Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/PbNCBiV3FppjWX6eOmQl_N5sFmE.mft
File: PbNCBiV3FppjWX6eOmQl_N5sFmE.mft (raw, json)
Hash identifier: 3cY33lO7GnwEJdITsk7X4WPChWTPZBcuZ0vcko5Qe1I=
Subject key identifier: 96:94:D6:90:48:1D:D7:ED:DF:9E:D1:AB:28:43:A5:70:D4:AA:91:56
Authority key identifier: 3D:B3:42:06:25:77:16:9A:63:59:7E:9E:3A:64:25:FC:DE:6C:16:61
Certificate issuer: /CN=3db342062577169a63597e9e3a6425fcde6c1661
Certificate serial: 0198D47241EF85F64EE7B16881005A8116AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PbNCBiV3FppjWX6eOmQl_N5sFmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/PbNCBiV3FppjWX6eOmQl_N5sFmE.mft
Manifest number: 0A42
Signing time: Sat 23 Aug 2025 01:01:54 +0000
Manifest this update: Sat 23 Aug 2025 01:01:54 +0000
Manifest next update: Sun 24 Aug 2025 01:01:54 +0000
Files and hashes: 1: 4XfsdEdHX1kDpX0ZLU7CoiedwkE.roa (hash: E0vTS5o3+h35/sl1eIPy8wBqph3C9G+ZoO/00bLGlrw=)
2: PbNCBiV3FppjWX6eOmQl_N5sFmE.crl (hash: 7gBDFHXQ0tGQ08Jovf6c9S/WWgzXWlTsq0vBIUmOiwY=)
3: Zq7eQ3eZsYsNNl6x7QgRl2tG0cY.roa (hash: 2PLYNC5TQEo40dtz6r8G2q2NVhdYFgS71ZBpW7mlx1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/PbNCBiV3FppjWX6eOmQl_N5sFmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/PbNCBiV3FppjWX6eOmQl_N5sFmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PbNCBiV3FppjWX6eOmQl_N5sFmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:41:ef:85:f6:4e:e7:b1:68:81:00:5a:81:16:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3db342062577169a63597e9e3a6425fcde6c1661
Validity
Not Before: Aug 23 01:01:54 2025 GMT
Not After : Aug 24 01:01:54 2025 GMT
Subject: CN=9694d690481dd7eddf9ed1ab2843a570d4aa9156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c5:22:b3:21:a8:84:45:00:b7:3b:69:cf:09:
0f:34:b4:16:0d:d8:cf:9e:66:44:59:3f:a9:7a:1f:
2d:e4:fc:a2:b4:75:6d:17:0c:eb:21:de:d4:b4:6d:
52:ae:c1:b6:de:67:74:a3:27:df:1f:ae:8b:46:83:
d0:0f:8b:c7:9a:90:4d:53:c1:ae:ec:80:95:94:63:
9a:78:a6:e2:4a:7e:e9:b7:b0:70:c7:c9:b1:01:21:
ed:65:5c:0b:7e:a4:4c:ff:2e:d1:7f:81:3f:ed:4b:
a6:06:c1:7d:f7:c5:3f:32:5d:24:c7:36:27:f0:9e:
d2:2d:0c:dc:83:83:04:ba:2a:a6:95:e0:83:f2:b2:
7e:1c:5f:7e:31:7a:45:2c:67:b2:c4:0a:c6:b0:79:
3d:ad:e1:a6:e3:c8:32:9a:4b:fd:d6:46:13:64:42:
73:26:0b:b4:af:c4:e4:ed:c5:d9:2f:8d:5e:a6:7e:
28:53:07:3a:b3:51:06:08:9b:bc:08:5c:63:d3:7e:
d5:37:9c:7e:b3:b3:2d:34:1a:d4:17:fb:03:13:98:
e0:d1:b2:06:0d:7a:b8:34:6b:96:ea:68:e7:9e:1a:
7c:cc:26:96:28:ce:02:7f:0f:f8:13:2c:1e:d9:e7:
ed:7c:3d:05:cf:ca:2d:3c:05:fd:4d:2c:0e:53:7f:
59:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:94:D6:90:48:1D:D7:ED:DF:9E:D1:AB:28:43:A5:70:D4:AA:91:56
X509v3 Authority Key Identifier:
keyid:3D:B3:42:06:25:77:16:9A:63:59:7E:9E:3A:64:25:FC:DE:6C:16:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PbNCBiV3FppjWX6eOmQl_N5sFmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/PbNCBiV3FppjWX6eOmQl_N5sFmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/PbNCBiV3FppjWX6eOmQl_N5sFmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:de:43:a1:9d:a4:35:6e:e2:00:87:ba:14:7f:e2:03:53:37:
51:08:d7:60:22:3e:c9:c2:fc:d0:7a:10:83:da:a3:0a:c2:7a:
3f:a1:eb:a5:ae:e5:31:c2:b5:cd:f2:ab:e7:07:77:f6:bc:3f:
2c:fc:d8:3a:d0:03:44:c8:20:a6:b6:01:cb:c4:36:7c:09:40:
b3:0c:be:e1:93:07:b1:e4:f8:ef:53:fd:be:53:24:7f:4c:0d:
da:3a:8b:f8:06:79:14:2b:c1:85:56:73:de:5b:f5:1c:9b:0e:
1a:91:82:85:ce:83:b7:74:58:09:7d:25:3c:86:a3:31:c7:29:
f6:08:12:e3:f3:60:3f:06:6c:43:75:03:8c:c4:6a:d9:dc:55:
06:7d:91:69:fe:9d:3b:cb:f6:cc:da:83:e7:de:13:94:94:ca:
e4:38:fc:70:b0:21:9a:9b:5d:86:c2:1b:9f:78:18:ae:48:e7:
af:54:da:03:24:c4:d5:c3:dc:2c:53:cf:84:ae:a5:77:9a:f6:
47:aa:d3:13:a9:d2:f1:86:a3:e6:56:8d:6a:20:4f:e6:79:b3:
97:f5:cf:d6:d2:18:bc:9c:61:07:9d:fb:c8:60:17:dc:be:fb:
2e:34:7c:4a:c3:ce:28:8a:8e:1e:cd:1d:80:87:7b:1f:36:0b:
42:f8:74:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:52 2025 by rpki-client