Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft
File: PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft (raw, json)
Hash identifier: WmdQ9V6Bcky1pG2+0gPHB1XQW3sSvAG55m13oGWVQNo=
Subject key identifier: 0E:60:16:EB:AD:41:82:38:4E:42:A4:DF:FC:C6:A0:F4:CE:4C:7B:E8
Authority key identifier: 3D:B0:49:DA:5E:12:06:4E:CF:E1:39:E1:20:BE:EF:6F:17:8B:FD:F3
Certificate issuer: /CN=3db049da5e12064ecfe139e120beef6f178bfdf3
Certificate serial: 01974CD76B3DD1C405A36D7FED27F1F1D0F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft
Manifest number: B5
Signing time: Sun 08 Jun 2025 00:01:15 +0000
Manifest this update: Sun 08 Jun 2025 00:01:15 +0000
Manifest next update: Mon 09 Jun 2025 00:01:15 +0000
Files and hashes: 1: ArxWoIoACVsuecj6oH-B8iFComg.roa (hash: rlcyNszToJSApviKpB6wzSvDYhbI3eJligCvoVuiSks=)
2: PbBJ2l4SBk7P4TnhIL7vbxeL_fM.crl (hash: Sx46x7SBH1atYUdUsgjpzTzNOyQTNPqnn9/JujOSFo8=)
3: ar9nZIGwi2DhhokEeZ0Cb06cevE.roa (hash: Z0Bly0p6G10RTWfWyE9HNHAJ9d6Fob4NgEePaV17UE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 00:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:d7:6b:3d:d1:c4:05:a3:6d:7f:ed:27:f1:f1:d0:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3db049da5e12064ecfe139e120beef6f178bfdf3
Validity
Not Before: Jun 8 00:01:15 2025 GMT
Not After : Jun 9 00:01:15 2025 GMT
Subject: CN=0e6016ebad4182384e42a4dffcc6a0f4ce4c7be8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:54:2a:29:0b:cb:5c:7d:1a:97:d9:ca:e3:54:
93:41:97:83:f0:ef:ae:e9:28:9a:d7:ae:34:8f:09:
90:fc:ac:43:3d:9e:53:2f:7b:6c:06:7c:06:69:a0:
3d:d9:8e:ea:8b:60:0b:09:fb:78:c2:fc:5c:c3:17:
9c:40:c1:4e:57:03:d0:42:2c:b7:55:0d:0f:66:77:
b4:64:5a:96:9c:7b:cb:93:6e:b5:65:74:24:45:24:
9c:ff:71:30:24:af:f5:67:5a:51:77:58:7a:5c:ab:
f5:0c:cb:68:3f:27:e3:29:6a:ce:2d:5d:99:17:79:
53:4f:f8:28:22:90:be:ec:99:c1:96:e5:d0:57:19:
eb:62:5f:4f:ce:f7:1a:07:36:e3:e3:3f:a7:3e:8d:
52:0b:16:81:2b:2f:58:0a:13:78:91:fb:74:63:36:
40:3c:b4:f3:59:50:4c:2c:cd:66:7c:1e:3b:33:66:
38:2b:ae:d3:33:e0:f2:e4:cb:c3:07:33:3c:90:b4:
32:a7:13:b6:68:40:64:4a:7b:4f:0e:9d:6a:eb:60:
4d:65:45:d4:1a:09:da:ad:f0:36:05:0f:85:6a:52:
07:24:e1:57:c6:02:03:68:50:c0:20:4d:cb:21:95:
dd:58:83:4a:4f:39:2d:2e:5d:5e:24:d8:3e:f5:2a:
31:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:60:16:EB:AD:41:82:38:4E:42:A4:DF:FC:C6:A0:F4:CE:4C:7B:E8
X509v3 Authority Key Identifier:
keyid:3D:B0:49:DA:5E:12:06:4E:CF:E1:39:E1:20:BE:EF:6F:17:8B:FD:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:1f:a7:e6:6f:8f:92:55:6f:3d:42:88:7e:04:a7:17:40:c2:
d2:d6:95:07:b8:1c:eb:db:44:39:a8:14:b7:e6:0f:0b:bc:4e:
d1:96:73:a1:e3:53:f0:a5:51:a7:74:0d:0f:1a:99:72:d2:b1:
31:ae:b8:a5:f1:32:58:c8:54:ec:b2:f5:c6:94:64:78:8b:fc:
b3:37:ef:d9:59:f5:dd:b0:36:f7:5e:d6:db:37:24:ab:c9:0d:
83:8e:2b:e6:eb:ca:c5:79:8f:d1:2f:48:38:29:1b:59:88:8f:
c6:11:22:39:78:8f:63:26:c8:4f:ba:0d:04:b6:98:de:71:25:
05:5c:e4:28:ac:6f:10:5e:43:8b:a5:5c:7a:90:4c:42:6f:38:
dc:1e:03:2e:41:3c:53:ed:c3:9c:43:5d:9c:77:44:cf:55:2f:
43:21:1e:ae:45:24:98:3e:17:22:80:67:90:63:5b:73:a6:5b:
33:41:14:a9:b1:13:f9:ee:64:3e:63:d3:61:72:5d:a2:63:57:
c6:c4:ec:95:45:0f:18:6a:1b:42:9d:49:36:0d:03:8f:6c:ab:
14:aa:27:f2:5f:25:82:9b:2b:f7:b6:08:91:75:14:fe:72:ad:
3d:da:c8:8e:e3:27:cd:3c:e0:a3:a0:6d:83:76:de:3d:51:db:
1e:4a:93:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdM12s90cQFo21/7Sfx8dD0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkYjA0OWRhNWUxMjA2NGVjZmUxMzllMTIwYmVlZjZmMTc4
YmZkZjMwHhcNMjUwNjA4MDAwMTE1WhcNMjUwNjA5MDAwMTE1WjAzMTEwLwYDVQQD
EygwZTYwMTZlYmFkNDE4MjM4NGU0MmE0ZGZmY2M2YTBmNGNlNGM3YmU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFQqKQvLXH0al9nK41STQZeD8O+u
6Sia1640jwmQ/KxDPZ5TL3tsBnwGaaA92Y7qi2ALCft4wvxcwxecQMFOVwPQQiy3
VQ0PZne0ZFqWnHvLk261ZXQkRSSc/3EwJK/1Z1pRd1h6XKv1DMtoPyfjKWrOLV2Z
F3lTT/goIpC+7JnBluXQVxnrYl9PzvcaBzbj4z+nPo1SCxaBKy9YChN4kft0YzZA
PLTzWVBMLM1mfB47M2Y4K67TM+Dy5MvDBzM8kLQypxO2aEBkSntPDp1q62BNZUXU
GgnarfA2BQ+FalIHJOFXxgIDaFDAIE3LIZXdWINKTzktLl1eJNg+9Sox2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA5gFuutQYI4TkKk3/zGoPTOTHvoMB8GA1UdIwQY
MBaAFD2wSdpeEgZOz+E54SC+728Xi/3zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGJCSjJsNFNCazdQNFRuaElMN3ZieGVMX2ZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy81YmM1MTctYzFmNi00ZTRmLWI1Yzct
OGU1N2JhZDVjNTI3LzEvUGJCSjJsNFNCazdQNFRuaElMN3ZieGVMX2ZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy81YmM1MTctYzFmNi00ZTRmLWI1YzctOGU1N2JhZDVjNTI3
LzEvUGJCSjJsNFNCazdQNFRuaElMN3ZieGVMX2ZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeB+n5m+P
klVvPUKIfgSnF0DC0taVB7gc69tEOagUt+YPC7xO0ZZzoeNT8KVRp3QNDxqZctKx
Ma64pfEyWMhU7LL1xpRkeIv8szfv2Vn13bA2917W2zckq8kNg44r5uvKxXmP0S9I
OCkbWYiPxhEiOXiPYybIT7oNBLaY3nElBVzkKKxvEF5Di6VcepBMQm843B4DLkE8
U+3DnENdnHdEz1UvQyEerkUkmD4XIoBnkGNbc6ZbM0EUqbET+e5kPmPTYXJdomNX
xsTslUUPGGobQp1JNg0Dj2yrFKon8l8lgpsr97YIkXUU/nKtPdrIjuMnzTzgo6Bt
g3bePVHbHkqTew==
-----END CERTIFICATE-----
Generated at Sun Jun 8 09:03:05 2025 by rpki-client