Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/6bbce4-c7d6-4418-9368-247a86b40d5d/1/PbRBy1aafHmaEFn_VzI7g3yqpU4.mft
File: PbRBy1aafHmaEFn_VzI7g3yqpU4.mft (raw, json)
Hash identifier: PfaHKiZT4acx/foi8x9/Mx4b5ZIbOtU9vgpfvxPZg8Q=
Subject key identifier: 71:64:49:AF:2F:73:62:39:0D:3E:A7:24:F2:99:00:9E:2F:BB:ED:F9
Authority key identifier: 3D:B4:41:CB:56:9A:7C:79:9A:10:59:FF:57:32:3B:83:7C:AA:A5:4E
Certificate issuer: /CN=3db441cb569a7c799a1059ff57323b837caaa54e
Certificate serial: 0199FB4604307D45F84A3ABE887CC108D272
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PbRBy1aafHmaEFn_VzI7g3yqpU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/6bbce4-c7d6-4418-9368-247a86b40d5d/1/PbRBy1aafHmaEFn_VzI7g3yqpU4.mft
Manifest number: 043E
Signing time: Sun 19 Oct 2025 07:01:33 +0000
Manifest this update: Sun 19 Oct 2025 07:01:33 +0000
Manifest next update: Mon 20 Oct 2025 07:01:33 +0000
Files and hashes: 1: PbRBy1aafHmaEFn_VzI7g3yqpU4.crl (hash: blkBDqqKRemTssVSdsMrl9a9c5PnedVxXlOaI5bqim0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/6bbce4-c7d6-4418-9368-247a86b40d5d/1/PbRBy1aafHmaEFn_VzI7g3yqpU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/6bbce4-c7d6-4418-9368-247a86b40d5d/1/PbRBy1aafHmaEFn_VzI7g3yqpU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PbRBy1aafHmaEFn_VzI7g3yqpU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:46:04:30:7d:45:f8:4a:3a:be:88:7c:c1:08:d2:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3db441cb569a7c799a1059ff57323b837caaa54e
Validity
Not Before: Oct 19 07:01:33 2025 GMT
Not After : Oct 20 07:01:33 2025 GMT
Subject: CN=716449af2f7362390d3ea724f299009e2fbbedf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:48:a1:88:86:3c:89:d4:08:6b:31:be:32:bd:
ab:6f:f1:8e:9e:ec:03:da:8a:32:e0:43:dd:65:cc:
76:49:7a:78:ec:00:75:85:3f:7e:d6:c0:72:e8:a6:
b2:95:f9:e6:ca:7a:50:03:e1:fc:bf:bb:f1:2f:6f:
af:c7:93:c4:4f:71:06:e7:ff:10:e7:15:2f:6a:bd:
02:58:b9:86:2c:29:3e:fd:a3:ec:f3:04:bd:28:b1:
98:b8:e7:6e:ed:7c:7b:a2:51:20:41:1c:39:16:9e:
b2:f9:02:9e:7b:58:1a:c8:13:f9:5c:5c:71:ec:67:
2b:ff:1f:17:ca:8f:42:26:cd:8e:02:d0:bd:08:9b:
b3:dc:b1:9b:a8:97:00:2e:65:61:bc:d1:6b:33:5c:
91:b7:ed:d7:ba:9f:a1:3b:34:1e:69:32:80:fd:c4:
5c:21:62:6d:a6:67:26:42:63:13:fa:61:be:5c:15:
66:30:61:bd:15:9f:0a:cb:df:07:d3:cc:37:55:5d:
64:43:7f:34:97:dd:d3:77:3e:01:47:df:dd:23:21:
67:c2:9d:2e:26:f4:8d:9f:ad:f7:20:85:f3:1d:18:
57:d5:ec:f1:7f:90:f1:27:c2:ab:3d:42:66:c4:a7:
44:8b:24:54:f1:5d:b8:37:0a:4e:ef:43:4d:d6:5e:
09:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:64:49:AF:2F:73:62:39:0D:3E:A7:24:F2:99:00:9E:2F:BB:ED:F9
X509v3 Authority Key Identifier:
keyid:3D:B4:41:CB:56:9A:7C:79:9A:10:59:FF:57:32:3B:83:7C:AA:A5:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PbRBy1aafHmaEFn_VzI7g3yqpU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6bbce4-c7d6-4418-9368-247a86b40d5d/1/PbRBy1aafHmaEFn_VzI7g3yqpU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6bbce4-c7d6-4418-9368-247a86b40d5d/1/PbRBy1aafHmaEFn_VzI7g3yqpU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:aa:5f:c3:cc:78:fa:ad:2a:20:91:c9:fb:fc:22:b7:a6:5e:
30:ba:a7:58:8b:0d:6b:b0:68:9c:4b:43:de:10:3e:00:5e:1f:
c0:de:83:3e:11:20:f1:a4:24:fd:f7:87:b1:93:a8:9c:ca:f1:
7c:ad:b5:e1:30:91:f8:e8:55:67:0b:76:a7:2a:58:10:22:0a:
15:1f:2e:10:99:5c:3d:86:3c:1f:69:53:21:75:7b:f7:3e:45:
c3:63:3d:eb:07:90:7d:99:e5:4b:c9:b3:ec:2c:85:00:f5:f9:
ac:0c:a7:3c:74:dd:54:a2:03:af:02:8b:76:b2:3d:b1:11:73:
e4:b3:65:0b:bc:99:60:0b:37:ed:ea:4d:94:c9:10:ca:8a:2a:
93:5c:80:22:21:62:00:d1:38:27:ed:c1:6b:57:e9:a4:b1:ce:
47:fe:dc:ca:06:7e:9b:1c:11:6b:fa:e2:bc:eb:17:13:01:f5:
45:b3:2f:23:db:22:0e:e9:0e:a7:40:02:23:3c:11:e2:22:1a:
d6:ff:7b:e1:de:74:4c:92:a9:94:74:49:b3:5a:81:ac:7c:e6:
d1:18:dc:2b:6e:8b:43:62:e4:45:76:e1:39:f5:52:9b:e2:a3:
56:b0:68:42:33:b5:94:b9:bd:ce:58:dc:c5:c8:87:1e:00:35:
4c:fa:50:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:08:10 2025 by rpki-client