
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/239b73-7aa7-4b58-b12c-7927de539364/1/PBnm8n2SgJXlYN52ePKONFnVWUc.mft
File: PBnm8n2SgJXlYN52ePKONFnVWUc.mft (raw, json)
Hash identifier: 1sI7+E57ZnZzxIleXZ9osIg7XyiuWrnGCWFTYDSDDbU=
Subject key identifier: 82:82:E3:F3:E1:C8:7B:12:C9:CD:23:DC:D3:6F:D8:1F:E2:E9:3D:D9
Authority key identifier: 3C:19:E6:F2:7D:92:80:95:E5:60:DE:76:78:F2:8E:34:59:D5:59:47
Certificate issuer: /CN=3c19e6f27d928095e560de7678f28e3459d55947
Certificate serial: 0198D6986030B5AED8E2119FFCF338E4D09F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBnm8n2SgJXlYN52ePKONFnVWUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/239b73-7aa7-4b58-b12c-7927de539364/1/PBnm8n2SgJXlYN52ePKONFnVWUc.mft
Manifest number: 015D
Signing time: Sat 23 Aug 2025 11:02:46 +0000
Manifest this update: Sat 23 Aug 2025 11:02:46 +0000
Manifest next update: Sun 24 Aug 2025 11:02:46 +0000
Files and hashes: 1: PBnm8n2SgJXlYN52ePKONFnVWUc.crl (hash: nBKvORGfbs021CiqPpT32OOgr8SOD5tmvEe/iNW8xMQ=)
2: QmVb0SoXYnlMedY0w_3_iXHpV1g.roa (hash: a3gXOD/NjdWHnE6P9SQzEQhqDOtbuugfMMDorP0aI2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/239b73-7aa7-4b58-b12c-7927de539364/1/PBnm8n2SgJXlYN52ePKONFnVWUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/239b73-7aa7-4b58-b12c-7927de539364/1/PBnm8n2SgJXlYN52ePKONFnVWUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PBnm8n2SgJXlYN52ePKONFnVWUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:60:30:b5:ae:d8:e2:11:9f:fc:f3:38:e4:d0:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c19e6f27d928095e560de7678f28e3459d55947
Validity
Not Before: Aug 23 11:02:46 2025 GMT
Not After : Aug 24 11:02:46 2025 GMT
Subject: CN=8282e3f3e1c87b12c9cd23dcd36fd81fe2e93dd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:50:44:ea:57:5f:10:94:30:6a:5d:7c:57:85:
c0:b9:cd:d0:cb:28:26:43:43:ff:59:a2:ce:86:c4:
ab:01:06:32:6b:08:4b:6f:2c:41:68:65:2f:2f:68:
8d:93:53:2c:f4:90:b9:41:b2:19:25:43:7f:e3:25:
bc:67:e3:89:1c:e9:60:3e:5a:1d:6d:c4:bd:4e:b6:
04:80:d4:28:5f:62:56:fb:6c:d9:6d:2b:67:ba:5c:
c1:02:d3:4d:fb:ea:c7:29:2d:8c:e9:cc:e5:3e:d2:
1f:94:9d:31:a2:45:91:5c:f8:25:76:88:78:24:09:
0c:10:4a:a7:38:c5:53:6f:64:a6:e2:bd:f9:45:d9:
76:1c:bd:bb:f9:50:de:3a:b8:a2:8c:50:86:f8:96:
23:f9:87:ae:d0:99:3f:40:1d:a2:3d:ed:85:3f:69:
2b:d4:fd:7a:d1:39:23:43:f8:29:d4:4c:8b:0b:3c:
1d:e7:14:17:c0:72:33:cb:8b:8a:43:d4:cd:38:b8:
8b:cc:de:f6:4f:38:23:04:c3:8e:bc:b4:95:89:d3:
b1:be:36:5e:86:fd:67:ec:0b:52:2b:15:0a:95:e1:
0b:fc:9a:24:69:4b:7a:9b:26:7f:d0:6f:b0:a3:b6:
ef:53:b5:69:cd:2c:ae:5a:d9:90:38:75:47:92:ca:
53:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:82:E3:F3:E1:C8:7B:12:C9:CD:23:DC:D3:6F:D8:1F:E2:E9:3D:D9
X509v3 Authority Key Identifier:
keyid:3C:19:E6:F2:7D:92:80:95:E5:60:DE:76:78:F2:8E:34:59:D5:59:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBnm8n2SgJXlYN52ePKONFnVWUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/239b73-7aa7-4b58-b12c-7927de539364/1/PBnm8n2SgJXlYN52ePKONFnVWUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/239b73-7aa7-4b58-b12c-7927de539364/1/PBnm8n2SgJXlYN52ePKONFnVWUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:87:26:9e:bd:92:8c:a7:37:d4:c2:fa:6e:49:11:95:d8:ec:
99:81:ef:3a:ae:1a:d9:8b:30:10:3a:a4:e7:6b:09:8f:e6:58:
73:10:bf:53:87:e0:dc:d1:e1:35:58:a8:e7:0f:e6:b4:ae:e1:
6f:12:64:c8:c4:88:f5:57:c2:56:41:9e:30:05:a3:8e:da:b8:
95:5b:e2:80:0f:b9:d6:0c:52:f6:ae:31:3e:f9:fa:c1:d8:7e:
6d:ab:21:1a:f5:8c:97:89:8f:20:00:21:da:c2:f1:09:bd:c7:
35:5c:d6:21:d4:3f:6d:a4:b9:5d:af:b7:6e:8f:3c:63:86:0d:
57:c3:0e:f9:6f:f5:2d:a6:b8:98:2d:a2:e8:44:9c:06:86:51:
7f:18:57:2e:08:1c:47:b8:a8:98:1a:3f:36:ad:09:ed:a8:bb:
ee:fc:71:38:63:34:72:37:94:68:3b:2a:cd:eb:27:13:7d:ec:
67:9c:f8:0b:ed:4f:38:93:4e:64:2e:38:9e:93:d2:ef:c4:b8:
1a:1b:47:2f:eb:f4:a1:55:c3:e7:d1:6f:46:18:39:ae:18:f9:
4a:57:99:70:ef:b7:15:11:c1:d1:8d:59:e8:46:d0:50:31:65:
0b:74:81:de:62:41:9e:ff:90:b8:86:d4:d6:12:cc:21:03:0c:
8e:21:1b:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:23:16 2025 by rpki-client