Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.mft
File: PnDBS_JvrwGY8eeyRynNcbM1GN4.mft (raw, json)
Hash identifier: olz+nLjnaBl7b/Qj6UQ2vKg/+S0ccDVbotMXxaFHN78=
Subject key identifier: F2:B0:5B:A0:8E:DD:BD:9E:52:81:0C:9A:9C:41:FD:01:06:E0:86:94
Authority key identifier: 3E:70:C1:4B:F2:6F:AF:01:98:F1:E7:B2:47:29:CD:71:B3:35:18:DE
Certificate issuer: /CN=3e70c14bf26faf0198f1e7b24729cd71b33518de
Certificate serial: 019A4EF4BF2ACE42B22E2590E4F492E69F11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PnDBS_JvrwGY8eeyRynNcbM1GN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.mft
Manifest number: 0403
Signing time: Tue 04 Nov 2025 13:00:53 +0000
Manifest this update: Tue 04 Nov 2025 13:00:53 +0000
Manifest next update: Wed 05 Nov 2025 13:00:53 +0000
Files and hashes: 1: 4d9jncgFcD3LQEVJLbIB2I3M9lo.roa (hash: seBbCSSGlRgW36OWqyme1v3t3KHDAPOFROvpxV8jwzE=)
2: 4uaLh2b-bHV2NsxIJY_pK9e3698.roa (hash: sMeMy3i5FoQg0v9xzPREgO0rI8VqgJmcA0uZMgg0uts=)
3: PnDBS_JvrwGY8eeyRynNcbM1GN4.crl (hash: dyQq+f0TB/TSvduU0hXxQ1H3MeRdG3D5FTVZwSPa5V8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PnDBS_JvrwGY8eeyRynNcbM1GN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:bf:2a:ce:42:b2:2e:25:90:e4:f4:92:e6:9f:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e70c14bf26faf0198f1e7b24729cd71b33518de
Validity
Not Before: Nov 4 13:00:53 2025 GMT
Not After : Nov 5 13:00:53 2025 GMT
Subject: CN=f2b05ba08eddbd9e52810c9a9c41fd0106e08694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d3:57:fa:19:d9:17:6a:44:82:a1:4e:72:93:
3d:40:e1:17:cd:e5:61:a0:17:b7:fb:49:d7:58:35:
85:b1:bc:9b:91:5b:72:f1:85:12:8a:60:16:69:4f:
4d:ca:e5:0e:b3:86:05:dd:56:41:9b:c1:38:3c:98:
17:17:c9:82:53:b4:5c:cf:fb:a0:d2:7f:09:10:ed:
e5:92:c7:6a:ec:50:4d:a5:98:ff:75:b0:10:03:e8:
e4:70:8e:e8:a9:57:42:83:5d:82:a0:86:e8:62:ff:
99:1d:41:99:e2:a3:35:d4:4e:9c:56:47:35:2c:4c:
05:ff:db:9c:59:cf:2c:0c:a4:5e:ca:0c:32:41:90:
c7:76:b6:a8:b3:36:9a:e3:1f:b5:c6:ef:57:45:99:
9f:bb:76:50:ee:32:7b:2e:5e:6e:b2:9e:3b:6f:82:
92:e5:ed:6b:e0:bd:c3:c6:c5:45:10:bf:29:6f:a2:
38:a0:52:7a:76:3e:52:a3:3b:2d:ee:72:2b:86:de:
ce:54:62:65:76:5b:db:15:a8:27:1b:95:6e:c7:65:
53:53:4b:f0:0a:e5:b9:d2:d1:7c:d6:93:6d:61:79:
99:d1:a3:78:51:55:9e:df:d8:fc:1d:37:c6:4b:05:
41:d5:ef:26:ed:5e:3e:7a:84:8d:7b:5d:c1:51:1d:
25:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:B0:5B:A0:8E:DD:BD:9E:52:81:0C:9A:9C:41:FD:01:06:E0:86:94
X509v3 Authority Key Identifier:
keyid:3E:70:C1:4B:F2:6F:AF:01:98:F1:E7:B2:47:29:CD:71:B3:35:18:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PnDBS_JvrwGY8eeyRynNcbM1GN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:bd:17:38:ef:4c:7c:5b:11:69:be:cc:e9:1e:18:d7:2b:7a:
55:a1:a5:75:b3:b3:47:71:a5:21:2a:83:80:ae:c6:4e:50:fb:
c6:91:54:f6:c5:3f:ec:91:64:d8:d4:1d:f4:3e:e4:e0:98:77:
52:47:6f:eb:c5:28:8c:39:02:d5:83:73:47:c2:45:f3:6c:1a:
6d:ef:fe:b6:ab:a1:97:e8:7f:67:51:5d:06:10:89:2d:92:65:
2c:d9:b7:cd:6e:06:bf:05:3c:2b:fe:bc:97:ce:8d:75:2f:62:
3e:89:9a:e2:b8:78:68:9f:b4:8d:9d:58:26:c7:02:9b:74:ce:
33:2c:d0:5f:6b:ff:c0:3a:7e:83:7c:6d:6b:e3:00:60:b4:af:
0c:4b:5a:a9:ae:b0:c1:9f:db:3e:d4:60:19:8a:ac:05:82:cf:
55:86:ce:1e:ba:f6:3a:3c:30:66:83:7f:84:bd:f6:66:e2:8b:
f5:9b:64:f4:59:a4:46:cb:98:43:95:37:21:da:5f:39:66:af:
9b:5f:c5:a2:d5:7a:ef:2b:3e:90:dd:42:21:20:a3:58:b7:0b:
22:74:98:5b:b7:91:1e:15:99:c6:e5:7b:0b:e6:1d:3a:ec:ef:
df:2b:80:39:26:3c:5a:d0:05:55:88:68:d6:f9:91:56:6f:c7:
ff:bf:21:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:58:06 2025 by rpki-client