Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft
File: pb7DLWxk_7YB4nDO280-__XOekA.mft (raw, json)
Hash identifier: 1nhEidoku7KQedOv8oKXGqloHCPauKfDCLyJrHIAxYs=
Subject key identifier: 26:45:99:6A:CA:34:2B:35:EC:81:11:49:E6:7A:42:6E:BE:0B:92:3D
Authority key identifier: A5:BE:C3:2D:6C:64:FF:B6:01:E2:70:CE:DB:CD:3E:FF:F5:CE:7A:40
Certificate issuer: /CN=a5bec32d6c64ffb601e270cedbcd3efff5ce7a40
Certificate serial: 0198D515BA043D8641A6C2C2039B93934B7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pb7DLWxk_7YB4nDO280-__XOekA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 04:00:27 +0000
Manifest this update: Sat 23 Aug 2025 04:00:27 +0000
Manifest next update: Sun 24 Aug 2025 04:00:27 +0000
Files and hashes: 1: pb7DLWxk_7YB4nDO280-__XOekA.crl (hash: M0yrIsjwfMGMsOI9o5IvXBvrvG2Dp6wKB1XyYoh66Pw=)
2: qjNgLrezTzPzPZHoRa0PyC-9c_E.roa (hash: gjQzNWtyWkBxUXT4We5fyARX6Waght/4yDMrIeCr6j8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pb7DLWxk_7YB4nDO280-__XOekA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:ba:04:3d:86:41:a6:c2:c2:03:9b:93:93:4b:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5bec32d6c64ffb601e270cedbcd3efff5ce7a40
Validity
Not Before: Aug 23 04:00:27 2025 GMT
Not After : Aug 24 04:00:27 2025 GMT
Subject: CN=2645996aca342b35ec811149e67a426ebe0b923d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8f:9b:18:1d:ce:14:9d:2f:8c:b4:fd:70:4c:
91:46:a8:c3:0e:43:f2:4d:5c:ba:8d:a2:8c:95:7d:
3e:de:a2:b6:35:4d:70:b6:3a:49:24:b0:48:2a:70:
ce:db:04:44:b7:45:25:46:a0:f5:e0:9f:a2:cf:18:
93:61:64:69:fc:8b:af:13:74:43:8a:41:ea:14:27:
e6:d4:da:b3:e5:c7:d3:4e:d0:94:4d:ac:11:97:40:
a5:9d:44:d1:58:96:ea:bf:ba:ab:9f:6b:c7:4e:32:
8d:8c:1e:e2:f9:9d:13:9d:db:f8:5d:b0:57:84:d2:
fa:c9:cf:74:3f:47:1b:13:9a:7f:57:53:d8:4d:c3:
9c:b8:56:04:5b:62:ca:0b:a2:bc:02:33:ea:7b:d5:
b2:f9:e5:bc:67:8c:c1:68:64:e6:5b:f2:9f:6a:84:
90:c5:86:43:58:b5:21:6a:9d:c0:66:23:83:3e:e7:
38:d0:6f:e0:e9:c5:51:3a:3a:18:d0:3a:9e:43:3e:
97:63:81:23:1c:d3:30:f4:c5:d7:47:1b:99:19:76:
1a:19:9e:70:2c:29:68:51:eb:34:d5:0f:ff:e2:17:
62:95:f4:ff:a4:be:17:98:b5:64:ea:c2:cf:55:0b:
6a:b9:04:ce:3f:0f:e2:2a:c3:72:b9:3f:35:ef:42:
93:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:45:99:6A:CA:34:2B:35:EC:81:11:49:E6:7A:42:6E:BE:0B:92:3D
X509v3 Authority Key Identifier:
keyid:A5:BE:C3:2D:6C:64:FF:B6:01:E2:70:CE:DB:CD:3E:FF:F5:CE:7A:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pb7DLWxk_7YB4nDO280-__XOekA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:4d:88:3e:e3:92:cc:dd:e4:aa:b6:0b:e7:c2:b7:f7:87:09:
89:b9:51:c4:9e:a6:79:d8:6e:ac:27:d1:a8:0c:e2:02:fa:1e:
9d:4c:7d:45:2a:e8:58:b4:e9:c1:0b:ea:60:0d:b1:f2:cb:8a:
b4:8c:a2:90:61:4f:5c:e5:7e:e0:61:21:d9:21:93:5b:62:42:
76:5c:48:78:bc:80:bb:95:29:b6:49:ec:9c:fc:ec:a9:5f:7a:
5a:e0:60:01:90:e4:f1:c3:ee:41:cc:ca:8d:07:65:be:ed:bf:
c7:53:69:2b:e4:07:58:8b:69:64:46:0e:82:cc:62:85:1d:37:
31:a6:a4:64:c4:44:0b:a3:6d:82:aa:bf:26:91:5b:22:9f:f3:
ae:0c:b6:77:16:6b:10:cd:8b:b4:ef:6c:8a:ca:3d:b6:84:8a:
cf:ff:26:5c:41:32:08:b2:32:1d:c1:1b:20:8e:f9:0c:34:a6:
db:32:4b:14:4f:3d:e3:b3:c4:08:57:21:4f:00:57:37:43:3f:
46:60:a3:e7:6a:39:c6:a1:11:86:e6:be:64:60:66:0e:3c:f1:
91:ec:96:00:54:7f:76:78:48:25:0d:f4:7a:50:12:48:a4:bd:
70:75:7d:10:6b:7e:51:ac:af:48:71:b5:36:7c:eb:5a:c0:68:
1a:b9:97:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFboEPYZBpsLCA5uTk0t7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1YmVjMzJkNmM2NGZmYjYwMWUyNzBjZWRiY2QzZWZmZjVj
ZTdhNDAwHhcNMjUwODIzMDQwMDI3WhcNMjUwODI0MDQwMDI3WjAzMTEwLwYDVQQD
EygyNjQ1OTk2YWNhMzQyYjM1ZWM4MTExNDllNjdhNDI2ZWJlMGI5MjNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4+bGB3OFJ0vjLT9cEyRRqjDDkPy
TVy6jaKMlX0+3qK2NU1wtjpJJLBIKnDO2wREt0UlRqD14J+izxiTYWRp/IuvE3RD
ikHqFCfm1Nqz5cfTTtCUTawRl0ClnUTRWJbqv7qrn2vHTjKNjB7i+Z0Tndv4XbBX
hNL6yc90P0cbE5p/V1PYTcOcuFYEW2LKC6K8AjPqe9Wy+eW8Z4zBaGTmW/KfaoSQ
xYZDWLUhap3AZiODPuc40G/g6cVROjoY0DqeQz6XY4EjHNMw9MXXRxuZGXYaGZ5w
LCloUes01Q//4hdilfT/pL4XmLVk6sLPVQtquQTOPw/iKsNyuT8170KTzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCZFmWrKNCs17IERSeZ6Qm6+C5I9MB8GA1UdIwQY
MBaAFKW+wy1sZP+2AeJwztvNPv/1znpAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGI3RExXeGtfN1lCNG5ETzI4MC1fX1hPZWtBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi83ZDY0ZjEtM2Q2NC00MmViLWEyNzUt
MjE3OTY0NGYzNzg4LzEvcGI3RExXeGtfN1lCNG5ETzI4MC1fX1hPZWtBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi83ZDY0ZjEtM2Q2NC00MmViLWEyNzUtMjE3OTY0NGYzNzg4
LzEvcGI3RExXeGtfN1lCNG5ETzI4MC1fX1hPZWtBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD02IPuOS
zN3kqrYL58K394cJiblRxJ6medhurCfRqAziAvoenUx9RSroWLTpwQvqYA2x8suK
tIyikGFPXOV+4GEh2SGTW2JCdlxIeLyAu5UptknsnPzsqV96WuBgAZDk8cPuQczK
jQdlvu2/x1NpK+QHWItpZEYOgsxihR03MaakZMREC6Ntgqq/JpFbIp/zrgy2dxZr
EM2LtO9siso9toSKz/8mXEEyCLIyHcEbII75DDSm2zJLFE8947PECFchTwBXN0M/
RmCj52o5xqERhua+ZGBmDjzxkeyWAFR/dnhIJQ30elASSKS9cHV9EGt+UayvSHG1
NnzrWsBoGrmXBA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:29 2025 by rpki-client