Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/a87aec-beaa-4aeb-a48e-8f34bd391d18/1/pe6Sbx8VN7m-detLnXkt9B0lzZk.mft
File: pe6Sbx8VN7m-detLnXkt9B0lzZk.mft (raw, json)
Hash identifier: +y+3DKB2WORjgykPBidnt87146FqYW4MdVaImocG9TY=
Subject key identifier: D7:FA:B6:F6:89:6D:31:B4:52:20:1A:04:B9:AC:51:F8:82:B2:4A:62
Authority key identifier: A5:EE:92:6F:1F:15:37:B9:BE:75:EB:4B:9D:79:2D:F4:1D:25:CD:99
Certificate issuer: /CN=a5ee926f1f1537b9be75eb4b9d792df41d25cd99
Certificate serial: 019A51BEECFFCFA5EF08FB65F94A6136870E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pe6Sbx8VN7m-detLnXkt9B0lzZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/a87aec-beaa-4aeb-a48e-8f34bd391d18/1/pe6Sbx8VN7m-detLnXkt9B0lzZk.mft
Manifest number: 0DE5
Signing time: Wed 05 Nov 2025 02:00:58 +0000
Manifest this update: Wed 05 Nov 2025 02:00:58 +0000
Manifest next update: Thu 06 Nov 2025 02:00:58 +0000
Files and hashes: 1: WDPyyXGbTlVNzNvHMt_u6jFAfDs.roa (hash: Io6wRfSHyznIog5I1/syrGcc1ZOg6epQfuj3AIJAZhg=)
2: pe6Sbx8VN7m-detLnXkt9B0lzZk.crl (hash: dDPZX5kqIQA/oJBv5b+hDTJFpWlXkOn43wVDq2u0Qgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/a87aec-beaa-4aeb-a48e-8f34bd391d18/1/pe6Sbx8VN7m-detLnXkt9B0lzZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/a87aec-beaa-4aeb-a48e-8f34bd391d18/1/pe6Sbx8VN7m-detLnXkt9B0lzZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pe6Sbx8VN7m-detLnXkt9B0lzZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:ec:ff:cf:a5:ef:08:fb:65:f9:4a:61:36:87:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5ee926f1f1537b9be75eb4b9d792df41d25cd99
Validity
Not Before: Nov 5 02:00:58 2025 GMT
Not After : Nov 6 02:00:58 2025 GMT
Subject: CN=d7fab6f6896d31b452201a04b9ac51f882b24a62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:14:73:c8:aa:1e:86:2c:60:24:ed:ce:61:2c:
12:70:d4:ba:cb:37:d8:4d:16:ad:0f:7f:1e:da:ec:
55:3b:56:0a:76:4a:f1:8d:c8:df:2b:f2:1b:27:7b:
bd:aa:69:5a:9f:8e:d2:41:81:31:d4:09:9e:70:d6:
0c:b8:5f:74:1c:0e:58:d8:b1:56:d8:02:77:7d:ee:
0b:da:de:99:eb:0b:d3:8f:9e:68:99:8d:25:e3:e0:
7d:a3:30:fd:71:ef:fd:1c:c4:d5:0e:a5:a3:b9:fe:
43:47:a5:56:a3:5c:ed:0d:e9:c8:97:71:f4:56:d4:
ad:ee:fc:87:e4:8d:b6:a1:05:36:5c:c8:50:e2:d1:
59:10:e2:12:49:58:b3:0f:55:5a:21:87:95:af:44:
7a:74:57:f0:bd:a3:82:21:d8:73:73:6c:b3:ba:ee:
96:d9:91:b8:fe:14:45:12:15:82:34:c9:f6:2a:dd:
02:4f:37:b9:a0:35:97:f8:72:1b:c7:0a:11:78:d1:
75:fc:28:dd:0b:f7:6e:77:3b:7f:44:44:df:9c:01:
44:d1:11:0e:0a:13:97:15:0c:94:ec:90:81:c2:de:
98:9d:0c:62:21:34:16:cc:e4:fc:2e:b2:a3:2d:10:
ea:45:60:31:5e:36:50:06:0c:8b:66:0d:34:50:6d:
3b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:FA:B6:F6:89:6D:31:B4:52:20:1A:04:B9:AC:51:F8:82:B2:4A:62
X509v3 Authority Key Identifier:
keyid:A5:EE:92:6F:1F:15:37:B9:BE:75:EB:4B:9D:79:2D:F4:1D:25:CD:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pe6Sbx8VN7m-detLnXkt9B0lzZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a87aec-beaa-4aeb-a48e-8f34bd391d18/1/pe6Sbx8VN7m-detLnXkt9B0lzZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a87aec-beaa-4aeb-a48e-8f34bd391d18/1/pe6Sbx8VN7m-detLnXkt9B0lzZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:3a:31:4d:cf:14:2c:c9:1c:2d:f0:f5:40:bf:fb:df:a8:1d:
79:88:5b:ce:72:9f:1b:e2:f5:77:f2:c3:02:3b:2c:b8:39:d8:
ca:d6:d2:a2:7c:08:34:3c:67:f9:8c:33:16:91:8f:51:7f:43:
cd:5e:d3:12:a7:d4:fa:db:fb:f5:6f:e8:60:45:34:c3:75:a0:
0f:ac:20:67:c4:6d:90:a9:ce:7a:be:fe:9f:af:91:9b:10:8d:
4e:bb:8d:12:81:20:a5:e4:eb:99:c9:b4:75:f3:37:8a:df:fc:
13:95:f7:76:8c:db:ad:87:f7:1d:1b:99:50:e9:2d:f8:92:fc:
be:b9:a9:c7:e0:e9:73:48:98:c4:f0:f5:c7:fb:ad:de:fd:42:
ba:51:f1:8a:f8:be:b9:f4:21:5d:0f:b4:f0:0e:fe:82:96:99:
a5:02:e1:0a:b6:df:b5:e0:c1:54:20:be:10:5e:cf:e7:3d:d5:
4a:02:64:23:2a:1d:f4:4e:48:8a:f4:c0:85:9e:c3:ae:27:61:
7e:64:8c:3e:36:71:d2:32:7b:0b:02:d4:9c:96:f3:9a:56:4b:
63:2f:12:cc:a1:db:aa:2d:1d:1f:3e:db:9a:41:81:b7:e5:58:
94:27:9f:ec:d0:92:da:0f:6b:84:a2:bb:67:1f:01:60:43:a0:
ff:a0:c3:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRvuz/z6XvCPtl+UphNocOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1ZWU5MjZmMWYxNTM3YjliZTc1ZWI0YjlkNzkyZGY0MWQy
NWNkOTkwHhcNMjUxMTA1MDIwMDU4WhcNMjUxMTA2MDIwMDU4WjAzMTEwLwYDVQQD
EyhkN2ZhYjZmNjg5NmQzMWI0NTIyMDFhMDRiOWFjNTFmODgyYjI0YTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2hRzyKoehixgJO3OYSwScNS6yzfY
TRatD38e2uxVO1YKdkrxjcjfK/IbJ3u9qmlan47SQYEx1AmecNYMuF90HA5Y2LFW
2AJ3fe4L2t6Z6wvTj55omY0l4+B9ozD9ce/9HMTVDqWjuf5DR6VWo1ztDenIl3H0
VtSt7vyH5I22oQU2XMhQ4tFZEOISSVizD1VaIYeVr0R6dFfwvaOCIdhzc2yzuu6W
2ZG4/hRFEhWCNMn2Kt0CTze5oDWX+HIbxwoReNF1/CjdC/dudzt/RETfnAFE0REO
ChOXFQyU7JCBwt6YnQxiITQWzOT8LrKjLRDqRWAxXjZQBgyLZg00UG07vQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNf6tvaJbTG0UiAaBLmsUfiCskpiMB8GA1UdIwQY
MBaAFKXukm8fFTe5vnXrS515LfQdJc2ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGU2U2J4OFZON20tZGV0TG5Ya3Q5QjBselprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9hODdhZWMtYmVhYS00YWViLWE0OGUt
OGYzNGJkMzkxZDE4LzEvcGU2U2J4OFZON20tZGV0TG5Ya3Q5QjBselprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9hODdhZWMtYmVhYS00YWViLWE0OGUtOGYzNGJkMzkxZDE4
LzEvcGU2U2J4OFZON20tZGV0TG5Ya3Q5QjBselprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsDoxTc8U
LMkcLfD1QL/736gdeYhbznKfG+L1d/LDAjssuDnYytbSonwINDxn+YwzFpGPUX9D
zV7TEqfU+tv79W/oYEU0w3WgD6wgZ8RtkKnOer7+n6+RmxCNTruNEoEgpeTrmcm0
dfM3it/8E5X3dozbrYf3HRuZUOkt+JL8vrmpx+Dpc0iYxPD1x/ut3v1CulHxivi+
ufQhXQ+08A7+gpaZpQLhCrbfteDBVCC+EF7P5z3VSgJkIyod9E5IivTAhZ7Dridh
fmSMPjZx0jJ7CwLUnJbzmlZLYy8SzKHbqi0dHz7bmkGBt+VYlCef7NCS2g9rhKK7
Zx8BYEOg/6DDLA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:27:46 2025 by rpki-client