Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.mft
File: PnDBS_JvrwGY8eeyRynNcbM1GN4.mft (raw, json)
Hash identifier: dNl6XgLFVtV4Z0Ej7kObDd+altvvzFU1AiI+JeDiZ/A=
Subject key identifier: BC:A7:A3:26:28:C1:09:0D:54:15:69:58:F0:4B:8B:CB:D1:E5:06:B5
Authority key identifier: 3E:70:C1:4B:F2:6F:AF:01:98:F1:E7:B2:47:29:CD:71:B3:35:18:DE
Certificate issuer: /CN=3e70c14bf26faf0198f1e7b24729cd71b33518de
Certificate serial: 0199FFC81D456AE4267CD2B2AEE646393373
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PnDBS_JvrwGY8eeyRynNcbM1GN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.mft
Manifest number: 03DA
Signing time: Mon 20 Oct 2025 04:02:08 +0000
Manifest this update: Mon 20 Oct 2025 04:02:08 +0000
Manifest next update: Tue 21 Oct 2025 04:02:08 +0000
Files and hashes: 1: 4d9jncgFcD3LQEVJLbIB2I3M9lo.roa (hash: seBbCSSGlRgW36OWqyme1v3t3KHDAPOFROvpxV8jwzE=)
2: 4uaLh2b-bHV2NsxIJY_pK9e3698.roa (hash: sMeMy3i5FoQg0v9xzPREgO0rI8VqgJmcA0uZMgg0uts=)
3: PnDBS_JvrwGY8eeyRynNcbM1GN4.crl (hash: 8scMnFKNYixWntOOKPNI0ZGwmaKQi03lgIdpSL4vTeM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PnDBS_JvrwGY8eeyRynNcbM1GN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:1d:45:6a:e4:26:7c:d2:b2:ae:e6:46:39:33:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e70c14bf26faf0198f1e7b24729cd71b33518de
Validity
Not Before: Oct 20 04:02:08 2025 GMT
Not After : Oct 21 04:02:08 2025 GMT
Subject: CN=bca7a32628c1090d54156958f04b8bcbd1e506b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:39:35:5e:31:36:e5:4c:94:cc:10:e4:7c:1c:
83:05:dd:d0:59:fa:d1:8f:65:8c:08:d3:e9:74:77:
07:8a:d7:2d:1d:9e:95:31:60:00:b6:43:b1:73:37:
c7:c7:3d:7f:52:27:3a:e4:54:5f:87:10:a8:d6:49:
02:d1:b6:75:1b:6b:7f:00:b9:6b:e3:5f:8c:50:96:
cd:5c:3f:1b:0f:b4:7d:4b:65:72:04:ee:1f:68:7b:
de:b0:9d:db:ee:b9:9f:b7:c9:06:1a:b0:bc:7a:68:
df:1a:2e:14:48:82:ef:60:e8:5f:91:89:17:27:23:
17:81:27:4e:ff:58:c1:fd:d8:48:1a:61:81:7b:ac:
f4:56:19:73:66:01:9b:e4:73:f0:f9:a8:a3:0b:47:
52:78:d2:37:70:15:64:67:83:a0:cd:9f:34:90:d3:
a0:e5:30:60:b1:5a:bb:b2:61:ae:41:5a:e3:83:ca:
57:74:0f:74:46:c9:a9:96:b4:71:80:d3:8e:cc:0c:
58:73:55:a3:94:41:de:aa:b4:9a:ac:eb:b1:fb:4a:
6f:ce:6e:bc:43:dd:69:b9:af:13:11:85:76:a7:a1:
cb:ad:77:56:56:58:b9:f6:6e:88:44:58:d9:f6:b4:
aa:df:8c:a4:cf:c1:7a:ff:66:c4:58:5d:a5:bc:90:
c6:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:A7:A3:26:28:C1:09:0D:54:15:69:58:F0:4B:8B:CB:D1:E5:06:B5
X509v3 Authority Key Identifier:
keyid:3E:70:C1:4B:F2:6F:AF:01:98:F1:E7:B2:47:29:CD:71:B3:35:18:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PnDBS_JvrwGY8eeyRynNcbM1GN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:2d:df:26:c1:86:75:9c:97:a7:19:c2:34:a4:d1:91:31:36:
b2:c1:65:eb:12:36:27:de:04:13:71:10:b9:3d:80:43:ea:31:
fb:cb:64:24:6f:7e:a9:97:fb:00:43:36:7c:98:8a:ce:78:0a:
09:68:21:77:10:0e:24:73:c7:3b:24:ee:17:48:60:55:9f:e2:
9d:9a:b4:f1:b0:9c:40:5e:0b:a8:53:b8:a8:03:d9:19:a3:90:
ca:04:1e:c3:d7:99:bb:bf:17:4d:00:f3:39:4d:36:37:08:ec:
01:25:f4:6b:5c:46:b5:62:91:d5:48:72:8e:55:19:c9:36:9a:
cd:ba:d1:d0:79:69:fd:f8:4c:12:74:ad:b4:b3:d7:7f:03:78:
12:f7:72:c9:f7:7b:36:4f:3f:52:61:a4:44:3c:7c:71:44:db:
c9:77:e9:27:82:64:15:54:33:a3:51:44:45:1b:f9:b2:e2:f5:
d0:34:17:31:6e:70:2e:e1:40:1c:8e:36:ef:c4:b7:77:e9:5f:
e8:4c:f0:98:c6:99:eb:35:f8:d1:1a:4a:91:62:f4:20:c2:bc:
51:c9:07:a1:7f:d9:1a:f2:05:64:30:d8:d7:c6:86:1a:88:16:
b7:20:bd:b2:73:46:65:ba:2e:53:fa:b5:a8:d4:9d:6a:d0:b0:
65:b5:b0:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:27:46 2025 by rpki-client