Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft
File: PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft (raw, json)
Hash identifier: z7txGcCCR4WjvqzyhbMSjUTimLgIYjzqTeeAEK7gu0o=
Subject key identifier: CF:D6:3D:8F:6B:98:FA:99:D8:71:19:44:DA:E0:17:D4:8D:60:2B:92
Authority key identifier: 3D:B0:49:DA:5E:12:06:4E:CF:E1:39:E1:20:BE:EF:6F:17:8B:FD:F3
Certificate issuer: /CN=3db049da5e12064ecfe139e120beef6f178bfdf3
Certificate serial: 0197BAEB8E77EB3C47A1140849BE050AF89E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft
Manifest number: EE
Signing time: Sun 29 Jun 2025 09:01:28 +0000
Manifest this update: Sun 29 Jun 2025 09:01:28 +0000
Manifest next update: Mon 30 Jun 2025 09:01:28 +0000
Files and hashes: 1: ArxWoIoACVsuecj6oH-B8iFComg.roa (hash: rlcyNszToJSApviKpB6wzSvDYhbI3eJligCvoVuiSks=)
2: PbBJ2l4SBk7P4TnhIL7vbxeL_fM.crl (hash: Ad1/Pj+L2JAUWF1xC7j+AZCphKpGnGF+OdSL6JHljR4=)
3: ar9nZIGwi2DhhokEeZ0Cb06cevE.roa (hash: Z0Bly0p6G10RTWfWyE9HNHAJ9d6Fob4NgEePaV17UE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:eb:8e:77:eb:3c:47:a1:14:08:49:be:05:0a:f8:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3db049da5e12064ecfe139e120beef6f178bfdf3
Validity
Not Before: Jun 29 09:01:28 2025 GMT
Not After : Jun 30 09:01:28 2025 GMT
Subject: CN=cfd63d8f6b98fa99d8711944dae017d48d602b92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ba:e3:e6:86:50:31:87:64:94:84:dc:bf:dd:
e9:90:9a:43:a2:03:b1:cc:b0:23:26:23:39:4e:98:
21:f4:90:11:d5:7c:03:a7:b4:32:66:ec:d9:e6:d9:
3f:8a:3c:e7:fc:07:25:1b:26:a8:aa:3a:21:00:4e:
88:c5:86:4a:ed:cd:38:59:e5:0e:fd:65:78:c0:aa:
bd:b7:a9:12:72:1e:ac:79:a4:63:f1:d7:f2:ff:ea:
ab:95:77:e2:94:4c:40:be:f0:f5:85:34:3d:0e:7d:
6b:a3:f7:ef:2c:31:ef:1f:80:7d:68:0c:8d:90:d7:
d5:50:28:b1:e5:cf:c5:5b:dd:d6:08:07:ad:06:af:
86:e5:fc:37:88:4c:50:c0:2d:ff:cc:72:48:4a:e2:
4e:94:76:e6:10:00:f3:e7:ae:37:b5:2a:8b:fe:fa:
1a:80:66:c8:61:3d:0e:a8:b7:61:03:81:42:90:54:
26:01:c1:5d:64:ca:65:3f:da:a3:22:99:c8:c1:7c:
81:a5:bc:a5:11:89:d6:4c:a4:44:57:c9:71:e2:03:
ba:3f:e3:02:1f:f5:05:8f:04:16:65:b2:82:c5:47:
f8:95:09:4c:db:d8:50:44:93:61:14:69:d4:39:8e:
53:8b:8b:e0:3a:b7:95:dc:26:59:ec:ce:9b:14:42:
42:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:D6:3D:8F:6B:98:FA:99:D8:71:19:44:DA:E0:17:D4:8D:60:2B:92
X509v3 Authority Key Identifier:
keyid:3D:B0:49:DA:5E:12:06:4E:CF:E1:39:E1:20:BE:EF:6F:17:8B:FD:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:74:45:db:9a:3d:ae:5a:9d:24:47:9a:96:c7:20:0e:3e:1d:
56:7b:d2:94:da:ab:00:32:c1:e0:6f:74:69:a3:13:b9:e5:0a:
53:5f:56:77:ce:de:22:78:af:c8:9f:07:8a:6f:e5:eb:57:8f:
e6:28:93:70:ab:56:e4:0f:14:4f:dd:e4:a6:58:b8:2c:fc:c2:
7f:67:40:47:bc:0e:df:ce:29:d8:62:51:49:b3:dc:0c:98:cd:
1f:39:8a:62:83:eb:54:73:48:08:65:7d:10:d5:93:83:1e:f8:
86:30:b9:9e:94:dc:1e:af:d5:b8:56:3b:49:7d:d2:8d:b6:72:
e8:58:d3:b5:71:a5:5b:49:4f:be:1d:54:62:b9:80:6c:35:44:
9f:7c:1e:1c:6f:db:86:cc:dd:13:dc:e6:a7:c3:ba:a6:21:f5:
7b:c8:16:5e:ae:66:e7:55:3c:19:c0:8a:29:bd:23:e1:97:52:
bf:d9:9e:e3:af:7c:f6:a4:2c:fc:7f:c1:1a:85:3e:22:2b:1c:
f7:ef:32:a5:c3:92:29:88:b5:9f:0e:69:32:0a:7d:9a:3d:5e:
4e:0c:63:48:44:5e:72:e4:9e:55:23:8a:74:59:79:15:71:53:
dc:9b:35:9b:7d:5b:08:9a:03:d1:bc:a8:34:66:4f:b3:86:69:
48:86:7a:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe664536zxHoRQISb4FCvieMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkYjA0OWRhNWUxMjA2NGVjZmUxMzllMTIwYmVlZjZmMTc4
YmZkZjMwHhcNMjUwNjI5MDkwMTI4WhcNMjUwNjMwMDkwMTI4WjAzMTEwLwYDVQQD
EyhjZmQ2M2Q4ZjZiOThmYTk5ZDg3MTE5NDRkYWUwMTdkNDhkNjAyYjkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7rj5oZQMYdklITcv93pkJpDogOx
zLAjJiM5Tpgh9JAR1XwDp7QyZuzZ5tk/ijzn/AclGyaoqjohAE6IxYZK7c04WeUO
/WV4wKq9t6kSch6seaRj8dfy/+qrlXfilExAvvD1hTQ9Dn1ro/fvLDHvH4B9aAyN
kNfVUCix5c/FW93WCAetBq+G5fw3iExQwC3/zHJISuJOlHbmEADz5643tSqL/voa
gGbIYT0OqLdhA4FCkFQmAcFdZMplP9qjIpnIwXyBpbylEYnWTKREV8lx4gO6P+MC
H/UFjwQWZbKCxUf4lQlM29hQRJNhFGnUOY5Ti4vgOreV3CZZ7M6bFEJCGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM/WPY9rmPqZ2HEZRNrgF9SNYCuSMB8GA1UdIwQY
MBaAFD2wSdpeEgZOz+E54SC+728Xi/3zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGJCSjJsNFNCazdQNFRuaElMN3ZieGVMX2ZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy81YmM1MTctYzFmNi00ZTRmLWI1Yzct
OGU1N2JhZDVjNTI3LzEvUGJCSjJsNFNCazdQNFRuaElMN3ZieGVMX2ZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy81YmM1MTctYzFmNi00ZTRmLWI1YzctOGU1N2JhZDVjNTI3
LzEvUGJCSjJsNFNCazdQNFRuaElMN3ZieGVMX2ZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKHRF25o9
rlqdJEealscgDj4dVnvSlNqrADLB4G90aaMTueUKU19Wd87eInivyJ8Him/l61eP
5iiTcKtW5A8UT93kpli4LPzCf2dAR7wO384p2GJRSbPcDJjNHzmKYoPrVHNICGV9
ENWTgx74hjC5npTcHq/VuFY7SX3SjbZy6FjTtXGlW0lPvh1UYrmAbDVEn3weHG/b
hszdE9zmp8O6piH1e8gWXq5m51U8GcCKKb0j4ZdSv9me46989qQs/H/BGoU+Iisc
9+8ypcOSKYi1nw5pMgp9mj1eTgxjSERecuSeVSOKdFl5FXFT3Js1m31bCJoD0byo
NGZPs4ZpSIZ6eQ==
-----END CERTIFICATE-----
Generated at Sun Jun 29 11:28:42 2025 by rpki-client