Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.mft
File: PnDBS_JvrwGY8eeyRynNcbM1GN4.mft (raw, json)
Hash identifier: le10RDuoZpz8b09m59KS/46TeIrx98UCDIB9hK0YFZo=
Subject key identifier: 1B:7F:64:76:FC:65:BF:1C:8A:5E:8D:CD:95:20:6B:66:36:4F:37:34
Authority key identifier: 3E:70:C1:4B:F2:6F:AF:01:98:F1:E7:B2:47:29:CD:71:B3:35:18:DE
Certificate issuer: /CN=3e70c14bf26faf0198f1e7b24729cd71b33518de
Certificate serial: 019881676A68D61CD50656C4F193E2058045
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PnDBS_JvrwGY8eeyRynNcbM1GN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.mft
Manifest number: 0314
Signing time: Wed 06 Aug 2025 22:01:34 +0000
Manifest this update: Wed 06 Aug 2025 22:01:34 +0000
Manifest next update: Thu 07 Aug 2025 22:01:34 +0000
Files and hashes: 1: 4d9jncgFcD3LQEVJLbIB2I3M9lo.roa (hash: seBbCSSGlRgW36OWqyme1v3t3KHDAPOFROvpxV8jwzE=)
2: 4uaLh2b-bHV2NsxIJY_pK9e3698.roa (hash: sMeMy3i5FoQg0v9xzPREgO0rI8VqgJmcA0uZMgg0uts=)
3: PnDBS_JvrwGY8eeyRynNcbM1GN4.crl (hash: d2rqRiu6jrRqIc8YYbqiixpHZA7S1FXHOlPCEc430ow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PnDBS_JvrwGY8eeyRynNcbM1GN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:67:6a:68:d6:1c:d5:06:56:c4:f1:93:e2:05:80:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e70c14bf26faf0198f1e7b24729cd71b33518de
Validity
Not Before: Aug 6 22:01:34 2025 GMT
Not After : Aug 7 22:01:34 2025 GMT
Subject: CN=1b7f6476fc65bf1c8a5e8dcd95206b66364f3734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:50:ee:f2:f6:a2:af:39:91:34:62:2f:6d:f1:
d2:da:c6:4d:3b:80:e3:9d:8d:f0:7d:94:8c:24:b4:
65:91:6e:b4:25:56:63:dd:b0:8f:7b:16:b3:b1:27:
bb:3b:09:be:6c:b2:5c:c7:e6:77:27:0f:98:f2:7b:
f1:c6:1e:85:b7:96:fc:55:75:59:43:f7:18:98:e0:
0f:66:f7:86:69:19:44:d0:24:53:c5:a4:ca:57:8c:
aa:84:e2:96:23:24:30:99:b1:38:cf:b4:a9:20:f6:
c0:ad:d5:45:98:e7:b0:8e:74:ce:97:07:59:b8:e7:
15:17:6c:8f:57:f9:5b:8f:3e:8a:fa:ac:7f:5d:7a:
30:5b:8b:13:62:70:cd:4f:36:dc:c8:1e:c1:12:90:
1a:a4:ee:86:e6:4f:00:77:70:29:9e:0c:f3:d7:6d:
eb:71:1b:28:ef:bf:06:a7:bb:15:a3:8e:67:34:9e:
a0:07:35:70:30:de:3e:4b:17:ef:54:7a:66:9a:48:
b3:37:58:a8:12:78:c9:a9:95:be:c4:70:52:d7:3d:
1e:74:b1:58:69:9b:f2:4e:a7:c9:f8:92:43:c9:4f:
ca:86:6b:09:93:6a:94:e9:d1:7c:1b:65:2c:ad:05:
bc:c5:67:fb:b5:4c:d6:1c:47:19:2e:5e:ca:26:cf:
1d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:7F:64:76:FC:65:BF:1C:8A:5E:8D:CD:95:20:6B:66:36:4F:37:34
X509v3 Authority Key Identifier:
keyid:3E:70:C1:4B:F2:6F:AF:01:98:F1:E7:B2:47:29:CD:71:B3:35:18:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PnDBS_JvrwGY8eeyRynNcbM1GN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:22:da:b6:a8:34:69:44:98:42:11:c1:02:2c:74:fa:2d:13:
9d:db:46:d0:fa:c4:53:dc:f9:00:d5:1f:de:c9:8b:c2:4e:a6:
e5:0a:bb:84:07:b0:a8:7f:b6:71:2a:ed:15:63:75:33:66:f8:
82:20:d3:c7:70:37:c9:25:ea:17:a0:d2:09:79:43:96:35:47:
60:24:22:10:ff:e1:63:c6:a6:49:84:ec:8d:01:97:76:a5:15:
6e:62:36:8c:15:e7:1a:f4:97:f9:58:ad:e6:f5:e7:ff:fa:a2:
c9:d0:b8:95:31:23:dd:5e:97:db:e9:81:a2:5a:b8:e2:10:c1:
53:f2:a0:f9:5b:05:18:94:a6:f8:04:65:b7:ce:74:3d:fa:00:
12:9e:f3:c7:2a:a2:56:15:b6:e8:0a:47:e2:42:d7:d7:91:dd:
9c:fa:67:0d:7f:ed:e5:f3:c1:9f:17:4d:f3:25:38:36:3d:2c:
af:cf:7c:79:39:6b:a7:da:3b:da:18:d1:65:df:da:56:55:64:
db:d8:63:29:45:42:af:01:4d:b2:7a:91:fd:7c:42:02:94:e2:
36:46:74:60:fb:fd:de:cd:50:10:9b:5d:0c:ba:16:e9:81:8f:
09:62:c0:5e:9a:2a:c8:62:6e:9b:03:76:49:a2:98:47:d4:df:
0d:ef:12:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiBZ2po1hzVBlbE8ZPiBYBFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNzBjMTRiZjI2ZmFmMDE5OGYxZTdiMjQ3MjljZDcxYjMz
NTE4ZGUwHhcNMjUwODA2MjIwMTM0WhcNMjUwODA3MjIwMTM0WjAzMTEwLwYDVQQD
EygxYjdmNjQ3NmZjNjViZjFjOGE1ZThkY2Q5NTIwNmI2NjM2NGYzNzM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7VDu8vairzmRNGIvbfHS2sZNO4Dj
nY3wfZSMJLRlkW60JVZj3bCPexazsSe7Owm+bLJcx+Z3Jw+Y8nvxxh6Ft5b8VXVZ
Q/cYmOAPZveGaRlE0CRTxaTKV4yqhOKWIyQwmbE4z7SpIPbArdVFmOewjnTOlwdZ
uOcVF2yPV/lbjz6K+qx/XXowW4sTYnDNTzbcyB7BEpAapO6G5k8Ad3Apngzz123r
cRso778Gp7sVo45nNJ6gBzVwMN4+SxfvVHpmmkizN1ioEnjJqZW+xHBS1z0edLFY
aZvyTqfJ+JJDyU/KhmsJk2qU6dF8G2UsrQW8xWf7tUzWHEcZLl7KJs8dqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBt/ZHb8Zb8cil6NzZUga2Y2Tzc0MB8GA1UdIwQY
MBaAFD5wwUvyb68BmPHnskcpzXGzNRjeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG5EQlNfSnZyd0dZOGVleVJ5bk5jYk0xR040LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8xZDJkZjktOGY4Mi00NzE2LTg1M2Ut
NTM4NTk0OTBkMjZmLzEvUG5EQlNfSnZyd0dZOGVleVJ5bk5jYk0xR040Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS8xZDJkZjktOGY4Mi00NzE2LTg1M2UtNTM4NTk0OTBkMjZm
LzEvUG5EQlNfSnZyd0dZOGVleVJ5bk5jYk0xR040LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbyLatqg0
aUSYQhHBAix0+i0TndtG0PrEU9z5ANUf3smLwk6m5Qq7hAewqH+2cSrtFWN1M2b4
giDTx3A3ySXqF6DSCXlDljVHYCQiEP/hY8amSYTsjQGXdqUVbmI2jBXnGvSX+Vit
5vXn//qiydC4lTEj3V6X2+mBolq44hDBU/Kg+VsFGJSm+ARlt850PfoAEp7zxyqi
VhW26ApH4kLX15HdnPpnDX/t5fPBnxdN8yU4Nj0sr898eTlrp9o72hjRZd/aVlVk
29hjKUVCrwFNsnqR/XxCApTiNkZ0YPv93s1QEJtdDLoW6YGPCWLAXpoqyGJumwN2
SaKYR9TfDe8SWQ==
-----END CERTIFICATE-----
Generated at Thu Aug 7 03:15:45 2025 by rpki-client