Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/PbNCBiV3FppjWX6eOmQl_N5sFmE.mft
File: PbNCBiV3FppjWX6eOmQl_N5sFmE.mft (raw, json)
Hash identifier: tRB6laLXRTIeth9DXWUefAFah9417mIQjsW7Xp/9J+Q=
Subject key identifier: 5B:27:A6:10:94:9E:9A:E3:E3:4A:62:08:99:7D:86:03:7C:77:87:B2
Authority key identifier: 3D:B3:42:06:25:77:16:9A:63:59:7E:9E:3A:64:25:FC:DE:6C:16:61
Certificate issuer: /CN=3db342062577169a63597e9e3a6425fcde6c1661
Certificate serial: 019A4EF5D38ECDF9C74D8C0C601432D70149
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PbNCBiV3FppjWX6eOmQl_N5sFmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/PbNCBiV3FppjWX6eOmQl_N5sFmE.mft
Manifest number: 0B06
Signing time: Tue 04 Nov 2025 13:02:04 +0000
Manifest this update: Tue 04 Nov 2025 13:02:04 +0000
Manifest next update: Wed 05 Nov 2025 13:02:04 +0000
Files and hashes: 1: 4XfsdEdHX1kDpX0ZLU7CoiedwkE.roa (hash: E0vTS5o3+h35/sl1eIPy8wBqph3C9G+ZoO/00bLGlrw=)
2: PbNCBiV3FppjWX6eOmQl_N5sFmE.crl (hash: hi6QkIiw0nP3j2z2Oof7Sxj3mYtLPZkBCJLi0BC3WRE=)
3: Zq7eQ3eZsYsNNl6x7QgRl2tG0cY.roa (hash: 2PLYNC5TQEo40dtz6r8G2q2NVhdYFgS71ZBpW7mlx1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/PbNCBiV3FppjWX6eOmQl_N5sFmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/PbNCBiV3FppjWX6eOmQl_N5sFmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PbNCBiV3FppjWX6eOmQl_N5sFmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:d3:8e:cd:f9:c7:4d:8c:0c:60:14:32:d7:01:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3db342062577169a63597e9e3a6425fcde6c1661
Validity
Not Before: Nov 4 13:02:04 2025 GMT
Not After : Nov 5 13:02:04 2025 GMT
Subject: CN=5b27a610949e9ae3e34a6208997d86037c7787b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:be:46:bb:d5:03:e7:78:ea:a3:91:bb:b8:83:
5d:ef:e3:ed:91:40:04:68:d7:68:11:7e:82:20:ba:
6c:3e:5a:1c:9e:83:2d:21:10:3c:f5:56:05:b8:2a:
9e:5a:81:45:90:e5:f7:a0:0f:c3:7c:71:57:77:4b:
71:54:f2:db:85:d3:8c:0d:7d:47:b8:19:58:54:45:
60:e5:f8:e3:da:d5:7a:38:4b:5a:84:b5:f4:cd:1b:
c4:9a:bd:73:09:1a:fe:72:8a:65:5f:7d:d1:dd:2d:
2f:13:95:1b:73:8d:ff:51:bd:06:5d:cd:07:4e:98:
e6:3b:27:00:00:a4:49:03:e7:ef:5d:ef:6e:fa:78:
a8:06:08:a2:1d:b8:e2:19:b7:f4:96:f0:5e:2a:95:
9d:b8:34:ee:cd:00:6c:03:0d:3a:45:d4:56:9b:7b:
fc:aa:db:e9:12:0b:59:b1:56:ac:8e:3f:09:36:b3:
2b:c4:8c:7e:a0:fb:fe:d6:03:72:6e:bc:c6:dc:12:
c7:ab:9a:0f:f7:74:8a:f3:c4:4b:da:19:d6:af:22:
b5:ac:ed:07:0e:09:cb:8d:b7:5c:ef:d9:4e:6d:37:
04:00:7d:c2:2e:a4:f2:a7:18:96:53:9a:b0:4c:b4:
27:55:b7:10:7c:52:c0:fa:d1:44:16:04:bb:95:cc:
72:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:27:A6:10:94:9E:9A:E3:E3:4A:62:08:99:7D:86:03:7C:77:87:B2
X509v3 Authority Key Identifier:
keyid:3D:B3:42:06:25:77:16:9A:63:59:7E:9E:3A:64:25:FC:DE:6C:16:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PbNCBiV3FppjWX6eOmQl_N5sFmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/PbNCBiV3FppjWX6eOmQl_N5sFmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/PbNCBiV3FppjWX6eOmQl_N5sFmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:d7:ec:db:f8:8a:f7:83:bf:68:8a:79:a3:42:43:09:2c:62:
a5:06:62:1d:9c:a2:6c:c2:a5:d8:ac:7e:a1:bd:3f:fd:23:b8:
3f:e6:9b:01:8b:7b:f9:db:a1:67:93:a7:a9:d3:d6:09:af:1c:
d8:c6:60:2e:dc:09:dd:6a:e0:c2:50:37:7e:20:52:23:5f:42:
ee:4b:be:59:1d:10:f3:18:e5:2f:f5:6c:9b:d7:63:7f:10:36:
92:ee:32:3f:01:14:87:27:d9:0c:a8:a9:a1:a3:e6:ff:6f:a1:
31:6b:04:c9:0e:75:d6:f0:21:3a:9f:1b:08:fc:95:18:51:b7:
3c:6b:22:eb:17:b4:71:a7:68:0a:a0:0c:93:25:26:36:44:ab:
16:3e:3d:0a:13:26:34:6b:92:44:b5:70:4a:db:2e:b8:5c:77:
c2:96:81:af:1e:52:41:a7:3c:02:47:7c:60:49:46:52:09:4d:
eb:1d:7d:31:55:c6:1d:b2:6f:a7:b8:c5:25:a3:65:79:33:fe:
41:fc:af:22:0a:e6:46:99:56:8a:ce:5f:1b:d6:00:ec:ee:ab:
aa:a5:ff:67:9b:e9:b8:43:dc:eb:92:62:b6:2d:5b:30:3d:8d:
92:de:39:82:fc:88:93:b5:8e:46:e9:70:18:9c:3b:69:c5:64:
7d:ad:47:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:20:51 2025 by rpki-client