Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft
File: PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft (raw, json)
Hash identifier: iDlIv7Kdr++0PnrZ439PYRE0Isp3692w5ytuT90Fbsk=
Subject key identifier: 4F:A6:FD:5B:85:BA:75:BF:03:10:2F:6B:59:45:4B:5B:CD:CA:6E:32
Authority key identifier: 3D:B0:49:DA:5E:12:06:4E:CF:E1:39:E1:20:BE:EF:6F:17:8B:FD:F3
Certificate issuer: /CN=3db049da5e12064ecfe139e120beef6f178bfdf3
Certificate serial: 0199375C827297E099557FBCFEFD858D0359
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft
Manifest number: 01B3
Signing time: Thu 11 Sep 2025 06:00:33 +0000
Manifest this update: Thu 11 Sep 2025 06:00:33 +0000
Manifest next update: Fri 12 Sep 2025 06:00:33 +0000
Files and hashes: 1: ArxWoIoACVsuecj6oH-B8iFComg.roa (hash: rlcyNszToJSApviKpB6wzSvDYhbI3eJligCvoVuiSks=)
2: PbBJ2l4SBk7P4TnhIL7vbxeL_fM.crl (hash: Jv0V+kuGR2h3tO6HHev6P7mi2tuDkmQVOwQcwAQOiNM=)
3: ar9nZIGwi2DhhokEeZ0Cb06cevE.roa (hash: Z0Bly0p6G10RTWfWyE9HNHAJ9d6Fob4NgEePaV17UE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:37:5c:82:72:97:e0:99:55:7f:bc:fe:fd:85:8d:03:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3db049da5e12064ecfe139e120beef6f178bfdf3
Validity
Not Before: Sep 11 06:00:33 2025 GMT
Not After : Sep 12 06:00:33 2025 GMT
Subject: CN=4fa6fd5b85ba75bf03102f6b59454b5bcdca6e32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:9c:c5:97:91:df:a0:dd:06:c2:a2:06:fa:c3:
5f:47:88:fe:45:23:d1:5c:d2:15:ec:3b:c3:ce:fc:
01:79:02:aa:a0:d0:4c:f9:c4:44:35:b1:8a:3b:64:
ae:90:81:33:6f:c1:cc:a3:88:26:07:22:2a:e9:b6:
53:8a:34:dc:07:8b:73:60:ab:c1:f2:70:59:c4:ed:
89:00:6e:0b:76:9a:07:b3:73:48:19:18:6b:9b:da:
32:d3:2d:8f:8d:98:80:63:c5:e0:07:2f:7a:bc:0d:
75:66:87:d5:13:06:76:c0:84:3a:4e:c5:45:cf:c0:
9d:7e:24:c0:ec:5c:1a:a9:ec:19:63:d2:ef:51:c2:
6d:aa:43:b4:3a:41:5c:6b:53:a3:ae:41:36:7d:f9:
81:3e:56:ff:8b:92:38:3d:c4:28:f4:93:ed:0f:ef:
60:0e:66:3d:f7:aa:78:8d:ec:4f:05:a1:34:8e:5c:
5c:48:67:24:f3:bc:22:40:b1:48:dc:14:d4:41:57:
5e:5c:5f:e8:21:d4:fd:23:d4:6d:ad:b0:2d:46:9f:
e4:f9:40:64:a0:18:70:8e:69:ba:c1:7c:e0:e2:f7:
ec:1d:c3:0e:a5:09:0a:30:fa:c3:ad:b1:6d:e1:2f:
1b:58:5c:f1:bc:bb:c2:aa:62:76:5e:16:86:84:e8:
95:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:A6:FD:5B:85:BA:75:BF:03:10:2F:6B:59:45:4B:5B:CD:CA:6E:32
X509v3 Authority Key Identifier:
keyid:3D:B0:49:DA:5E:12:06:4E:CF:E1:39:E1:20:BE:EF:6F:17:8B:FD:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:af:5c:e7:50:9f:f4:e4:35:26:4a:91:04:e5:18:01:80:ec:
0f:c4:cf:73:00:12:50:86:ed:e9:ef:17:ba:e0:c0:5a:7a:9f:
58:b2:12:70:da:26:4b:c9:22:dc:8d:8d:ec:0c:a7:15:de:2f:
40:31:ff:6f:9b:88:54:34:09:b3:9c:6e:8f:ac:d6:34:db:cc:
57:d8:5b:4f:e8:e3:5c:46:8d:92:87:e9:9d:7a:87:7f:55:00:
65:91:ac:bd:ea:1b:c6:01:01:2c:7c:81:8d:76:68:75:16:33:
76:1d:d3:bd:f2:0a:61:98:ba:50:07:ed:39:34:f6:21:77:da:
69:fd:df:df:e5:3f:a9:a7:0e:0a:45:1b:7e:b8:e7:6a:10:ed:
f6:51:ef:a6:ce:0a:aa:9d:1f:c6:bf:54:85:27:dd:b1:dd:cb:
19:ef:42:81:99:ff:9d:5f:c8:4d:f7:23:94:20:94:db:ae:83:
ef:e1:4c:18:bb:f6:3a:7f:5d:22:29:f1:52:b4:7a:ff:77:97:
36:ef:af:9e:4a:25:e5:eb:8b:ac:87:95:92:96:97:f4:e9:80:
c8:d9:fe:b9:02:fb:e5:9a:4e:b8:59:7a:31:12:a4:3f:2c:9a:
d0:47:52:04:12:00:b7:25:84:ce:55:96:d0:3c:99:9d:6d:b3:
b3:1b:02:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk3XIJyl+CZVX+8/v2FjQNZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkYjA0OWRhNWUxMjA2NGVjZmUxMzllMTIwYmVlZjZmMTc4
YmZkZjMwHhcNMjUwOTExMDYwMDMzWhcNMjUwOTEyMDYwMDMzWjAzMTEwLwYDVQQD
Eyg0ZmE2ZmQ1Yjg1YmE3NWJmMDMxMDJmNmI1OTQ1NGI1YmNkY2E2ZTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZzFl5HfoN0GwqIG+sNfR4j+RSPR
XNIV7DvDzvwBeQKqoNBM+cRENbGKO2SukIEzb8HMo4gmByIq6bZTijTcB4tzYKvB
8nBZxO2JAG4LdpoHs3NIGRhrm9oy0y2PjZiAY8XgBy96vA11ZofVEwZ2wIQ6TsVF
z8CdfiTA7FwaqewZY9LvUcJtqkO0OkFca1OjrkE2ffmBPlb/i5I4PcQo9JPtD+9g
DmY996p4jexPBaE0jlxcSGck87wiQLFI3BTUQVdeXF/oIdT9I9RtrbAtRp/k+UBk
oBhwjmm6wXzg4vfsHcMOpQkKMPrDrbFt4S8bWFzxvLvCqmJ2XhaGhOiV9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE+m/VuFunW/AxAva1lFS1vNym4yMB8GA1UdIwQY
MBaAFD2wSdpeEgZOz+E54SC+728Xi/3zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGJCSjJsNFNCazdQNFRuaElMN3ZieGVMX2ZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy81YmM1MTctYzFmNi00ZTRmLWI1Yzct
OGU1N2JhZDVjNTI3LzEvUGJCSjJsNFNCazdQNFRuaElMN3ZieGVMX2ZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy81YmM1MTctYzFmNi00ZTRmLWI1YzctOGU1N2JhZDVjNTI3
LzEvUGJCSjJsNFNCazdQNFRuaElMN3ZieGVMX2ZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY69c51Cf
9OQ1JkqRBOUYAYDsD8TPcwASUIbt6e8XuuDAWnqfWLIScNomS8ki3I2N7AynFd4v
QDH/b5uIVDQJs5xuj6zWNNvMV9hbT+jjXEaNkofpnXqHf1UAZZGsveobxgEBLHyB
jXZodRYzdh3TvfIKYZi6UAftOTT2IXfaaf3f3+U/qacOCkUbfrjnahDt9lHvps4K
qp0fxr9UhSfdsd3LGe9CgZn/nV/ITfcjlCCU266D7+FMGLv2On9dIinxUrR6/3eX
Nu+vnkol5euLrIeVkpaX9OmAyNn+uQL75ZpOuFl6MRKkPyya0EdSBBIAtyWEzlWW
0DyZnW2zsxsC3g==
-----END CERTIFICATE-----
Generated at Thu Sep 11 11:47:02 2025 by rpki-client