
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/PB8U03-9yHrnyce5FT6updTFVJs.mft
File: PB8U03-9yHrnyce5FT6updTFVJs.mft (raw, json)
Hash identifier: VcTGiVboLxbUo8Oj868rQVzKmNQllkuKKHUzRMtalGU=
Subject key identifier: EC:53:7E:C8:50:73:87:7C:B2:B0:74:B8:52:6E:14:CB:17:AD:50:38
Authority key identifier: 3C:1F:14:D3:7F:BD:C8:7A:E7:C9:C7:B9:15:3E:AE:A5:D4:C5:54:9B
Certificate issuer: /CN=3c1f14d37fbdc87ae7c9c7b9153eaea5d4c5549b
Certificate serial: 0199FB7CE4ACD3BDCBDD24AD6C3832328211
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PB8U03-9yHrnyce5FT6updTFVJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/PB8U03-9yHrnyce5FT6updTFVJs.mft
Manifest number: 03B0
Signing time: Sun 19 Oct 2025 08:01:30 +0000
Manifest this update: Sun 19 Oct 2025 08:01:30 +0000
Manifest next update: Mon 20 Oct 2025 08:01:30 +0000
Files and hashes: 1: PB8U03-9yHrnyce5FT6updTFVJs.crl (hash: e4+vDtsKYjktHh0ga0ZjmYkmt76Bgu74CXIZG+8/2T4=)
2: auXGFmJDUvgSHGS6wCLf4_shLvQ.roa (hash: bP/kmgpM7rHsmWvx92KHgSs4SseixSL39Od8mT5RIQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/PB8U03-9yHrnyce5FT6updTFVJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/PB8U03-9yHrnyce5FT6updTFVJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/PB8U03-9yHrnyce5FT6updTFVJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:e4:ac:d3:bd:cb:dd:24:ad:6c:38:32:32:82:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c1f14d37fbdc87ae7c9c7b9153eaea5d4c5549b
Validity
Not Before: Oct 19 08:01:30 2025 GMT
Not After : Oct 20 08:01:30 2025 GMT
Subject: CN=ec537ec85073877cb2b074b8526e14cb17ad5038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:23:4b:13:66:03:4c:4d:66:e3:2b:fc:f0:1e:
68:c9:b3:17:9d:30:cb:0b:58:be:3c:e2:83:d6:44:
2d:b3:c8:78:69:a5:dc:b9:1b:8e:06:6c:e7:a7:13:
df:06:07:41:ce:41:ec:b3:b7:a9:99:40:62:b7:c3:
04:8d:fa:fe:e2:e0:59:b7:5e:9e:b6:a2:22:71:9e:
1c:99:8c:b0:e7:cf:d6:b8:b5:54:99:4f:9f:d8:b5:
91:88:02:39:5f:43:6e:e2:ad:3b:8b:90:32:24:96:
1e:f5:42:82:04:a6:09:dd:d3:25:ca:ce:a6:63:12:
21:48:93:57:d3:2c:f5:05:24:d1:ee:97:14:19:a4:
ea:e2:37:dc:5b:65:83:00:75:1c:91:37:68:bb:ef:
96:6a:ae:f6:37:f9:a6:15:b9:e1:25:63:67:0d:a9:
4d:2c:c1:f2:42:d8:8f:24:9e:35:a6:d9:ce:e0:8b:
d7:7e:9a:1c:02:04:a9:1f:9c:49:2d:3e:85:0f:33:
7d:85:cb:53:04:78:7c:ae:35:4a:29:cd:31:b1:ad:
89:49:22:bc:56:d1:f4:b3:9c:e0:a5:d2:b8:4b:6c:
9a:79:1e:b4:01:af:63:4e:6b:e0:dc:db:d0:84:85:
2f:0d:78:2c:1a:49:08:1e:29:48:c5:3e:46:10:44:
37:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:53:7E:C8:50:73:87:7C:B2:B0:74:B8:52:6E:14:CB:17:AD:50:38
X509v3 Authority Key Identifier:
keyid:3C:1F:14:D3:7F:BD:C8:7A:E7:C9:C7:B9:15:3E:AE:A5:D4:C5:54:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PB8U03-9yHrnyce5FT6updTFVJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/PB8U03-9yHrnyce5FT6updTFVJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/PB8U03-9yHrnyce5FT6updTFVJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:fc:21:4e:1b:de:6b:17:19:ac:65:02:7f:95:7e:28:38:04:
29:34:fa:35:58:b8:f0:7e:82:f7:33:4b:90:64:20:c5:8c:38:
54:9d:6f:22:66:a7:bc:24:f5:e6:8f:f1:81:e8:ef:c6:64:6c:
d7:ba:82:b0:b3:d4:db:fd:7c:2b:ba:1b:9c:a9:b2:d0:86:c5:
5c:3d:a1:f1:a5:fc:70:cb:01:91:79:5e:ee:e9:8d:e8:e3:b6:
46:58:b6:d4:bf:7e:86:69:51:5d:9d:53:ff:c5:75:83:9b:8c:
05:80:b8:fa:86:5c:ca:08:bb:0e:9d:de:7e:20:6e:6c:05:15:
94:df:6a:0c:0d:07:3b:fe:11:11:b6:e6:53:95:bf:ba:7b:19:
5a:ea:b6:b9:f4:88:3f:2b:fc:96:a5:a1:85:50:e7:04:6b:65:
f7:89:ee:ec:8f:3e:0b:4d:69:2a:bc:b3:41:38:6d:bf:55:b7:
70:de:3d:2c:cc:5b:e7:13:00:b7:a5:ed:e3:19:e1:e8:4d:20:
5f:be:ab:66:cb:ba:ea:03:81:eb:68:fb:c7:ca:70:b0:71:89:
1c:68:78:64:30:89:a3:eb:aa:d5:37:45:64:85:01:90:8b:c2:
7e:04:16:b7:f0:39:61:b5:0c:82:3e:db:83:30:8b:b2:1c:b9:
31:6c:6a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:13:20 2025 by rpki-client