Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.mft
File: pbnffpj285_iukAi2id9KBmCgCE.mft (raw, json)
Hash identifier: CHRheNsKScte9kxDaVBEmdNkhlvVg5z1xQT/OuOY1Ds=
Subject key identifier: D2:70:41:4C:0B:B2:D2:06:72:C1:17:32:96:ED:85:9C:DE:B1:4F:F2
Authority key identifier: A5:B9:DF:7E:98:F6:F3:9F:E2:BA:40:22:DA:27:7D:28:19:82:80:21
Certificate issuer: /CN=a5b9df7e98f6f39fe2ba4022da277d2819828021
Certificate serial: 0197469DB979EE73CDA4894A26013C1C89D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pbnffpj285_iukAi2id9KBmCgCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.mft
Manifest number: 0D37
Signing time: Fri 06 Jun 2025 19:00:31 +0000
Manifest this update: Fri 06 Jun 2025 19:00:31 +0000
Manifest next update: Sat 07 Jun 2025 19:00:31 +0000
Files and hashes: 1: XZ2L7tby58uG7r0ttQk5HwT9l8k.roa (hash: oQ6DroqRbFL+VaKJERXvf6dbj57Lt/0NRTKEGy5wXFQ=)
2: ouICw0nyK_0-5jscxv12aq634vw.roa (hash: ZpjXF6V0UreF7p2IPTzGzZ30r7TGS05jqHG074BeOko=)
3: pbnffpj285_iukAi2id9KBmCgCE.crl (hash: gSkRNPLU0K8UABENV7vXc4lZ53SV+XfbrhnHWOw93xg=)
4: s9Phn4LRxq3qJKp5WG1zCsRMWlc.roa (hash: 5LFQTKOZRBYzOCfam8/FRn4XdqXt/6yCH7PjQq7YFwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pbnffpj285_iukAi2id9KBmCgCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9d:b9:79:ee:73:cd:a4:89:4a:26:01:3c:1c:89:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5b9df7e98f6f39fe2ba4022da277d2819828021
Validity
Not Before: Jun 6 19:00:31 2025 GMT
Not After : Jun 7 19:00:31 2025 GMT
Subject: CN=d270414c0bb2d20672c1173296ed859cdeb14ff2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:dc:18:5d:82:5f:d2:bf:c1:65:f9:64:63:47:
73:1b:ae:fc:87:be:05:b9:fb:99:71:68:ea:46:8d:
ff:69:a7:4c:84:f0:43:17:0b:88:c9:05:ab:d8:07:
42:6e:1d:31:8a:88:90:dd:18:4c:83:52:b2:08:51:
43:52:1f:fc:67:4e:b4:7d:1b:d5:41:4a:09:aa:c8:
f1:4e:89:4a:d8:2d:f6:47:fb:ca:4a:01:5c:64:83:
0b:8b:85:3e:59:60:10:d7:dd:d8:37:3f:d4:9d:ff:
cd:9a:de:f4:3d:ab:3f:3a:58:f6:71:13:2d:94:b5:
89:ce:51:3a:0d:1c:f0:54:5d:30:66:4e:7b:d2:6d:
17:a3:52:41:77:f4:c0:a9:ba:57:52:98:34:08:79:
26:21:cb:d0:7c:01:a5:10:ff:14:80:4d:4d:a6:89:
31:d0:cd:2c:73:24:c4:45:5c:bb:00:31:96:4d:73:
6a:51:81:19:ae:47:77:99:ba:e6:73:64:0d:0c:12:
b4:a9:e4:c2:21:49:c8:d1:67:fa:7b:7d:e7:dd:8c:
9c:73:04:1e:29:2d:83:98:8d:f5:2e:b7:6b:7e:b4:
54:a1:47:cf:33:05:83:ef:d1:3d:49:90:fd:90:5f:
38:58:5d:c9:a6:d6:b0:ea:0c:46:80:37:00:e3:50:
4d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:70:41:4C:0B:B2:D2:06:72:C1:17:32:96:ED:85:9C:DE:B1:4F:F2
X509v3 Authority Key Identifier:
keyid:A5:B9:DF:7E:98:F6:F3:9F:E2:BA:40:22:DA:27:7D:28:19:82:80:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbnffpj285_iukAi2id9KBmCgCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:59:98:39:4d:61:1e:96:33:11:62:37:bf:60:c8:36:17:54:
e7:99:24:22:ce:8d:74:42:31:23:29:62:b1:19:6d:9f:80:d7:
22:a8:17:06:d2:7a:08:80:e0:9b:d6:15:c0:5e:a9:e6:54:2f:
8c:8f:ca:4d:93:e7:7f:85:dc:33:b8:86:82:ba:ff:5e:d2:dd:
61:b3:d9:c2:40:26:be:08:e0:af:59:07:4d:a9:c2:4d:dd:68:
8d:4b:c1:e9:0e:4e:0c:f2:af:3d:01:28:fd:e0:96:4d:fc:b5:
76:e5:2b:4f:37:28:56:82:10:5d:7b:8c:55:61:c1:71:ca:d8:
6f:ad:cd:5a:64:e7:4c:eb:a9:e5:84:80:a1:d6:8b:3a:ef:e0:
fb:ef:70:4b:2b:75:b0:ba:56:1b:89:43:ef:e1:dd:c1:b8:4c:
16:4e:85:48:d4:e6:17:c8:55:be:66:0a:5e:5c:d8:d7:98:0b:
aa:94:4b:27:4f:0b:eb:04:ab:21:84:e5:eb:ec:b3:20:49:7f:
49:8a:4e:9c:c8:a8:83:d9:fc:0d:71:8a:68:87:66:4e:99:3e:
61:c1:10:c3:47:b9:9c:6e:28:e7:93:46:bd:49:40:94:9f:05:
57:85:96:1f:ee:97:61:34:00:50:1a:17:30:4f:63:81:ab:c2:
e7:5e:b7:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdGnbl57nPNpIlKJgE8HInXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1YjlkZjdlOThmNmYzOWZlMmJhNDAyMmRhMjc3ZDI4MTk4
MjgwMjEwHhcNMjUwNjA2MTkwMDMxWhcNMjUwNjA3MTkwMDMxWjAzMTEwLwYDVQQD
EyhkMjcwNDE0YzBiYjJkMjA2NzJjMTE3MzI5NmVkODU5Y2RlYjE0ZmYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNwYXYJf0r/BZflkY0dzG678h74F
ufuZcWjqRo3/aadMhPBDFwuIyQWr2AdCbh0xioiQ3RhMg1KyCFFDUh/8Z060fRvV
QUoJqsjxTolK2C32R/vKSgFcZIMLi4U+WWAQ193YNz/Unf/Nmt70Pas/Olj2cRMt
lLWJzlE6DRzwVF0wZk570m0Xo1JBd/TAqbpXUpg0CHkmIcvQfAGlEP8UgE1Npokx
0M0scyTERVy7ADGWTXNqUYEZrkd3mbrmc2QNDBK0qeTCIUnI0Wf6e33n3YyccwQe
KS2DmI31LrdrfrRUoUfPMwWD79E9SZD9kF84WF3Jptaw6gxGgDcA41BN8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNJwQUwLstIGcsEXMpbthZzesU/yMB8GA1UdIwQY
MBaAFKW5336Y9vOf4rpAItonfSgZgoAhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGJuZmZwajI4NV9pdWtBaTJpZDlLQm1DZ0NFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC85NzMwNDctODkxNC00MWM2LWExZTAt
MGFjN2I3ZWRlNDJiLzEvcGJuZmZwajI4NV9pdWtBaTJpZDlLQm1DZ0NFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC85NzMwNDctODkxNC00MWM2LWExZTAtMGFjN2I3ZWRlNDJi
LzEvcGJuZmZwajI4NV9pdWtBaTJpZDlLQm1DZ0NFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMlmYOU1h
HpYzEWI3v2DINhdU55kkIs6NdEIxIylisRltn4DXIqgXBtJ6CIDgm9YVwF6p5lQv
jI/KTZPnf4XcM7iGgrr/XtLdYbPZwkAmvgjgr1kHTanCTd1ojUvB6Q5ODPKvPQEo
/eCWTfy1duUrTzcoVoIQXXuMVWHBccrYb63NWmTnTOup5YSAodaLOu/g++9wSyt1
sLpWG4lD7+HdwbhMFk6FSNTmF8hVvmYKXlzY15gLqpRLJ08L6wSrIYTl6+yzIEl/
SYpOnMiog9n8DXGKaIdmTpk+YcEQw0e5nG4o55NGvUlAlJ8FV4WWH+6XYTQAUBoX
ME9jgavC5163TQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 01:02:01 2025 by rpki-client