
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/239b73-7aa7-4b58-b12c-7927de539364/1/PBnm8n2SgJXlYN52ePKONFnVWUc.mft
File: PBnm8n2SgJXlYN52ePKONFnVWUc.mft (raw, json)
Hash identifier: Hcxw+RQby3+bWZ4LUWcbGUMT0jgwK29vu8IULccSCMk=
Subject key identifier: E7:51:B6:B8:E8:98:96:BF:19:09:43:F8:52:48:59:54:29:81:33:B7
Authority key identifier: 3C:19:E6:F2:7D:92:80:95:E5:60:DE:76:78:F2:8E:34:59:D5:59:47
Certificate issuer: /CN=3c19e6f27d928095e560de7678f28e3459d55947
Certificate serial: 0198499C2D38DD125548379E431033CA66B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBnm8n2SgJXlYN52ePKONFnVWUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/239b73-7aa7-4b58-b12c-7927de539364/1/PBnm8n2SgJXlYN52ePKONFnVWUc.mft
Manifest number: 0114
Signing time: Sun 27 Jul 2025 02:00:28 +0000
Manifest this update: Sun 27 Jul 2025 02:00:28 +0000
Manifest next update: Mon 28 Jul 2025 02:00:28 +0000
Files and hashes: 1: PBnm8n2SgJXlYN52ePKONFnVWUc.crl (hash: HavSWGv9wuesv3OVVuttyapt+oSPe3/jIuEag3k6Pzs=)
2: QmVb0SoXYnlMedY0w_3_iXHpV1g.roa (hash: a3gXOD/NjdWHnE6P9SQzEQhqDOtbuugfMMDorP0aI2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/239b73-7aa7-4b58-b12c-7927de539364/1/PBnm8n2SgJXlYN52ePKONFnVWUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/239b73-7aa7-4b58-b12c-7927de539364/1/PBnm8n2SgJXlYN52ePKONFnVWUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PBnm8n2SgJXlYN52ePKONFnVWUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:2d:38:dd:12:55:48:37:9e:43:10:33:ca:66:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c19e6f27d928095e560de7678f28e3459d55947
Validity
Not Before: Jul 27 02:00:28 2025 GMT
Not After : Jul 28 02:00:28 2025 GMT
Subject: CN=e751b6b8e89896bf190943f852485954298133b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a0:b7:4b:cf:89:61:d8:0b:eb:ce:20:60:de:
33:86:52:b6:f2:30:4b:78:de:ea:a1:82:74:8f:8e:
3b:2f:17:ed:a3:b1:bf:60:82:1a:41:90:c1:e3:48:
70:ce:94:45:74:5a:f7:1f:f7:d9:74:15:5a:5d:a2:
5d:1c:75:4c:d0:bc:b1:2f:c4:5e:41:94:99:a1:02:
2b:2a:ff:f0:a8:40:27:43:42:fb:7b:54:6c:51:ac:
58:c7:79:fb:78:54:9e:9f:fe:1c:36:77:a0:8a:89:
19:27:83:29:2b:2f:7b:57:53:f1:c9:68:55:49:62:
88:8c:c5:b5:5f:ed:1b:b4:64:47:d2:79:7c:77:6c:
88:1f:a4:3d:de:a0:61:9d:d4:23:22:07:28:98:07:
70:27:45:0b:2a:db:58:ce:97:06:19:70:72:4d:28:
37:32:e8:6f:96:77:00:c9:76:80:16:0b:ec:9e:48:
a4:c0:57:69:0a:ce:c3:8b:a8:f5:2f:e4:e6:b8:06:
50:ca:f7:78:f1:3e:26:d9:1d:b0:fe:f6:a3:3f:3d:
c8:03:e2:1d:f1:94:87:26:4a:3a:5c:b3:77:b5:30:
f6:cb:5b:ab:0a:08:f3:ac:f8:c5:c2:6a:f6:1f:af:
b8:f8:83:05:40:5c:ba:ea:72:4b:53:d0:05:c4:04:
7b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:51:B6:B8:E8:98:96:BF:19:09:43:F8:52:48:59:54:29:81:33:B7
X509v3 Authority Key Identifier:
keyid:3C:19:E6:F2:7D:92:80:95:E5:60:DE:76:78:F2:8E:34:59:D5:59:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBnm8n2SgJXlYN52ePKONFnVWUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/239b73-7aa7-4b58-b12c-7927de539364/1/PBnm8n2SgJXlYN52ePKONFnVWUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/239b73-7aa7-4b58-b12c-7927de539364/1/PBnm8n2SgJXlYN52ePKONFnVWUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:9f:22:b0:6b:42:9d:f6:a5:18:e9:98:70:4f:19:ea:92:b0:
a8:74:38:88:3b:82:aa:11:56:81:b7:b4:af:a2:14:77:10:3f:
99:99:f0:b8:36:33:7f:25:f8:6d:04:47:8b:f3:90:8b:66:20:
72:7e:b3:59:02:26:40:b5:3b:ea:16:72:42:97:f3:d0:d1:ca:
c4:25:ef:c0:ea:78:b7:16:02:a1:c4:34:83:bc:f1:48:04:ad:
43:7a:f2:61:77:62:b3:ca:78:25:8d:27:a8:3c:db:e4:90:0f:
ee:b9:e1:43:fc:c1:bd:de:a8:15:51:ec:94:a7:fe:47:16:17:
b9:fe:bd:c7:16:eb:a6:07:d5:ff:86:1c:d7:f2:a7:75:33:dd:
38:6f:e5:5a:6e:f7:ea:e2:e0:7b:1c:ca:c6:0b:09:7b:15:15:
eb:24:92:9e:2e:c3:48:f6:17:56:08:29:68:6c:36:9a:c8:4e:
8c:4b:94:27:3a:32:4a:ec:8a:7f:8e:93:dd:6a:48:d2:c4:a4:
80:f8:f5:e2:db:eb:ab:df:ec:c8:d0:ec:8b:a3:3f:ec:0f:ad:
10:6f:eb:be:29:1c:ba:10:c1:91:cb:d2:2f:7e:e2:d6:7e:ba:
19:09:20:41:f9:ed:a2:3a:8a:55:c2:bc:f1:72:76:ee:dc:70:
d7:d3:89:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:56:09 2025 by rpki-client