Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft
File: PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft (raw, json)
Hash identifier: HHjQYEQ80W+hTrogps/KQya8K8Hzc06M8cESpLgfDzk=
Subject key identifier: 09:FA:5E:8C:D9:B4:03:2C:78:91:79:D6:BF:31:08:D6:28:E2:30:18
Authority key identifier: 3D:B0:49:DA:5E:12:06:4E:CF:E1:39:E1:20:BE:EF:6F:17:8B:FD:F3
Certificate issuer: /CN=3db049da5e12064ecfe139e120beef6f178bfdf3
Certificate serial: 019A51507204CF4ED5E37C126AF504974CFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft
Manifest number: 0245
Signing time: Wed 05 Nov 2025 00:00:17 +0000
Manifest this update: Wed 05 Nov 2025 00:00:17 +0000
Manifest next update: Thu 06 Nov 2025 00:00:17 +0000
Files and hashes: 1: ArxWoIoACVsuecj6oH-B8iFComg.roa (hash: rlcyNszToJSApviKpB6wzSvDYhbI3eJligCvoVuiSks=)
2: PbBJ2l4SBk7P4TnhIL7vbxeL_fM.crl (hash: npf7P+TYEauFua28KR1F8Yeb+wdkjBpiWjUXCFEeBuE=)
3: ar9nZIGwi2DhhokEeZ0Cb06cevE.roa (hash: Z0Bly0p6G10RTWfWyE9HNHAJ9d6Fob4NgEePaV17UE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:72:04:cf:4e:d5:e3:7c:12:6a:f5:04:97:4c:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3db049da5e12064ecfe139e120beef6f178bfdf3
Validity
Not Before: Nov 5 00:00:17 2025 GMT
Not After : Nov 6 00:00:17 2025 GMT
Subject: CN=09fa5e8cd9b4032c789179d6bf3108d628e23018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ce:1e:75:11:41:24:0c:91:6e:27:7c:22:82:
5d:2d:c6:d9:15:1e:7c:70:e5:da:b6:a7:7a:a7:71:
60:e1:6b:7c:5f:93:57:f6:09:fb:39:90:aa:9f:16:
00:73:e3:3c:5b:97:f7:6e:00:b1:07:ff:65:3e:bd:
fc:8c:37:c2:14:97:19:3e:79:1a:a3:fb:c8:85:45:
e1:fa:82:62:8d:66:b4:e5:52:0b:18:9a:52:41:df:
20:d1:b7:5f:9b:0e:ed:fe:ac:6e:ac:a7:36:88:49:
12:20:aa:94:a1:8e:1a:8f:e5:e6:42:e8:c2:78:85:
9a:bc:c0:6b:d4:85:1a:44:0a:5c:c0:14:f9:c2:e9:
6d:67:63:ea:ba:81:9e:f7:6e:b6:cc:e3:a7:6d:b7:
a9:a4:19:59:b1:74:25:26:54:d6:41:21:0b:74:97:
4b:2b:87:0d:08:b8:61:a6:06:a3:b6:56:89:bb:93:
71:ed:bc:45:f9:e6:05:2b:59:53:ab:4c:bd:03:b5:
1b:3d:5d:bc:1a:3f:0a:93:c8:1d:a6:24:11:ce:90:
cf:74:13:53:9a:a2:39:c9:97:d6:b8:08:13:d4:1c:
18:27:19:b3:8d:2c:a8:52:0e:2d:bb:cf:79:a2:f4:
c2:86:b0:85:3a:e4:ed:40:c7:51:0d:61:c3:19:69:
33:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:FA:5E:8C:D9:B4:03:2C:78:91:79:D6:BF:31:08:D6:28:E2:30:18
X509v3 Authority Key Identifier:
keyid:3D:B0:49:DA:5E:12:06:4E:CF:E1:39:E1:20:BE:EF:6F:17:8B:FD:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:b1:24:60:00:e1:e6:e8:2d:4b:4d:52:92:a4:ad:13:fc:63:
6f:5f:54:0f:0b:d4:ba:4c:3f:e3:e8:3b:04:c7:17:87:a8:17:
2f:d9:0d:76:e1:f8:23:06:86:e3:13:3f:56:a3:74:6a:4f:46:
44:3a:4a:de:f5:1f:45:4a:f3:c6:61:9a:b8:7a:72:47:f9:a4:
9e:19:26:44:21:8b:13:c3:26:43:fa:1b:fd:a2:a6:98:86:77:
97:35:f8:d3:3e:e8:7c:d4:1d:ac:31:c8:11:e9:00:9c:83:1b:
d0:5d:ef:2a:1f:1d:d8:3a:be:8f:fc:57:29:c3:1e:06:e9:f6:
78:bf:a7:e0:e5:e0:e5:79:02:94:ac:0f:ba:b5:62:30:49:ee:
23:71:fc:de:94:87:9a:1a:f4:c4:b4:48:3b:b5:99:2f:07:ff:
7d:0f:fd:af:13:e5:02:8a:75:b3:8e:4e:55:60:5a:50:8c:fb:
e1:3a:61:cf:cb:47:3b:25:fb:7e:21:e4:88:53:10:06:be:f2:
5c:d9:ea:f9:17:18:f7:50:fa:fd:e0:ed:7e:9a:f7:3f:7a:15:
a8:df:4a:db:68:02:32:c0:a5:19:0f:4b:cf:08:df:e0:07:5e:
07:2d:c4:8e:0c:0e:a5:d3:4e:5b:8e:89:32:48:69:3e:3b:f7:
d5:25:02:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:41:49 2025 by rpki-client