Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/6bbce4-c7d6-4418-9368-247a86b40d5d/1/PbRBy1aafHmaEFn_VzI7g3yqpU4.mft
File: PbRBy1aafHmaEFn_VzI7g3yqpU4.mft (raw, json)
Hash identifier: XkoLriPTFyAYbPWLlT3qItskZ33AEN0KOJQ2ZcthVSY=
Subject key identifier: AE:2B:F8:BC:94:23:72:4B:19:37:68:50:B7:25:5B:54:74:92:07:16
Authority key identifier: 3D:B4:41:CB:56:9A:7C:79:9A:10:59:FF:57:32:3B:83:7C:AA:A5:4E
Certificate issuer: /CN=3db441cb569a7c799a1059ff57323b837caaa54e
Certificate serial: 0198D5BBECF7B62322A397D29CA8D61A7147
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PbRBy1aafHmaEFn_VzI7g3yqpU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/6bbce4-c7d6-4418-9368-247a86b40d5d/1/PbRBy1aafHmaEFn_VzI7g3yqpU4.mft
Manifest number: 03A6
Signing time: Sat 23 Aug 2025 07:01:59 +0000
Manifest this update: Sat 23 Aug 2025 07:01:59 +0000
Manifest next update: Sun 24 Aug 2025 07:01:59 +0000
Files and hashes: 1: PbRBy1aafHmaEFn_VzI7g3yqpU4.crl (hash: Xm/h0POtGTpNXTbnSkuo1thulRcD/kmral+RTkmNyUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/6bbce4-c7d6-4418-9368-247a86b40d5d/1/PbRBy1aafHmaEFn_VzI7g3yqpU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/6bbce4-c7d6-4418-9368-247a86b40d5d/1/PbRBy1aafHmaEFn_VzI7g3yqpU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PbRBy1aafHmaEFn_VzI7g3yqpU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:ec:f7:b6:23:22:a3:97:d2:9c:a8:d6:1a:71:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3db441cb569a7c799a1059ff57323b837caaa54e
Validity
Not Before: Aug 23 07:01:59 2025 GMT
Not After : Aug 24 07:01:59 2025 GMT
Subject: CN=ae2bf8bc9423724b19376850b7255b5474920716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5c:03:5f:13:69:5c:3c:f7:6e:5a:4d:b3:bb:
02:55:8c:a4:b8:37:d1:8e:81:fb:26:59:4a:1d:d2:
b9:f8:4b:6b:8e:52:3c:5f:cc:4f:8e:87:81:00:11:
fd:05:6c:f2:9b:cf:1b:af:2f:9d:be:60:1d:20:8a:
f4:ac:29:7d:6f:13:a2:3c:74:4b:0d:77:39:05:e4:
8c:00:de:ae:71:db:07:26:b5:c7:85:20:d6:c3:cd:
7d:93:d6:8c:da:50:ac:8a:40:dc:b7:6d:f0:3a:86:
58:31:10:78:f9:cd:73:41:0f:1d:ad:0d:fc:fb:99:
1d:ee:da:72:51:fb:62:dd:ae:b6:dc:59:6b:bd:cd:
2e:b2:9d:83:64:4e:97:fa:ca:bd:0d:be:cf:7c:87:
b8:ef:7f:de:f2:41:88:f8:bd:61:e8:d7:4b:cd:2a:
58:b1:0a:f6:b1:2b:f1:74:fd:ee:49:65:c1:9d:51:
fc:b1:24:24:da:df:4e:df:6f:6a:ac:11:8f:b6:3e:
1b:6e:2f:60:f3:32:3c:53:92:5c:85:d4:63:2c:1f:
6f:5f:92:18:92:0e:8a:87:27:c7:bd:2c:33:14:a6:
2b:eb:9b:c0:a6:fc:45:d7:fa:4f:25:e8:03:90:52:
68:d8:9b:ee:79:03:25:e2:a1:13:74:4a:1d:fc:27:
30:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:2B:F8:BC:94:23:72:4B:19:37:68:50:B7:25:5B:54:74:92:07:16
X509v3 Authority Key Identifier:
keyid:3D:B4:41:CB:56:9A:7C:79:9A:10:59:FF:57:32:3B:83:7C:AA:A5:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PbRBy1aafHmaEFn_VzI7g3yqpU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6bbce4-c7d6-4418-9368-247a86b40d5d/1/PbRBy1aafHmaEFn_VzI7g3yqpU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6bbce4-c7d6-4418-9368-247a86b40d5d/1/PbRBy1aafHmaEFn_VzI7g3yqpU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:06:f2:00:df:dc:e4:ce:16:ce:6a:28:06:5f:26:b0:cc:67:
7d:a2:0b:3a:ba:f0:28:1a:21:54:1d:9d:ac:60:19:55:83:0e:
e9:39:9d:f7:91:50:94:03:2d:21:db:e8:c3:91:87:99:f3:63:
1a:34:08:e5:e0:bf:8e:55:28:68:dd:5f:2c:4d:af:45:a3:8b:
c4:1e:0d:a9:f6:4b:3c:bb:35:95:53:5b:91:55:56:41:52:15:
cd:0c:91:45:b0:0e:bb:4f:0e:30:5f:bc:38:d1:a4:16:41:c8:
2d:77:6f:34:d7:38:c2:d5:f5:09:44:c0:2f:1f:1b:97:0d:2c:
2e:0a:61:08:7e:ce:f5:7f:5a:8e:95:39:0c:fd:80:9a:47:c6:
ac:14:f0:32:02:e6:e9:ec:72:97:36:49:6c:55:f7:b7:8b:23:
f0:3a:08:b9:80:13:a4:23:a7:8a:09:16:60:f4:ec:49:e9:79:
a9:e9:51:7d:8d:02:58:14:81:5d:7f:e9:9c:a4:f6:e2:7f:37:
fe:7f:54:b2:c4:b3:0b:b8:10:b5:d0:18:92:9a:e0:5c:64:bd:
24:2e:a8:cd:07:d1:e4:30:5d:16:17:bb:9d:87:0d:58:32:f2:
f7:f9:19:03:c1:82:d8:a3:8d:0e:b2:1c:f7:7b:05:39:c7:1b:
02:c8:7a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:14:51 2025 by rpki-client