Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.mft
File: pbnffpj285_iukAi2id9KBmCgCE.mft (raw, json)
Hash identifier: 7huiASDqG888Xtt3BC2SZAurJvliTaCR9jzlbUIluhk=
Subject key identifier: B6:9A:6F:E3:04:2D:4D:E1:E6:78:B6:E5:1D:57:AA:E1:D5:80:D2:30
Authority key identifier: A5:B9:DF:7E:98:F6:F3:9F:E2:BA:40:22:DA:27:7D:28:19:82:80:21
Certificate issuer: /CN=a5b9df7e98f6f39fe2ba4022da277d2819828021
Certificate serial: 0198D7A90E90FC256EBE0934B41EE8B0E8E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pbnffpj285_iukAi2id9KBmCgCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.mft
Manifest number: 0E08
Signing time: Sat 23 Aug 2025 16:00:37 +0000
Manifest this update: Sat 23 Aug 2025 16:00:37 +0000
Manifest next update: Sun 24 Aug 2025 16:00:37 +0000
Files and hashes: 1: 1h7x7glo7raaLY2_2McusPDR_aM.roa (hash: HMpq5ZxT3KuTaqPuHxdfR/p2+y/DB0HiuZsEYPl7Agw=)
2: afGPS3PAVZ8nWwVk4CaX2Osnjtw.roa (hash: +mXJCKECRBst1oRdqoThcAUlKIq3CdK3Wq8QN3b289Q=)
3: ouICw0nyK_0-5jscxv12aq634vw.roa (hash: ZpjXF6V0UreF7p2IPTzGzZ30r7TGS05jqHG074BeOko=)
4: pbnffpj285_iukAi2id9KBmCgCE.crl (hash: IYcx7V7c98tK2tV+7kb9/xQFHHgLWtLClvIanJ1k1hc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pbnffpj285_iukAi2id9KBmCgCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a9:0e:90:fc:25:6e:be:09:34:b4:1e:e8:b0:e8:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5b9df7e98f6f39fe2ba4022da277d2819828021
Validity
Not Before: Aug 23 16:00:37 2025 GMT
Not After : Aug 24 16:00:37 2025 GMT
Subject: CN=b69a6fe3042d4de1e678b6e51d57aae1d580d230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d9:0b:5b:21:9c:ac:e0:a2:93:68:f4:5c:c0:
12:1a:47:42:8e:56:29:91:6b:87:4b:24:09:33:f2:
e9:28:d1:ec:08:43:cf:bb:97:2b:8d:06:67:7e:be:
01:45:a2:d7:cb:23:7e:9a:5e:8a:16:79:17:be:47:
ac:b1:36:ca:a9:7c:f1:e6:a0:c1:b1:da:f8:3d:9b:
9a:cf:4f:e1:20:27:08:63:b6:22:71:f1:04:2d:55:
1b:b4:74:4c:50:84:e6:a6:64:a5:15:5b:11:bd:c8:
35:dd:fc:1a:42:03:8d:84:21:6d:44:64:2a:b7:90:
72:8b:b8:a0:2c:ab:51:0b:3e:63:70:38:03:f8:48:
d5:99:cb:07:5a:82:68:98:a1:e4:98:5b:c4:77:cb:
e3:51:b1:99:34:81:81:0f:28:d4:89:c0:1d:d6:02:
20:58:2b:ab:bc:cf:5b:a1:a2:c0:f3:af:6c:ed:c7:
a0:e1:71:86:76:5e:62:a8:4e:b6:68:ca:74:8b:c6:
49:32:b1:f5:48:80:d1:a7:a0:2a:ec:f7:5e:c9:60:
cc:15:60:cf:41:27:8a:55:d3:3e:54:76:04:4b:ca:
81:4c:00:d2:49:1f:0f:2d:55:3c:48:d3:22:67:07:
25:45:a1:ea:c8:a4:ba:9c:95:fd:bf:e5:f2:72:05:
b8:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:9A:6F:E3:04:2D:4D:E1:E6:78:B6:E5:1D:57:AA:E1:D5:80:D2:30
X509v3 Authority Key Identifier:
keyid:A5:B9:DF:7E:98:F6:F3:9F:E2:BA:40:22:DA:27:7D:28:19:82:80:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbnffpj285_iukAi2id9KBmCgCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:e7:d3:9e:da:e5:d5:dc:d0:67:af:6b:2b:df:30:26:a5:93:
d7:32:94:8a:95:4b:e5:c7:df:12:33:21:e2:1e:56:d1:e8:55:
fe:d2:a9:f7:0b:99:b7:ae:04:96:af:0d:c2:0c:fa:51:68:65:
18:8a:cb:d6:18:0f:bc:70:d4:c6:9e:cb:ae:cd:42:67:e6:0c:
28:9e:6b:75:01:28:6e:b3:09:0d:53:ca:04:24:95:c1:23:83:
92:cd:d0:91:bb:ec:78:fa:83:aa:8b:b3:b0:15:eb:ef:f0:46:
ac:34:34:47:71:0c:dd:01:7a:8e:ce:a7:dd:1e:e1:7c:21:48:
9c:22:2c:18:e7:4a:9a:3e:de:cf:39:21:fd:0a:4e:75:3b:b8:
64:d2:72:94:bd:48:61:4d:d5:ab:82:4d:4f:e5:85:04:8d:25:
e5:b8:73:fd:51:88:13:60:1e:0e:f4:9b:ec:b3:e6:94:eb:d9:
da:1e:58:67:e3:54:d2:13:66:fa:2e:95:f9:b3:26:80:a8:9e:
c1:85:d5:0e:f6:07:60:3a:bb:a7:d0:35:f6:0a:e1:01:05:e9:
92:e3:74:e7:75:68:7d:33:c6:2a:21:a2:79:b6:10:3e:1a:13:
37:6a:bf:99:92:20:f0:6c:83:3c:3f:85:2e:44:86:63:cd:39:
e9:a7:8d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:52:16 2025 by rpki-client