Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/f7bbc4-562a-4e79-a8ee-9380e5cc0580/1/PbbiTPwA0i9O-jmkIdr7e7HaS4M.mft
File: PbbiTPwA0i9O-jmkIdr7e7HaS4M.mft (raw, json)
Hash identifier: 6jKPByNlks65cpXkABCnztSu+MLY+NjXSgySWUybea0=
Subject key identifier: 7D:B6:64:9F:99:13:AC:78:58:C0:C7:F4:33:F2:1A:95:A6:53:02:C6
Authority key identifier: 3D:B6:E2:4C:FC:00:D2:2F:4E:FA:39:A4:21:DA:FB:7B:B1:DA:4B:83
Certificate issuer: /CN=3db6e24cfc00d22f4efa39a421dafb7bb1da4b83
Certificate serial: 0197B70F1AB9B43D624011BBDF800C67E246
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PbbiTPwA0i9O-jmkIdr7e7HaS4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/f7bbc4-562a-4e79-a8ee-9380e5cc0580/1/PbbiTPwA0i9O-jmkIdr7e7HaS4M.mft
Manifest number: 0EFA
Signing time: Sat 28 Jun 2025 15:01:49 +0000
Manifest this update: Sat 28 Jun 2025 15:01:49 +0000
Manifest next update: Sun 29 Jun 2025 15:01:49 +0000
Files and hashes: 1: PbbiTPwA0i9O-jmkIdr7e7HaS4M.crl (hash: 7JXT4YE4LfmKs1ei106FPnJR/J4X+YVmG4kvJjY5m7U=)
2: he1zzqscDQVrqbAH6ruuBRGptHQ.roa (hash: pIEmG6D6JQGwEUn6Yp/QlQoXb08gkZ0Iha980hmaQQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/f7bbc4-562a-4e79-a8ee-9380e5cc0580/1/PbbiTPwA0i9O-jmkIdr7e7HaS4M.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/f7bbc4-562a-4e79-a8ee-9380e5cc0580/1/PbbiTPwA0i9O-jmkIdr7e7HaS4M.mft
rsync://rpki.ripe.net/repository/DEFAULT/PbbiTPwA0i9O-jmkIdr7e7HaS4M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:1a:b9:b4:3d:62:40:11:bb:df:80:0c:67:e2:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3db6e24cfc00d22f4efa39a421dafb7bb1da4b83
Validity
Not Before: Jun 28 15:01:49 2025 GMT
Not After : Jun 29 15:01:49 2025 GMT
Subject: CN=7db6649f9913ac7858c0c7f433f21a95a65302c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9d:f7:58:f8:1f:d8:ee:4b:d5:c9:8b:75:db:
87:07:8c:a9:e0:13:e1:27:63:e7:51:77:4b:ee:e8:
b2:86:f0:68:9c:20:0c:ed:c4:c9:4f:64:24:c6:94:
34:8b:af:05:b5:ee:c4:7e:e4:95:02:1d:55:6c:5b:
06:91:e6:55:9b:49:32:3a:08:45:3d:ef:4b:2e:0f:
e0:53:97:8d:dc:4d:4b:69:14:a9:27:62:70:7f:a9:
5f:a4:f8:1a:3f:37:81:5a:e9:0e:90:04:12:b1:95:
61:0f:41:74:3f:b0:cf:ce:af:59:58:d1:45:b2:9c:
9b:20:e0:bf:37:41:0a:07:93:cb:e0:7f:1d:7d:67:
0f:a0:d3:aa:95:8d:06:16:c3:52:7b:30:30:54:d1:
ce:19:fa:76:96:84:11:f5:b6:a6:24:ab:93:69:ec:
38:ec:f4:6a:d5:c2:14:15:60:6a:b7:8e:88:ca:ea:
3f:76:b8:20:59:01:4a:2d:76:f3:94:38:93:85:f0:
0b:62:62:a7:61:00:f8:21:d1:57:c8:0c:13:77:f2:
4d:c0:56:e9:a2:8f:c0:92:ab:8a:65:14:bb:85:7e:
b3:98:1b:49:d9:d2:be:cb:51:29:3c:ba:83:ce:f2:
0b:cb:c6:c5:46:38:3f:ec:fd:39:6e:1c:2c:70:53:
78:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:B6:64:9F:99:13:AC:78:58:C0:C7:F4:33:F2:1A:95:A6:53:02:C6
X509v3 Authority Key Identifier:
keyid:3D:B6:E2:4C:FC:00:D2:2F:4E:FA:39:A4:21:DA:FB:7B:B1:DA:4B:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PbbiTPwA0i9O-jmkIdr7e7HaS4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/f7bbc4-562a-4e79-a8ee-9380e5cc0580/1/PbbiTPwA0i9O-jmkIdr7e7HaS4M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/f7bbc4-562a-4e79-a8ee-9380e5cc0580/1/PbbiTPwA0i9O-jmkIdr7e7HaS4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:4d:07:57:52:f0:ad:8a:bb:fa:5f:f1:d4:71:26:1e:92:a1:
4b:80:cb:8e:a9:9c:8b:5a:75:ae:2d:44:14:7e:bb:75:48:07:
2e:67:49:02:86:dd:0b:20:12:1f:a7:a8:92:5d:38:b1:38:86:
55:62:07:76:53:32:23:a4:d9:e0:2d:38:0b:61:96:f0:2c:7d:
c8:79:78:47:2e:38:62:6a:cd:37:73:ce:4e:6f:42:df:33:76:
be:e8:da:1e:80:4c:d9:7d:ef:72:79:0b:80:60:54:11:6c:f7:
40:23:d9:a9:13:7a:ef:a5:7e:e9:23:72:fc:80:b9:1f:12:c5:
54:e5:e9:3f:f9:cd:b3:bd:65:f5:58:e7:06:05:82:d3:16:bc:
40:df:08:8e:9b:ff:82:d3:48:bb:a8:ec:b8:89:c7:e2:2e:45:
0d:fd:51:1d:25:cb:b8:4c:7c:61:15:4d:4f:bc:98:60:d6:62:
a4:1f:de:58:c9:75:52:29:77:4b:3e:80:19:0f:e4:2c:fb:a8:
07:03:88:0d:c5:86:62:14:aa:f5:ec:bb:41:26:d8:e6:01:e8:
0e:e1:0c:3e:1b:55:aa:8a:2f:32:38:a6:7d:7b:7c:92:14:12:
a7:b1:78:8a:50:96:a6:43:cb:81:32:aa:84:a7:71:bf:38:ef:
08:b1:3b:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3Dxq5tD1iQBG734AMZ+JGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkYjZlMjRjZmMwMGQyMmY0ZWZhMzlhNDIxZGFmYjdiYjFk
YTRiODMwHhcNMjUwNjI4MTUwMTQ5WhcNMjUwNjI5MTUwMTQ5WjAzMTEwLwYDVQQD
Eyg3ZGI2NjQ5Zjk5MTNhYzc4NThjMGM3ZjQzM2YyMWE5NWE2NTMwMmM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJ33WPgf2O5L1cmLdduHB4yp4BPh
J2PnUXdL7uiyhvBonCAM7cTJT2QkxpQ0i68Fte7EfuSVAh1VbFsGkeZVm0kyOghF
Pe9LLg/gU5eN3E1LaRSpJ2Jwf6lfpPgaPzeBWukOkAQSsZVhD0F0P7DPzq9ZWNFF
spybIOC/N0EKB5PL4H8dfWcPoNOqlY0GFsNSezAwVNHOGfp2loQR9bamJKuTaew4
7PRq1cIUFWBqt46Iyuo/drggWQFKLXbzlDiThfALYmKnYQD4IdFXyAwTd/JNwFbp
oo/AkquKZRS7hX6zmBtJ2dK+y1EpPLqDzvILy8bFRjg/7P05bhwscFN4pQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH22ZJ+ZE6x4WMDH9DPyGpWmUwLGMB8GA1UdIwQY
MBaAFD224kz8ANIvTvo5pCHa+3ux2kuDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGJiaVRQd0EwaTlPLWpta0lkcjdlN0hhUzRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9mN2JiYzQtNTYyYS00ZTc5LWE4ZWUt
OTM4MGU1Y2MwNTgwLzEvUGJiaVRQd0EwaTlPLWpta0lkcjdlN0hhUzRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC9mN2JiYzQtNTYyYS00ZTc5LWE4ZWUtOTM4MGU1Y2MwNTgw
LzEvUGJiaVRQd0EwaTlPLWpta0lkcjdlN0hhUzRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkE0HV1Lw
rYq7+l/x1HEmHpKhS4DLjqmci1p1ri1EFH67dUgHLmdJAobdCyASH6eokl04sTiG
VWIHdlMyI6TZ4C04C2GW8Cx9yHl4Ry44YmrNN3POTm9C3zN2vujaHoBM2X3vcnkL
gGBUEWz3QCPZqRN676V+6SNy/IC5HxLFVOXpP/nNs71l9VjnBgWC0xa8QN8Ijpv/
gtNIu6jsuInH4i5FDf1RHSXLuEx8YRVNT7yYYNZipB/eWMl1Uil3Sz6AGQ/kLPuo
BwOIDcWGYhSq9ey7QSbY5gHoDuEMPhtVqoovMjimfXt8khQSp7F4ilCWpkPLgTKq
hKdxvzjvCLE7dQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:57:04 2025 by rpki-client