Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/PbNCBiV3FppjWX6eOmQl_N5sFmE.mft
File: PbNCBiV3FppjWX6eOmQl_N5sFmE.mft (raw, json)
Hash identifier: wMeYOooRdGFrq+SwEwRqGVqN/YBReRCtfaU4YktpHS8=
Subject key identifier: 52:59:F5:45:95:95:78:6B:35:04:6B:DB:5E:EA:18:79:11:BA:A7:16
Authority key identifier: 3D:B3:42:06:25:77:16:9A:63:59:7E:9E:3A:64:25:FC:DE:6C:16:61
Certificate issuer: /CN=3db342062577169a63597e9e3a6425fcde6c1661
Certificate serial: 019A71B8239C3BF3EFA97077628ACB862D43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PbNCBiV3FppjWX6eOmQl_N5sFmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/PbNCBiV3FppjWX6eOmQl_N5sFmE.mft
Manifest number: 0B18
Signing time: Tue 11 Nov 2025 07:01:24 +0000
Manifest this update: Tue 11 Nov 2025 07:01:24 +0000
Manifest next update: Wed 12 Nov 2025 07:01:24 +0000
Files and hashes: 1: 4XfsdEdHX1kDpX0ZLU7CoiedwkE.roa (hash: E0vTS5o3+h35/sl1eIPy8wBqph3C9G+ZoO/00bLGlrw=)
2: PbNCBiV3FppjWX6eOmQl_N5sFmE.crl (hash: uda7jGISKpnLPqmLKxZbek+fZbMfwullkH1rzxDLRIM=)
3: Zq7eQ3eZsYsNNl6x7QgRl2tG0cY.roa (hash: 2PLYNC5TQEo40dtz6r8G2q2NVhdYFgS71ZBpW7mlx1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/PbNCBiV3FppjWX6eOmQl_N5sFmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/PbNCBiV3FppjWX6eOmQl_N5sFmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PbNCBiV3FppjWX6eOmQl_N5sFmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:23:9c:3b:f3:ef:a9:70:77:62:8a:cb:86:2d:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3db342062577169a63597e9e3a6425fcde6c1661
Validity
Not Before: Nov 11 07:01:24 2025 GMT
Not After : Nov 12 07:01:24 2025 GMT
Subject: CN=5259f5459595786b35046bdb5eea187911baa716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:f1:63:db:ed:31:78:de:21:8f:0c:7e:8f:86:
d4:a3:87:95:39:3c:da:32:39:59:72:d7:95:36:b9:
6d:a6:55:47:41:6c:39:02:32:4b:94:37:73:5c:d2:
56:3a:0b:23:56:43:8e:4b:a6:58:cf:8d:e6:37:c4:
08:ce:32:16:4d:fa:63:e4:ff:62:f6:14:c4:f9:07:
84:44:f4:e3:9a:14:fc:6e:34:d0:33:9f:3c:b3:0c:
1e:51:11:d3:ed:de:37:3d:77:95:85:68:12:8f:86:
56:ea:b1:bf:6e:95:c4:2e:d6:2f:70:1b:44:b3:35:
5d:26:d3:b3:d8:0e:d8:27:8f:df:14:0f:17:60:41:
37:5e:23:9b:b3:df:59:68:54:05:82:63:a5:78:93:
e0:e8:48:e9:e8:61:43:fc:92:10:33:76:aa:81:60:
0f:74:d8:c9:79:fb:46:a0:7f:bd:9d:2f:b9:20:aa:
d0:ea:ba:ec:ee:7f:ac:c9:e1:fb:2c:e4:55:06:fc:
d7:88:1e:a1:1a:6d:90:8d:96:3f:2f:a2:6b:3d:65:
5a:33:89:f3:7a:e7:59:ea:69:c0:30:1c:5a:a0:b3:
9e:76:43:ff:ac:07:94:9f:74:f8:15:a2:69:36:2d:
77:af:7a:50:5d:36:1e:3a:25:e3:b2:ac:81:d9:8d:
07:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:59:F5:45:95:95:78:6B:35:04:6B:DB:5E:EA:18:79:11:BA:A7:16
X509v3 Authority Key Identifier:
keyid:3D:B3:42:06:25:77:16:9A:63:59:7E:9E:3A:64:25:FC:DE:6C:16:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PbNCBiV3FppjWX6eOmQl_N5sFmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/PbNCBiV3FppjWX6eOmQl_N5sFmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/PbNCBiV3FppjWX6eOmQl_N5sFmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:12:3c:3b:b7:d2:0f:67:aa:de:af:8e:dc:cb:87:6e:68:37:
e2:fd:52:b6:99:07:b3:2d:78:d9:be:f7:dd:c1:d4:35:50:d8:
45:9d:c8:67:c2:8a:fa:6f:bf:0d:3b:a3:8e:81:a2:b9:28:21:
78:46:4c:5b:fb:b6:2e:06:72:a3:30:3f:31:e7:d0:de:6d:87:
9b:f1:d0:69:97:f7:29:9e:e2:d7:08:7f:e7:bd:69:60:03:fb:
a9:bf:5b:1f:a0:d1:70:28:bd:84:73:62:26:2d:04:9f:de:01:
e7:c8:10:84:08:3a:11:80:7d:e9:93:b2:8a:2f:4d:2a:76:4e:
d1:6a:34:4d:87:11:a3:0f:f9:4d:8c:30:d1:86:e6:d4:ee:c5:
99:98:03:74:e6:a4:a3:03:09:9d:9d:7d:df:07:b9:7d:5a:64:
22:95:ea:1c:83:d4:30:bf:7a:70:41:a5:5c:5e:a0:e3:33:28:
92:9c:de:b6:4c:f0:b8:4e:cb:7c:33:8f:ff:5c:4b:c0:ec:eb:
d0:b9:8a:fd:9e:42:2a:14:82:dd:98:e2:07:0b:1b:8e:76:f4:
5b:c4:67:ba:04:4c:bd:9f:b1:26:3a:ac:18:ad:54:9a:8f:ea:
e8:37:9d:14:ca:a5:e6:c3:de:7e:63:70:bd:23:69:5a:00:b0:
d4:81:3d:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuCOcO/PvqXB3YorLhi1DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkYjM0MjA2MjU3NzE2OWE2MzU5N2U5ZTNhNjQyNWZjZGU2
YzE2NjEwHhcNMjUxMTExMDcwMTI0WhcNMjUxMTEyMDcwMTI0WjAzMTEwLwYDVQQD
Eyg1MjU5ZjU0NTk1OTU3ODZiMzUwNDZiZGI1ZWVhMTg3OTExYmFhNzE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6fFj2+0xeN4hjwx+j4bUo4eVOTza
MjlZcteVNrltplVHQWw5AjJLlDdzXNJWOgsjVkOOS6ZYz43mN8QIzjIWTfpj5P9i
9hTE+QeERPTjmhT8bjTQM588swweURHT7d43PXeVhWgSj4ZW6rG/bpXELtYvcBtE
szVdJtOz2A7YJ4/fFA8XYEE3XiObs99ZaFQFgmOleJPg6Ejp6GFD/JIQM3aqgWAP
dNjJeftGoH+9nS+5IKrQ6rrs7n+syeH7LORVBvzXiB6hGm2QjZY/L6JrPWVaM4nz
eudZ6mnAMBxaoLOedkP/rAeUn3T4FaJpNi13r3pQXTYeOiXjsqyB2Y0HZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFJZ9UWVlXhrNQRr217qGHkRuqcWMB8GA1UdIwQY
MBaAFD2zQgYldxaaY1l+njpkJfzebBZhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGJOQ0JpVjNGcHBqV1g2ZU9tUWxfTjVzRm1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC81MTAwNjYtNDcxZS00NzJhLTg5Nzgt
NDk3Mjc3YWZiYWE1LzEvUGJOQ0JpVjNGcHBqV1g2ZU9tUWxfTjVzRm1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC81MTAwNjYtNDcxZS00NzJhLTg5NzgtNDk3Mjc3YWZiYWE1
LzEvUGJOQ0JpVjNGcHBqV1g2ZU9tUWxfTjVzRm1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAERI8O7fS
D2eq3q+O3MuHbmg34v1StpkHsy142b733cHUNVDYRZ3IZ8KK+m+/DTujjoGiuSgh
eEZMW/u2LgZyozA/MefQ3m2Hm/HQaZf3KZ7i1wh/571pYAP7qb9bH6DRcCi9hHNi
Ji0En94B58gQhAg6EYB96ZOyii9NKnZO0Wo0TYcRow/5TYww0Ybm1O7FmZgDdOak
owMJnZ193we5fVpkIpXqHIPUML96cEGlXF6g4zMokpzetkzwuE7LfDOP/1xLwOzr
0LmK/Z5CKhSC3ZjiBwsbjnb0W8RnugRMvZ+xJjqsGK1Umo/q6DedFMql5sPefmNw
vSNpWgCw1IE9hw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:39:29 2025 by rpki-client