Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/6bbce4-c7d6-4418-9368-247a86b40d5d/1/PbRBy1aafHmaEFn_VzI7g3yqpU4.mft
File: PbRBy1aafHmaEFn_VzI7g3yqpU4.mft (raw, json)
Hash identifier: Q1E1qTb0SqIoJXghuVN140Zwhi5cclATjNYI1uJHX/k=
Subject key identifier: 57:3E:32:74:96:F2:D2:04:67:15:E7:8A:F5:CF:A5:09:68:97:36:46
Authority key identifier: 3D:B4:41:CB:56:9A:7C:79:9A:10:59:FF:57:32:3B:83:7C:AA:A5:4E
Certificate issuer: /CN=3db441cb569a7c799a1059ff57323b837caaa54e
Certificate serial: 019A4E4FEB8980671CD27D70AC31FB4F87FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PbRBy1aafHmaEFn_VzI7g3yqpU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/6bbce4-c7d6-4418-9368-247a86b40d5d/1/PbRBy1aafHmaEFn_VzI7g3yqpU4.mft
Manifest number: 0469
Signing time: Tue 04 Nov 2025 10:00:51 +0000
Manifest this update: Tue 04 Nov 2025 10:00:51 +0000
Manifest next update: Wed 05 Nov 2025 10:00:51 +0000
Files and hashes: 1: PbRBy1aafHmaEFn_VzI7g3yqpU4.crl (hash: F8DTDqSHMw/FkmN1WfMNxICSCSOfMWEtF82Q/s97nAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/6bbce4-c7d6-4418-9368-247a86b40d5d/1/PbRBy1aafHmaEFn_VzI7g3yqpU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/6bbce4-c7d6-4418-9368-247a86b40d5d/1/PbRBy1aafHmaEFn_VzI7g3yqpU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PbRBy1aafHmaEFn_VzI7g3yqpU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:eb:89:80:67:1c:d2:7d:70:ac:31:fb:4f:87:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3db441cb569a7c799a1059ff57323b837caaa54e
Validity
Not Before: Nov 4 10:00:51 2025 GMT
Not After : Nov 5 10:00:51 2025 GMT
Subject: CN=573e327496f2d2046715e78af5cfa50968973646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4f:2b:d9:e2:95:42:a5:86:4c:12:14:e5:31:
7b:c1:71:13:99:42:ab:f7:d2:9b:b9:7a:eb:e5:70:
01:76:45:5e:23:b1:77:9c:6a:49:a4:e1:39:da:0c:
5c:e4:6b:12:21:1d:91:9a:86:e1:e1:1a:a5:b9:af:
0f:5a:5a:e3:42:ed:8d:a4:9c:ef:dc:ca:e2:c0:7e:
79:1f:a0:90:92:46:00:28:09:dd:73:4a:8e:0a:f2:
d3:74:d3:a8:a5:c1:60:28:9b:13:ba:44:e0:b0:4e:
18:b8:f6:3d:de:f1:10:c8:83:01:ea:f6:f0:0c:5d:
4e:15:41:f6:3b:cd:8b:87:ec:8a:4e:8f:ea:45:04:
e5:f6:5e:3a:e5:3a:1d:0b:0c:c3:45:5f:48:e5:56:
ef:01:83:b6:84:3d:5f:a0:af:5a:74:1f:21:5e:fa:
1b:e6:fa:78:1b:e0:ac:f5:f9:9a:51:14:2f:08:63:
89:0e:07:80:7c:5e:bc:4a:25:b8:a6:fc:43:29:fa:
ae:3b:de:dd:bf:eb:1e:2d:2b:dd:0a:c6:d6:bd:e2:
d2:4b:90:05:02:1c:a2:0e:58:79:93:54:3d:30:ec:
bc:85:d6:b0:61:ac:af:6d:a1:ec:cb:64:61:a1:a1:
67:cc:e8:db:20:b5:da:e1:11:ac:68:7e:ba:c7:97:
f2:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:3E:32:74:96:F2:D2:04:67:15:E7:8A:F5:CF:A5:09:68:97:36:46
X509v3 Authority Key Identifier:
keyid:3D:B4:41:CB:56:9A:7C:79:9A:10:59:FF:57:32:3B:83:7C:AA:A5:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PbRBy1aafHmaEFn_VzI7g3yqpU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6bbce4-c7d6-4418-9368-247a86b40d5d/1/PbRBy1aafHmaEFn_VzI7g3yqpU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6bbce4-c7d6-4418-9368-247a86b40d5d/1/PbRBy1aafHmaEFn_VzI7g3yqpU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:ab:c8:c2:60:0b:56:d8:21:5f:56:05:d2:be:49:ad:fc:02:
82:fe:51:f7:10:a4:54:1b:b5:e0:04:77:c6:8a:b7:c7:27:a7:
61:0d:94:3b:67:6a:66:20:6a:42:6e:8d:07:e6:72:73:d8:70:
be:53:84:0c:f8:28:3e:ce:3f:87:e7:96:c4:48:bc:dc:0d:4d:
b4:12:af:5e:8a:49:ff:be:4f:42:a6:52:89:4d:bf:95:8d:57:
13:13:92:59:4b:a4:62:4c:0b:96:bc:48:dd:2c:44:cf:18:f4:
72:28:d9:21:6e:ef:3d:9e:d4:1f:6a:41:71:8b:2f:af:5a:3c:
44:76:51:31:2c:e2:ed:25:ed:62:04:36:7b:97:a8:8e:6b:c7:
cc:db:c3:e4:8f:32:e1:3e:90:17:47:01:70:55:31:4b:17:0b:
e0:68:dd:df:d2:cb:c7:b6:ef:84:e3:c7:7a:28:bf:fb:6c:54:
54:28:17:fc:e7:cd:9c:db:99:57:05:0c:c1:34:85:38:29:8b:
da:37:b5:7a:cc:17:60:e7:48:89:9f:53:e0:22:41:b2:dc:d0:
8b:aa:e2:47:84:dd:b9:25:36:2b:49:3e:59:04:46:ca:b3:c1:
a1:be:0b:8d:d2:9c:54:46:3d:d9:74:22:f2:f2:4a:fd:1a:69:
5b:78:3c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:48:42 2025 by rpki-client