Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.mft
File: PnDBS_JvrwGY8eeyRynNcbM1GN4.mft (raw, json)
Hash identifier: wHbMfqY6/dlCWEQNEc4xU0/TwXzmA3BctjRtSnfNpJQ=
Subject key identifier: 4B:6F:5F:ED:B4:4F:91:00:CD:1D:91:B5:D9:6F:A8:60:20:88:AB:83
Authority key identifier: 3E:70:C1:4B:F2:6F:AF:01:98:F1:E7:B2:47:29:CD:71:B3:35:18:DE
Certificate issuer: /CN=3e70c14bf26faf0198f1e7b24729cd71b33518de
Certificate serial: 019A71B928FE702955D77BBAD372A81D1C51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PnDBS_JvrwGY8eeyRynNcbM1GN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.mft
Manifest number: 0415
Signing time: Tue 11 Nov 2025 07:02:31 +0000
Manifest this update: Tue 11 Nov 2025 07:02:31 +0000
Manifest next update: Wed 12 Nov 2025 07:02:31 +0000
Files and hashes: 1: 4d9jncgFcD3LQEVJLbIB2I3M9lo.roa (hash: seBbCSSGlRgW36OWqyme1v3t3KHDAPOFROvpxV8jwzE=)
2: 4uaLh2b-bHV2NsxIJY_pK9e3698.roa (hash: sMeMy3i5FoQg0v9xzPREgO0rI8VqgJmcA0uZMgg0uts=)
3: PnDBS_JvrwGY8eeyRynNcbM1GN4.crl (hash: 55ItdCI8XPqec1U7bUrgmNQDX5r81fVsCQLYSVa8lSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PnDBS_JvrwGY8eeyRynNcbM1GN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:28:fe:70:29:55:d7:7b:ba:d3:72:a8:1d:1c:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e70c14bf26faf0198f1e7b24729cd71b33518de
Validity
Not Before: Nov 11 07:02:31 2025 GMT
Not After : Nov 12 07:02:31 2025 GMT
Subject: CN=4b6f5fedb44f9100cd1d91b5d96fa8602088ab83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d2:4b:18:d3:22:eb:02:e8:0e:04:28:0a:79:
8e:ab:58:a7:d8:cd:a4:52:9d:48:6b:e1:f7:cd:0d:
34:b9:9f:60:94:2f:d9:30:ea:83:5e:ec:0f:d1:94:
a7:15:ec:1a:6f:fa:39:95:5e:27:09:4d:58:2a:26:
47:77:75:89:e0:3f:55:5f:cb:82:ef:e4:cb:7e:ec:
05:90:75:60:b8:d1:d2:36:b7:aa:77:5d:4c:2c:c5:
56:3d:0f:54:c0:91:b3:58:c6:31:23:8a:2c:a8:16:
a9:35:41:0d:49:ea:c2:22:ab:de:0f:bf:30:41:92:
43:e1:2a:3c:f0:29:c5:00:4a:4a:79:77:06:a1:f8:
69:7d:9e:0e:b3:6d:d4:c4:e9:a2:f0:c8:20:e5:f7:
70:6a:bb:62:0a:6a:2f:92:32:37:db:d4:db:e4:1c:
78:08:13:e1:e7:05:e9:28:ad:70:2a:8b:c0:99:3a:
5b:a5:91:0d:74:6a:d7:6d:98:1d:73:cb:1c:8e:f2:
03:50:5a:27:ff:de:b4:65:5f:27:d8:f0:37:a1:1f:
2f:6c:27:b7:f6:30:17:7e:d5:9f:8f:4f:e3:77:ba:
d1:b7:d6:cd:ee:91:43:95:d1:61:37:6d:ed:61:c2:
a7:03:b6:c1:7e:6c:61:33:a0:8e:e5:7a:ea:73:60:
27:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:6F:5F:ED:B4:4F:91:00:CD:1D:91:B5:D9:6F:A8:60:20:88:AB:83
X509v3 Authority Key Identifier:
keyid:3E:70:C1:4B:F2:6F:AF:01:98:F1:E7:B2:47:29:CD:71:B3:35:18:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PnDBS_JvrwGY8eeyRynNcbM1GN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:a0:c0:b1:7a:9e:87:53:e1:65:20:73:32:53:6f:57:77:a8:
49:8f:d0:d3:f6:e7:d9:4f:bc:29:ce:c1:2c:a5:02:fb:2c:56:
e9:17:9e:f0:81:7c:92:2c:bc:3c:e1:7f:31:50:eb:a3:81:96:
d5:29:81:4d:c4:0f:d4:ef:66:4a:db:d9:e8:49:94:53:20:34:
e4:34:57:c4:53:76:f8:1e:c1:0e:48:9d:e2:83:ab:68:0e:2d:
eb:97:15:79:c1:d2:91:ed:ec:de:9e:d8:cc:73:89:0c:00:4c:
37:23:39:9b:25:2c:bd:9e:6d:88:d8:89:9e:2d:2f:50:a6:b8:
ce:18:25:5c:71:45:ef:d3:6d:16:4a:89:0a:84:bd:13:50:e5:
ab:26:09:b2:d5:ed:4b:0e:00:f5:13:01:ec:c4:8e:20:46:ff:
2e:85:68:c7:1f:0a:81:2b:43:33:58:94:c8:d9:93:e3:05:73:
a7:5a:4b:99:c1:6f:35:1a:1b:e2:0b:72:07:2d:a9:6c:f4:52:
59:f1:4c:6c:04:8f:31:73:0f:79:5f:8a:b8:f9:32:46:cf:12:
8a:6c:3c:f9:fd:5d:b9:c8:1a:8b:6b:0b:62:dc:86:89:ad:2a:
2a:9b:69:cd:5c:e8:c1:36:37:0a:53:35:99:ec:dc:e0:46:6d:
80:8c:3c:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:41:00 2025 by rpki-client