Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/2d43c2-3b2e-4f2e-a6ad-a0a72a733c02/1/Pbiird2wAoUIVJlqlLcrh_Snsw8.mft
File: Pbiird2wAoUIVJlqlLcrh_Snsw8.mft (raw, json)
Hash identifier: Qph7kFxP73Ck5f4W+EFvaI5khoFJJtsIGt1FhYDx43w=
Subject key identifier: FA:D5:E7:DE:68:56:50:0D:C3:B0:A6:CF:0C:12:80:63:1B:02:F1:BC
Authority key identifier: 3D:B8:A2:AD:DD:B0:02:85:08:54:99:6A:94:B7:2B:87:F4:A7:B3:0F
Certificate issuer: /CN=3db8a2adddb002850854996a94b72b87f4a7b30f
Certificate serial: 019895252D7F0EFBFB1678299BDAC82F4709
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pbiird2wAoUIVJlqlLcrh_Snsw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/2d43c2-3b2e-4f2e-a6ad-a0a72a733c02/1/Pbiird2wAoUIVJlqlLcrh_Snsw8.mft
Manifest number: 0ED5
Signing time: Sun 10 Aug 2025 18:01:38 +0000
Manifest this update: Sun 10 Aug 2025 18:01:38 +0000
Manifest next update: Mon 11 Aug 2025 18:01:38 +0000
Files and hashes: 1: Pbiird2wAoUIVJlqlLcrh_Snsw8.crl (hash: jdYwQrZo0PV97oD0HCuxv8YUdrOFrY8/n8l4BT1cpDc=)
2: gt9goB76oJJ9IidA_tfxI6lWDIw.roa (hash: q0BFU46k9v4mjBVsSe1ZjIuLriX+JzS+b+gMagD0YfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/2d43c2-3b2e-4f2e-a6ad-a0a72a733c02/1/Pbiird2wAoUIVJlqlLcrh_Snsw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/2d43c2-3b2e-4f2e-a6ad-a0a72a733c02/1/Pbiird2wAoUIVJlqlLcrh_Snsw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pbiird2wAoUIVJlqlLcrh_Snsw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:25:2d:7f:0e:fb:fb:16:78:29:9b:da:c8:2f:47:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3db8a2adddb002850854996a94b72b87f4a7b30f
Validity
Not Before: Aug 10 18:01:38 2025 GMT
Not After : Aug 11 18:01:38 2025 GMT
Subject: CN=fad5e7de6856500dc3b0a6cf0c1280631b02f1bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a9:37:8d:db:c7:96:bc:e1:0e:0d:64:06:d1:
38:48:96:c6:03:28:f1:c0:1a:2d:9d:d7:eb:0e:b4:
dd:aa:c2:55:ca:47:4c:7e:ae:83:c1:5d:4c:a2:7b:
67:73:4b:44:e2:d0:58:be:4f:c4:d0:b7:bd:07:00:
89:36:8c:c5:9b:3d:3f:96:a7:8d:46:25:a0:79:eb:
4c:80:a1:22:d7:16:fb:90:b2:ba:e2:4e:89:da:2f:
36:69:12:5c:85:9f:59:75:42:1b:d3:c9:55:58:bf:
8f:ef:df:da:9e:e7:0d:c1:1d:15:9a:19:b4:e6:a3:
b6:2b:72:e0:95:1c:52:20:36:71:01:bf:11:ae:06:
fb:42:4c:1a:8d:31:a3:86:19:d8:f7:6e:c9:b3:a8:
4e:ad:49:7e:65:3a:fb:62:51:96:bd:cf:b2:af:5f:
30:4f:be:f7:d2:a7:ec:20:24:fe:71:c3:75:9e:d0:
32:e1:6f:6f:4f:52:04:0d:c9:95:0c:69:ae:3e:95:
6c:cd:59:90:58:15:13:14:cc:b7:8c:fc:ae:58:b7:
de:ad:c3:4b:9e:c9:83:45:cc:7d:3d:1e:5a:ba:fc:
8a:ee:95:62:bd:23:17:3b:f6:d7:3a:5c:be:9a:d3:
5d:b7:cb:9c:bb:73:1e:07:a3:cb:8e:80:76:3e:78:
f9:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:D5:E7:DE:68:56:50:0D:C3:B0:A6:CF:0C:12:80:63:1B:02:F1:BC
X509v3 Authority Key Identifier:
keyid:3D:B8:A2:AD:DD:B0:02:85:08:54:99:6A:94:B7:2B:87:F4:A7:B3:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pbiird2wAoUIVJlqlLcrh_Snsw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2d43c2-3b2e-4f2e-a6ad-a0a72a733c02/1/Pbiird2wAoUIVJlqlLcrh_Snsw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2d43c2-3b2e-4f2e-a6ad-a0a72a733c02/1/Pbiird2wAoUIVJlqlLcrh_Snsw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:d1:03:9a:92:1e:4b:2d:5d:af:02:6a:f6:8c:2a:38:b6:73:
0c:83:40:9f:1f:c8:4e:95:ae:ab:59:52:37:f8:1e:d0:9c:52:
5d:60:5f:26:59:f3:5d:3a:9f:8c:21:59:08:4e:3f:45:9b:fe:
ca:db:53:ed:3b:5b:55:0d:1e:62:66:4d:b8:32:3a:3e:28:41:
29:e5:04:40:b5:b2:be:d1:bc:81:6f:44:92:4b:91:0a:6b:a8:
f7:c1:7d:93:9c:0d:74:c4:34:ac:94:42:f6:12:ad:f4:75:f0:
a2:7a:34:ef:bd:6d:fe:96:99:53:65:7b:55:8b:ec:e8:2b:a9:
02:ef:28:dd:c6:ef:95:fe:73:b6:df:98:43:d4:aa:9e:be:66:
34:ff:cc:86:f3:d9:b4:56:88:f7:3a:96:54:57:78:94:dd:70:
df:90:67:a9:62:ce:c2:f2:32:96:63:2f:a4:d4:f7:38:4e:25:
d5:12:43:f7:fb:32:01:61:a3:94:7d:fc:80:a1:f3:ec:0e:af:
c7:b4:53:06:2c:f8:43:d0:f2:f8:2f:44:31:9f:9b:4f:16:43:
28:c7:18:09:fe:19:00:2c:60:68:1f:24:9b:0a:18:56:f3:8f:
da:64:41:f0:d2:72:ef:b4:76:c9:84:e4:65:b1:89:3a:44:f9:
a9:fa:28:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:43:25 2025 by rpki-client