
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.mft
File: PBuDiIaW_ERHjGk9bngD6VFiUOY.mft (raw, json)
Hash identifier: VqmUBryWk9xu4GSXllC2veRp3j8j+IP0cm4PXi25GVI=
Subject key identifier: 3F:30:29:68:73:3A:74:BF:8F:C4:19:42:07:CE:36:AF:86:17:32:36
Authority key identifier: 3C:1B:83:88:86:96:FC:44:47:8C:69:3D:6E:78:03:E9:51:62:50:E6
Certificate issuer: /CN=3c1b83888696fc44478c693d6e7803e9516250e6
Certificate serial: 019A4E86E2599123FE6984813734EE5DE699
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBuDiIaW_ERHjGk9bngD6VFiUOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.mft
Manifest number: 0E1B
Signing time: Tue 04 Nov 2025 11:00:53 +0000
Manifest this update: Tue 04 Nov 2025 11:00:53 +0000
Manifest next update: Wed 05 Nov 2025 11:00:53 +0000
Files and hashes: 1: 1-PRouHcN36iLzwy9uNqLaIiV2X0.roa (hash: 4hehSvfv8sJqIC+vHja2uEOG+73HXBFbIDrIN8bH3vg=)
2: 67RGYz7m7xWKzUB6-JO6U9Kw4Oo.roa (hash: Iy7s2Aw6gINY7MrIIhsJrkKAANHoHyCQ2Dm8An5q6ps=)
3: PBuDiIaW_ERHjGk9bngD6VFiUOY.crl (hash: NxzJ3PpP6QEFohqxs+QaFh+YRlEWvjzsL4fIQ6BuZnQ=)
4: rTI3MC_cflVKmz4QHcC39TCJNIM.roa (hash: Gn7Y1Iho0e2nKKiZXGFb+cFXQIXgua4De8STjxaheIw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.mft
rsync://rpki.ripe.net/repository/DEFAULT/PBuDiIaW_ERHjGk9bngD6VFiUOY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:e2:59:91:23:fe:69:84:81:37:34:ee:5d:e6:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c1b83888696fc44478c693d6e7803e9516250e6
Validity
Not Before: Nov 4 11:00:53 2025 GMT
Not After : Nov 5 11:00:53 2025 GMT
Subject: CN=3f302968733a74bf8fc4194207ce36af86173236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:13:05:4e:09:8f:20:d9:b7:47:24:a8:c0:41:
8c:31:5a:77:35:34:cf:c3:fd:fb:22:36:57:3e:86:
48:68:6e:b4:6e:5d:30:65:d9:59:2e:18:fb:a8:5b:
58:57:37:01:8d:a8:36:77:3a:c2:f2:53:0e:b1:30:
98:60:17:a4:d2:bb:69:29:4b:5e:4b:84:c7:b8:36:
ca:66:a7:0b:76:44:15:82:6b:d5:f3:13:74:f2:75:
dd:f8:89:ff:3c:54:00:8c:af:f2:20:a1:5c:ff:45:
ae:ca:03:bb:6d:3d:bf:62:ea:19:a3:d8:7b:85:23:
1c:e4:ce:60:51:78:00:3a:26:23:e5:20:78:ac:b6:
4c:7c:a6:7e:23:5d:1d:51:60:af:b0:9f:90:f6:17:
07:d2:62:f0:dd:51:b6:3e:e4:fd:55:e2:e2:2f:90:
ad:40:a5:45:93:3d:88:de:e7:6d:13:ba:89:3b:8a:
69:90:a9:80:03:d5:bf:ef:bf:8f:9c:2a:98:c8:2c:
dc:4e:72:46:f4:c8:6a:b6:a8:13:4e:62:f7:16:92:
13:28:93:2a:d3:d9:5e:10:1b:c5:b6:f1:5e:00:e0:
00:f1:73:52:76:f7:94:52:a4:14:52:0b:67:1b:7e:
c5:e6:44:63:d3:62:14:d4:ca:8b:ab:39:38:e2:24:
f0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:30:29:68:73:3A:74:BF:8F:C4:19:42:07:CE:36:AF:86:17:32:36
X509v3 Authority Key Identifier:
keyid:3C:1B:83:88:86:96:FC:44:47:8C:69:3D:6E:78:03:E9:51:62:50:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBuDiIaW_ERHjGk9bngD6VFiUOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:44:51:d1:28:0e:db:3b:75:d5:0b:3d:17:d4:f2:a7:29:59:
4e:31:74:09:f7:18:3d:c4:dc:2a:1b:82:6d:48:72:27:97:aa:
23:a4:09:ef:98:6e:88:ac:34:a3:a9:75:69:9e:b5:85:5e:3d:
5d:d8:e4:61:09:f7:e3:b6:ee:46:89:23:25:60:77:a0:28:bd:
7d:41:60:86:b7:25:bb:e4:9d:7b:f2:b3:7f:20:09:ca:bd:cd:
9f:ab:9d:0d:93:c2:6d:3b:83:81:60:8a:0b:5e:fb:5f:e0:38:
e1:2c:1a:8b:de:34:cf:32:13:e5:d1:76:36:f6:8e:87:a2:8e:
b7:61:f2:cf:04:e0:1d:9d:92:4e:07:23:76:16:5f:60:fb:89:
94:68:59:67:62:f8:5a:8a:06:5a:aa:d1:3b:f3:2d:dc:ad:11:
11:b5:2a:9b:fe:11:6a:3b:95:e0:da:87:32:38:53:d9:26:fa:
13:7f:77:45:38:b4:e6:56:ad:5e:26:7a:81:7f:df:77:80:67:
e4:4b:1d:d3:a4:9d:0b:d0:16:80:07:43:08:3b:e0:6d:69:e6:
40:8d:74:fe:46:bc:77:6a:3c:00:06:01:86:a2:b0:c3:8c:b7:
65:3a:9d:61:2f:a7:8b:8e:ac:56:af:ae:98:e5:46:47:ba:67:
38:c9:fb:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:00:12 2025 by rpki-client