Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft
File: PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft (raw, json)
Hash identifier: s0cQi2j8XWUGZylxbjRIPTFabmn/sd8Iy2mxgHFgBb0=
Subject key identifier: 66:C7:1A:11:60:7C:73:92:63:2A:B9:3D:0E:11:E2:97:36:23:2B:CB
Authority key identifier: 3D:B0:49:DA:5E:12:06:4E:CF:E1:39:E1:20:BE:EF:6F:17:8B:FD:F3
Certificate issuer: /CN=3db049da5e12064ecfe139e120beef6f178bfdf3
Certificate serial: 019A26D3E316880F6D295651CE64C7B17E54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft
Manifest number: 022F
Signing time: Mon 27 Oct 2025 18:00:11 +0000
Manifest this update: Mon 27 Oct 2025 18:00:11 +0000
Manifest next update: Tue 28 Oct 2025 18:00:11 +0000
Files and hashes: 1: ArxWoIoACVsuecj6oH-B8iFComg.roa (hash: rlcyNszToJSApviKpB6wzSvDYhbI3eJligCvoVuiSks=)
2: PbBJ2l4SBk7P4TnhIL7vbxeL_fM.crl (hash: f9B8l1EnB12eYbdEKe2J2osgJkfxGaniHEBfUFDJs2A=)
3: ar9nZIGwi2DhhokEeZ0Cb06cevE.roa (hash: Z0Bly0p6G10RTWfWyE9HNHAJ9d6Fob4NgEePaV17UE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 15:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:d3:e3:16:88:0f:6d:29:56:51:ce:64:c7:b1:7e:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3db049da5e12064ecfe139e120beef6f178bfdf3
Validity
Not Before: Oct 27 18:00:11 2025 GMT
Not After : Oct 28 18:00:11 2025 GMT
Subject: CN=66c71a11607c7392632ab93d0e11e29736232bcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d3:a4:31:03:a7:39:9f:bb:4b:a8:5d:a0:42:
8c:fe:96:37:e1:76:ee:a7:13:42:43:61:5a:ef:23:
e0:2f:ed:01:c4:ab:55:48:63:ce:61:de:6f:61:aa:
d6:ba:4d:70:cd:c4:b7:7d:86:aa:d7:87:a4:dd:e8:
fa:e9:7d:16:26:9a:b2:07:f0:09:71:55:ea:d7:b6:
e5:52:15:0d:9e:2f:80:8c:e4:79:59:c5:fd:50:cb:
fb:90:94:30:8a:df:1b:23:69:c3:ba:55:e8:98:15:
04:bb:88:3a:d9:cd:6f:5e:cb:d8:cc:a5:d9:3a:49:
ae:ea:29:e7:f8:28:59:8b:8f:ae:38:a5:62:ea:14:
f4:83:a9:5a:39:bf:37:c8:59:34:1d:24:0e:84:2f:
d1:4b:51:4a:e9:19:fd:d3:13:cd:c8:eb:40:9a:f7:
bb:1c:c9:0b:29:63:d7:8f:49:f3:af:b6:92:1f:3c:
ae:62:34:b5:ae:0b:fc:53:3c:e3:02:2c:49:04:25:
fe:e1:28:25:63:40:b8:00:fd:9d:c0:cb:1c:6a:fd:
73:cf:aa:90:8a:de:59:07:c7:f3:b9:15:c2:e7:9c:
76:d5:68:bb:4a:ae:e6:df:39:5f:0c:49:23:5c:63:
a8:61:2e:9e:2c:32:68:55:45:86:fb:36:cf:e6:0a:
ca:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:C7:1A:11:60:7C:73:92:63:2A:B9:3D:0E:11:E2:97:36:23:2B:CB
X509v3 Authority Key Identifier:
keyid:3D:B0:49:DA:5E:12:06:4E:CF:E1:39:E1:20:BE:EF:6F:17:8B:FD:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/5bc517-c1f6-4e4f-b5c7-8e57bad5c527/1/PbBJ2l4SBk7P4TnhIL7vbxeL_fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:6c:8c:78:e3:29:cf:9a:79:1d:e8:74:4e:4b:c4:44:9e:86:
bb:0f:65:ed:06:04:9b:ec:a6:b9:47:7f:aa:65:36:88:7a:41:
42:df:84:97:19:6c:48:ac:d8:43:99:74:ca:0e:30:79:c2:fb:
c2:3f:4c:f4:37:59:b3:fd:0c:49:2f:58:06:ff:67:98:c9:d2:
17:9b:c2:e0:98:17:12:1d:4d:e3:06:05:28:48:fc:13:77:0d:
27:a8:01:d8:45:6a:60:e7:f7:99:f9:c6:2c:72:28:e6:14:f5:
d5:ae:c3:00:aa:0b:35:b8:51:a0:ca:b0:bb:51:8f:a8:8c:e4:
61:03:4f:52:0d:ff:7d:64:92:4b:3e:c4:03:34:50:2e:4e:de:
d6:a3:f0:af:a0:65:6d:33:67:09:41:34:7d:84:8f:94:d5:7c:
70:2d:5d:82:11:0a:29:23:51:f0:32:ab:d5:0c:00:5f:fb:dd:
88:70:5e:84:f3:d9:51:af:67:33:a4:33:5e:85:7d:a6:d4:69:
7d:c7:49:40:25:3b:a7:e2:f9:16:67:1f:14:f9:42:bd:8a:df:
39:32:0c:53:28:b0:7d:bc:4c:73:d2:d3:d5:2f:df:30:fb:ec:
51:ec:3b:23:37:5a:5d:56:95:a5:00:f8:3e:c3:cc:45:e7:66:
dc:91:f9:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZom0+MWiA9tKVZRzmTHsX5UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkYjA0OWRhNWUxMjA2NGVjZmUxMzllMTIwYmVlZjZmMTc4
YmZkZjMwHhcNMjUxMDI3MTgwMDExWhcNMjUxMDI4MTgwMDExWjAzMTEwLwYDVQQD
Eyg2NmM3MWExMTYwN2M3MzkyNjMyYWI5M2QwZTExZTI5NzM2MjMyYmNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3tOkMQOnOZ+7S6hdoEKM/pY34Xbu
pxNCQ2Fa7yPgL+0BxKtVSGPOYd5vYarWuk1wzcS3fYaq14ek3ej66X0WJpqyB/AJ
cVXq17blUhUNni+AjOR5WcX9UMv7kJQwit8bI2nDulXomBUEu4g62c1vXsvYzKXZ
Okmu6inn+ChZi4+uOKVi6hT0g6laOb83yFk0HSQOhC/RS1FK6Rn90xPNyOtAmve7
HMkLKWPXj0nzr7aSHzyuYjS1rgv8UzzjAixJBCX+4SglY0C4AP2dwMscav1zz6qQ
it5ZB8fzuRXC55x21Wi7Sq7m3zlfDEkjXGOoYS6eLDJoVUWG+zbP5grKcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGbHGhFgfHOSYyq5PQ4R4pc2IyvLMB8GA1UdIwQY
MBaAFD2wSdpeEgZOz+E54SC+728Xi/3zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGJCSjJsNFNCazdQNFRuaElMN3ZieGVMX2ZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy81YmM1MTctYzFmNi00ZTRmLWI1Yzct
OGU1N2JhZDVjNTI3LzEvUGJCSjJsNFNCazdQNFRuaElMN3ZieGVMX2ZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy81YmM1MTctYzFmNi00ZTRmLWI1YzctOGU1N2JhZDVjNTI3
LzEvUGJCSjJsNFNCazdQNFRuaElMN3ZieGVMX2ZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcWyMeOMp
z5p5Heh0TkvERJ6Guw9l7QYEm+ymuUd/qmU2iHpBQt+ElxlsSKzYQ5l0yg4wecL7
wj9M9DdZs/0MSS9YBv9nmMnSF5vC4JgXEh1N4wYFKEj8E3cNJ6gB2EVqYOf3mfnG
LHIo5hT11a7DAKoLNbhRoMqwu1GPqIzkYQNPUg3/fWSSSz7EAzRQLk7e1qPwr6Bl
bTNnCUE0fYSPlNV8cC1dghEKKSNR8DKr1QwAX/vdiHBehPPZUa9nM6QzXoV9ptRp
fcdJQCU7p+L5FmcfFPlCvYrfOTIMUyiwfbxMc9LT1S/fMPvsUew7IzdaXVaVpQD4
PsPMRedm3JH5wA==
-----END CERTIFICATE-----
Generated at Mon Oct 27 22:43:57 2025 by rpki-client