
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft
File: pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft (raw, json)
Hash identifier: cUXWLaYeAdUdFk1+K50SXubMj6JdbGfoKmJpxGd+tCs=
Subject key identifier: BE:66:0D:AE:EF:35:1C:1A:D9:62:D5:8A:A6:F8:27:A9:E4:D0:4A:23
Authority key identifier: A6:30:75:CB:B7:EB:16:93:EE:71:BC:90:E5:F7:3D:AD:C2:25:D9:1A
Certificate issuer: /CN=a63075cbb7eb1693ee71bc90e5f73dadc225d91a
Certificate serial: 0199FFC76ADABB39576A7C6CA6A4A85325A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjB1y7frFpPucbyQ5fc9rcIl2Ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft
Manifest number: 16E4
Signing time: Mon 20 Oct 2025 04:01:23 +0000
Manifest this update: Mon 20 Oct 2025 04:01:23 +0000
Manifest next update: Tue 21 Oct 2025 04:01:23 +0000
Files and hashes: 1: pjB1y7frFpPucbyQ5fc9rcIl2Ro.crl (hash: /89z78/GZ08ciVjihluaeIS0dXQgmCEUgeFv4HeyzS4=)
2: t403LtXkOSW8w7w_vK-2ppXvWVA.roa (hash: kUS7ckaNEkh4qS4uYt0WI3yhqZiJYbt1KK2dO98adJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft
rsync://rpki.ripe.net/repository/DEFAULT/pjB1y7frFpPucbyQ5fc9rcIl2Ro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:6a:da:bb:39:57:6a:7c:6c:a6:a4:a8:53:25:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a63075cbb7eb1693ee71bc90e5f73dadc225d91a
Validity
Not Before: Oct 20 04:01:23 2025 GMT
Not After : Oct 21 04:01:23 2025 GMT
Subject: CN=be660daeef351c1ad962d58aa6f827a9e4d04a23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2f:61:8d:37:4c:b6:e8:6d:98:97:8a:92:10:
9e:36:c1:40:34:e1:63:13:28:20:11:ef:72:55:28:
0f:0a:40:70:a4:dc:d5:e6:22:95:1f:fb:b3:89:89:
e7:c5:4c:a5:d7:65:a4:2b:dc:44:8a:02:fb:88:fe:
47:85:04:db:14:25:7e:64:12:c0:bc:91:85:64:b8:
85:61:e8:ef:3b:cc:53:67:62:8a:5e:6a:13:01:85:
46:d4:b5:33:ce:c8:84:65:49:f8:52:55:13:15:ee:
45:95:52:18:c0:ad:4d:f0:de:d4:f5:bc:04:67:45:
dd:63:6a:f4:ed:9c:b4:9c:55:b2:3f:ca:76:04:a1:
ed:db:2e:45:32:f5:d8:07:6d:97:a7:7b:b8:eb:eb:
76:64:54:60:34:42:33:c3:bc:d0:71:52:fb:13:8d:
35:71:d3:1d:12:09:ad:7f:68:68:5a:f0:ec:0c:6a:
25:92:2d:53:4e:e9:78:4c:06:5f:24:44:6c:cd:ef:
3e:92:f2:54:49:35:78:8e:f3:0e:b4:da:15:91:18:
bd:ff:a0:9e:7d:03:a3:d8:c3:b5:4b:a4:ae:a3:0a:
1e:30:9f:4f:9f:77:58:31:32:ea:c9:fe:35:a9:90:
4a:c1:14:c8:8b:82:7a:20:d3:93:45:59:ff:38:fb:
85:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:66:0D:AE:EF:35:1C:1A:D9:62:D5:8A:A6:F8:27:A9:E4:D0:4A:23
X509v3 Authority Key Identifier:
keyid:A6:30:75:CB:B7:EB:16:93:EE:71:BC:90:E5:F7:3D:AD:C2:25:D9:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjB1y7frFpPucbyQ5fc9rcIl2Ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:39:3a:61:29:f8:8c:ff:e7:91:65:4d:8b:35:8d:3d:9f:1e:
ec:79:95:e9:34:25:19:b1:b5:c1:00:b5:a4:3a:57:e8:0b:12:
68:cf:ce:f0:ef:76:fc:6d:c8:9a:16:37:bd:78:33:f0:61:9b:
52:f7:9c:97:f0:d6:6c:2e:1d:82:80:ac:86:98:00:78:c5:e2:
02:35:6a:4e:47:0b:df:b7:86:79:bf:af:b3:88:b8:23:19:8c:
3d:2e:87:f5:f6:70:bf:7a:b6:0c:0b:68:b6:2f:9a:15:4b:04:
13:a4:a8:3f:b3:12:9b:1e:bc:e5:1e:8b:50:13:ef:4f:e4:2f:
8b:52:42:b0:96:a4:77:ac:65:98:98:d7:0e:66:ac:4d:52:51:
fe:f2:ce:2c:33:9a:8d:71:08:f3:05:80:37:c6:42:3a:f6:27:
db:1b:83:67:5f:eb:94:47:2a:52:9a:b2:2e:49:89:58:3c:8a:
76:84:91:a9:e1:fa:ec:f8:f1:3c:cb:b9:8b:77:7b:7f:bb:14:
dd:d2:26:34:4a:8d:00:c4:38:5e:1f:14:72:7c:86:e5:87:e3:
bc:2d:32:35:64:47:9c:33:4a:3e:10:17:c3:cd:97:60:0b:0a:
e0:44:76:5c:9a:f3:30:94:6d:4e:35:ac:a6:5f:f3:61:51:ae:
26:15:24:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:31:28 2025 by rpki-client