Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/a87aec-beaa-4aeb-a48e-8f34bd391d18/1/pe6Sbx8VN7m-detLnXkt9B0lzZk.mft
File: pe6Sbx8VN7m-detLnXkt9B0lzZk.mft (raw, json)
Hash identifier: ly8SbCZjDtA/ETSb34u1zFCr3kvQeB2t638jJD0pKyk=
Subject key identifier: 01:71:09:F5:1A:42:C4:1C:0A:FB:86:C3:1B:5A:A9:42:A1:40:21:98
Authority key identifier: A5:EE:92:6F:1F:15:37:B9:BE:75:EB:4B:9D:79:2D:F4:1D:25:CD:99
Certificate issuer: /CN=a5ee926f1f1537b9be75eb4b9d792df41d25cd99
Certificate serial: 01989D4BA827BCC63D9C484444DBD605DB7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pe6Sbx8VN7m-detLnXkt9B0lzZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/a87aec-beaa-4aeb-a48e-8f34bd391d18/1/pe6Sbx8VN7m-detLnXkt9B0lzZk.mft
Manifest number: 0D03
Signing time: Tue 12 Aug 2025 08:00:37 +0000
Manifest this update: Tue 12 Aug 2025 08:00:37 +0000
Manifest next update: Wed 13 Aug 2025 08:00:37 +0000
Files and hashes: 1: WDPyyXGbTlVNzNvHMt_u6jFAfDs.roa (hash: Io6wRfSHyznIog5I1/syrGcc1ZOg6epQfuj3AIJAZhg=)
2: pe6Sbx8VN7m-detLnXkt9B0lzZk.crl (hash: EbKgqlSiKDn2WMqzNd/UQxUK4+GYB1UjoewdLOnikgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/a87aec-beaa-4aeb-a48e-8f34bd391d18/1/pe6Sbx8VN7m-detLnXkt9B0lzZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/a87aec-beaa-4aeb-a48e-8f34bd391d18/1/pe6Sbx8VN7m-detLnXkt9B0lzZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pe6Sbx8VN7m-detLnXkt9B0lzZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9d:4b:a8:27:bc:c6:3d:9c:48:44:44:db:d6:05:db:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5ee926f1f1537b9be75eb4b9d792df41d25cd99
Validity
Not Before: Aug 12 08:00:37 2025 GMT
Not After : Aug 13 08:00:37 2025 GMT
Subject: CN=017109f51a42c41c0afb86c31b5aa942a1402198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:28:f5:76:64:8e:ed:d5:9e:88:ec:13:11:71:
d8:3d:51:91:aa:d9:bf:80:8b:01:c5:38:b4:b9:5f:
94:90:25:65:d8:fc:fa:77:f1:3c:f2:ad:f1:cc:51:
6e:6a:78:24:c6:c8:2b:0b:42:8d:68:b0:e3:4d:45:
7e:db:01:eb:66:c1:22:95:0d:a7:34:53:18:fd:78:
75:5a:18:44:fc:5f:82:51:23:29:0b:27:65:b2:41:
4b:a0:94:82:cb:ba:fb:13:47:ca:95:3b:ed:be:a8:
8f:4c:22:36:38:df:77:3e:17:53:9d:83:a7:a0:54:
a9:ed:80:a6:a0:a8:9d:02:fa:b1:8c:e4:4c:a9:df:
e6:50:bc:18:bd:09:97:36:f1:21:6e:0d:b5:82:f0:
91:af:8d:be:67:f9:8c:4c:98:73:9a:b7:53:a8:8c:
4f:92:0c:0b:03:ee:49:35:cd:d1:13:d1:cf:68:53:
e2:af:f9:6b:48:6f:03:e4:7f:01:d4:b9:c3:bc:5c:
65:98:c9:74:49:f8:7e:16:15:fb:71:e3:af:a1:05:
af:e4:8e:d1:e5:e6:52:4a:4f:d5:d8:3c:2a:bb:72:
1d:d1:c7:c1:10:07:78:01:52:ea:d4:1b:21:10:09:
24:dd:c6:7b:5c:e7:6d:69:2a:fb:f9:6b:bb:aa:6e:
9e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:71:09:F5:1A:42:C4:1C:0A:FB:86:C3:1B:5A:A9:42:A1:40:21:98
X509v3 Authority Key Identifier:
keyid:A5:EE:92:6F:1F:15:37:B9:BE:75:EB:4B:9D:79:2D:F4:1D:25:CD:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pe6Sbx8VN7m-detLnXkt9B0lzZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a87aec-beaa-4aeb-a48e-8f34bd391d18/1/pe6Sbx8VN7m-detLnXkt9B0lzZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a87aec-beaa-4aeb-a48e-8f34bd391d18/1/pe6Sbx8VN7m-detLnXkt9B0lzZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:d1:26:86:3e:e8:b3:e9:bb:57:58:b8:cd:8c:9e:7a:30:b6:
3a:c8:e6:20:da:e2:0b:27:e4:c2:4e:03:53:30:ee:1a:cc:61:
4f:c9:f3:4d:bf:18:8f:ce:8d:bb:29:a8:7a:5c:28:3b:aa:84:
74:53:36:c9:3a:09:a6:97:56:0b:a4:c1:4f:77:98:d0:48:a0:
28:b4:7f:c4:d4:50:32:52:6c:b0:f0:08:00:8a:84:1a:7b:ce:
b4:c0:42:dc:c5:d6:8e:94:73:18:23:08:99:6c:1b:5a:ea:69:
af:54:37:0c:29:dd:d7:27:a6:14:a8:b7:86:4e:d1:46:9f:37:
4c:a6:9f:5b:42:53:85:79:35:a1:65:6c:7d:7b:11:5b:82:3b:
2b:7a:a3:f7:08:fe:c2:e9:82:f1:50:4b:01:a5:1f:17:a3:4f:
91:85:ab:ad:6f:57:97:32:c9:5e:0a:9a:f0:bc:04:90:d5:5b:
60:7f:52:99:19:fd:34:5c:64:33:d9:84:5a:d4:b9:70:db:e2:
68:13:31:40:55:91:33:1a:bb:0a:2e:de:a9:a7:d5:a9:5e:d1:
91:09:3e:d5:ac:b6:6c:10:27:41:9e:f2:75:3c:4b:be:20:d8:
35:45:05:9b:f5:5b:ef:ac:ae:4b:bc:8e:8e:96:8a:2a:a0:b2:
e6:cd:fd:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 13:30:10 2025 by rpki-client