Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/PbNCBiV3FppjWX6eOmQl_N5sFmE.mft
File: PbNCBiV3FppjWX6eOmQl_N5sFmE.mft (raw, json)
Hash identifier: lhKyYKaUaWZDeOYW5tnIEPUeXrqb73CgPd8yE0xKYOU=
Subject key identifier: 65:E6:BB:ED:72:42:45:01:4B:AB:19:2C:21:4F:B2:86:7A:D3:9A:8A
Authority key identifier: 3D:B3:42:06:25:77:16:9A:63:59:7E:9E:3A:64:25:FC:DE:6C:16:61
Certificate issuer: /CN=3db342062577169a63597e9e3a6425fcde6c1661
Certificate serial: 0199FDD98BA298945A790878B8C70D3DAF22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PbNCBiV3FppjWX6eOmQl_N5sFmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/PbNCBiV3FppjWX6eOmQl_N5sFmE.mft
Manifest number: 0ADC
Signing time: Sun 19 Oct 2025 19:01:56 +0000
Manifest this update: Sun 19 Oct 2025 19:01:56 +0000
Manifest next update: Mon 20 Oct 2025 19:01:56 +0000
Files and hashes: 1: 4XfsdEdHX1kDpX0ZLU7CoiedwkE.roa (hash: E0vTS5o3+h35/sl1eIPy8wBqph3C9G+ZoO/00bLGlrw=)
2: PbNCBiV3FppjWX6eOmQl_N5sFmE.crl (hash: fzuWeMfCufOaoBeatnv9nJWWPi2jZ/ESdGPgWke3fi8=)
3: Zq7eQ3eZsYsNNl6x7QgRl2tG0cY.roa (hash: 2PLYNC5TQEo40dtz6r8G2q2NVhdYFgS71ZBpW7mlx1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/PbNCBiV3FppjWX6eOmQl_N5sFmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/PbNCBiV3FppjWX6eOmQl_N5sFmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PbNCBiV3FppjWX6eOmQl_N5sFmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:8b:a2:98:94:5a:79:08:78:b8:c7:0d:3d:af:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3db342062577169a63597e9e3a6425fcde6c1661
Validity
Not Before: Oct 19 19:01:56 2025 GMT
Not After : Oct 20 19:01:56 2025 GMT
Subject: CN=65e6bbed724245014bab192c214fb2867ad39a8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:30:78:dd:e2:0a:ea:10:07:39:ae:00:0a:9d:
b8:d1:5c:5a:d1:bf:29:d4:e2:60:a5:da:2a:b8:6c:
16:39:aa:26:f3:e1:c4:c8:af:dd:49:d6:df:dc:ad:
39:ce:eb:7e:c1:9e:50:3e:ab:ac:6d:9f:7f:c4:08:
2d:7e:19:c1:10:63:73:43:73:1d:02:0e:3e:23:65:
2c:fc:af:e5:be:7d:ad:bc:c8:e5:18:a3:e8:1e:59:
fb:03:78:06:f2:a3:fd:4d:fe:3b:ee:8f:79:87:ef:
01:ef:c0:9d:e0:d2:3d:d2:87:e6:32:7c:ea:73:fe:
e4:a6:94:8d:cc:68:10:a4:25:82:1c:f8:f6:72:73:
01:43:2c:dc:61:59:87:ce:36:20:05:e6:cc:6c:6b:
7c:39:88:3d:6b:4c:f7:d1:fa:86:ea:45:cb:a8:1c:
36:f5:7e:75:7c:d1:82:56:e3:69:ec:d5:5a:b3:b6:
4c:a3:56:31:c8:88:3c:b4:94:1d:d4:f2:ff:8b:c7:
f4:35:c0:2c:33:a4:4d:38:ab:68:6b:15:db:92:be:
6e:c5:e6:1f:6c:3a:34:7c:e3:ba:e9:ba:24:e2:ec:
9d:69:84:04:fc:3b:10:13:f3:4d:11:13:93:8e:11:
95:3e:41:96:8b:1b:4e:17:e7:e5:f1:bb:99:69:7a:
96:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:E6:BB:ED:72:42:45:01:4B:AB:19:2C:21:4F:B2:86:7A:D3:9A:8A
X509v3 Authority Key Identifier:
keyid:3D:B3:42:06:25:77:16:9A:63:59:7E:9E:3A:64:25:FC:DE:6C:16:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PbNCBiV3FppjWX6eOmQl_N5sFmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/PbNCBiV3FppjWX6eOmQl_N5sFmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/PbNCBiV3FppjWX6eOmQl_N5sFmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:cc:90:84:a2:1f:fb:6c:34:a1:a3:86:f3:2d:15:c6:53:85:
c1:58:b5:7d:f7:f6:11:13:da:10:dc:5e:91:f5:3e:ba:9e:3b:
1a:88:0e:6b:a5:b8:e6:09:46:d5:e3:b0:6a:aa:f9:8e:3b:26:
28:d7:3f:4d:3a:f0:f3:03:54:b9:dd:2f:79:c5:ad:f3:e3:02:
6d:27:17:85:b7:fa:29:30:3a:03:35:04:96:d5:dc:c4:20:02:
b6:9f:65:55:7d:84:88:5b:06:ff:49:a1:c2:c6:27:80:e5:1a:
e8:9d:9e:f9:d4:59:e0:f6:e2:e8:ee:09:ca:4b:d3:65:89:02:
07:6a:94:ed:29:ea:06:36:07:65:d1:5d:9b:1d:e0:a2:45:df:
f4:3a:cd:4c:13:91:37:d4:d7:d5:7e:40:7a:13:82:ad:11:33:
d5:38:ab:c3:ed:a6:01:02:e0:b6:c9:47:ce:c7:58:3a:c9:82:
e8:4b:46:c9:1e:57:1a:c9:8c:07:34:82:89:b4:41:2e:8d:cf:
ba:65:b3:de:4d:39:7c:a2:d7:3d:3e:66:e6:b4:06:7b:ff:b3:
fb:bf:51:80:97:de:09:5d:d2:33:b3:eb:0b:27:09:f2:04:d4:
ff:04:4a:16:de:bc:00:36:bc:41:63:17:0a:92:2e:ec:ab:0a:
7d:22:36:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:59:02 2025 by rpki-client