Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/622353-2bcf-4560-9cae-7db20e6fc11d/1/pex__WA9oUiSKAsYN8OgN3Y1LVQ.mft
File: pex__WA9oUiSKAsYN8OgN3Y1LVQ.mft (raw, json)
Hash identifier: ft994tgQUpWNZ+BQcYiRqhtjlIczzXPjNbPB+yB7MZ4=
Subject key identifier: C4:9E:F0:EC:AE:F8:29:DB:0D:9C:AA:56:A3:DF:F8:57:A7:33:F3:D5
Authority key identifier: A5:EC:7F:FD:60:3D:A1:48:92:28:0B:18:37:C3:A0:37:76:35:2D:54
Certificate issuer: /CN=a5ec7ffd603da14892280b1837c3a03776352d54
Certificate serial: 0199FBEAA65DD54633E225A03FA62455B700
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pex__WA9oUiSKAsYN8OgN3Y1LVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/622353-2bcf-4560-9cae-7db20e6fc11d/1/pex__WA9oUiSKAsYN8OgN3Y1LVQ.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 10:01:23 +0000
Manifest this update: Sun 19 Oct 2025 10:01:23 +0000
Manifest next update: Mon 20 Oct 2025 10:01:23 +0000
Files and hashes: 1: pex__WA9oUiSKAsYN8OgN3Y1LVQ.crl (hash: Vc2hjDtBjA2x151jPkAzm6ikQFHJ8FgkJy761S+nTlc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/622353-2bcf-4560-9cae-7db20e6fc11d/1/pex__WA9oUiSKAsYN8OgN3Y1LVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/622353-2bcf-4560-9cae-7db20e6fc11d/1/pex__WA9oUiSKAsYN8OgN3Y1LVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pex__WA9oUiSKAsYN8OgN3Y1LVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:a6:5d:d5:46:33:e2:25:a0:3f:a6:24:55:b7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5ec7ffd603da14892280b1837c3a03776352d54
Validity
Not Before: Oct 19 10:01:23 2025 GMT
Not After : Oct 20 10:01:23 2025 GMT
Subject: CN=c49ef0ecaef829db0d9caa56a3dff857a733f3d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:53:cf:11:27:00:57:27:04:85:d3:18:1c:fd:
82:ae:b6:b5:13:9b:f9:16:8a:ea:c8:0c:bd:2c:c2:
0c:8f:97:ee:00:c8:73:77:58:f8:35:96:cf:c6:22:
a6:f6:4e:b8:7b:0c:9f:e2:dd:0d:7e:d6:0e:17:07:
79:a6:40:26:78:e8:9e:be:0f:f2:76:66:39:57:ee:
46:7d:d2:85:ba:1a:4d:9a:8f:9a:cf:80:5c:6f:03:
a0:a8:13:6d:95:11:82:e4:7a:ba:98:2b:45:d5:58:
44:a5:77:5c:9d:75:87:3a:10:c3:78:e0:99:bc:83:
b1:c5:77:9b:76:e2:f5:ac:f6:28:0e:f4:32:af:79:
be:ae:f8:1a:42:34:da:3b:64:26:17:4c:1a:ec:a6:
58:82:b0:ca:43:36:16:25:47:b6:d0:41:ff:2d:73:
79:4a:db:ad:6e:a2:af:12:9a:84:98:fe:a1:2f:a0:
6e:31:63:63:5e:e0:e7:ca:5a:7d:3d:3c:98:9b:32:
12:0d:d9:21:be:e2:51:1f:3c:d5:e1:5e:58:66:15:
b8:5c:97:69:64:54:b2:65:c8:26:4a:49:a0:e1:3f:
0b:36:f1:db:6b:e2:0d:6d:d5:a6:1d:c2:dc:78:58:
5c:4c:46:a8:d2:43:d6:36:0f:a9:a4:ae:90:46:1e:
b3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:9E:F0:EC:AE:F8:29:DB:0D:9C:AA:56:A3:DF:F8:57:A7:33:F3:D5
X509v3 Authority Key Identifier:
keyid:A5:EC:7F:FD:60:3D:A1:48:92:28:0B:18:37:C3:A0:37:76:35:2D:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pex__WA9oUiSKAsYN8OgN3Y1LVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/622353-2bcf-4560-9cae-7db20e6fc11d/1/pex__WA9oUiSKAsYN8OgN3Y1LVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/622353-2bcf-4560-9cae-7db20e6fc11d/1/pex__WA9oUiSKAsYN8OgN3Y1LVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:d9:36:c2:8c:dc:36:af:fb:c5:17:92:47:9e:e3:a9:2b:23:
d9:62:69:5f:c4:20:cf:c5:b4:37:8a:7a:13:e5:28:df:e5:cb:
0f:98:bf:62:16:51:61:c7:6b:62:66:a5:19:ab:71:89:40:f0:
30:3a:87:e7:9d:60:de:ee:d6:74:41:c5:8d:67:99:3e:65:75:
fc:cd:a5:72:3d:c2:e9:86:36:59:2d:5e:53:ec:e8:4e:bc:f9:
3b:3f:94:93:16:23:d9:3f:f3:6a:e0:48:08:a9:09:49:57:1d:
0f:61:aa:47:33:1b:fe:be:15:67:c5:f7:0b:37:f7:d4:51:1e:
27:d2:44:20:8b:ac:f1:25:b3:90:6a:7e:6f:35:67:a7:40:fa:
55:9a:c7:e0:b7:ee:4b:d3:b9:0a:05:b4:62:98:c6:42:c4:45:
8d:b3:07:5b:30:ab:ea:c0:29:9e:ed:57:60:41:18:74:87:24:
25:9e:72:0d:8a:db:12:28:61:ff:c8:18:8b:e2:97:ff:73:28:
1e:ed:81:e7:ac:b5:a1:fd:3b:d8:ae:41:ea:eb:8d:3c:78:6a:
28:90:a0:13:06:73:bf:f4:9c:8e:67:5d:2d:1e:43:f5:bf:2a:
76:e2:9d:ef:86:83:4c:a4:3a:31:78:dc:fa:29:fa:ed:39:41:
1a:76:c7:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:20:22 2025 by rpki-client