Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/f7bbc4-562a-4e79-a8ee-9380e5cc0580/1/PbbiTPwA0i9O-jmkIdr7e7HaS4M.mft
File: PbbiTPwA0i9O-jmkIdr7e7HaS4M.mft (raw, json)
Hash identifier: E2taH2v4XYZie7dZTCfaBx0iQ8j80l6ERegBXSsUfYk=
Subject key identifier: 34:BC:62:52:A0:0A:5F:B2:24:4A:66:05:A1:3F:18:E8:95:B2:F3:65
Authority key identifier: 3D:B6:E2:4C:FC:00:D2:2F:4E:FA:39:A4:21:DA:FB:7B:B1:DA:4B:83
Certificate issuer: /CN=3db6e24cfc00d22f4efa39a421dafb7bb1da4b83
Certificate serial: 019A2108EF43CE03ED240A14025638544AFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PbbiTPwA0i9O-jmkIdr7e7HaS4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/f7bbc4-562a-4e79-a8ee-9380e5cc0580/1/PbbiTPwA0i9O-jmkIdr7e7HaS4M.mft
Manifest number: 103A
Signing time: Sun 26 Oct 2025 15:00:24 +0000
Manifest this update: Sun 26 Oct 2025 15:00:24 +0000
Manifest next update: Mon 27 Oct 2025 15:00:24 +0000
Files and hashes: 1: PbbiTPwA0i9O-jmkIdr7e7HaS4M.crl (hash: H4QCStZmDt+NhrMGmeHcTiiNPeyglu3Dff4yT6wEED8=)
2: he1zzqscDQVrqbAH6ruuBRGptHQ.roa (hash: pIEmG6D6JQGwEUn6Yp/QlQoXb08gkZ0Iha980hmaQQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/f7bbc4-562a-4e79-a8ee-9380e5cc0580/1/PbbiTPwA0i9O-jmkIdr7e7HaS4M.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/f7bbc4-562a-4e79-a8ee-9380e5cc0580/1/PbbiTPwA0i9O-jmkIdr7e7HaS4M.mft
rsync://rpki.ripe.net/repository/DEFAULT/PbbiTPwA0i9O-jmkIdr7e7HaS4M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:08:ef:43:ce:03:ed:24:0a:14:02:56:38:54:4a:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3db6e24cfc00d22f4efa39a421dafb7bb1da4b83
Validity
Not Before: Oct 26 15:00:24 2025 GMT
Not After : Oct 27 15:00:24 2025 GMT
Subject: CN=34bc6252a00a5fb2244a6605a13f18e895b2f365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1b:46:56:59:09:41:6b:a2:2a:3c:e9:d7:f9:
50:ac:eb:2e:96:10:f8:5d:02:11:67:3f:2a:d7:86:
30:40:d8:42:e4:3b:18:f5:4f:be:a6:54:b6:9b:d3:
d3:02:15:5b:d5:11:93:27:14:b1:fe:26:8b:32:c0:
a6:1d:02:20:b8:53:7b:21:e1:55:13:39:78:95:57:
b8:9a:17:06:1d:90:86:9d:ec:99:e2:b7:67:31:ca:
18:61:d0:97:d2:b4:df:f2:50:98:f7:fd:e5:3f:2b:
02:de:ef:15:bf:38:db:a4:8a:50:0b:bd:56:c0:cf:
9f:29:b9:66:dc:55:84:b2:96:de:88:e3:68:0d:87:
cf:36:ce:b7:07:c5:3f:c9:29:de:3f:a2:05:6a:5c:
1b:92:b5:f3:98:b4:b9:69:a6:8c:0f:25:c3:dc:30:
a4:18:0c:4a:fd:5c:81:59:22:76:40:f4:0c:cf:d8:
31:6b:56:03:01:c8:24:1d:c2:d1:c6:06:93:d4:f3:
45:e2:52:eb:ea:09:4c:b6:ea:6a:b5:5f:ff:35:53:
5b:3d:68:e2:67:f9:43:09:ae:6b:67:7f:1c:e4:49:
d9:19:ee:64:62:30:6e:13:cd:39:52:3b:89:f1:8a:
d7:3e:b8:ae:59:52:4a:1c:9f:eb:f4:00:30:53:96:
83:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:BC:62:52:A0:0A:5F:B2:24:4A:66:05:A1:3F:18:E8:95:B2:F3:65
X509v3 Authority Key Identifier:
keyid:3D:B6:E2:4C:FC:00:D2:2F:4E:FA:39:A4:21:DA:FB:7B:B1:DA:4B:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PbbiTPwA0i9O-jmkIdr7e7HaS4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/f7bbc4-562a-4e79-a8ee-9380e5cc0580/1/PbbiTPwA0i9O-jmkIdr7e7HaS4M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/f7bbc4-562a-4e79-a8ee-9380e5cc0580/1/PbbiTPwA0i9O-jmkIdr7e7HaS4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:81:57:90:aa:c7:16:92:6b:28:3e:b0:62:6a:4d:87:fd:64:
81:23:27:97:81:2f:ce:de:38:a1:aa:50:47:19:56:01:98:79:
87:28:5a:83:bd:8e:08:35:e1:3f:37:fd:52:91:dd:27:54:00:
14:c7:9d:96:d4:6b:8a:15:fa:f6:ce:a5:e5:a7:a2:04:89:d0:
87:13:1a:73:19:e1:de:14:1c:fe:a8:4b:c9:07:d3:09:21:d0:
a7:f9:05:e4:ee:a1:80:57:82:ce:6b:ec:e2:d4:4c:4c:c9:ca:
8b:e6:fa:a7:cc:b4:de:ce:87:c6:7a:3f:2f:ff:a6:31:5a:81:
fa:fe:20:e5:e4:87:29:02:01:73:7b:46:71:30:09:ce:02:cf:
48:45:ca:f0:e1:dd:bb:ab:47:94:cf:e3:16:21:30:0c:98:02:
0d:3a:14:8c:58:c1:64:58:dd:53:e3:38:c4:46:24:bc:c8:2c:
f3:b5:a4:5a:84:d8:c0:8e:20:91:24:2c:c5:ae:84:0b:2f:34:
22:ad:6d:1a:13:b3:63:84:62:52:d3:19:9e:c1:27:11:5b:28:
d2:3f:dc:b7:ee:f5:81:44:4e:fd:48:a9:a9:89:66:27:47:18:
d6:67:6f:63:e7:d5:19:b6:aa:49:e4:aa:7c:75:0a:a2:60:9f:
97:db:9f:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZohCO9DzgPtJAoUAlY4VEr+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkYjZlMjRjZmMwMGQyMmY0ZWZhMzlhNDIxZGFmYjdiYjFk
YTRiODMwHhcNMjUxMDI2MTUwMDI0WhcNMjUxMDI3MTUwMDI0WjAzMTEwLwYDVQQD
EygzNGJjNjI1MmEwMGE1ZmIyMjQ0YTY2MDVhMTNmMThlODk1YjJmMzY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRtGVlkJQWuiKjzp1/lQrOsulhD4
XQIRZz8q14YwQNhC5DsY9U++plS2m9PTAhVb1RGTJxSx/iaLMsCmHQIguFN7IeFV
Ezl4lVe4mhcGHZCGneyZ4rdnMcoYYdCX0rTf8lCY9/3lPysC3u8VvzjbpIpQC71W
wM+fKblm3FWEspbeiONoDYfPNs63B8U/ySneP6IFalwbkrXzmLS5aaaMDyXD3DCk
GAxK/VyBWSJ2QPQMz9gxa1YDAcgkHcLRxgaT1PNF4lLr6glMtupqtV//NVNbPWji
Z/lDCa5rZ38c5EnZGe5kYjBuE805UjuJ8YrXPriuWVJKHJ/r9AAwU5aDMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDS8YlKgCl+yJEpmBaE/GOiVsvNlMB8GA1UdIwQY
MBaAFD224kz8ANIvTvo5pCHa+3ux2kuDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGJiaVRQd0EwaTlPLWpta0lkcjdlN0hhUzRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9mN2JiYzQtNTYyYS00ZTc5LWE4ZWUt
OTM4MGU1Y2MwNTgwLzEvUGJiaVRQd0EwaTlPLWpta0lkcjdlN0hhUzRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC9mN2JiYzQtNTYyYS00ZTc5LWE4ZWUtOTM4MGU1Y2MwNTgw
LzEvUGJiaVRQd0EwaTlPLWpta0lkcjdlN0hhUzRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM4FXkKrH
FpJrKD6wYmpNh/1kgSMnl4Evzt44oapQRxlWAZh5hyhag72OCDXhPzf9UpHdJ1QA
FMedltRrihX69s6l5aeiBInQhxMacxnh3hQc/qhLyQfTCSHQp/kF5O6hgFeCzmvs
4tRMTMnKi+b6p8y03s6Hxno/L/+mMVqB+v4g5eSHKQIBc3tGcTAJzgLPSEXK8OHd
u6tHlM/jFiEwDJgCDToUjFjBZFjdU+M4xEYkvMgs87WkWoTYwI4gkSQsxa6ECy80
Iq1tGhOzY4RiUtMZnsEnEVso0j/ct+71gURO/UipqYlmJ0cY1mdvY+fVGbaqSeSq
fHUKomCfl9uftw==
-----END CERTIFICATE-----
Generated at Sun Oct 26 20:25:49 2025 by rpki-client