Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/ef76a6-c4e1-427f-973b-2c1c29014548/1/Pem-PEevueCl_DA78thKc_IIL6w.mft
File: Pem-PEevueCl_DA78thKc_IIL6w.mft (raw, json)
Hash identifier: nc+Z3AkpL/pi6UgLTYJ3DfDVSKjHFv1dfFap9Xx7MtM=
Subject key identifier: 6E:73:53:17:43:11:40:F1:EE:0E:62:D6:AE:72:B4:77:DD:E9:DE:21
Authority key identifier: 3D:E9:BE:3C:47:AF:B9:E0:A5:FC:30:3B:F2:D8:4A:73:F2:08:2F:AC
Certificate issuer: /CN=3de9be3c47afb9e0a5fc303bf2d84a73f2082fac
Certificate serial: 019A54C0455C19A8BAA362668B2BE04675A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pem-PEevueCl_DA78thKc_IIL6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/ef76a6-c4e1-427f-973b-2c1c29014548/1/Pem-PEevueCl_DA78thKc_IIL6w.mft
Manifest number: 3B
Signing time: Wed 05 Nov 2025 16:01:18 +0000
Manifest this update: Wed 05 Nov 2025 16:01:18 +0000
Manifest next update: Thu 06 Nov 2025 16:01:18 +0000
Files and hashes: 1: MK8cxn7bUsFJpBuEtPxkYKBreSQ.roa (hash: C1RacTZdjwPZlfow+hor5mnPRzIoBUQ9t7zMcZ9IcC8=)
2: Pem-PEevueCl_DA78thKc_IIL6w.crl (hash: tbfhe+OSq8zQ/vYYePAB38MMXp+VfMrKLU9yrrXaWs8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/ef76a6-c4e1-427f-973b-2c1c29014548/1/Pem-PEevueCl_DA78thKc_IIL6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/ef76a6-c4e1-427f-973b-2c1c29014548/1/Pem-PEevueCl_DA78thKc_IIL6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pem-PEevueCl_DA78thKc_IIL6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 16:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:c0:45:5c:19:a8:ba:a3:62:66:8b:2b:e0:46:75:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de9be3c47afb9e0a5fc303bf2d84a73f2082fac
Validity
Not Before: Nov 5 16:01:18 2025 GMT
Not After : Nov 6 16:01:18 2025 GMT
Subject: CN=6e735317431140f1ee0e62d6ae72b477dde9de21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:6e:95:69:38:9f:f2:d9:18:cf:15:44:b4:f1:
96:b2:52:fc:c0:fe:2d:d1:c2:45:2e:c7:ef:d1:54:
7d:71:27:fd:49:a4:98:88:ee:c5:4b:54:91:f3:4f:
d9:bb:de:e8:2d:6d:c5:28:9b:05:e1:7b:a7:cc:ff:
b7:f8:4e:c6:c4:43:fe:9c:9f:9f:7e:da:85:5c:21:
6a:68:42:33:53:42:76:79:f5:dc:99:cb:73:a4:c0:
8d:17:00:4a:9b:5c:64:c6:fc:f9:cf:19:3c:06:fb:
f6:a8:42:6d:c7:19:bd:fa:eb:85:c7:65:3e:7c:65:
4d:0b:49:ef:e8:97:22:82:8b:1c:af:c8:68:f1:28:
8a:1d:30:34:79:79:a6:c8:7c:ef:9d:80:9e:82:88:
1f:5e:96:8f:a1:c5:90:f0:27:d5:5e:e7:d4:91:31:
09:b1:25:33:b3:1d:62:c8:1c:bc:a0:74:c4:7f:16:
55:9a:60:4a:d2:c9:e1:67:f6:b5:80:1d:d4:32:57:
16:3f:cb:34:66:2c:b9:97:21:c4:53:98:3f:81:73:
98:6a:dc:48:10:ba:94:b9:de:5f:ed:25:1c:15:b2:
35:c3:c7:1e:99:f7:b5:bc:7d:8f:35:4d:93:07:12:
43:77:83:aa:f9:5f:c5:33:bf:b9:9b:b3:8d:85:35:
20:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:73:53:17:43:11:40:F1:EE:0E:62:D6:AE:72:B4:77:DD:E9:DE:21
X509v3 Authority Key Identifier:
keyid:3D:E9:BE:3C:47:AF:B9:E0:A5:FC:30:3B:F2:D8:4A:73:F2:08:2F:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pem-PEevueCl_DA78thKc_IIL6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ef76a6-c4e1-427f-973b-2c1c29014548/1/Pem-PEevueCl_DA78thKc_IIL6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ef76a6-c4e1-427f-973b-2c1c29014548/1/Pem-PEevueCl_DA78thKc_IIL6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:a5:1e:d1:90:22:d5:46:ef:d0:fc:95:9c:31:0b:85:85:e9:
c1:37:17:2b:ae:97:84:38:b3:c4:b5:62:44:d1:d5:6e:bd:95:
db:5e:04:5a:6d:ea:5a:09:48:e4:7e:06:06:27:c3:a5:b7:0b:
05:2f:c5:93:59:4c:9f:d9:9b:49:25:3a:5e:ca:c4:40:39:1c:
88:75:1f:73:2e:14:a5:da:25:49:5f:79:bf:44:1f:1d:41:34:
84:e7:65:b7:24:52:1d:ac:d6:bc:e6:b1:9d:9e:6d:55:b2:2a:
5b:f9:0a:6e:df:88:e5:a4:82:25:30:6f:0d:d9:5a:fd:3d:f9:
fa:b9:de:d1:42:3c:5e:15:ff:12:3d:39:7d:42:2e:6d:ea:25:
bc:ea:f7:32:28:86:7d:6d:9d:20:19:a0:db:14:ee:1d:b6:ba:
07:09:f8:bf:5b:9d:71:37:25:fa:88:fc:cb:0e:7b:21:35:d4:
9d:aa:fb:56:f6:cb:91:00:a1:a4:d9:78:90:db:2a:26:16:f7:
c4:7b:f0:c9:d5:e7:4e:b3:77:03:75:cb:14:1e:7e:0f:dc:c8:
a0:7f:9d:26:b6:39:fb:c7:81:dc:4c:ad:2e:50:5e:88:f7:3a:
9c:4f:3e:c2:d6:50:79:b9:a3:a7:c8:1a:08:84:80:ed:83:6f:
aa:6f:94:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 23:21:13 2025 by rpki-client