Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/2d43c2-3b2e-4f2e-a6ad-a0a72a733c02/1/Pbiird2wAoUIVJlqlLcrh_Snsw8.mft
File: Pbiird2wAoUIVJlqlLcrh_Snsw8.mft (raw, json)
Hash identifier: tryaDpN+ZWV5VVu/QMaRdJOIo6xileWZeElKk0TvATE=
Subject key identifier: F5:FD:E1:ED:65:34:3A:E9:F9:20:70:AD:78:C4:2A:09:4F:C4:D9:20
Authority key identifier: 3D:B8:A2:AD:DD:B0:02:85:08:54:99:6A:94:B7:2B:87:F4:A7:B3:0F
Certificate issuer: /CN=3db8a2adddb002850854996a94b72b87f4a7b30f
Certificate serial: 019A4D73974B18F5B0BC80757610AE524A7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pbiird2wAoUIVJlqlLcrh_Snsw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/2d43c2-3b2e-4f2e-a6ad-a0a72a733c02/1/Pbiird2wAoUIVJlqlLcrh_Snsw8.mft
Manifest number: 0FB9
Signing time: Tue 04 Nov 2025 06:00:12 +0000
Manifest this update: Tue 04 Nov 2025 06:00:12 +0000
Manifest next update: Wed 05 Nov 2025 06:00:12 +0000
Files and hashes: 1: Pbiird2wAoUIVJlqlLcrh_Snsw8.crl (hash: 0p7lUeA0p7Dh8BMX2VL4/fyUoNmuEMUD6lOjfRQqPzw=)
2: gt9goB76oJJ9IidA_tfxI6lWDIw.roa (hash: q0BFU46k9v4mjBVsSe1ZjIuLriX+JzS+b+gMagD0YfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/2d43c2-3b2e-4f2e-a6ad-a0a72a733c02/1/Pbiird2wAoUIVJlqlLcrh_Snsw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/2d43c2-3b2e-4f2e-a6ad-a0a72a733c02/1/Pbiird2wAoUIVJlqlLcrh_Snsw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pbiird2wAoUIVJlqlLcrh_Snsw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:97:4b:18:f5:b0:bc:80:75:76:10:ae:52:4a:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3db8a2adddb002850854996a94b72b87f4a7b30f
Validity
Not Before: Nov 4 06:00:12 2025 GMT
Not After : Nov 5 06:00:12 2025 GMT
Subject: CN=f5fde1ed65343ae9f92070ad78c42a094fc4d920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:49:b1:69:52:12:c1:55:14:67:c3:2a:da:ed:
cb:33:62:ad:95:79:a1:aa:62:f6:8b:4f:7d:f9:90:
2d:e0:06:e7:8e:c3:f8:38:b5:24:be:a3:e0:e6:b6:
3a:db:b9:77:23:7a:17:15:09:75:7c:bf:c4:1e:78:
4a:27:2b:80:98:52:ec:5f:b9:8b:f2:3d:c9:6a:2a:
05:ef:c1:32:f9:2d:27:4c:f1:74:c4:d9:7b:7a:19:
11:1a:09:b3:16:9d:32:4b:2a:84:9d:6d:0e:94:b1:
c2:6b:1c:af:e8:e3:ba:44:62:f6:31:e9:b4:f1:94:
56:ca:f8:ed:1b:04:37:01:a3:ad:fd:de:96:46:32:
75:90:76:d2:a3:68:10:0f:d4:07:08:73:95:67:de:
f3:ef:b4:6f:32:a9:ff:65:85:37:73:a0:fc:7e:83:
39:41:e5:9d:15:03:5c:88:55:f4:94:9a:67:2b:aa:
f4:9d:a2:47:ec:39:8a:57:4b:61:09:a7:74:17:3e:
11:20:b7:02:fe:f7:ca:be:e9:4e:d7:e9:b9:b0:f8:
75:96:02:d1:fb:32:47:d2:a5:d5:d5:f6:ed:63:ae:
da:5c:50:f5:dd:d2:c2:80:02:1a:de:26:ac:f8:9c:
90:d4:fc:6f:88:b1:41:88:dd:5c:c2:92:62:f7:50:
1b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:FD:E1:ED:65:34:3A:E9:F9:20:70:AD:78:C4:2A:09:4F:C4:D9:20
X509v3 Authority Key Identifier:
keyid:3D:B8:A2:AD:DD:B0:02:85:08:54:99:6A:94:B7:2B:87:F4:A7:B3:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pbiird2wAoUIVJlqlLcrh_Snsw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2d43c2-3b2e-4f2e-a6ad-a0a72a733c02/1/Pbiird2wAoUIVJlqlLcrh_Snsw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2d43c2-3b2e-4f2e-a6ad-a0a72a733c02/1/Pbiird2wAoUIVJlqlLcrh_Snsw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:af:2d:f9:ec:4e:0a:9c:9d:a3:1b:cc:14:46:5d:34:fe:c0:
64:e5:be:aa:4a:e8:ef:1e:d0:cb:38:96:b0:08:c2:d1:8c:78:
04:f3:c4:61:51:03:57:75:7f:2d:73:99:f0:b0:35:02:75:26:
bb:c0:7c:e1:a2:74:eb:8a:33:a2:29:0c:ad:e8:2f:17:cd:a6:
d8:00:17:c2:26:a3:12:84:3f:a7:53:1f:dc:52:b9:8c:93:e5:
34:65:3d:7c:85:55:67:c3:46:6a:05:80:54:91:ba:0c:48:98:
ec:99:52:40:78:b1:7c:17:71:26:ce:c5:8c:18:a7:82:65:bd:
c4:3a:15:b9:69:cb:cc:35:73:60:b3:fe:2a:97:36:80:cd:92:
9c:ac:a2:03:14:ec:8b:2c:37:5e:d0:64:85:2d:af:3c:15:a2:
7a:93:85:20:43:d1:75:26:20:08:34:ad:2b:98:96:25:07:aa:
1d:77:2e:40:64:1c:e5:c8:04:6a:35:6f:83:10:4f:26:b8:44:
72:c9:aa:36:dc:45:7b:07:02:64:93:77:d8:d4:d1:8a:2d:01:
95:92:fb:7c:0f:ba:a0:b0:bf:4f:2e:46:b1:63:cd:80:1a:c5:
0e:df:2c:3d:8f:41:c7:58:29:10:59:7f:61:30:c7:54:b2:00:
b2:b7:eb:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNc5dLGPWwvIB1dhCuUkp9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkYjhhMmFkZGRiMDAyODUwODU0OTk2YTk0YjcyYjg3ZjRh
N2IzMGYwHhcNMjUxMTA0MDYwMDEyWhcNMjUxMTA1MDYwMDEyWjAzMTEwLwYDVQQD
EyhmNWZkZTFlZDY1MzQzYWU5ZjkyMDcwYWQ3OGM0MmEwOTRmYzRkOTIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0mxaVISwVUUZ8Mq2u3LM2KtlXmh
qmL2i099+ZAt4AbnjsP4OLUkvqPg5rY627l3I3oXFQl1fL/EHnhKJyuAmFLsX7mL
8j3JaioF78Ey+S0nTPF0xNl7ehkRGgmzFp0ySyqEnW0OlLHCaxyv6OO6RGL2Mem0
8ZRWyvjtGwQ3AaOt/d6WRjJ1kHbSo2gQD9QHCHOVZ97z77RvMqn/ZYU3c6D8foM5
QeWdFQNciFX0lJpnK6r0naJH7DmKV0thCad0Fz4RILcC/vfKvulO1+m5sPh1lgLR
+zJH0qXV1fbtY67aXFD13dLCgAIa3ias+JyQ1PxviLFBiN1cwpJi91AblQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPX94e1lNDrp+SBwrXjEKglPxNkgMB8GA1UdIwQY
MBaAFD24oq3dsAKFCFSZapS3K4f0p7MPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGJpaXJkMndBb1VJVkpscWxMY3JoX1Nuc3c4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8yZDQzYzItM2IyZS00ZjJlLWE2YWQt
YTBhNzJhNzMzYzAyLzEvUGJpaXJkMndBb1VJVkpscWxMY3JoX1Nuc3c4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8yZDQzYzItM2IyZS00ZjJlLWE2YWQtYTBhNzJhNzMzYzAy
LzEvUGJpaXJkMndBb1VJVkpscWxMY3JoX1Nuc3c4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS68t+exO
CpydoxvMFEZdNP7AZOW+qkro7x7QyziWsAjC0Yx4BPPEYVEDV3V/LXOZ8LA1AnUm
u8B84aJ064ozoikMregvF82m2AAXwiajEoQ/p1Mf3FK5jJPlNGU9fIVVZ8NGagWA
VJG6DEiY7JlSQHixfBdxJs7FjBingmW9xDoVuWnLzDVzYLP+Kpc2gM2SnKyiAxTs
iyw3XtBkhS2vPBWiepOFIEPRdSYgCDStK5iWJQeqHXcuQGQc5cgEajVvgxBPJrhE
csmqNtxFewcCZJN32NTRii0BlZL7fA+6oLC/Ty5GsWPNgBrFDt8sPY9Bx1gpEFl/
YTDHVLIAsrfrDw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:06:23 2025 by rpki-client