Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.mft
File: pbnffpj285_iukAi2id9KBmCgCE.mft (raw, json)
Hash identifier: 5eK4nAPoNsUd3y2rAky9irau5mRtMYvsFcjGCksNn98=
Subject key identifier: 6D:C4:5E:B3:CF:64:1F:DF:7F:22:7F:92:05:D7:AD:F9:18:CA:E5:41
Authority key identifier: A5:B9:DF:7E:98:F6:F3:9F:E2:BA:40:22:DA:27:7D:28:19:82:80:21
Certificate issuer: /CN=a5b9df7e98f6f39fe2ba4022da277d2819828021
Certificate serial: 019A4EF57F7AE15927E1BDEF572328896B75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pbnffpj285_iukAi2id9KBmCgCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.mft
Manifest number: 0ECB
Signing time: Tue 04 Nov 2025 13:01:43 +0000
Manifest this update: Tue 04 Nov 2025 13:01:43 +0000
Manifest next update: Wed 05 Nov 2025 13:01:43 +0000
Files and hashes: 1: 1h7x7glo7raaLY2_2McusPDR_aM.roa (hash: HMpq5ZxT3KuTaqPuHxdfR/p2+y/DB0HiuZsEYPl7Agw=)
2: OGo9fBtswLdwnS7x4PLyvgfblhc.roa (hash: YfRWTX+R7heO/+Oj3o5jtwp1kOciqeFbXjDX1mTE1h8=)
3: ouICw0nyK_0-5jscxv12aq634vw.roa (hash: ZpjXF6V0UreF7p2IPTzGzZ30r7TGS05jqHG074BeOko=)
4: pbnffpj285_iukAi2id9KBmCgCE.crl (hash: sI469gyDkKQvpMT4g7XrH0BvUcsNw4ap8J0ce/C5Oqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pbnffpj285_iukAi2id9KBmCgCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:7f:7a:e1:59:27:e1:bd:ef:57:23:28:89:6b:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5b9df7e98f6f39fe2ba4022da277d2819828021
Validity
Not Before: Nov 4 13:01:43 2025 GMT
Not After : Nov 5 13:01:43 2025 GMT
Subject: CN=6dc45eb3cf641fdf7f227f9205d7adf918cae541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f3:22:21:8d:0a:a5:7c:1c:7e:cd:ca:9c:df:
22:50:24:8f:33:0e:8a:b4:2f:1b:31:61:52:6f:b9:
21:46:f2:38:cf:76:b2:4b:ca:a5:75:fc:13:ed:66:
9d:e5:c6:71:b1:b1:b8:73:0f:b5:49:62:0f:64:e5:
8a:85:10:3d:0b:c0:3d:f9:19:73:da:51:d2:ae:f8:
8b:59:aa:a6:d3:04:c2:43:03:c5:39:02:3d:8d:54:
0c:77:97:07:93:68:1f:e8:f5:fb:98:e0:be:dd:9b:
35:90:47:79:07:1c:d0:e4:44:57:ae:4c:55:33:90:
f2:b4:c7:f0:e9:9a:86:10:6f:ae:3c:26:d1:d6:66:
9a:df:26:e3:40:ef:fe:95:b1:44:53:67:19:ed:2d:
4f:2e:3f:8f:b2:f4:75:a4:df:11:19:3f:a7:72:5d:
48:d2:17:9c:ac:da:d4:39:e3:a0:81:cc:fa:c1:8e:
85:bf:98:0f:4e:23:19:ea:f4:35:ef:4d:d3:66:64:
be:1c:30:50:fd:1b:a7:3b:21:59:8b:34:f5:9b:47:
16:8c:04:ee:1b:e3:ab:fe:e0:53:5b:11:3d:72:3d:
57:38:fc:42:36:56:71:4d:3a:94:14:7e:e5:9c:97:
d0:b6:60:2b:d8:49:5a:86:7e:de:f8:ae:d9:4e:50:
be:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:C4:5E:B3:CF:64:1F:DF:7F:22:7F:92:05:D7:AD:F9:18:CA:E5:41
X509v3 Authority Key Identifier:
keyid:A5:B9:DF:7E:98:F6:F3:9F:E2:BA:40:22:DA:27:7D:28:19:82:80:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbnffpj285_iukAi2id9KBmCgCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:fc:3e:34:d6:2c:ee:8c:63:4e:51:52:e7:f2:19:ce:2b:c1:
7f:c8:42:86:6d:df:38:95:4f:ef:dd:80:5d:88:1e:4d:d8:5b:
8c:55:fb:bd:f9:7e:4b:ee:4d:ae:5d:64:48:c5:a2:20:d8:6e:
f7:00:c8:fd:7d:a7:62:2e:a1:6a:5e:70:9e:16:93:17:bd:d5:
35:16:aa:98:fe:10:72:72:08:f4:e7:e5:f3:73:78:6a:3f:91:
09:2f:69:7a:32:ba:b7:db:3b:9c:fd:75:6d:63:7f:a8:02:d1:
c1:b4:d3:4b:bf:d3:0a:e2:4f:28:f2:f8:41:45:fa:89:b0:2c:
0d:ee:f0:62:65:4f:f2:02:c3:b8:64:7a:b7:75:1d:9c:b1:f8:
91:91:21:62:90:8a:3e:d4:97:f8:97:19:1a:27:75:a4:d8:97:
56:0c:cb:67:ff:22:4b:9d:9f:3c:6e:49:97:cd:2e:e2:a9:e1:
17:fa:a5:b6:f2:bf:33:a3:0b:62:00:09:14:5a:2a:8f:fa:34:
83:21:95:13:7a:9c:91:9d:5a:37:b5:f4:27:63:0e:fb:2d:8e:
29:3f:73:5e:4f:53:d4:56:df:34:c6:9d:47:50:9e:4f:85:e5:
66:50:c6:84:c6:2e:54:37:a9:c2:f7:bc:82:d2:6b:68:6a:a0:
81:ca:10:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:21:49 2025 by rpki-client