Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.mft
File: pbnffpj285_iukAi2id9KBmCgCE.mft (raw, json)
Hash identifier: q+6aYBdUTcaP9mKoMNXVyFxpC5+HVW2alD6hLbv6h3s=
Subject key identifier: E6:F4:BD:1E:08:86:22:3E:B9:F1:45:D0:FE:2F:1A:BE:27:C6:C8:E9
Authority key identifier: A5:B9:DF:7E:98:F6:F3:9F:E2:BA:40:22:DA:27:7D:28:19:82:80:21
Certificate issuer: /CN=a5b9df7e98f6f39fe2ba4022da277d2819828021
Certificate serial: 0196B3D939788531E38DD8EEFF6FA8801FE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pbnffpj285_iukAi2id9KBmCgCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.mft
Manifest number: 0CEB
Signing time: Fri 09 May 2025 07:01:19 +0000
Manifest this update: Fri 09 May 2025 07:01:19 +0000
Manifest next update: Sat 10 May 2025 07:01:19 +0000
Files and hashes: 1: XZ2L7tby58uG7r0ttQk5HwT9l8k.roa (hash: oQ6DroqRbFL+VaKJERXvf6dbj57Lt/0NRTKEGy5wXFQ=)
2: ouICw0nyK_0-5jscxv12aq634vw.roa (hash: ZpjXF6V0UreF7p2IPTzGzZ30r7TGS05jqHG074BeOko=)
3: pbnffpj285_iukAi2id9KBmCgCE.crl (hash: WK2kAVviHZc/zjnagoET7FCp7zg0nmHweTSLlaXa6FM=)
4: s9Phn4LRxq3qJKp5WG1zCsRMWlc.roa (hash: 5LFQTKOZRBYzOCfam8/FRn4XdqXt/6yCH7PjQq7YFwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pbnffpj285_iukAi2id9KBmCgCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:d9:39:78:85:31:e3:8d:d8:ee:ff:6f:a8:80:1f:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5b9df7e98f6f39fe2ba4022da277d2819828021
Validity
Not Before: May 9 07:01:19 2025 GMT
Not After : May 10 07:01:19 2025 GMT
Subject: CN=e6f4bd1e0886223eb9f145d0fe2f1abe27c6c8e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0d:43:a4:46:0a:6c:f5:a9:40:55:2a:9f:95:
6b:00:29:3b:72:36:b8:ba:2b:8b:54:88:81:59:2d:
34:7d:90:b8:7e:c4:d7:e6:93:d1:99:7f:05:c4:4d:
e0:1d:2b:47:14:ea:61:e7:c6:d9:9e:23:98:41:27:
82:a2:8f:90:e8:57:e2:1e:9b:f5:74:7a:39:65:93:
b2:66:0a:90:31:7b:e0:fd:3e:3d:1b:92:55:17:65:
de:e0:ad:03:62:96:0f:bb:1a:49:88:82:39:cc:70:
cf:9c:4d:b0:15:b8:46:97:f8:48:90:9b:d1:8c:a7:
62:71:92:22:37:bc:71:dc:1a:d5:e1:6e:8d:89:3b:
31:ea:0e:cb:9c:a2:69:82:71:7e:e8:43:d8:e9:4c:
2f:3e:7b:23:b7:71:6f:cc:b0:a6:41:77:3a:2d:35:
c6:a2:e1:ce:d1:2d:da:4d:56:63:74:d8:14:9c:90:
53:e5:a6:0e:81:92:27:f7:bf:5c:7f:fb:71:53:be:
9d:bb:75:85:18:c0:db:b6:0e:b5:3e:c9:db:30:f4:
80:95:8a:f1:fb:63:d5:68:a4:3d:cd:1f:46:01:8d:
c0:03:1a:a4:70:6b:98:b5:12:fb:be:d3:71:a7:4d:
f5:26:b5:50:41:08:62:41:89:e2:a3:10:92:0a:4a:
e0:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:F4:BD:1E:08:86:22:3E:B9:F1:45:D0:FE:2F:1A:BE:27:C6:C8:E9
X509v3 Authority Key Identifier:
keyid:A5:B9:DF:7E:98:F6:F3:9F:E2:BA:40:22:DA:27:7D:28:19:82:80:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbnffpj285_iukAi2id9KBmCgCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:7c:a3:b8:f8:55:7d:10:15:a4:42:b4:f6:97:80:a5:8d:9c:
6c:f2:e1:3e:00:85:a9:f3:7b:84:cd:23:81:e1:c6:36:e9:f8:
e0:9d:9f:b4:19:ab:ba:a4:67:f7:50:61:09:84:1c:f0:f8:20:
d8:78:f5:90:d6:41:1c:61:48:48:c4:f3:9c:60:b0:42:76:1c:
28:29:82:21:fd:45:c4:11:53:4d:ca:b4:d5:0a:f2:20:03:bf:
6a:2c:72:79:bd:a3:79:fc:4a:79:81:b6:18:36:00:e4:a6:33:
99:4f:26:0d:ee:58:c4:06:24:95:5c:58:c4:32:08:a3:6d:65:
99:f0:db:69:8e:20:6b:4e:2d:4e:eb:8a:63:5d:28:6e:be:00:
e5:06:65:fa:eb:2e:af:a6:d3:1a:4f:f3:79:27:68:00:d6:94:
f6:8d:30:22:44:fd:e6:32:bf:9b:3e:17:1e:dc:79:36:98:32:
73:2c:28:f6:76:7a:34:06:82:a3:60:a7:01:af:55:fe:ec:eb:
b7:e3:24:46:ff:6b:3d:ea:54:6e:b7:31:f6:8b:e4:ca:25:88:
8b:9e:c5:75:b6:9a:a6:b1:f3:7b:45:02:9e:5f:77:50:57:17:
64:62:67:bc:82:f5:64:b4:23:5d:7a:e0:35:f7:22:cf:b5:e0:
cd:3f:28:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaz2Tl4hTHjjdju/2+ogB/pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1YjlkZjdlOThmNmYzOWZlMmJhNDAyMmRhMjc3ZDI4MTk4
MjgwMjEwHhcNMjUwNTA5MDcwMTE5WhcNMjUwNTEwMDcwMTE5WjAzMTEwLwYDVQQD
EyhlNmY0YmQxZTA4ODYyMjNlYjlmMTQ1ZDBmZTJmMWFiZTI3YzZjOGU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAog1DpEYKbPWpQFUqn5VrACk7cja4
uiuLVIiBWS00fZC4fsTX5pPRmX8FxE3gHStHFOph58bZniOYQSeCoo+Q6FfiHpv1
dHo5ZZOyZgqQMXvg/T49G5JVF2Xe4K0DYpYPuxpJiII5zHDPnE2wFbhGl/hIkJvR
jKdicZIiN7xx3BrV4W6NiTsx6g7LnKJpgnF+6EPY6UwvPnsjt3FvzLCmQXc6LTXG
ouHO0S3aTVZjdNgUnJBT5aYOgZIn979cf/txU76du3WFGMDbtg61PsnbMPSAlYrx
+2PVaKQ9zR9GAY3AAxqkcGuYtRL7vtNxp031JrVQQQhiQYnioxCSCkrgyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOb0vR4IhiI+ufFF0P4vGr4nxsjpMB8GA1UdIwQY
MBaAFKW5336Y9vOf4rpAItonfSgZgoAhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGJuZmZwajI4NV9pdWtBaTJpZDlLQm1DZ0NFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC85NzMwNDctODkxNC00MWM2LWExZTAt
MGFjN2I3ZWRlNDJiLzEvcGJuZmZwajI4NV9pdWtBaTJpZDlLQm1DZ0NFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC85NzMwNDctODkxNC00MWM2LWExZTAtMGFjN2I3ZWRlNDJi
LzEvcGJuZmZwajI4NV9pdWtBaTJpZDlLQm1DZ0NFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXHyjuPhV
fRAVpEK09peApY2cbPLhPgCFqfN7hM0jgeHGNun44J2ftBmruqRn91BhCYQc8Pgg
2Hj1kNZBHGFISMTznGCwQnYcKCmCIf1FxBFTTcq01QryIAO/aixyeb2jefxKeYG2
GDYA5KYzmU8mDe5YxAYklVxYxDIIo21lmfDbaY4ga04tTuuKY10obr4A5QZl+usu
r6bTGk/zeSdoANaU9o0wIkT95jK/mz4XHtx5Npgycywo9nZ6NAaCo2CnAa9V/uzr
t+MkRv9rPepUbrcx9ovkyiWIi57FdbaaprHze0UCnl93UFcXZGJnvIL1ZLQjXXrg
Nfciz7XgzT8oeg==
-----END CERTIFICATE-----
Generated at Fri May 9 08:27:14 2025 by rpki-client