Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.mft
File: pbnffpj285_iukAi2id9KBmCgCE.mft (raw, json)
Hash identifier: W8vZ8vtup2HCxDxx/PXS4gcYw7y9+xJgN4WcTSQH2M8=
Subject key identifier: 18:53:70:01:7A:D4:CA:CC:26:48:FC:3D:CA:D0:C2:67:20:93:09:83
Authority key identifier: A5:B9:DF:7E:98:F6:F3:9F:E2:BA:40:22:DA:27:7D:28:19:82:80:21
Certificate issuer: /CN=a5b9df7e98f6f39fe2ba4022da277d2819828021
Certificate serial: 0197B6A1786A15D996F87234AD16496C49D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pbnffpj285_iukAi2id9KBmCgCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.mft
Manifest number: 0D71
Signing time: Sat 28 Jun 2025 13:02:04 +0000
Manifest this update: Sat 28 Jun 2025 13:02:04 +0000
Manifest next update: Sun 29 Jun 2025 13:02:04 +0000
Files and hashes: 1: XZ2L7tby58uG7r0ttQk5HwT9l8k.roa (hash: oQ6DroqRbFL+VaKJERXvf6dbj57Lt/0NRTKEGy5wXFQ=)
2: ouICw0nyK_0-5jscxv12aq634vw.roa (hash: ZpjXF6V0UreF7p2IPTzGzZ30r7TGS05jqHG074BeOko=)
3: pbnffpj285_iukAi2id9KBmCgCE.crl (hash: os+pzrG+OBBy10EsQ9d30XbCTxEZo6/P5W9FfQY+nuY=)
4: s9Phn4LRxq3qJKp5WG1zCsRMWlc.roa (hash: 5LFQTKOZRBYzOCfam8/FRn4XdqXt/6yCH7PjQq7YFwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pbnffpj285_iukAi2id9KBmCgCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:78:6a:15:d9:96:f8:72:34:ad:16:49:6c:49:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5b9df7e98f6f39fe2ba4022da277d2819828021
Validity
Not Before: Jun 28 13:02:04 2025 GMT
Not After : Jun 29 13:02:04 2025 GMT
Subject: CN=185370017ad4cacc2648fc3dcad0c26720930983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:87:a7:6e:85:7d:e5:83:e7:49:83:75:6f:41:
0e:8c:52:d5:39:d6:9f:09:ed:18:5f:34:3a:69:30:
ba:db:3a:62:21:94:c9:8f:bb:ab:f5:a2:da:ed:87:
a5:90:96:20:30:d6:24:4f:18:d8:bb:43:d5:ab:ca:
4b:49:7e:4d:67:00:8c:82:5b:82:eb:6b:a8:7b:78:
e0:20:cb:f1:02:f3:ae:60:84:05:5f:e6:8e:42:0d:
20:4d:86:8a:52:0a:ae:5a:a5:c1:04:0e:21:7f:0b:
18:f4:07:cf:db:31:51:3d:bd:2f:7e:f0:f5:fe:75:
96:b7:a7:b7:78:a4:a8:47:b7:af:c4:36:70:a2:d2:
34:55:84:4c:56:d1:5a:7f:e1:aa:63:be:3d:7d:04:
9c:8e:21:2a:00:aa:c5:6d:d5:5f:07:2d:cd:09:95:
30:09:6b:69:52:cc:ac:6b:ae:5d:d9:be:76:61:21:
98:e7:f4:e6:fe:f9:dd:99:d5:70:fd:32:6a:d4:ad:
33:86:32:92:cd:a5:2e:c6:9e:68:29:c4:8e:11:71:
18:3f:97:47:82:72:0e:f4:63:00:f3:dd:70:bb:e6:
54:62:2a:97:4e:1b:5d:4a:c4:e7:27:94:66:a8:17:
29:84:77:38:c9:a1:ea:f1:0e:73:8d:d1:d5:7f:81:
35:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:53:70:01:7A:D4:CA:CC:26:48:FC:3D:CA:D0:C2:67:20:93:09:83
X509v3 Authority Key Identifier:
keyid:A5:B9:DF:7E:98:F6:F3:9F:E2:BA:40:22:DA:27:7D:28:19:82:80:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbnffpj285_iukAi2id9KBmCgCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:f1:4a:04:21:be:55:23:e1:2b:4c:08:75:fd:e9:cd:c2:8d:
36:ea:6e:90:44:d2:1e:7a:59:00:bd:30:9d:93:8c:db:1d:a0:
97:27:fa:65:08:8f:27:9c:b8:dd:39:5b:e9:35:63:24:ac:a6:
8f:05:a6:10:ec:08:51:75:2c:f3:41:2e:23:e8:23:6a:5d:16:
a8:e5:45:c6:ba:f7:e7:15:f6:da:cc:7d:ee:7b:82:0c:bc:d4:
7b:5b:18:23:15:da:6a:f9:c3:5e:02:b9:87:23:d2:7a:01:0c:
00:95:34:65:a5:4c:23:e3:41:e7:aa:0a:af:15:c1:7a:27:21:
94:1d:65:4c:f5:18:f7:11:c0:16:65:00:04:90:83:c1:8a:ee:
ff:f4:d6:2e:97:d6:e6:1c:08:cf:87:9d:96:dd:4d:24:71:e7:
10:bc:b7:f5:9e:f9:47:ae:1f:d6:89:c4:d8:6b:d5:9b:42:d2:
f9:69:6e:87:f9:40:6c:04:d3:f9:45:3f:ed:35:e2:42:4f:69:
cf:03:a3:f7:2f:5b:0e:e3:55:d0:9a:95:35:9c:a6:cb:3d:5f:
16:95:10:4c:86:e2:74:e1:f1:d2:56:d5:fe:37:b3:9f:98:37:
02:3d:e6:90:50:a0:da:cc:2f:45:a8:ae:54:b8:59:48:87:d3:
34:08:39:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:41:50 2025 by rpki-client