Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/6bbce4-c7d6-4418-9368-247a86b40d5d/1/PbRBy1aafHmaEFn_VzI7g3yqpU4.mft
File: PbRBy1aafHmaEFn_VzI7g3yqpU4.mft (raw, json)
Hash identifier: kJFYgUXbpGbtsNQAb7WhL2SVoAyttnRzrMKYL4VpT+U=
Subject key identifier: 1B:0E:62:32:53:E4:A7:50:5D:B2:7E:81:A5:70:4C:1C:C3:FC:17:A6
Authority key identifier: 3D:B4:41:CB:56:9A:7C:79:9A:10:59:FF:57:32:3B:83:7C:AA:A5:4E
Certificate issuer: /CN=3db441cb569a7c799a1059ff57323b837caaa54e
Certificate serial: 019848C0A922C75790D4BE5A5D89F79DF7D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PbRBy1aafHmaEFn_VzI7g3yqpU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/6bbce4-c7d6-4418-9368-247a86b40d5d/1/PbRBy1aafHmaEFn_VzI7g3yqpU4.mft
Manifest number: 035D
Signing time: Sat 26 Jul 2025 22:00:42 +0000
Manifest this update: Sat 26 Jul 2025 22:00:42 +0000
Manifest next update: Sun 27 Jul 2025 22:00:42 +0000
Files and hashes: 1: PbRBy1aafHmaEFn_VzI7g3yqpU4.crl (hash: aI2rOr39i+V7OZcz6KLIh5hJaAi7GQjtQGlIa+soUm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/6bbce4-c7d6-4418-9368-247a86b40d5d/1/PbRBy1aafHmaEFn_VzI7g3yqpU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/6bbce4-c7d6-4418-9368-247a86b40d5d/1/PbRBy1aafHmaEFn_VzI7g3yqpU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PbRBy1aafHmaEFn_VzI7g3yqpU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:a9:22:c7:57:90:d4:be:5a:5d:89:f7:9d:f7:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3db441cb569a7c799a1059ff57323b837caaa54e
Validity
Not Before: Jul 26 22:00:42 2025 GMT
Not After : Jul 27 22:00:42 2025 GMT
Subject: CN=1b0e623253e4a7505db27e81a5704c1cc3fc17a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:2e:f8:ba:44:64:9a:60:17:7d:75:99:3a:e5:
bd:ca:df:a4:46:ce:7e:34:0a:a5:c2:6a:da:5a:57:
1a:88:14:26:d5:3f:7f:42:91:48:d0:a7:b5:82:4d:
92:a5:aa:36:46:9b:cf:af:f1:9a:b0:b2:eb:35:0c:
b7:ed:05:55:bc:09:ec:ad:76:a9:06:48:63:80:66:
a6:55:3b:d2:92:9c:8c:2e:69:73:3f:70:e4:73:7f:
cb:c0:2c:70:a1:be:36:a8:b5:20:a2:87:ac:97:7c:
66:46:2e:28:a9:1a:dc:76:0d:67:19:b3:3d:2f:7d:
64:06:a7:ac:bb:99:d8:00:62:c1:21:d7:bd:32:1e:
25:6a:8d:9c:30:03:9a:8c:0a:ae:d8:24:46:99:0c:
54:f0:8f:e7:da:63:0a:39:b6:42:d9:4b:ce:47:8b:
33:83:79:9c:7c:30:02:2d:b8:55:c6:9b:21:53:20:
2b:be:e0:fa:96:03:78:27:9f:69:85:04:a2:4c:6c:
6e:87:c8:93:f4:ee:26:bb:aa:f3:67:4c:a8:b7:31:
f7:3c:80:31:a0:b4:c6:6b:28:7d:8a:03:d7:50:40:
e3:de:07:b0:c9:33:fb:fc:0d:6d:30:4e:00:cb:a2:
d0:b8:c7:2d:b3:38:66:92:4f:14:bb:d0:b2:e7:4a:
6a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:0E:62:32:53:E4:A7:50:5D:B2:7E:81:A5:70:4C:1C:C3:FC:17:A6
X509v3 Authority Key Identifier:
keyid:3D:B4:41:CB:56:9A:7C:79:9A:10:59:FF:57:32:3B:83:7C:AA:A5:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PbRBy1aafHmaEFn_VzI7g3yqpU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6bbce4-c7d6-4418-9368-247a86b40d5d/1/PbRBy1aafHmaEFn_VzI7g3yqpU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6bbce4-c7d6-4418-9368-247a86b40d5d/1/PbRBy1aafHmaEFn_VzI7g3yqpU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:4c:08:a2:79:9a:bc:3e:aa:79:25:ac:80:fe:5d:b5:f8:1f:
e4:8e:7a:80:6e:39:eb:7f:12:06:f1:ff:70:9d:27:7c:90:3c:
5e:fa:09:db:3d:a1:58:58:3b:bf:9b:ba:1f:d5:8c:38:8b:bb:
06:ea:6b:62:a1:26:fb:4f:f1:d5:9e:78:d7:8f:30:bc:72:08:
fc:1f:1d:a5:60:15:53:ae:bb:18:6d:55:f3:23:fd:b9:a6:fb:
c9:41:79:1b:62:f0:ae:1a:35:8a:6a:b0:d1:05:5e:b2:c3:15:
90:a6:bc:a8:9c:68:98:9e:a3:e7:54:ae:42:58:7a:d8:fe:90:
90:66:50:28:ac:ae:f7:31:bf:88:b6:d1:55:a7:ab:41:c9:0f:
72:62:3f:48:ef:31:56:f4:c0:c9:06:ae:d9:a6:e4:2b:8f:e2:
57:f3:67:6e:f5:52:aa:bd:fc:c9:56:c9:03:65:54:d5:6e:c3:
b4:39:94:30:5f:e1:05:28:b5:bc:76:a6:3d:a8:2d:1c:2d:95:
ff:ca:0e:82:55:3a:b0:d7:e7:02:8b:f5:37:a3:aa:23:89:d1:
ea:26:a8:f8:28:b7:8d:89:d9:35:5a:0b:58:19:16:e6:25:74:
d9:63:00:e5:a7:cc:2f:03:e4:81:bd:7d:21:46:89:d3:b5:84:
00:54:3c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:38:54 2025 by rpki-client