Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/PB8U03-9yHrnyce5FT6updTFVJs.mft
File: PB8U03-9yHrnyce5FT6updTFVJs.mft (raw, json)
Hash identifier: 9I2w3PMas66Q2nuDmQXyb/iR/f7kFHsojMsraaBoBvk=
Subject key identifier: F6:11:D9:86:7A:6D:D3:5F:D4:DE:2B:3E:89:24:A8:F2:33:AC:61:74
Authority key identifier: 3C:1F:14:D3:7F:BD:C8:7A:E7:C9:C7:B9:15:3E:AE:A5:D4:C5:54:9B
Certificate issuer: /CN=3c1f14d37fbdc87ae7c9c7b9153eaea5d4c5549b
Certificate serial: 01984A41767E8468E884295BB998F67075DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PB8U03-9yHrnyce5FT6updTFVJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/PB8U03-9yHrnyce5FT6updTFVJs.mft
Manifest number: 02CF
Signing time: Sun 27 Jul 2025 05:01:00 +0000
Manifest this update: Sun 27 Jul 2025 05:01:00 +0000
Manifest next update: Mon 28 Jul 2025 05:01:00 +0000
Files and hashes: 1: Jv9ea6TjWXgvrL4UJOE0Y6J6Kzo.roa (hash: vQZS+xG2DvESCsjLOI3ZeRzubYmodylcXb11ZuJ/VmA=)
2: PB8U03-9yHrnyce5FT6updTFVJs.crl (hash: mJIGpiwNjDOmxBoO3ysFVVI2bOFAB456xO0lBzlNi/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/PB8U03-9yHrnyce5FT6updTFVJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/PB8U03-9yHrnyce5FT6updTFVJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/PB8U03-9yHrnyce5FT6updTFVJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:76:7e:84:68:e8:84:29:5b:b9:98:f6:70:75:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c1f14d37fbdc87ae7c9c7b9153eaea5d4c5549b
Validity
Not Before: Jul 27 05:01:00 2025 GMT
Not After : Jul 28 05:01:00 2025 GMT
Subject: CN=f611d9867a6dd35fd4de2b3e8924a8f233ac6174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f5:5b:eb:71:2c:8a:82:69:a4:40:3e:50:bd:
af:71:f7:15:3f:62:d6:9f:42:a3:a0:81:f2:b0:67:
d4:90:d5:dd:74:ef:e2:95:fa:f7:36:17:ce:bb:93:
bf:43:8e:a7:7b:a9:30:74:a5:a1:c0:3f:70:63:53:
c3:41:c9:44:59:05:7d:f7:79:8a:b9:f7:8b:d1:a0:
a0:4d:a9:be:12:73:bc:94:ac:ef:9d:e2:00:c2:a1:
a3:a8:f2:b0:99:98:bf:10:f4:09:7b:f2:2e:24:be:
6a:3a:0d:cd:a3:e7:12:4c:9e:83:67:99:e3:c5:1f:
f0:0f:31:3a:21:63:5b:c5:91:1d:ee:12:e1:c6:4b:
25:7d:3d:b7:01:7d:83:0a:8c:27:ea:6f:fe:3d:24:
c2:27:a8:03:5e:db:f4:50:c4:72:75:69:64:1c:e6:
8a:f7:e1:2d:79:e7:2e:96:14:a4:83:75:ee:bf:82:
5b:c2:e6:f4:00:32:46:af:c8:51:f0:5f:1f:bb:bb:
6b:07:cd:72:05:a4:e0:e8:6b:cd:c4:d4:5e:b2:b9:
92:96:de:1f:64:f6:8a:2e:52:c1:2e:86:73:d9:ec:
6c:f2:30:2f:c3:49:f9:62:a0:11:73:5d:cc:51:d4:
15:4f:e5:7d:d6:1c:03:77:87:3a:11:d1:69:9c:64:
49:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:11:D9:86:7A:6D:D3:5F:D4:DE:2B:3E:89:24:A8:F2:33:AC:61:74
X509v3 Authority Key Identifier:
keyid:3C:1F:14:D3:7F:BD:C8:7A:E7:C9:C7:B9:15:3E:AE:A5:D4:C5:54:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PB8U03-9yHrnyce5FT6updTFVJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/PB8U03-9yHrnyce5FT6updTFVJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f1b74c-16ac-4831-b6c5-f1c6bf1e4ba7/1/PB8U03-9yHrnyce5FT6updTFVJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:da:28:b8:5e:f0:42:29:9a:6e:bd:5b:0d:b6:0d:60:5b:7e:
42:c7:8e:44:3c:a8:78:3a:73:97:8f:81:fd:2f:cf:1f:bb:32:
a6:25:cf:a2:04:bf:60:86:98:e7:aa:51:9c:f9:1a:ae:05:67:
02:50:51:85:fd:0f:6c:ca:cf:3d:12:f6:c1:8b:f3:1b:a9:0b:
bb:f3:ec:c8:6d:c4:2d:e0:2c:a5:a5:f2:6c:cb:78:63:cd:a9:
eb:15:ba:be:9f:7d:82:06:ce:4c:bc:33:77:e7:7c:c9:5d:74:
b6:3b:a0:dd:85:c0:87:76:44:c2:e1:c9:a1:41:44:33:5f:35:
4c:5a:97:fc:b0:18:21:5c:20:67:ff:97:4d:8e:64:a0:5a:3a:
44:14:69:79:d0:80:13:9b:46:2f:47:62:bb:23:bb:38:de:26:
3a:be:cf:84:02:ce:86:c1:97:0f:35:6b:22:39:dd:36:49:f3:
d0:7c:c7:f4:6b:91:35:d5:f9:90:9f:17:70:06:ea:68:93:c2:
2a:a5:6e:d6:db:2a:a0:9f:0c:a6:af:b6:1f:30:ec:d4:af:be:
af:d6:90:f1:34:17:29:80:83:15:1a:90:97:12:a9:0a:62:e3:
e7:f9:a2:94:6c:3d:c9:13:8c:e4:90:4a:67:8f:27:c4:d0:b9:
2e:3e:11:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:56:43 2025 by rpki-client