Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/2f8d71-eec5-4d3d-a7a1-b032112051b1/1/pTW_JFBXN0H5Q16UghAWoi5rwUc.mft
File: pTW_JFBXN0H5Q16UghAWoi5rwUc.mft (raw, json)
Hash identifier: 9faAPXdyCc9zbM5qv7MrblGO77LAgQukvcEHScSrizE=
Subject key identifier: A7:A1:58:6A:AF:69:E4:C7:70:C0:3C:A0:8B:2E:D3:91:74:01:FC:2F
Authority key identifier: A5:35:BF:24:50:57:37:41:F9:43:5E:94:82:10:16:A2:2E:6B:C1:47
Certificate issuer: /CN=a535bf2450573741f9435e94821016a22e6bc147
Certificate serial: 0199FB0F0877C2CE5DFB08BFDB6D650AC8A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pTW_JFBXN0H5Q16UghAWoi5rwUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/2f8d71-eec5-4d3d-a7a1-b032112051b1/1/pTW_JFBXN0H5Q16UghAWoi5rwUc.mft
Manifest number: 16DE
Signing time: Sun 19 Oct 2025 06:01:30 +0000
Manifest this update: Sun 19 Oct 2025 06:01:30 +0000
Manifest next update: Mon 20 Oct 2025 06:01:30 +0000
Files and hashes: 1: pTW_JFBXN0H5Q16UghAWoi5rwUc.crl (hash: XGp/HkJwYSVAnmCkHfzYB04clkX5QSPecni5xBHb3QU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/2f8d71-eec5-4d3d-a7a1-b032112051b1/1/pTW_JFBXN0H5Q16UghAWoi5rwUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/2f8d71-eec5-4d3d-a7a1-b032112051b1/1/pTW_JFBXN0H5Q16UghAWoi5rwUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/pTW_JFBXN0H5Q16UghAWoi5rwUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:08:77:c2:ce:5d:fb:08:bf:db:6d:65:0a:c8:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a535bf2450573741f9435e94821016a22e6bc147
Validity
Not Before: Oct 19 06:01:30 2025 GMT
Not After : Oct 20 06:01:30 2025 GMT
Subject: CN=a7a1586aaf69e4c770c03ca08b2ed3917401fc2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:87:75:62:81:f1:e6:9c:91:a7:18:fa:d0:19:
9a:54:50:0d:55:55:70:bb:7b:bd:75:69:48:46:c8:
ce:e7:c9:eb:aa:bd:13:d0:0b:de:b3:58:ed:b3:b6:
f7:60:8c:d1:59:4f:4d:3a:f7:9b:20:eb:82:26:dc:
b0:72:9b:01:ed:55:20:3d:8b:75:56:53:ff:b7:b2:
ec:8e:ef:8a:6c:19:38:33:4b:4f:25:23:1f:48:7d:
eb:fe:8e:59:06:8a:6f:18:00:b6:38:f9:58:7d:06:
b8:a4:48:30:8f:9d:23:ca:a4:f1:67:4d:54:32:7d:
79:62:24:5d:01:58:bc:31:ad:74:37:63:43:f9:d8:
a8:64:bd:ad:e0:62:67:93:14:70:dc:e5:de:4d:b0:
84:22:7d:d6:b2:ce:54:1b:78:53:c9:8f:76:94:1f:
28:fc:07:8b:b7:da:18:83:68:d5:a6:bb:28:a3:8d:
6e:94:62:1b:81:b0:8f:6c:b2:cc:ef:ba:12:5f:7d:
03:e9:a4:0a:3a:dc:20:45:c1:82:6f:50:4d:f8:ea:
d7:c9:18:38:a5:e1:3b:08:78:06:e6:21:ab:23:c8:
7b:90:a9:9e:03:f2:d6:22:c1:33:51:cf:80:c9:fa:
b1:42:25:3d:cb:3b:d6:fd:e8:04:d2:a6:99:8f:a1:
ad:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:A1:58:6A:AF:69:E4:C7:70:C0:3C:A0:8B:2E:D3:91:74:01:FC:2F
X509v3 Authority Key Identifier:
keyid:A5:35:BF:24:50:57:37:41:F9:43:5E:94:82:10:16:A2:2E:6B:C1:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTW_JFBXN0H5Q16UghAWoi5rwUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2f8d71-eec5-4d3d-a7a1-b032112051b1/1/pTW_JFBXN0H5Q16UghAWoi5rwUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2f8d71-eec5-4d3d-a7a1-b032112051b1/1/pTW_JFBXN0H5Q16UghAWoi5rwUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:8b:30:4b:32:80:45:4d:97:e4:b4:5a:ec:25:1f:81:34:e7:
dd:c0:db:ec:09:54:a0:84:e6:f9:3c:f5:f3:5b:48:d8:b6:4a:
48:3f:b0:f7:0e:6b:da:41:35:3b:5f:b8:90:23:8a:c4:38:6a:
aa:2c:65:ce:98:1a:00:c8:63:30:61:11:e3:4e:1a:1d:b2:a3:
39:12:07:25:8e:a7:c2:7c:b5:27:2d:8c:dd:b0:42:3b:bf:a1:
74:4c:cc:75:89:e0:0d:8e:9a:79:24:f3:dd:98:0b:8f:3b:0d:
b0:0b:2a:7b:e8:5e:c9:03:1e:83:9e:4a:97:df:21:71:e0:61:
d1:45:dd:c5:1a:a4:b7:2b:b2:49:f0:65:f4:14:8c:4e:37:5e:
89:0f:db:3e:da:dd:97:cf:c7:87:32:fc:42:ec:af:2c:61:f1:
f1:ea:d8:fd:4a:99:b6:bf:e6:c4:57:94:ed:23:4a:3b:42:3d:
d0:0f:fa:88:40:bd:7c:10:05:8a:35:f9:fa:1d:b2:fc:52:e2:
4d:23:15:4f:0f:20:d3:ac:33:99:6e:5f:bb:e9:27:4b:58:b5:
b9:66:3a:c4:e5:d9:47:0b:b7:7f:19:f7:49:91:f4:85:7c:76:
71:9b:30:c4:9b:91:a6:c3:b5:35:1d:f7:d8:ef:af:68:12:11:
07:45:bc:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:29:26 2025 by rpki-client