
Subject: CN=48e1cacd42f2c49fd76642d52aa0eb6bf1282d1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9c:23:e0:42:c2:a5:7b:7f:1b:18:b3:83:34:
e8:25:42:d3:66:79:58:fe:81:4d:77:de:a9:3f:d9:
ea:97:ca:3a:1c:32:c8:90:8d:32:44:8f:7d:2d:f9:
93:f6:8e:25:6f:c7:20:46:80:8c:7f:4d:fb:bf:ca:
7a:f7:9c:75:c7:6e:7f:81:5c:6c:e4:68:e0:47:33:
02:fe:65:b1:a1:4f:c8:9b:90:b1:3f:13:39:aa:f1:
93:66:b7:89:9a:a7:2d:60:4d:77:83:a7:15:6e:91:
aa:53:21:27:6b:85:41:9c:a3:f7:33:9c:83:c1:85:
6b:2f:c7:73:02:0b:bd:00:c8:00:4c:40:73:58:f9:
9a:41:d6:87:cc:b1:4e:c3:d5:07:ba:b9:49:62:fc:
ed:de:33:50:9a:82:ed:a0:f3:59:e0:42:9f:d3:60:
a8:72:44:c4:49:12:e0:05:b3:8a:9e:3c:df:ba:f0:
01:e5:34:61:5c:8f:cf:29:1d:ba:0f:c6:03:bb:45:
62:e2:8f:92:49:99:ce:e9:ea:8f:75:5a:aa:9f:c0:
7b:0c:d6:74:d0:b2:18:0c:64:8e:97:70:47:86:0b:
26:d7:e8:0b:15:16:ea:ab:e0:1a:77:1d:95:72:3a:
54:e0:6a:76:3c:ea:cf:fb:b8:21:5c:98:fb:fa:6b:
4b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:E1:CA:CD:42:F2:C4:9F:D7:66:42:D5:2A:A0:EB:6B:F1:28:2D:1E
X509v3 Authority Key Identifier:
keyid:A5:B2:65:4E:43:2B:74:DC:8D:A6:6D:81:6B:26:0C:FF:C8:17:31:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbJlTkMrdNyNpm2BayYM_8gXMXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/b69811-cf3f-49bc-82ae-e55f9f9169db/1/pbJlTkMrdNyNpm2BayYM_8gXMXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/b69811-cf3f-49bc-82ae-e55f9f9169db/1/pbJlTkMrdNyNpm2BayYM_8gXMXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:ff:58:38:f4:c0:65:cf:d8:42:ed:bf:f6:62:4b:83:09:58:
66:5a:07:c4:61:f2:e0:29:72:50:b5:01:41:71:d2:36:b9:33:
98:ed:70:d0:1b:e5:a4:26:1c:39:15:d6:05:39:80:de:33:c5:
3b:ed:b8:c9:7c:80:37:57:04:21:5f:d0:92:99:b1:3c:1a:c7:
83:97:f8:d5:26:0f:6b:da:ad:bc:69:7f:32:12:67:1d:4b:50:
78:30:52:5e:e5:c3:8c:b7:60:d0:5a:ed:4f:77:61:ed:8e:b7:
2e:8e:ce:35:73:d5:4c:f0:1c:ca:fd:80:9d:26:c1:b8:e9:da:
90:d7:97:5a:59:9c:53:7a:db:62:9e:54:b0:1b:61:21:73:aa:
b2:e7:5c:7e:10:12:f9:ee:db:08:48:56:7e:94:e2:4f:a3:e5:
0c:28:82:51:fc:74:8e:dc:5a:1a:1d:a0:dc:e6:ad:42:de:f8:
64:e3:c0:eb:b1:b4:1d:aa:f3:f5:50:51:a4:23:f3:15:08:05:
ee:19:0f:66:df:c1:ad:f9:06:73:f9:1b:19:1c:b4:19:d6:b5:
d0:ac:42:4d:52:04:b5:bc:72:cf:28:c9:b8:2f:a5:d5:1f:1d:
59:23:14:83:df:98:61:d4:2c:7a:62:25:55:9d:9e:ca:ab:90:
24:ce:47:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:12:51 2025 by rpki-client