Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/2d43c2-3b2e-4f2e-a6ad-a0a72a733c02/1/Pbiird2wAoUIVJlqlLcrh_Snsw8.mft
File: Pbiird2wAoUIVJlqlLcrh_Snsw8.mft (raw, json)
Hash identifier: nVZaFF7TSI3HTeQiNoUbFB0oR42h0tRq+V/HQWldVmI=
Subject key identifier: 8B:DF:3A:66:C0:C6:0B:B6:7B:18:BE:DC:5F:AD:6F:BF:07:50:95:1B
Authority key identifier: 3D:B8:A2:AD:DD:B0:02:85:08:54:99:6A:94:B7:2B:87:F4:A7:B3:0F
Certificate issuer: /CN=3db8a2adddb002850854996a94b72b87f4a7b30f
Certificate serial: 019A7225DE4977DD85525561C9987609852D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pbiird2wAoUIVJlqlLcrh_Snsw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/2d43c2-3b2e-4f2e-a6ad-a0a72a733c02/1/Pbiird2wAoUIVJlqlLcrh_Snsw8.mft
Manifest number: 0FCC
Signing time: Tue 11 Nov 2025 09:01:15 +0000
Manifest this update: Tue 11 Nov 2025 09:01:15 +0000
Manifest next update: Wed 12 Nov 2025 09:01:15 +0000
Files and hashes: 1: Pbiird2wAoUIVJlqlLcrh_Snsw8.crl (hash: RZrUT19/jw/JuoVd6XGRuxJ+3tUQ0asY5D+4mwejkoI=)
2: gt9goB76oJJ9IidA_tfxI6lWDIw.roa (hash: q0BFU46k9v4mjBVsSe1ZjIuLriX+JzS+b+gMagD0YfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/2d43c2-3b2e-4f2e-a6ad-a0a72a733c02/1/Pbiird2wAoUIVJlqlLcrh_Snsw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/2d43c2-3b2e-4f2e-a6ad-a0a72a733c02/1/Pbiird2wAoUIVJlqlLcrh_Snsw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pbiird2wAoUIVJlqlLcrh_Snsw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:de:49:77:dd:85:52:55:61:c9:98:76:09:85:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3db8a2adddb002850854996a94b72b87f4a7b30f
Validity
Not Before: Nov 11 09:01:15 2025 GMT
Not After : Nov 12 09:01:15 2025 GMT
Subject: CN=8bdf3a66c0c60bb67b18bedc5fad6fbf0750951b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d6:75:44:1a:a1:c8:6e:39:ed:df:a7:0c:d7:
75:48:d5:ed:b6:b4:1d:7a:25:1a:bd:65:46:d3:2d:
96:4b:0d:3f:31:20:0e:c4:64:7a:38:40:0c:1e:27:
d0:91:b5:da:e6:8f:52:63:44:8f:c7:c2:a0:4c:54:
77:e7:d1:3b:bc:30:13:47:e8:6a:75:3d:87:1e:7e:
c0:2a:19:e7:aa:89:44:94:aa:48:97:a5:0a:97:fc:
58:66:d2:19:42:67:02:29:8a:72:b4:72:65:66:ee:
62:36:a6:fa:a4:5c:c9:38:4c:21:2d:95:5d:66:38:
98:63:d3:a1:80:c1:ea:95:c6:ee:f1:50:5b:97:2b:
cd:47:60:b1:6e:d4:25:22:e0:30:d9:d4:05:b4:9c:
d3:27:88:af:67:4c:62:3a:37:c8:44:3b:f9:2e:d0:
e4:cc:d5:3f:da:e3:76:b9:77:dd:53:c0:e0:5d:24:
64:62:56:27:80:50:f0:8e:f3:f9:bc:3a:e9:6e:4f:
5d:66:c8:f7:ab:5d:3d:63:98:b4:71:93:61:e9:6f:
1e:0c:70:02:87:c4:7e:98:7c:5f:88:45:6e:2f:fb:
91:f6:b2:e4:d9:d3:8b:a0:7f:60:82:62:16:b5:65:
5b:dd:18:4a:ca:b1:81:45:66:a5:98:63:00:c2:4c:
dc:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:DF:3A:66:C0:C6:0B:B6:7B:18:BE:DC:5F:AD:6F:BF:07:50:95:1B
X509v3 Authority Key Identifier:
keyid:3D:B8:A2:AD:DD:B0:02:85:08:54:99:6A:94:B7:2B:87:F4:A7:B3:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pbiird2wAoUIVJlqlLcrh_Snsw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2d43c2-3b2e-4f2e-a6ad-a0a72a733c02/1/Pbiird2wAoUIVJlqlLcrh_Snsw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2d43c2-3b2e-4f2e-a6ad-a0a72a733c02/1/Pbiird2wAoUIVJlqlLcrh_Snsw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:3d:0c:83:30:29:30:b6:ec:87:05:11:6e:5e:d7:e9:40:83:
77:6d:72:0f:aa:9e:22:5d:6d:4e:ab:c9:bd:ab:8b:06:6a:8d:
1f:3d:15:33:24:7f:06:f0:3a:40:84:a3:f9:b6:97:b8:fe:5f:
f1:87:4b:79:71:ad:04:8d:84:8b:9e:46:a3:d6:3e:95:d6:4b:
24:c1:98:9b:da:f7:ab:f4:60:af:a7:47:4f:46:b8:9d:e8:90:
ea:20:23:52:8c:45:a7:d0:89:2e:b3:f8:4b:75:2a:fa:b4:bd:
03:30:13:28:32:3e:66:c4:af:89:ea:c2:c4:bf:6a:05:14:8d:
76:af:30:ce:35:9f:d0:cc:b3:03:aa:e8:b7:e7:c5:ac:8f:1b:
5c:9d:78:35:1d:44:cd:3d:5e:da:11:dd:63:41:75:dc:04:8f:
64:da:47:a6:dc:00:90:fc:cc:49:78:53:81:fc:ae:91:6f:11:
b6:53:55:f1:7f:b7:5e:0b:4a:f3:50:42:20:a0:08:ae:06:d4:
2b:42:b6:e4:bc:1f:36:9b:aa:f8:ff:73:b7:72:a4:17:2c:0f:
76:9c:d3:ef:bf:fe:f7:7a:8e:3d:62:2a:65:27:e8:2b:06:93:
a9:64:36:db:6a:7a:be:80:36:49:88:b6:28:01:84:38:b1:d0:
24:a1:97:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJd5Jd92FUlVhyZh2CYUtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkYjhhMmFkZGRiMDAyODUwODU0OTk2YTk0YjcyYjg3ZjRh
N2IzMGYwHhcNMjUxMTExMDkwMTE1WhcNMjUxMTEyMDkwMTE1WjAzMTEwLwYDVQQD
Eyg4YmRmM2E2NmMwYzYwYmI2N2IxOGJlZGM1ZmFkNmZiZjA3NTA5NTFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtZ1RBqhyG457d+nDNd1SNXttrQd
eiUavWVG0y2WSw0/MSAOxGR6OEAMHifQkbXa5o9SY0SPx8KgTFR359E7vDATR+hq
dT2HHn7AKhnnqolElKpIl6UKl/xYZtIZQmcCKYpytHJlZu5iNqb6pFzJOEwhLZVd
ZjiYY9OhgMHqlcbu8VBblyvNR2CxbtQlIuAw2dQFtJzTJ4ivZ0xiOjfIRDv5LtDk
zNU/2uN2uXfdU8DgXSRkYlYngFDwjvP5vDrpbk9dZsj3q109Y5i0cZNh6W8eDHAC
h8R+mHxfiEVuL/uR9rLk2dOLoH9ggmIWtWVb3RhKyrGBRWalmGMAwkzcPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIvfOmbAxgu2exi+3F+tb78HUJUbMB8GA1UdIwQY
MBaAFD24oq3dsAKFCFSZapS3K4f0p7MPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGJpaXJkMndBb1VJVkpscWxMY3JoX1Nuc3c4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8yZDQzYzItM2IyZS00ZjJlLWE2YWQt
YTBhNzJhNzMzYzAyLzEvUGJpaXJkMndBb1VJVkpscWxMY3JoX1Nuc3c4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8yZDQzYzItM2IyZS00ZjJlLWE2YWQtYTBhNzJhNzMzYzAy
LzEvUGJpaXJkMndBb1VJVkpscWxMY3JoX1Nuc3c4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEART0MgzAp
MLbshwURbl7X6UCDd21yD6qeIl1tTqvJvauLBmqNHz0VMyR/BvA6QISj+baXuP5f
8YdLeXGtBI2Ei55Go9Y+ldZLJMGYm9r3q/Rgr6dHT0a4neiQ6iAjUoxFp9CJLrP4
S3Uq+rS9AzATKDI+ZsSvierCxL9qBRSNdq8wzjWf0MyzA6rot+fFrI8bXJ14NR1E
zT1e2hHdY0F13ASPZNpHptwAkPzMSXhTgfyukW8RtlNV8X+3XgtK81BCIKAIrgbU
K0K25LwfNpuq+P9zt3KkFywPdpzT77/+93qOPWIqZSfoKwaTqWQ222p6voA2SYi2
KAGEOLHQJKGXUA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 17:12:10 2025 by rpki-client