Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft
File: pb7DLWxk_7YB4nDO280-__XOekA.mft (raw, json)
Hash identifier: sheWXuFBm/hizdm5G/l4jN8/xISYVUmFe1UOSWchs8I=
Subject key identifier: 18:1B:32:B6:31:8D:CA:68:69:24:3A:84:E8:5A:23:43:7C:22:1E:6E
Authority key identifier: A5:BE:C3:2D:6C:64:FF:B6:01:E2:70:CE:DB:CD:3E:FF:F5:CE:7A:40
Certificate issuer: /CN=a5bec32d6c64ffb601e270cedbcd3efff5ce7a40
Certificate serial: 0199FC8F6A05C87CFBF00FF25DA226CA7296
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pb7DLWxk_7YB4nDO280-__XOekA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 13:01:21 +0000
Manifest this update: Sun 19 Oct 2025 13:01:21 +0000
Manifest next update: Mon 20 Oct 2025 13:01:21 +0000
Files and hashes: 1: pb7DLWxk_7YB4nDO280-__XOekA.crl (hash: fdCbtbiQ8r+WG7MXi5gN3tuF0KzEX36YWLXeNdfxvOM=)
2: qjNgLrezTzPzPZHoRa0PyC-9c_E.roa (hash: gjQzNWtyWkBxUXT4We5fyARX6Waght/4yDMrIeCr6j8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pb7DLWxk_7YB4nDO280-__XOekA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:6a:05:c8:7c:fb:f0:0f:f2:5d:a2:26:ca:72:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5bec32d6c64ffb601e270cedbcd3efff5ce7a40
Validity
Not Before: Oct 19 13:01:21 2025 GMT
Not After : Oct 20 13:01:21 2025 GMT
Subject: CN=181b32b6318dca6869243a84e85a23437c221e6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:cd:a4:c2:96:db:9f:0d:5a:e2:d7:55:9f:fd:
2f:5d:1e:fa:93:20:54:d0:ff:7f:59:21:db:21:18:
16:a6:b8:e9:d9:1b:a5:b7:55:ce:86:08:98:57:18:
3a:a7:63:a2:7b:29:0b:15:2d:be:99:08:b0:01:1a:
9b:c5:f5:7c:1c:fb:b1:1c:90:b3:51:23:68:fd:ac:
0f:61:a1:d5:c6:ab:fd:09:df:7a:e0:d7:00:e7:8e:
67:1b:f1:31:53:09:37:d2:dc:e9:9f:6f:8d:6f:6e:
ca:08:aa:f6:ad:18:54:46:a1:34:72:7c:97:0b:0d:
08:61:63:d6:bc:f3:25:93:f8:f4:68:12:f1:1e:4a:
41:b1:48:39:5c:22:6b:5d:d8:eb:c2:b7:07:85:22:
46:33:90:12:96:a1:7b:5e:b9:73:40:9c:67:7c:2e:
a3:5b:84:75:50:51:e1:2e:c2:c8:05:25:cf:e5:ed:
ee:77:99:c2:20:d8:20:6e:7d:6d:89:6e:b3:45:1b:
c3:9d:c5:32:2b:66:10:4b:df:45:fc:3b:8c:6c:b9:
53:f0:ec:3b:11:de:82:14:77:bd:30:46:da:37:89:
0f:46:64:72:53:dd:50:db:5e:02:b1:a4:d3:73:58:
aa:68:3e:3f:31:e9:e4:49:2b:b9:45:ac:d0:4f:ef:
54:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:1B:32:B6:31:8D:CA:68:69:24:3A:84:E8:5A:23:43:7C:22:1E:6E
X509v3 Authority Key Identifier:
keyid:A5:BE:C3:2D:6C:64:FF:B6:01:E2:70:CE:DB:CD:3E:FF:F5:CE:7A:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pb7DLWxk_7YB4nDO280-__XOekA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:f5:71:8c:ef:9d:4c:de:35:95:d1:c4:04:13:59:ee:2c:c9:
e9:70:7a:57:d2:71:85:37:bb:bc:d8:29:37:d5:a6:e4:9d:ce:
1d:fe:03:89:38:6e:25:15:d0:93:72:d7:02:95:82:84:40:61:
2e:1d:e8:c0:50:79:a5:dd:ca:97:fc:6c:42:e7:62:b9:78:c9:
b1:d8:fb:55:63:f2:94:c6:56:49:ed:fe:69:c7:f9:b3:af:d6:
8d:72:5e:01:b4:c3:5e:d7:6c:03:4a:75:b8:ac:b0:db:ab:5a:
05:ad:1d:7f:4f:51:b8:5e:e5:18:6b:a1:b2:78:ba:d3:13:50:
d3:94:18:df:3f:d5:ee:9c:45:90:92:08:ab:0a:34:2b:f1:b1:
39:be:e0:59:5d:38:b2:68:5c:6f:c2:0b:d4:d5:c9:ac:95:68:
bb:0c:c6:91:19:54:b8:ab:28:52:03:70:4e:ef:f6:05:9f:79:
21:03:d9:61:10:a9:98:b0:f4:81:bb:b2:6a:73:7c:96:61:8e:
49:57:09:26:34:45:e9:a8:e3:aa:7d:0f:7f:c4:00:62:c6:4f:
58:e0:69:ca:5f:1f:3f:e0:0f:b7:9c:55:37:1b:7b:3a:ec:27:
cd:15:c4:3a:e3:b9:91:2f:5c:42:95:d2:50:03:c9:31:e1:6b:
4d:47:13:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:17:57 2025 by rpki-client