Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft
File: PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft (raw, json)
Hash identifier: mDHxypo/7hXPZK1RNq3FCCljyI089VBcsvva0z1jig4=
Subject key identifier: 96:2B:A3:B2:18:D5:5A:16:33:36:C6:42:78:A0:F1:C4:39:82:B8:9B
Authority key identifier: 3D:B0:49:DA:5E:12:06:4E:CF:E1:39:E1:20:BE:EF:6F:17:8B:FD:F3
Certificate issuer: /CN=3db049da5e12064ecfe139e120beef6f178bfdf3
Certificate serial: 01984BC1B07B31F0810F2946AEF1CD1AFA98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft
Manifest number: 0139
Signing time: Sun 27 Jul 2025 12:00:41 +0000
Manifest this update: Sun 27 Jul 2025 12:00:41 +0000
Manifest next update: Mon 28 Jul 2025 12:00:41 +0000
Files and hashes: 1: ArxWoIoACVsuecj6oH-B8iFComg.roa (hash: rlcyNszToJSApviKpB6wzSvDYhbI3eJligCvoVuiSks=)
2: PbBJ2l4SBk7P4TnhIL7vbxeL_fM.crl (hash: 8vKJSYtq488rxEEI3LaBVCZU/fHNbVOUfTPuqOhxZmk=)
3: ar9nZIGwi2DhhokEeZ0Cb06cevE.roa (hash: Z0Bly0p6G10RTWfWyE9HNHAJ9d6Fob4NgEePaV17UE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:c1:b0:7b:31:f0:81:0f:29:46:ae:f1:cd:1a:fa:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3db049da5e12064ecfe139e120beef6f178bfdf3
Validity
Not Before: Jul 27 12:00:41 2025 GMT
Not After : Jul 28 12:00:41 2025 GMT
Subject: CN=962ba3b218d55a163336c64278a0f1c43982b89b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:d0:20:5b:bd:70:89:85:de:bf:d8:a7:10:04:
77:22:d2:61:b1:e5:cd:56:04:3d:f5:7f:69:5e:ce:
fd:5b:d5:fb:7d:25:4f:21:5d:d8:3b:d9:60:b4:67:
44:32:d3:0e:6e:0d:53:3d:de:f1:01:37:78:e6:2c:
01:0a:11:07:ab:b9:d3:6f:d9:16:9c:eb:41:3a:b6:
ce:2e:2a:95:f4:d2:38:81:b8:52:17:9b:0d:7c:3e:
46:35:21:0d:be:b7:8c:68:7a:4d:e4:e5:77:fb:ec:
63:57:49:b8:84:f0:c6:48:db:02:5d:bf:29:ec:b0:
08:5a:c1:58:21:31:b0:4c:7c:2a:d5:4d:f4:85:6d:
bf:e2:f8:1f:1d:33:bc:37:11:7d:5a:0c:09:e0:be:
13:2b:4b:9d:24:0d:20:ef:c6:8c:0f:bb:74:cf:5a:
71:bb:ae:87:ba:5e:d7:bb:f7:a4:92:ae:05:a0:0f:
1b:be:5e:77:e1:4d:d0:9c:34:e3:05:5e:29:14:5c:
9d:ba:c9:81:06:10:77:2f:e7:88:be:40:ff:59:c9:
38:c0:95:6c:9a:d5:d5:c0:87:6f:08:ea:63:12:c3:
7c:93:a1:2e:8f:78:d9:1b:e6:bb:28:71:43:9c:fd:
33:1e:b9:5b:3c:f7:48:e5:2d:a0:e9:77:e8:e2:c1:
dc:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:2B:A3:B2:18:D5:5A:16:33:36:C6:42:78:A0:F1:C4:39:82:B8:9B
X509v3 Authority Key Identifier:
keyid:3D:B0:49:DA:5E:12:06:4E:CF:E1:39:E1:20:BE:EF:6F:17:8B:FD:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:43:07:54:2a:20:fc:a3:38:04:51:30:0d:95:72:3e:0a:ed:
d2:67:20:5a:99:96:e5:d3:d1:28:f1:b4:ff:f7:14:02:f1:e9:
b5:9c:da:42:df:02:96:ec:9e:e2:6d:3d:3e:a3:75:5a:6a:6c:
37:df:cc:17:45:0f:d4:7c:03:35:ad:49:c7:b8:0c:ea:2f:3d:
4d:ac:a3:85:97:46:ab:f2:e4:d1:0b:f4:c3:b3:1e:78:6f:8d:
42:7a:52:e8:3f:17:7b:cf:ac:b7:43:d2:57:52:29:9f:b3:9a:
4d:3f:7d:5d:89:1d:42:29:0b:c6:08:99:53:e3:a3:81:6d:b5:
81:40:88:48:4d:20:c6:fe:a6:d2:f5:7f:51:74:7c:ee:14:a8:
05:8f:8e:26:62:b7:6f:3b:95:e4:c4:93:4c:b0:e7:1f:4f:d3:
f3:5d:45:e2:b7:b6:5c:4f:fe:b7:74:1e:17:20:72:ce:e5:db:
60:a8:dc:f8:53:f4:17:ac:38:16:95:fa:fb:4e:d9:ec:0b:26:
cd:b0:99:de:b2:66:13:26:09:52:e4:eb:d1:f6:cb:ff:22:b8:
6d:b4:9b:2e:d2:f4:dd:97:71:56:0d:f9:cd:de:7f:ab:cf:f4:
8b:3b:55:99:8d:4f:39:9a:2f:12:f6:bd:de:0c:6c:14:b6:0c:
a3:10:7c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 16:59:25 2025 by rpki-client