Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft
File: PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft (raw, json)
Hash identifier: Nh3/Sqcyf+HwLTIep+mW5sJwEHqud3JH7SezbSh58hI=
Subject key identifier: DB:BC:D1:20:C6:F4:B7:80:0B:3D:F4:34:47:BA:5A:0C:64:10:1C:C0
Authority key identifier: 3D:B0:49:DA:5E:12:06:4E:CF:E1:39:E1:20:BE:EF:6F:17:8B:FD:F3
Certificate issuer: /CN=3db049da5e12064ecfe139e120beef6f178bfdf3
Certificate serial: 01987FE692C0C1BBEDCFFFA4D05B150A4AF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft
Manifest number: 0154
Signing time: Wed 06 Aug 2025 15:01:13 +0000
Manifest this update: Wed 06 Aug 2025 15:01:13 +0000
Manifest next update: Thu 07 Aug 2025 15:01:13 +0000
Files and hashes: 1: ArxWoIoACVsuecj6oH-B8iFComg.roa (hash: rlcyNszToJSApviKpB6wzSvDYhbI3eJligCvoVuiSks=)
2: PbBJ2l4SBk7P4TnhIL7vbxeL_fM.crl (hash: p9d3Gse/euyV10rmpZjcjyy27ZcQozK/a/vvUBmWa5g=)
3: ar9nZIGwi2DhhokEeZ0Cb06cevE.roa (hash: Z0Bly0p6G10RTWfWyE9HNHAJ9d6Fob4NgEePaV17UE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 15:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:e6:92:c0:c1:bb:ed:cf:ff:a4:d0:5b:15:0a:4a:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3db049da5e12064ecfe139e120beef6f178bfdf3
Validity
Not Before: Aug 6 15:01:13 2025 GMT
Not After : Aug 7 15:01:13 2025 GMT
Subject: CN=dbbcd120c6f4b7800b3df43447ba5a0c64101cc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:03:8d:0d:fd:9d:4a:ee:fb:03:8b:de:23:84:
3f:cc:cb:6e:bb:be:7b:ec:fe:84:1b:8a:2c:26:f5:
b1:7d:d6:ae:3e:5a:f9:1d:53:7f:0b:74:62:2c:0e:
aa:31:7b:51:43:d3:0e:97:54:44:e2:a2:0f:62:9b:
73:d1:a5:22:71:eb:fb:6a:d3:bb:56:ce:0d:53:7d:
6f:56:ef:06:cc:3d:cf:3d:a0:a3:1a:c1:a6:f6:c3:
82:bc:5b:e8:c0:ed:24:70:1b:d2:11:2d:cf:18:97:
d9:10:8e:bb:3e:5d:ef:86:5c:cb:b7:46:52:60:b2:
a7:5e:74:a5:9b:2b:1e:54:70:3e:e0:67:80:3d:2d:
de:31:17:27:38:a9:88:68:e0:c2:25:63:49:db:48:
54:04:a9:74:fa:5f:02:3a:03:f3:d8:f4:b9:ce:00:
9f:11:37:c9:9e:23:d8:cb:ae:a9:d3:b4:cc:94:90:
35:7b:57:2b:56:a7:47:cc:38:eb:14:1f:27:7f:40:
b5:6c:09:30:d7:a8:ed:f4:38:3a:ea:ea:bd:cd:8b:
05:6b:a4:ee:dd:18:3a:41:a5:35:bb:39:b5:31:7e:
38:e9:34:9e:ff:fe:ec:f1:25:0d:27:0d:66:69:ec:
24:51:ef:cb:fc:9c:99:2b:c8:7a:80:5f:c2:29:f6:
56:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:BC:D1:20:C6:F4:B7:80:0B:3D:F4:34:47:BA:5A:0C:64:10:1C:C0
X509v3 Authority Key Identifier:
keyid:3D:B0:49:DA:5E:12:06:4E:CF:E1:39:E1:20:BE:EF:6F:17:8B:FD:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:bb:5b:df:44:ca:aa:33:ed:8d:e3:eb:1a:5b:b4:e2:32:d3:
19:c4:6b:e0:8d:24:33:77:5d:2b:f1:c8:8a:5a:dd:17:eb:fe:
ce:5a:e2:3b:78:1f:1a:38:0a:fb:98:ee:76:a2:80:ab:72:75:
45:f5:e8:2e:e6:21:dd:1a:9e:17:72:65:43:01:6c:6b:22:27:
dd:6a:8f:a1:3e:41:9c:5b:5b:2c:a5:57:d4:c9:f9:b7:a2:27:
f4:c3:e0:c6:12:d4:b6:de:92:22:bf:d3:59:b2:32:ba:b0:94:
ee:05:ac:39:60:ea:1d:cb:34:77:5f:dd:a3:7f:8c:48:d0:73:
23:d2:b4:cc:07:a8:e9:6c:04:19:1a:2e:38:73:ef:ea:fd:6b:
68:20:ae:cc:31:c2:11:ea:e0:80:6c:56:86:20:38:d2:e0:b8:
3f:f0:6d:57:f5:23:98:6c:85:69:27:40:92:dc:12:e9:93:f0:
de:78:e7:d9:60:43:44:34:1f:34:49:78:c1:fa:8b:f6:93:95:
fb:91:36:cf:9b:81:2a:2b:c1:0d:29:2f:8f:2a:d6:a2:dd:5c:
69:0e:2f:09:f1:34:6b:38:2c:6b:6a:29:18:d9:3d:d4:cf:59:
85:18:3c:b6:10:2f:2b:ef:6b:1a:29:fa:b0:ad:d6:0b:b8:92:
85:46:48:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh/5pLAwbvtz/+k0FsVCkr0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkYjA0OWRhNWUxMjA2NGVjZmUxMzllMTIwYmVlZjZmMTc4
YmZkZjMwHhcNMjUwODA2MTUwMTEzWhcNMjUwODA3MTUwMTEzWjAzMTEwLwYDVQQD
EyhkYmJjZDEyMGM2ZjRiNzgwMGIzZGY0MzQ0N2JhNWEwYzY0MTAxY2MwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwONDf2dSu77A4veI4Q/zMtuu757
7P6EG4osJvWxfdauPlr5HVN/C3RiLA6qMXtRQ9MOl1RE4qIPYptz0aUicev7atO7
Vs4NU31vVu8GzD3PPaCjGsGm9sOCvFvowO0kcBvSES3PGJfZEI67Pl3vhlzLt0ZS
YLKnXnSlmyseVHA+4GeAPS3eMRcnOKmIaODCJWNJ20hUBKl0+l8COgPz2PS5zgCf
ETfJniPYy66p07TMlJA1e1crVqdHzDjrFB8nf0C1bAkw16jt9Dg66uq9zYsFa6Tu
3Rg6QaU1uzm1MX446TSe//7s8SUNJw1maewkUe/L/JyZK8h6gF/CKfZWTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNu80SDG9LeACz30NEe6WgxkEBzAMB8GA1UdIwQY
MBaAFD2wSdpeEgZOz+E54SC+728Xi/3zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGJCSjJsNFNCazdQNFRuaElMN3ZieGVMX2ZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy81YmM1MTctYzFmNi00ZTRmLWI1Yzct
OGU1N2JhZDVjNTI3LzEvUGJCSjJsNFNCazdQNFRuaElMN3ZieGVMX2ZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy81YmM1MTctYzFmNi00ZTRmLWI1YzctOGU1N2JhZDVjNTI3
LzEvUGJCSjJsNFNCazdQNFRuaElMN3ZieGVMX2ZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXrtb30TK
qjPtjePrGlu04jLTGcRr4I0kM3ddK/HIilrdF+v+zlriO3gfGjgK+5judqKAq3J1
RfXoLuYh3RqeF3JlQwFsayIn3WqPoT5BnFtbLKVX1Mn5t6In9MPgxhLUtt6SIr/T
WbIyurCU7gWsOWDqHcs0d1/do3+MSNBzI9K0zAeo6WwEGRouOHPv6v1raCCuzDHC
EerggGxWhiA40uC4P/BtV/UjmGyFaSdAktwS6ZPw3njn2WBDRDQfNEl4wfqL9pOV
+5E2z5uBKivBDSkvjyrWot1caQ4vCfE0azgsa2opGNk91M9ZhRg8thAvK+9rGin6
sK3WC7iShUZI8w==
-----END CERTIFICATE-----
Generated at Thu Aug 7 00:35:09 2025 by rpki-client