Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.mft
File: PeSbGET-RCKvvhDN0oGcdEgnfmU.mft (raw, json)
Hash identifier: Sfk+3LcXMbtOlfVKMdaWHRxJeWVZDzWpCLZGlW+wWR0=
Subject key identifier: 94:3A:B5:08:67:BB:C0:D1:53:37:17:F6:B4:78:C5:A9:6E:71:97:17
Authority key identifier: 3D:E4:9B:18:44:FE:44:22:AF:BE:10:CD:D2:81:9C:74:48:27:7E:65
Certificate issuer: /CN=3de49b1844fe4422afbe10cdd2819c7448277e65
Certificate serial: 019A4EF5F8F51B57DF6C9DCBD63709A909D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeSbGET-RCKvvhDN0oGcdEgnfmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.mft
Manifest number: 0ABC
Signing time: Tue 04 Nov 2025 13:02:14 +0000
Manifest this update: Tue 04 Nov 2025 13:02:14 +0000
Manifest next update: Wed 05 Nov 2025 13:02:14 +0000
Files and hashes: 1: Fw_E1L4Nw5Hr77P4PSs-fCdld4o.roa (hash: 02j0pLQbdlE9MH5ggabxr1xIMQYmyzEOYjg+Z13q0BA=)
2: PeSbGET-RCKvvhDN0oGcdEgnfmU.crl (hash: lJk0/Ls/zOWt1HOjHaHypiwomV1HLo6UbfV7o1Af6Oc=)
3: VrCXOdxzLdld1tE0j_xLZ92cqsk.roa (hash: QEJHs3sdF5W7Kc4VSrPn7L7Yyup7NDcWYP/rulbrnEw=)
4: wbEopCsHgdsUwl85d1p6YVkQyt4.roa (hash: Mueh9tzlM1Esxrp4PnyphjifQnr2qX7ryaFawIufllw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeSbGET-RCKvvhDN0oGcdEgnfmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:f8:f5:1b:57:df:6c:9d:cb:d6:37:09:a9:09:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de49b1844fe4422afbe10cdd2819c7448277e65
Validity
Not Before: Nov 4 13:02:14 2025 GMT
Not After : Nov 5 13:02:14 2025 GMT
Subject: CN=943ab50867bbc0d1533717f6b478c5a96e719717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:81:3b:65:85:70:91:b6:af:d9:9e:96:ba:5c:
4f:aa:8b:5f:f9:12:5b:19:d0:9f:f4:2b:29:0a:d7:
3a:45:cc:bd:24:2c:d1:d7:55:49:6e:9d:93:bd:03:
84:f5:2e:f5:92:f8:11:5f:05:39:17:5e:2d:af:51:
2c:2e:6c:fe:01:84:4a:04:10:be:4e:80:af:70:d3:
a6:08:67:c7:0d:0a:83:ab:d1:af:04:b6:9c:90:cc:
53:cd:7e:40:a6:69:7c:80:d2:e8:e7:01:f0:ba:5d:
a6:0c:11:16:48:b1:4c:2d:94:13:6c:17:25:5d:f8:
a9:15:ff:be:cc:0f:fb:8c:13:71:0b:7f:f4:ef:d8:
10:32:e2:5f:ad:c4:a8:1e:d2:3f:da:86:8f:69:4b:
d5:ef:0b:83:c3:5b:2a:ad:e2:65:55:f2:79:f2:d3:
ec:a9:5c:0b:0c:7c:f5:2b:43:61:e7:9e:31:04:0d:
6a:a2:7e:47:36:fd:1a:77:aa:bf:68:f3:99:22:55:
84:97:96:f7:50:18:45:c1:aa:0b:c1:1d:10:c0:4e:
1f:e7:2f:8d:7e:2a:8d:32:23:c9:48:b6:08:96:80:
f2:35:48:a8:1f:da:05:12:80:f0:c0:73:d6:89:45:
9a:8d:d2:ba:3b:be:17:7a:fb:c5:a5:62:b1:c1:60:
e3:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:3A:B5:08:67:BB:C0:D1:53:37:17:F6:B4:78:C5:A9:6E:71:97:17
X509v3 Authority Key Identifier:
keyid:3D:E4:9B:18:44:FE:44:22:AF:BE:10:CD:D2:81:9C:74:48:27:7E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeSbGET-RCKvvhDN0oGcdEgnfmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:fe:19:47:6d:62:74:28:ac:75:68:5d:70:0b:98:74:11:24:
02:d2:f8:48:1d:83:91:60:6a:49:43:e8:da:af:c2:7d:ab:0c:
7d:4c:0a:bc:e3:b7:c7:9d:3e:da:75:fd:c8:17:eb:f2:97:e1:
3a:65:f7:ac:02:9d:f6:8f:80:13:6b:68:f0:ac:6c:be:52:aa:
c9:68:ff:6b:94:80:fb:c8:c2:55:cd:29:bf:46:e3:13:b7:70:
6c:90:a6:21:cb:c5:6c:5b:84:0e:b3:a6:f0:38:87:af:3b:c5:
13:fc:63:27:15:9a:70:83:b5:7a:cb:d2:be:a1:d4:59:9e:10:
16:6a:c1:81:77:e1:94:4f:53:8c:97:82:da:21:4d:e9:95:d8:
9a:f2:6d:48:4b:8b:0e:dd:5f:63:6b:9b:97:43:b6:b8:93:e7:
70:a0:0e:8d:60:f5:a3:bc:a5:f1:6a:c3:da:c2:cb:b0:16:2a:
9f:93:8d:99:0e:44:7b:4c:cc:2c:df:3c:a0:b9:e0:df:03:36:
07:96:33:32:a1:26:69:9f:05:e5:70:64:1d:4f:0a:f3:79:6c:
23:6b:51:85:f6:54:51:ee:be:10:bd:9e:28:5f:da:52:80:29:
ce:e3:a4:e7:1f:84:d2:bd:5a:ae:3a:f2:98:c7:b4:11:08:7f:
4b:67:ea:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:42:19 2025 by rpki-client