Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.mft
File: PBuDiIaW_ERHjGk9bngD6VFiUOY.mft (raw, json)
Hash identifier: N4s3dSZa5gR+DcMM40ebltxZ+LYKdzBanxAdv/CmYPI=
Subject key identifier: F9:14:DF:B5:D8:3D:79:7D:A1:32:ED:C8:8C:23:EC:1D:8F:25:C4:47
Authority key identifier: 3C:1B:83:88:86:96:FC:44:47:8C:69:3D:6E:78:03:E9:51:62:50:E6
Certificate issuer: /CN=3c1b83888696fc44478c693d6e7803e9516250e6
Certificate serial: 0198737486ED2A865C44C97904AAFE17E128
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBuDiIaW_ERHjGk9bngD6VFiUOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.mft
Manifest number: 0D25
Signing time: Mon 04 Aug 2025 05:01:13 +0000
Manifest this update: Mon 04 Aug 2025 05:01:13 +0000
Manifest next update: Tue 05 Aug 2025 05:01:13 +0000
Files and hashes: 1: 1-PRouHcN36iLzwy9uNqLaIiV2X0.roa (hash: 4hehSvfv8sJqIC+vHja2uEOG+73HXBFbIDrIN8bH3vg=)
2: 67RGYz7m7xWKzUB6-JO6U9Kw4Oo.roa (hash: Iy7s2Aw6gINY7MrIIhsJrkKAANHoHyCQ2Dm8An5q6ps=)
3: PBuDiIaW_ERHjGk9bngD6VFiUOY.crl (hash: H0O/l2QUCY2qYGl/9Cz3IjSbV6kIGWqne9T25BdpqwA=)
4: rTI3MC_cflVKmz4QHcC39TCJNIM.roa (hash: Gn7Y1Iho0e2nKKiZXGFb+cFXQIXgua4De8STjxaheIw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.mft
rsync://rpki.ripe.net/repository/DEFAULT/PBuDiIaW_ERHjGk9bngD6VFiUOY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:86:ed:2a:86:5c:44:c9:79:04:aa:fe:17:e1:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c1b83888696fc44478c693d6e7803e9516250e6
Validity
Not Before: Aug 4 05:01:13 2025 GMT
Not After : Aug 5 05:01:13 2025 GMT
Subject: CN=f914dfb5d83d797da132edc88c23ec1d8f25c447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4d:df:d4:e6:f1:a5:08:b8:dc:92:40:cb:60:
08:3f:00:b9:45:55:ef:c9:bf:4a:d7:9d:a2:f3:8a:
14:89:5c:92:d0:59:b5:47:ee:c5:bf:87:49:8b:1a:
a6:5e:5c:92:d5:e2:e5:77:b5:46:d1:44:1f:6e:66:
ed:40:21:e2:4c:ec:6d:87:32:29:b4:08:8c:ef:61:
b9:a1:b8:02:d1:c5:67:6d:85:6d:60:69:78:db:11:
00:a9:19:94:be:97:26:32:9f:25:0f:64:35:c9:88:
df:81:6f:b8:05:34:b4:40:e0:3c:79:e6:2b:c8:19:
63:72:e5:17:21:c9:33:b8:b0:47:76:73:a5:0c:db:
0a:1c:50:98:2d:a2:e8:30:6e:d8:89:7d:bf:5b:7b:
73:bd:f0:cf:4e:66:c4:66:1b:05:23:26:e5:15:3b:
ff:df:a2:10:a5:c1:ec:29:ff:67:f5:f5:54:4e:12:
be:6f:29:fd:e1:05:92:ae:e9:74:3d:18:c1:59:bd:
e2:7b:b0:4e:dd:f3:2f:9d:26:db:13:03:26:5b:03:
fc:56:d7:4b:9d:94:7e:f2:05:72:97:67:4f:d9:6c:
20:83:1b:f9:8a:ce:aa:25:90:f7:14:e3:f2:c4:2b:
6e:48:bb:f7:fc:53:7e:d0:99:93:09:ce:62:88:93:
e1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:14:DF:B5:D8:3D:79:7D:A1:32:ED:C8:8C:23:EC:1D:8F:25:C4:47
X509v3 Authority Key Identifier:
keyid:3C:1B:83:88:86:96:FC:44:47:8C:69:3D:6E:78:03:E9:51:62:50:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBuDiIaW_ERHjGk9bngD6VFiUOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:1e:42:3b:11:ac:b0:0c:5f:45:df:08:69:8b:47:30:e4:e3:
c0:6b:0a:64:58:f9:f2:3f:d0:4b:c4:7e:a6:00:5c:e2:b9:f3:
cd:fe:7a:8b:e4:e1:93:f2:19:1e:7c:4f:e5:e3:f4:3a:b2:1f:
21:19:51:eb:21:0d:b4:b2:60:d9:e2:ae:84:14:92:34:57:21:
36:cc:01:93:50:92:34:10:f6:16:5d:50:4a:74:9a:f8:77:d7:
43:64:b6:30:ce:dd:2c:ea:b1:5a:cf:89:a7:54:d2:1a:34:b4:
53:59:a8:2b:80:cd:47:54:0d:61:cc:26:ed:fb:66:48:1c:e1:
7f:cc:d7:5a:11:95:50:6c:7a:1a:d7:a3:de:17:dd:09:db:d2:
2c:46:67:35:d0:cc:b0:b5:ee:5b:e4:ea:a2:05:8f:a5:6b:7f:
c3:e5:45:ba:cd:37:e3:b5:d8:10:0a:cf:6a:11:4f:70:4f:68:
d1:9c:a9:84:89:1a:b7:80:00:90:8c:13:eb:be:a9:cd:4a:24:
69:70:05:23:9b:92:3c:38:ef:1b:88:d0:7e:d0:eb:68:52:6a:
5f:c5:19:f9:cd:e3:d3:7a:38:e0:d6:87:ad:14:13:ec:d0:95:
b3:42:09:73:74:2a:22:0b:91:46:bf:d4:9e:6b:ee:89:71:ed:
47:e4:b1:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzdIbtKoZcRMl5BKr+F+EoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjMWI4Mzg4ODY5NmZjNDQ0NzhjNjkzZDZlNzgwM2U5NTE2
MjUwZTYwHhcNMjUwODA0MDUwMTEzWhcNMjUwODA1MDUwMTEzWjAzMTEwLwYDVQQD
EyhmOTE0ZGZiNWQ4M2Q3OTdkYTEzMmVkYzg4YzIzZWMxZDhmMjVjNDQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv03f1ObxpQi43JJAy2AIPwC5RVXv
yb9K152i84oUiVyS0Fm1R+7Fv4dJixqmXlyS1eLld7VG0UQfbmbtQCHiTOxthzIp
tAiM72G5obgC0cVnbYVtYGl42xEAqRmUvpcmMp8lD2Q1yYjfgW+4BTS0QOA8eeYr
yBljcuUXIckzuLBHdnOlDNsKHFCYLaLoMG7YiX2/W3tzvfDPTmbEZhsFIyblFTv/
36IQpcHsKf9n9fVUThK+byn94QWSrul0PRjBWb3ie7BO3fMvnSbbEwMmWwP8VtdL
nZR+8gVyl2dP2Wwggxv5is6qJZD3FOPyxCtuSLv3/FN+0JmTCc5iiJPhTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPkU37XYPXl9oTLtyIwj7B2PJcRHMB8GA1UdIwQY
MBaAFDwbg4iGlvxER4xpPW54A+lRYlDmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEJ1RGlJYVdfRVJIakdrOWJuZ0Q2VkZpVU9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9kNTU2ODMtZmVjMi00N2ZkLWFjNmUt
OWU4MmRhNzMxNWNmLzEvUEJ1RGlJYVdfRVJIakdrOWJuZ0Q2VkZpVU9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi9kNTU2ODMtZmVjMi00N2ZkLWFjNmUtOWU4MmRhNzMxNWNm
LzEvUEJ1RGlJYVdfRVJIakdrOWJuZ0Q2VkZpVU9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeh5COxGs
sAxfRd8IaYtHMOTjwGsKZFj58j/QS8R+pgBc4rnzzf56i+Thk/IZHnxP5eP0OrIf
IRlR6yENtLJg2eKuhBSSNFchNswBk1CSNBD2Fl1QSnSa+HfXQ2S2MM7dLOqxWs+J
p1TSGjS0U1moK4DNR1QNYcwm7ftmSBzhf8zXWhGVUGx6Gtej3hfdCdvSLEZnNdDM
sLXuW+TqogWPpWt/w+VFus0347XYEArPahFPcE9o0ZyphIkat4AAkIwT676pzUok
aXAFI5uSPDjvG4jQftDraFJqX8UZ+c3j03o44NaHrRQT7NCVs0IJc3QqIguRRr/U
nmvuiXHtR+Sx+w==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:19:37 2025 by rpki-client