Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft
File: PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft (raw, json)
Hash identifier: VU6gb9qCOBPZO2wFPiPPsLkEz7TIEC0c5I2raT03GJE=
Subject key identifier: EB:DA:D3:6C:09:85:A8:67:04:DC:6B:2D:29:51:43:19:B8:88:BE:32
Authority key identifier: 3D:B0:49:DA:5E:12:06:4E:CF:E1:39:E1:20:BE:EF:6F:17:8B:FD:F3
Certificate issuer: /CN=3db049da5e12064ecfe139e120beef6f178bfdf3
Certificate serial: 019769CED045B38D86B195E79DA9CA0C0A9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft
Manifest number: C4
Signing time: Fri 13 Jun 2025 15:00:50 +0000
Manifest this update: Fri 13 Jun 2025 15:00:50 +0000
Manifest next update: Sat 14 Jun 2025 15:00:50 +0000
Files and hashes: 1: ArxWoIoACVsuecj6oH-B8iFComg.roa (hash: rlcyNszToJSApviKpB6wzSvDYhbI3eJligCvoVuiSks=)
2: PbBJ2l4SBk7P4TnhIL7vbxeL_fM.crl (hash: Z/U0X0USo9PI4SV6RsJALmjAK5p7BLlK/VMRs1I0lbU=)
3: ar9nZIGwi2DhhokEeZ0Cb06cevE.roa (hash: Z0Bly0p6G10RTWfWyE9HNHAJ9d6Fob4NgEePaV17UE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:d0:45:b3:8d:86:b1:95:e7:9d:a9:ca:0c:0a:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3db049da5e12064ecfe139e120beef6f178bfdf3
Validity
Not Before: Jun 13 15:00:50 2025 GMT
Not After : Jun 14 15:00:50 2025 GMT
Subject: CN=ebdad36c0985a86704dc6b2d29514319b888be32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:86:7b:b7:28:1b:f2:4b:2c:00:04:f2:dd:00:
b9:1f:4c:2d:37:17:36:42:75:a3:bb:5c:94:b7:3d:
08:fe:98:b6:da:48:c1:9c:12:00:09:72:f9:4d:11:
d6:dc:4b:fb:94:9f:f8:e5:e8:87:41:89:c9:a3:19:
80:64:30:a7:9c:7f:ac:74:28:ff:9a:7f:bb:05:3e:
92:99:52:20:1e:e4:01:d7:b5:ed:4e:b4:56:d5:22:
57:e0:33:e8:be:9c:68:28:9d:68:94:2e:81:c9:55:
ad:80:e2:e1:1c:ae:29:af:ae:21:2b:4a:ee:20:10:
f6:88:0d:9c:cc:17:5b:38:0a:64:66:d7:ee:6e:99:
3e:ca:22:78:fc:26:95:ba:a2:53:50:e3:06:55:30:
e1:46:26:87:c8:7d:a0:d0:39:16:81:c0:81:68:fd:
d6:f4:09:89:e7:f2:40:6a:32:46:61:65:2d:d2:55:
b0:32:7f:c9:20:d3:31:bd:06:c7:25:81:24:fb:c3:
f6:71:77:0b:e7:b9:29:55:21:84:11:55:a3:69:7d:
a7:85:d2:3f:62:26:49:32:7e:0f:fe:f5:33:14:b3:
5d:3b:2e:aa:89:0c:b3:11:a6:a7:af:40:22:95:bd:
4c:13:3e:7d:56:5d:75:52:11:e6:e6:f2:fb:cf:93:
ba:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:DA:D3:6C:09:85:A8:67:04:DC:6B:2D:29:51:43:19:B8:88:BE:32
X509v3 Authority Key Identifier:
keyid:3D:B0:49:DA:5E:12:06:4E:CF:E1:39:E1:20:BE:EF:6F:17:8B:FD:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:0c:5d:28:67:f4:82:01:07:38:f2:df:26:12:4e:5b:0d:d9:
71:39:31:eb:be:71:c0:7c:af:d2:34:56:ad:23:e5:d5:b0:b9:
78:ae:92:90:9d:51:4b:87:c0:25:d5:9d:2b:63:8e:f7:02:19:
cf:52:00:5c:07:b0:40:4d:b0:0e:68:46:08:1b:7b:8b:e1:b0:
95:e9:e2:72:8e:e6:30:e0:a1:9f:b8:1f:b9:b6:89:88:10:44:
7f:28:23:eb:e2:14:a6:23:97:07:57:a2:f1:23:29:9f:09:d1:
33:6c:74:fc:6c:39:d5:06:23:52:5c:fb:42:37:f9:42:ae:2e:
c5:cd:5c:81:4b:31:8d:09:00:84:66:50:1a:64:d3:73:85:60:
b7:b5:63:c4:38:f8:e4:6e:eb:7d:e8:4b:35:62:1b:08:3d:b9:
55:5b:d9:43:d9:44:55:28:1f:7c:01:4e:01:06:f2:3d:3b:ea:
77:e9:25:c4:cf:db:ff:32:a1:61:51:94:0b:d5:bc:26:53:40:
4d:f7:ab:d4:20:bd:55:50:bd:2b:63:99:c9:fa:c7:07:fc:00:
08:97:02:9b:27:46:03:3b:f9:0d:67:17:ae:b7:dc:12:4b:8e:
7a:9b:75:4e:90:ce:8e:c1:49:59:21:89:7d:6b:33:33:4e:04:
99:bf:51:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:22:35 2025 by rpki-client