Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/6bbce4-c7d6-4418-9368-247a86b40d5d/1/PbRBy1aafHmaEFn_VzI7g3yqpU4.mft
File: PbRBy1aafHmaEFn_VzI7g3yqpU4.mft (raw, json)
Hash identifier: 2VKnyZ9fZMtwFhIRuY+s+x3yNREayevTWOSyXGe/+NE=
Subject key identifier: 91:91:13:09:BB:56:E0:83:16:FC:5F:EA:AD:3C:1B:E5:0A:AE:DE:47
Authority key identifier: 3D:B4:41:CB:56:9A:7C:79:9A:10:59:FF:57:32:3B:83:7C:AA:A5:4E
Certificate issuer: /CN=3db441cb569a7c799a1059ff57323b837caaa54e
Certificate serial: 019A7112B28E72771DB15AFDB73289945FDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PbRBy1aafHmaEFn_VzI7g3yqpU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/6bbce4-c7d6-4418-9368-247a86b40d5d/1/PbRBy1aafHmaEFn_VzI7g3yqpU4.mft
Manifest number: 047B
Signing time: Tue 11 Nov 2025 04:00:41 +0000
Manifest this update: Tue 11 Nov 2025 04:00:41 +0000
Manifest next update: Wed 12 Nov 2025 04:00:41 +0000
Files and hashes: 1: PbRBy1aafHmaEFn_VzI7g3yqpU4.crl (hash: NT33JMBrJg5F+ACt2FMprGCnG2+Y+IozmD2rPO9uSf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/6bbce4-c7d6-4418-9368-247a86b40d5d/1/PbRBy1aafHmaEFn_VzI7g3yqpU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/6bbce4-c7d6-4418-9368-247a86b40d5d/1/PbRBy1aafHmaEFn_VzI7g3yqpU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PbRBy1aafHmaEFn_VzI7g3yqpU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:b2:8e:72:77:1d:b1:5a:fd:b7:32:89:94:5f:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3db441cb569a7c799a1059ff57323b837caaa54e
Validity
Not Before: Nov 11 04:00:41 2025 GMT
Not After : Nov 12 04:00:41 2025 GMT
Subject: CN=91911309bb56e08316fc5feaad3c1be50aaede47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:56:c1:87:ab:03:db:68:32:4e:78:82:04:44:
f6:d1:12:49:ab:a8:f9:1e:01:10:e0:dd:0d:2a:dc:
62:98:ee:ea:e7:48:87:33:ec:53:94:51:f2:1b:fe:
8a:45:9a:01:c6:a6:02:b3:72:5d:06:cf:f4:53:71:
f5:eb:9a:df:b7:79:23:a8:54:91:af:0f:92:a2:60:
52:03:ab:a9:92:19:87:75:a7:40:1d:ed:bb:6e:5a:
c9:a2:3b:5e:21:1f:38:19:ef:5d:c7:e4:a5:7e:b7:
f0:56:0a:11:50:c0:b1:6a:ce:48:ea:f5:f7:0b:d1:
ae:01:2b:8a:87:ed:fe:06:53:de:8a:18:97:65:6b:
5f:4e:01:00:44:4b:36:a1:30:b0:13:a0:a5:ba:2e:
a5:24:ea:4f:9f:41:da:7d:ee:71:ba:93:60:4c:14:
ba:97:a7:d0:19:43:8a:30:b7:b3:3b:4b:82:82:b4:
b9:01:d2:7c:d7:d7:8e:05:73:8e:2a:b3:cc:f6:77:
19:ed:37:90:c3:3f:bc:63:3a:c9:a9:ae:77:8b:53:
4f:9c:06:64:07:f8:b2:78:58:74:29:79:59:4b:ff:
6b:19:5f:54:dd:30:7a:64:ff:ef:1c:88:3d:c8:61:
e1:34:6d:91:ed:69:05:d2:b3:c9:09:c7:f0:71:cf:
26:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:91:13:09:BB:56:E0:83:16:FC:5F:EA:AD:3C:1B:E5:0A:AE:DE:47
X509v3 Authority Key Identifier:
keyid:3D:B4:41:CB:56:9A:7C:79:9A:10:59:FF:57:32:3B:83:7C:AA:A5:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PbRBy1aafHmaEFn_VzI7g3yqpU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6bbce4-c7d6-4418-9368-247a86b40d5d/1/PbRBy1aafHmaEFn_VzI7g3yqpU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6bbce4-c7d6-4418-9368-247a86b40d5d/1/PbRBy1aafHmaEFn_VzI7g3yqpU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:e5:d5:3a:b1:3a:2c:76:47:6d:09:77:24:04:f0:97:d3:e9:
c6:a5:63:46:4f:cc:38:67:71:c2:bb:79:cc:f8:15:b4:f7:97:
07:84:c3:47:7b:bd:f7:2b:65:0b:73:9c:ab:a0:fc:82:e4:80:
78:c3:bf:2a:41:25:8e:7b:89:2b:ac:6a:09:ca:b7:d2:e9:f0:
6d:c2:85:6d:3e:54:89:11:10:81:cc:e6:46:50:37:23:87:bc:
76:47:9d:c1:f7:06:53:0e:42:71:ed:dc:58:4c:fc:9e:19:ab:
1c:5a:f7:7e:bd:6d:d4:b2:ae:5f:38:3b:b0:ac:83:c6:e5:d7:
10:35:37:9d:53:1e:d8:3a:15:66:cc:85:5b:ab:c3:42:ae:b0:
29:84:8d:51:11:3c:0c:12:c3:1d:c8:d3:5e:0d:2f:64:68:0f:
7b:1b:9d:0a:96:d0:a4:5a:1c:35:52:f4:55:78:1e:0a:dd:7f:
15:66:8b:06:a0:4d:62:28:9c:10:59:30:32:d2:d8:38:12:db:
96:ad:1b:01:7d:7d:8d:d2:0b:6d:1f:8d:79:23:42:7c:4a:be:
da:a3:05:d1:c2:c7:78:77:75:71:57:97:17:5e:62:16:a6:bb:
02:60:7c:76:fb:77:46:4f:07:1a:04:fd:27:0b:c9:ef:57:8a:
93:08:5d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:44:19 2025 by rpki-client