Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/622353-2bcf-4560-9cae-7db20e6fc11d/1/pex__WA9oUiSKAsYN8OgN3Y1LVQ.mft
File: pex__WA9oUiSKAsYN8OgN3Y1LVQ.mft (raw, json)
Hash identifier: OFIly3ky/kRY84OGd2dKJ9cXQKCMkqgu+FcqkeKhMw4=
Subject key identifier: 46:1E:E8:15:06:62:98:A9:82:4D:EA:57:27:8F:1E:17:87:89:B7:A4
Authority key identifier: A5:EC:7F:FD:60:3D:A1:48:92:28:0B:18:37:C3:A0:37:76:35:2D:54
Certificate issuer: /CN=a5ec7ffd603da14892280b1837c3a03776352d54
Certificate serial: 0198D4724807CACC03A1B6776EC8D3D1A1C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pex__WA9oUiSKAsYN8OgN3Y1LVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/622353-2bcf-4560-9cae-7db20e6fc11d/1/pex__WA9oUiSKAsYN8OgN3Y1LVQ.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 01:01:55 +0000
Manifest this update: Sat 23 Aug 2025 01:01:55 +0000
Manifest next update: Sun 24 Aug 2025 01:01:55 +0000
Files and hashes: 1: pex__WA9oUiSKAsYN8OgN3Y1LVQ.crl (hash: Vg8PvgBR6+gpfonqtVsZnaM6YOGQG3RaYS/L4ma1YkQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/622353-2bcf-4560-9cae-7db20e6fc11d/1/pex__WA9oUiSKAsYN8OgN3Y1LVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/622353-2bcf-4560-9cae-7db20e6fc11d/1/pex__WA9oUiSKAsYN8OgN3Y1LVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pex__WA9oUiSKAsYN8OgN3Y1LVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:48:07:ca:cc:03:a1:b6:77:6e:c8:d3:d1:a1:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5ec7ffd603da14892280b1837c3a03776352d54
Validity
Not Before: Aug 23 01:01:55 2025 GMT
Not After : Aug 24 01:01:55 2025 GMT
Subject: CN=461ee815066298a9824dea57278f1e178789b7a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c6:7c:34:7c:a7:e1:52:8e:7e:e2:95:66:95:
bb:06:15:e0:6c:dc:4d:dc:e3:89:2a:7f:d9:ab:1a:
e4:9b:bf:3d:84:07:33:1e:ff:a4:7c:24:5f:fc:c2:
3e:fe:95:6a:01:c3:32:6d:e6:dd:bc:57:4e:c5:a9:
b6:b7:7d:82:04:e0:30:5d:ec:12:57:7f:06:b1:d2:
0f:4f:20:7e:81:ed:cc:4a:45:08:e3:9b:77:ed:d1:
a6:67:bc:0c:ff:17:39:97:17:44:c3:e3:c5:15:e4:
af:aa:61:81:71:ce:21:63:dd:b7:ca:d7:67:ce:10:
a8:50:55:73:d0:d4:53:cc:e9:13:6f:ab:eb:ac:ab:
ed:a3:a0:48:aa:16:f9:b8:6f:e5:b3:60:0e:9d:c6:
a5:db:50:cc:f6:5d:53:ce:04:ac:60:3f:e9:fa:5e:
49:a5:e3:2c:39:cb:96:45:18:e1:5d:76:29:37:22:
32:db:c7:6f:40:57:3b:5e:d9:07:d4:09:df:d0:5b:
4c:57:ed:bd:b7:45:3d:c1:9c:b4:f5:59:19:56:52:
24:d3:6d:d7:6a:98:74:3b:fd:78:c4:4e:43:a1:36:
8c:a7:d9:55:18:3a:10:03:ec:f3:bf:d6:18:31:41:
d6:03:78:b9:81:ff:f4:78:7a:78:d6:ec:0a:e4:0e:
fc:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:1E:E8:15:06:62:98:A9:82:4D:EA:57:27:8F:1E:17:87:89:B7:A4
X509v3 Authority Key Identifier:
keyid:A5:EC:7F:FD:60:3D:A1:48:92:28:0B:18:37:C3:A0:37:76:35:2D:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pex__WA9oUiSKAsYN8OgN3Y1LVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/622353-2bcf-4560-9cae-7db20e6fc11d/1/pex__WA9oUiSKAsYN8OgN3Y1LVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/622353-2bcf-4560-9cae-7db20e6fc11d/1/pex__WA9oUiSKAsYN8OgN3Y1LVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:c0:c4:eb:53:04:7d:06:ab:7c:f3:ec:9a:84:44:45:26:ee:
7f:55:fb:70:a1:19:75:07:eb:f3:48:0f:23:be:4a:4a:99:02:
c3:d1:c2:94:c0:00:9e:dd:c3:70:d4:b8:66:ce:8c:53:06:47:
2c:5b:63:fd:2e:fb:c9:4f:0d:56:c4:bc:8a:42:ec:e7:11:1b:
36:7a:63:53:fe:45:c0:7c:9e:7e:01:40:31:ba:50:f2:b1:09:
84:df:9a:d8:d1:82:0a:df:4a:fa:fb:d9:7c:47:82:df:13:f8:
56:c4:f8:35:a6:39:6a:49:e2:40:33:61:45:5d:fc:c1:e9:ea:
d1:08:e2:25:30:d1:c0:f5:7c:1c:23:08:6d:e2:0e:f5:e6:77:
2a:e1:71:04:7c:3e:9e:ec:fc:c9:63:14:f0:fa:f5:f5:9f:e8:
67:03:b4:0f:90:29:f9:89:10:96:99:7d:61:ef:8a:6f:79:58:
be:0f:33:17:d6:70:10:11:62:e4:c3:3e:74:cf:84:c6:ae:a0:
e3:bc:e8:fa:71:8c:74:4f:91:76:d3:13:e5:f5:ff:c8:80:62:
9e:63:c4:75:b5:8a:52:bf:1a:52:e2:6f:1b:08:1c:15:30:cc:
35:ee:8c:86:ca:e7:7b:58:6d:b6:00:4b:10:73:be:48:de:32:
fd:c9:e1:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:26 2025 by rpki-client