Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/2d43c2-3b2e-4f2e-a6ad-a0a72a733c02/1/Pbiird2wAoUIVJlqlLcrh_Snsw8.mft
File: Pbiird2wAoUIVJlqlLcrh_Snsw8.mft (raw, json)
Hash identifier: 1XZ5L5hIeulqWhUaaFwAWzWKEOAM8D3drrUeNzP1z8I=
Subject key identifier: 03:89:91:B5:EF:C9:19:09:1B:6B:DE:AB:77:21:A1:0D:22:B2:D1:71
Authority key identifier: 3D:B8:A2:AD:DD:B0:02:85:08:54:99:6A:94:B7:2B:87:F4:A7:B3:0F
Certificate issuer: /CN=3db8a2adddb002850854996a94b72b87f4a7b30f
Certificate serial: 0198537B9123543D987631771E4F0AE1C9C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pbiird2wAoUIVJlqlLcrh_Snsw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/2d43c2-3b2e-4f2e-a6ad-a0a72a733c02/1/Pbiird2wAoUIVJlqlLcrh_Snsw8.mft
Manifest number: 0EB3
Signing time: Tue 29 Jul 2025 00:01:03 +0000
Manifest this update: Tue 29 Jul 2025 00:01:03 +0000
Manifest next update: Wed 30 Jul 2025 00:01:03 +0000
Files and hashes: 1: Pbiird2wAoUIVJlqlLcrh_Snsw8.crl (hash: 3SG3R6IPZkzUWsfENNTpc11osS8HBMF0eNzlHUBdStI=)
2: gt9goB76oJJ9IidA_tfxI6lWDIw.roa (hash: q0BFU46k9v4mjBVsSe1ZjIuLriX+JzS+b+gMagD0YfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/2d43c2-3b2e-4f2e-a6ad-a0a72a733c02/1/Pbiird2wAoUIVJlqlLcrh_Snsw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/2d43c2-3b2e-4f2e-a6ad-a0a72a733c02/1/Pbiird2wAoUIVJlqlLcrh_Snsw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pbiird2wAoUIVJlqlLcrh_Snsw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:7b:91:23:54:3d:98:76:31:77:1e:4f:0a:e1:c9:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3db8a2adddb002850854996a94b72b87f4a7b30f
Validity
Not Before: Jul 29 00:01:03 2025 GMT
Not After : Jul 30 00:01:03 2025 GMT
Subject: CN=038991b5efc919091b6bdeab7721a10d22b2d171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:cb:07:96:2b:f9:10:54:c3:f8:6c:37:43:69:
1e:58:63:7b:61:c8:73:09:9d:0b:81:a2:6c:eb:86:
25:f1:a6:7f:30:a9:0e:86:ba:69:6a:ad:b5:bd:29:
63:31:56:51:b6:64:66:78:7e:35:60:6e:3e:d1:12:
03:9d:db:7c:71:03:c7:d9:15:da:a7:33:99:4b:51:
73:b5:76:ac:c3:ef:a8:fa:1b:85:d5:13:05:39:2b:
22:e9:14:d7:16:ff:11:95:22:8e:e8:6d:b8:42:de:
27:3f:6f:54:7d:f3:92:ae:c1:ff:60:de:03:9f:5f:
36:64:76:9d:6b:ee:ce:86:de:c3:ee:bc:45:a5:9b:
32:b2:6f:57:3b:fc:e1:d7:03:51:16:51:69:5b:7c:
68:25:f9:52:4a:ce:d2:4c:01:b5:8e:ff:db:a3:04:
8f:39:7a:69:36:a4:ca:bf:bd:34:90:72:6b:07:b1:
2e:29:6c:09:45:50:c4:c3:d4:ff:2f:b7:c4:37:c2:
10:3d:9b:a0:8a:29:b1:37:43:95:db:75:f1:be:dc:
a8:9f:4e:35:6b:5b:70:fa:d4:05:93:78:84:46:b0:
b8:3b:c7:13:73:49:87:e8:5d:11:eb:34:96:5d:7d:
f7:bf:e1:8c:01:c9:db:52:0e:81:29:be:85:15:e8:
0d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:89:91:B5:EF:C9:19:09:1B:6B:DE:AB:77:21:A1:0D:22:B2:D1:71
X509v3 Authority Key Identifier:
keyid:3D:B8:A2:AD:DD:B0:02:85:08:54:99:6A:94:B7:2B:87:F4:A7:B3:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pbiird2wAoUIVJlqlLcrh_Snsw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2d43c2-3b2e-4f2e-a6ad-a0a72a733c02/1/Pbiird2wAoUIVJlqlLcrh_Snsw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2d43c2-3b2e-4f2e-a6ad-a0a72a733c02/1/Pbiird2wAoUIVJlqlLcrh_Snsw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:44:b5:fb:b8:22:3d:b0:4a:f0:95:10:be:33:6f:50:9a:6f:
8a:9d:c3:97:ed:78:ce:4a:d0:a3:07:80:12:07:60:28:2b:ad:
a9:fb:0e:19:2d:52:40:4b:99:f4:23:4f:63:95:a9:34:b1:64:
bd:22:93:36:30:ff:48:90:f6:3f:0b:26:b3:75:e0:c9:42:ae:
94:b9:27:eb:1d:0e:c8:4b:c8:01:ec:2e:cb:f2:fb:f3:ae:fb:
b1:15:f4:2e:6c:79:de:cb:70:69:c8:84:ba:a3:95:28:ab:f6:
25:b7:f0:d7:9b:c7:80:62:e9:af:5c:a0:45:f3:8c:2c:ee:4b:
ef:73:24:c0:98:90:8c:06:d5:9d:c7:a9:b9:96:c6:dd:1d:9f:
eb:9a:67:40:fb:5d:9d:5e:2c:72:82:ff:3c:1b:5f:14:1a:e7:
af:c3:a8:25:76:5e:d5:b1:0f:ab:27:57:87:c1:f8:88:9c:af:
62:ba:67:8f:12:96:1e:c3:c5:78:fc:5a:8d:a5:06:4b:9e:8f:
65:8a:50:56:c4:34:21:3c:73:2e:59:0e:96:f4:76:25:fe:10:
64:26:24:bc:35:9f:59:c5:db:ed:9f:6d:1b:9a:4f:9d:7a:73:
7c:b7:b8:48:cd:0c:c7:e5:6c:53:e7:88:34:53:a5:d6:32:24:
f7:ae:6a:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 03:27:14 2025 by rpki-client