Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft
File: pbIQYaPq10EOBFDbvyFw_gyTi7E.mft (raw, json)
Hash identifier: WoKpyXy9/RQcS95ShTIoyOP/gnoIVlKlKUa4ghAzimA=
Subject key identifier: DD:34:08:B7:3B:51:EE:FB:DA:7D:0C:9C:72:20:E9:F0:30:C9:86:AA
Authority key identifier: A5:B2:10:61:A3:EA:D7:41:0E:04:50:DB:BF:21:70:FE:0C:93:8B:B1
Certificate issuer: /CN=a5b21061a3ead7410e0450dbbf2170fe0c938bb1
Certificate serial: 0199FCC61ACF9192D1CB18E575EBEE76C421
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pbIQYaPq10EOBFDbvyFw_gyTi7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 14:01:05 +0000
Manifest this update: Sun 19 Oct 2025 14:01:05 +0000
Manifest next update: Mon 20 Oct 2025 14:01:05 +0000
Files and hashes: 1: pbIQYaPq10EOBFDbvyFw_gyTi7E.crl (hash: VvbiXpMtHDE1kRlSKVzj7o1DE2UMiPQWZqST0CMc5V0=)
2: q9uMRJMivdNIUmR3cIXWE4hBpI0.roa (hash: k+Mam0ND2lwJk85PckjyzqHvxu7FYX4bMXDwNQs3Kx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/pbIQYaPq10EOBFDbvyFw_gyTi7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:1a:cf:91:92:d1:cb:18:e5:75:eb:ee:76:c4:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5b21061a3ead7410e0450dbbf2170fe0c938bb1
Validity
Not Before: Oct 19 14:01:05 2025 GMT
Not After : Oct 20 14:01:05 2025 GMT
Subject: CN=dd3408b73b51eefbda7d0c9c7220e9f030c986aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:85:3f:30:84:66:b1:01:0f:61:e6:04:2d:46:
aa:10:d0:db:a2:87:b0:f4:5c:89:cb:89:d1:b1:3a:
1f:d5:76:f1:b6:87:2b:60:1e:66:f6:7d:e6:85:a3:
66:72:a7:95:33:89:1c:c5:36:20:22:ca:65:3d:ac:
3b:db:17:ba:e4:9e:b4:00:43:0d:c9:58:f9:87:eb:
5a:ff:94:04:44:e2:75:12:8e:3f:56:f6:e2:1a:4c:
83:1e:2e:bc:c1:d2:67:45:e4:bb:fd:64:50:b2:ad:
ea:57:99:44:31:7e:81:ab:b3:d0:1c:bf:22:75:76:
fb:07:c2:a4:82:12:28:8d:9e:f2:23:1d:73:1a:cb:
ff:0b:39:f2:63:2f:9b:5e:d5:ce:40:11:3c:ef:5d:
cf:75:b7:2c:a4:1b:a0:be:30:cb:9a:af:8c:ca:9d:
e8:35:62:a0:e0:44:f0:66:26:c8:6d:8a:ed:ee:0c:
e0:2b:a5:18:b4:58:e3:39:5b:b5:c5:6c:54:1f:02:
03:3b:4c:a0:03:b5:ae:71:7b:af:ea:30:ac:28:09:
d6:47:ca:11:0d:d1:b4:40:64:f8:20:8e:53:50:32:
5f:95:0f:97:a2:fe:bb:d1:22:44:ef:d7:05:a3:2b:
cf:fa:c3:fd:51:6c:1f:f5:7e:59:c0:ba:8f:d5:f6:
61:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:34:08:B7:3B:51:EE:FB:DA:7D:0C:9C:72:20:E9:F0:30:C9:86:AA
X509v3 Authority Key Identifier:
keyid:A5:B2:10:61:A3:EA:D7:41:0E:04:50:DB:BF:21:70:FE:0C:93:8B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbIQYaPq10EOBFDbvyFw_gyTi7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:66:69:f0:af:cf:ce:04:f4:d0:a3:ff:fb:84:78:c2:35:0d:
25:15:c4:0c:cf:f1:a1:85:0f:cd:26:45:0f:8c:19:4f:f7:ab:
b9:a3:6d:07:42:48:a0:09:47:5e:04:6d:3e:77:43:ab:43:f8:
ce:26:a6:84:ba:f5:74:9b:6e:e3:df:eb:29:84:7b:ae:63:77:
24:a9:7a:80:e7:10:47:99:d9:5f:05:36:d9:22:7d:78:a4:55:
95:4e:1b:cb:3c:b9:9b:c1:b0:f8:47:87:7b:5f:4f:e0:b3:0d:
81:aa:47:f6:48:44:c7:ca:86:b5:53:ea:3d:b4:1d:f9:18:5f:
92:de:01:9b:09:d1:16:79:bf:9b:35:d8:25:97:ac:36:56:16:
bb:e3:2b:a0:68:bf:f0:23:27:d7:6f:bd:b3:a1:0c:5e:eb:34:
b7:b0:4f:f0:c7:fa:da:da:22:28:84:b0:cc:2e:da:90:52:f1:
39:80:e1:36:a0:39:a0:de:4c:38:fb:ab:1a:d8:bb:81:32:b8:
83:77:7c:28:c2:0b:de:19:45:dd:09:77:bf:13:93:e2:04:9e:
a2:c1:08:1c:b4:f4:4c:81:c1:58:87:6a:9a:70:ce:e9:18:07:
00:7a:1c:59:8c:77:f8:8d:9f:6f:7e:8f:47:2e:04:2e:9d:05:
e9:79:f2:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:09:58 2025 by rpki-client