Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.mft
File: pbnffpj285_iukAi2id9KBmCgCE.mft (raw, json)
Hash identifier: 0+t927DSx9SPf1rFsAPeqhVk5oOx3RFftdpQsZd//kA=
Subject key identifier: EB:CC:3A:29:F9:0B:6B:AD:B8:AD:0A:6B:D0:2F:D9:33:08:F4:F6:A4
Authority key identifier: A5:B9:DF:7E:98:F6:F3:9F:E2:BA:40:22:DA:27:7D:28:19:82:80:21
Certificate issuer: /CN=a5b9df7e98f6f39fe2ba4022da277d2819828021
Certificate serial: 01987298C6E464284F5B3C6C36A6113408DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pbnffpj285_iukAi2id9KBmCgCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.mft
Manifest number: 0DD3
Signing time: Mon 04 Aug 2025 01:01:11 +0000
Manifest this update: Mon 04 Aug 2025 01:01:11 +0000
Manifest next update: Tue 05 Aug 2025 01:01:11 +0000
Files and hashes: 1: afGPS3PAVZ8nWwVk4CaX2Osnjtw.roa (hash: +mXJCKECRBst1oRdqoThcAUlKIq3CdK3Wq8QN3b289Q=)
2: ouICw0nyK_0-5jscxv12aq634vw.roa (hash: ZpjXF6V0UreF7p2IPTzGzZ30r7TGS05jqHG074BeOko=)
3: pbnffpj285_iukAi2id9KBmCgCE.crl (hash: zbDnjYET6b4qv8cm+yQItD9NRXNX45UryYhyHqY42s8=)
4: s9Phn4LRxq3qJKp5WG1zCsRMWlc.roa (hash: 5LFQTKOZRBYzOCfam8/FRn4XdqXt/6yCH7PjQq7YFwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pbnffpj285_iukAi2id9KBmCgCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:c6:e4:64:28:4f:5b:3c:6c:36:a6:11:34:08:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5b9df7e98f6f39fe2ba4022da277d2819828021
Validity
Not Before: Aug 4 01:01:11 2025 GMT
Not After : Aug 5 01:01:11 2025 GMT
Subject: CN=ebcc3a29f90b6badb8ad0a6bd02fd93308f4f6a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ec:94:a4:9e:83:62:3e:e5:e9:9b:11:dd:f0:
57:ae:b8:15:10:6a:2a:a3:f6:8a:7f:f0:bb:03:70:
f8:f0:10:f8:7c:6c:26:54:28:b5:f4:40:1d:04:86:
43:fd:d4:85:dc:e6:69:64:28:33:e6:67:2a:31:0f:
23:26:30:8b:7d:0c:32:38:25:51:07:de:32:88:6f:
b3:6c:e0:e4:f0:3c:a1:6e:36:29:20:ea:91:12:da:
df:de:f7:c8:f9:76:0a:4f:ae:87:33:14:26:40:1b:
50:6f:5c:5f:e8:04:80:8a:26:96:28:0c:bc:f7:9d:
55:a5:01:ce:ee:d7:33:09:85:77:80:90:cd:9e:c1:
7e:ff:94:68:e6:bf:5d:10:12:b6:fc:71:9b:c8:88:
1c:11:5a:d5:cc:fa:0f:e7:4b:ab:5e:0c:4c:ec:54:
88:67:95:e8:cf:9d:ad:79:c1:9d:7c:f7:78:2c:f2:
13:d3:47:0c:42:0d:9b:ec:08:a5:62:c4:45:48:1c:
30:76:2d:fb:74:b8:d6:84:86:cb:d4:60:52:a0:ab:
65:0e:e0:6e:87:a0:df:b6:32:cd:9f:78:be:d0:72:
90:7a:61:d1:45:45:6d:96:a0:7c:b6:f4:78:b5:6b:
6d:e4:a9:31:60:80:b8:0e:9b:cc:72:4b:52:dc:fb:
f0:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:CC:3A:29:F9:0B:6B:AD:B8:AD:0A:6B:D0:2F:D9:33:08:F4:F6:A4
X509v3 Authority Key Identifier:
keyid:A5:B9:DF:7E:98:F6:F3:9F:E2:BA:40:22:DA:27:7D:28:19:82:80:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbnffpj285_iukAi2id9KBmCgCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:b2:7e:cf:96:44:19:c0:12:f8:b1:09:ac:7d:44:c7:8c:83:
15:0b:7d:5e:7f:6f:28:d0:ed:03:29:63:88:26:11:11:93:28:
d7:b7:ca:20:cc:32:46:1f:84:4b:49:47:2b:08:c6:10:9a:9d:
88:a7:70:8e:ec:c7:e7:75:92:e6:d3:83:95:08:5f:f8:e1:c3:
ed:00:c4:a0:f7:3b:15:59:4b:c7:b6:37:97:42:61:38:b7:d3:
c1:a9:e4:cf:db:66:2a:01:66:09:4a:5f:64:e8:dd:37:12:ac:
36:fe:78:b2:72:dc:15:9b:3e:d9:20:65:24:79:89:8c:33:4f:
ce:09:a1:99:29:64:b4:57:98:ca:bb:5a:fc:32:5c:a6:e5:61:
67:7d:63:f6:a9:8e:cd:13:94:3f:c2:06:07:67:ee:d6:2f:aa:
99:6f:b8:66:30:7c:14:43:48:71:86:16:60:74:9e:b8:59:45:
b9:1b:ba:a4:e2:8d:6b:5f:22:9c:05:43:1a:57:05:bf:92:ef:
f9:eb:91:07:88:0c:ef:79:91:a3:7a:5a:30:9a:35:d9:53:25:
d7:f9:d8:dc:26:61:3a:f6:22:2a:23:ff:c1:88:9b:fc:30:75:
a8:0d:7c:fc:f2:e2:2a:9b:d5:54:6b:16:59:1e:be:56:4d:50:
b8:99:c9:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhymMbkZChPWzxsNqYRNAjeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1YjlkZjdlOThmNmYzOWZlMmJhNDAyMmRhMjc3ZDI4MTk4
MjgwMjEwHhcNMjUwODA0MDEwMTExWhcNMjUwODA1MDEwMTExWjAzMTEwLwYDVQQD
EyhlYmNjM2EyOWY5MGI2YmFkYjhhZDBhNmJkMDJmZDkzMzA4ZjRmNmE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+yUpJ6DYj7l6ZsR3fBXrrgVEGoq
o/aKf/C7A3D48BD4fGwmVCi19EAdBIZD/dSF3OZpZCgz5mcqMQ8jJjCLfQwyOCVR
B94yiG+zbODk8DyhbjYpIOqREtrf3vfI+XYKT66HMxQmQBtQb1xf6ASAiiaWKAy8
951VpQHO7tczCYV3gJDNnsF+/5Ro5r9dEBK2/HGbyIgcEVrVzPoP50urXgxM7FSI
Z5Xoz52tecGdfPd4LPIT00cMQg2b7AilYsRFSBwwdi37dLjWhIbL1GBSoKtlDuBu
h6DftjLNn3i+0HKQemHRRUVtlqB8tvR4tWtt5KkxYIC4DpvMcktS3PvwnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOvMOin5C2utuK0Ka9Av2TMI9PakMB8GA1UdIwQY
MBaAFKW5336Y9vOf4rpAItonfSgZgoAhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGJuZmZwajI4NV9pdWtBaTJpZDlLQm1DZ0NFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC85NzMwNDctODkxNC00MWM2LWExZTAt
MGFjN2I3ZWRlNDJiLzEvcGJuZmZwajI4NV9pdWtBaTJpZDlLQm1DZ0NFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC85NzMwNDctODkxNC00MWM2LWExZTAtMGFjN2I3ZWRlNDJi
LzEvcGJuZmZwajI4NV9pdWtBaTJpZDlLQm1DZ0NFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUbJ+z5ZE
GcAS+LEJrH1Ex4yDFQt9Xn9vKNDtAyljiCYREZMo17fKIMwyRh+ES0lHKwjGEJqd
iKdwjuzH53WS5tODlQhf+OHD7QDEoPc7FVlLx7Y3l0JhOLfTwankz9tmKgFmCUpf
ZOjdNxKsNv54snLcFZs+2SBlJHmJjDNPzgmhmSlktFeYyrta/DJcpuVhZ31j9qmO
zROUP8IGB2fu1i+qmW+4ZjB8FENIcYYWYHSeuFlFuRu6pOKNa18inAVDGlcFv5Lv
+euRB4gM73mRo3paMJo12VMl1/nY3CZhOvYiKiP/wYib/DB1qA18/PLiKpvVVGsW
WR6+Vk1QuJnJ+w==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:07:38 2025 by rpki-client