Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/b69811-cf3f-49bc-82ae-e55f9f9169db/1/pbJlTkMrdNyNpm2BayYM_8gXMXU.mft
File: pbJlTkMrdNyNpm2BayYM_8gXMXU.mft (raw, json)
Hash identifier: aJkZ9tGSbOf/oiaYgm5FtC/c/jckrPRTDGHhhGYUgVE=
Subject key identifier: 2C:6E:5C:55:22:3B:D4:96:C6:47:0E:D9:DE:7B:B3:3C:AB:49:DB:7D
Authority key identifier: A5:B2:65:4E:43:2B:74:DC:8D:A6:6D:81:6B:26:0C:FF:C8:17:31:75
Certificate issuer: /CN=a5b2654e432b74dc8da66d816b260cffc8173175
Certificate serial: 0198D54E4F49D60EF8772B97805FB76B6453
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pbJlTkMrdNyNpm2BayYM_8gXMXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/b69811-cf3f-49bc-82ae-e55f9f9169db/1/pbJlTkMrdNyNpm2BayYM_8gXMXU.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 05:02:15 +0000
Manifest this update: Sat 23 Aug 2025 05:02:15 +0000
Manifest next update: Sun 24 Aug 2025 05:02:15 +0000
Files and hashes: 1: pbJlTkMrdNyNpm2BayYM_8gXMXU.crl (hash: njoAE7QOuuKCshbPO2EWxl6Yfp/I5/vAkYndr8vhYtE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/b69811-cf3f-49bc-82ae-e55f9f9169db/1/pbJlTkMrdNyNpm2BayYM_8gXMXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/b69811-cf3f-49bc-82ae-e55f9f9169db/1/pbJlTkMrdNyNpm2BayYM_8gXMXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pbJlTkMrdNyNpm2BayYM_8gXMXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:4f:49:d6:0e:f8:77:2b:97:80:5f:b7:6b:64:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5b2654e432b74dc8da66d816b260cffc8173175
Validity
Not Before: Aug 23 05:02:15 2025 GMT
Not After : Aug 24 05:02:15 2025 GMT
Subject: CN=2c6e5c55223bd496c6470ed9de7bb33cab49db7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4a:5e:68:b2:1d:75:1c:14:ad:28:ec:e3:73:
9d:7c:e6:58:f0:37:05:91:e6:0e:b8:63:21:e5:a3:
69:32:63:75:b8:4a:70:bb:80:27:35:89:85:c0:cc:
15:08:08:39:4d:cf:01:23:fe:5c:ab:24:f1:ae:93:
d7:3c:fd:9e:f6:3d:6f:47:8c:63:89:bd:1c:9b:dc:
db:28:e5:cd:8f:a3:4c:4c:10:83:13:a9:f1:c1:e6:
38:ab:ab:9a:53:0d:5f:ce:ab:e0:9f:a2:fa:50:6b:
26:f2:86:7a:e0:e1:fb:bc:fe:20:f4:11:b4:8c:19:
20:d1:05:25:d4:01:91:c2:c4:60:65:82:a3:c5:7b:
17:21:ca:68:3d:9b:2e:0a:4e:6f:f7:67:ed:30:b3:
37:4d:9f:66:58:81:ba:5a:e9:bf:6e:ac:d8:e6:29:
ea:1a:12:f6:8c:5a:56:1b:7b:5e:d8:44:04:56:5c:
fd:4e:87:89:9d:c4:f2:37:e2:fc:60:71:e4:a8:15:
a3:6d:cc:9a:5f:d4:7d:b7:bc:e6:7d:40:1e:30:be:
07:71:13:9c:8c:aa:4d:90:41:d2:8d:27:e1:81:7c:
c6:3d:51:f1:0c:0a:41:76:89:72:e0:5b:d5:d1:0c:
a6:13:76:31:0c:9a:0d:80:cb:7d:e9:fc:fa:1f:ba:
e6:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:6E:5C:55:22:3B:D4:96:C6:47:0E:D9:DE:7B:B3:3C:AB:49:DB:7D
X509v3 Authority Key Identifier:
keyid:A5:B2:65:4E:43:2B:74:DC:8D:A6:6D:81:6B:26:0C:FF:C8:17:31:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbJlTkMrdNyNpm2BayYM_8gXMXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/b69811-cf3f-49bc-82ae-e55f9f9169db/1/pbJlTkMrdNyNpm2BayYM_8gXMXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/b69811-cf3f-49bc-82ae-e55f9f9169db/1/pbJlTkMrdNyNpm2BayYM_8gXMXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:68:74:52:27:34:96:96:8a:8b:1b:6c:bb:87:d7:e3:8a:02:
be:49:83:39:1b:29:ea:5d:e9:38:4c:30:a4:4d:2b:c2:b1:84:
09:37:68:c2:81:5f:32:a3:51:97:6f:9c:06:74:e3:b9:75:de:
7f:3f:84:1b:74:d2:42:ac:3d:d5:56:57:73:f3:54:6c:43:a2:
b9:f2:3c:24:b8:d4:f4:a5:f8:ed:63:17:46:7b:bf:f3:76:7a:
09:5a:97:19:aa:3e:cd:e9:7b:0a:11:c4:a6:db:53:ba:48:0a:
60:ed:14:02:3f:20:0c:10:88:56:7f:35:7a:60:c6:66:97:a7:
46:ba:e8:9b:93:45:82:bd:74:cf:25:01:c9:21:30:10:b0:97:
a4:6b:32:ee:61:cb:38:23:2c:43:15:52:67:d7:c4:4b:9c:e4:
11:7c:44:02:68:cb:df:3a:fb:3b:26:e0:0e:ec:a0:b1:b5:24:
23:7f:6f:79:12:91:06:d9:b3:35:8e:d5:96:34:c4:cf:10:6b:
bb:8c:a8:f6:65:30:fa:34:bb:13:5d:59:37:9c:e8:92:8e:db:
26:91:73:5a:31:f4:25:bd:36:c4:ad:14:1c:1c:72:12:57:28:
42:26:25:e6:1f:c7:dc:cd:89:4e:02:16:e5:da:d8:5e:0f:53:
4c:d0:de:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:37:46 2025 by rpki-client