Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.mft
File: peC5TwtOTIRu-c8nzciBEIdrHPM.mft (raw, json)
Hash identifier: J4P6jhoYiJDV2UssmX4ccSEJULCPkuj+Dt4Yd1GS4ek=
Subject key identifier: 8E:D3:6E:FD:2A:17:FE:50:D1:C0:F7:FB:4B:72:0A:23:4E:60:0C:DA
Authority key identifier: A5:E0:B9:4F:0B:4E:4C:84:6E:F9:CF:27:CD:C8:81:10:87:6B:1C:F3
Certificate issuer: /CN=a5e0b94f0b4e4c846ef9cf27cdc88110876b1cf3
Certificate serial: 019A4E86968451CA9090A039EBA72F346370
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/peC5TwtOTIRu-c8nzciBEIdrHPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 11:00:34 +0000
Manifest this update: Tue 04 Nov 2025 11:00:34 +0000
Manifest next update: Wed 05 Nov 2025 11:00:34 +0000
Files and hashes: 1: h7eLMCHte9yG-YlFcanGWeY98cc.roa (hash: XK6lpwQoOO2MYAb/MpQPPdSt14GbrWEwi/jo8t+GYvc=)
2: peC5TwtOTIRu-c8nzciBEIdrHPM.crl (hash: qtjhJfL683ytKohrPZBLRR2IUTAFdSd1ofFdBjnQp9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/peC5TwtOTIRu-c8nzciBEIdrHPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:96:84:51:ca:90:90:a0:39:eb:a7:2f:34:63:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5e0b94f0b4e4c846ef9cf27cdc88110876b1cf3
Validity
Not Before: Nov 4 11:00:34 2025 GMT
Not After : Nov 5 11:00:34 2025 GMT
Subject: CN=8ed36efd2a17fe50d1c0f7fb4b720a234e600cda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9d:16:86:80:fe:8d:42:3e:57:75:a6:f6:46:
f8:c8:c6:f7:94:da:d7:b5:f5:76:ee:8f:c9:4f:8f:
7a:d8:55:ba:d6:93:98:80:68:50:3a:0b:a4:17:d1:
15:c5:f7:ec:af:fe:7d:8f:5b:5b:13:f5:ea:c6:84:
7e:29:7d:e5:50:8c:4f:8a:58:23:ec:8a:03:4c:44:
7d:a2:9d:98:15:80:f3:ef:38:6d:ef:6e:25:b0:24:
6c:52:5e:d8:5f:49:ac:36:a5:2a:75:b4:65:4d:df:
b2:4c:f8:89:d6:01:9d:6e:32:a3:51:e6:b7:36:a3:
b9:e7:c9:50:c1:98:34:ec:9b:41:17:b9:b0:9b:4d:
36:b5:28:42:c8:5c:54:b2:d0:8d:c7:a3:19:fa:3b:
38:e2:6f:10:f6:af:25:4e:be:02:9f:2d:b4:6c:a8:
f2:8f:18:4a:2e:c9:b3:79:e2:0c:28:28:14:be:ef:
d6:69:45:5c:fd:41:18:41:dd:72:b0:e0:d3:39:4c:
01:2c:4a:22:c0:1a:28:e2:61:d6:ea:5b:2d:95:69:
64:21:ae:ee:12:bd:7d:7b:23:21:20:a3:a5:42:05:
58:39:eb:c6:89:33:3b:d8:5e:63:b3:1d:26:93:a3:
c8:80:d4:c0:2b:c0:36:db:5e:f0:5a:2b:f2:44:af:
19:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:D3:6E:FD:2A:17:FE:50:D1:C0:F7:FB:4B:72:0A:23:4E:60:0C:DA
X509v3 Authority Key Identifier:
keyid:A5:E0:B9:4F:0B:4E:4C:84:6E:F9:CF:27:CD:C8:81:10:87:6B:1C:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/peC5TwtOTIRu-c8nzciBEIdrHPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/387720-5784-4e03-813c-13b290750fb9/1/peC5TwtOTIRu-c8nzciBEIdrHPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:bd:3a:e9:1e:42:2d:24:05:5c:01:46:35:a7:c0:c0:30:29:
c4:45:21:84:cc:cd:cd:8a:ea:c3:c7:fe:8e:2e:3e:86:9a:ec:
da:25:db:a0:9e:dd:1d:5a:c9:92:60:c5:6c:f1:80:f8:f5:58:
dc:aa:98:ba:46:fc:f2:25:24:f9:67:7e:83:b3:af:ac:09:c0:
9d:77:58:18:b9:d7:69:6e:06:cc:e3:78:5b:19:9c:c5:36:34:
e1:72:c2:20:02:a7:65:9c:fe:73:11:a2:b8:a8:78:4c:e7:74:
0c:34:85:f3:78:7f:76:f2:0d:34:5a:07:77:b9:a8:d1:8b:6b:
93:d2:af:a0:e7:c7:7f:df:18:a8:28:f3:34:eb:ad:57:39:c5:
2a:bd:d4:ef:88:5f:26:d2:c1:30:d0:71:bf:76:5f:58:f7:e2:
2a:6e:9f:da:cb:23:38:35:c4:f7:d3:19:9e:36:19:89:e3:1f:
ac:b6:0f:45:7e:5b:8c:40:72:8f:7c:4b:4a:ad:67:32:3c:cd:
b6:21:02:70:1e:81:dc:8b:c3:a7:16:85:89:b0:91:73:2a:e3:
44:4d:3d:d0:f0:37:a9:aa:73:41:f2:87:d5:b3:d6:65:b2:f9:
44:94:27:00:2e:30:7f:f8:3d:e8:4b:29:50:0c:85:f5:82:6c:
da:38:25:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOhpaEUcqQkKA566cvNGNwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1ZTBiOTRmMGI0ZTRjODQ2ZWY5Y2YyN2NkYzg4MTEwODc2
YjFjZjMwHhcNMjUxMTA0MTEwMDM0WhcNMjUxMTA1MTEwMDM0WjAzMTEwLwYDVQQD
Eyg4ZWQzNmVmZDJhMTdmZTUwZDFjMGY3ZmI0YjcyMGEyMzRlNjAwY2RhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAop0WhoD+jUI+V3Wm9kb4yMb3lNrX
tfV27o/JT4962FW61pOYgGhQOgukF9EVxffsr/59j1tbE/XqxoR+KX3lUIxPilgj
7IoDTER9op2YFYDz7zht724lsCRsUl7YX0msNqUqdbRlTd+yTPiJ1gGdbjKjUea3
NqO558lQwZg07JtBF7mwm002tShCyFxUstCNx6MZ+js44m8Q9q8lTr4Cny20bKjy
jxhKLsmzeeIMKCgUvu/WaUVc/UEYQd1ysODTOUwBLEoiwBoo4mHW6lstlWlkIa7u
Er19eyMhIKOlQgVYOevGiTM72F5jsx0mk6PIgNTAK8A2217wWivyRK8ZbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI7Tbv0qF/5Q0cD3+0tyCiNOYAzaMB8GA1UdIwQY
MBaAFKXguU8LTkyEbvnPJ83IgRCHaxzzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGVDNVR3dE9USVJ1LWM4bnpjaUJFSWRySFBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8zODc3MjAtNTc4NC00ZTAzLTgxM2Mt
MTNiMjkwNzUwZmI5LzEvcGVDNVR3dE9USVJ1LWM4bnpjaUJFSWRySFBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy8zODc3MjAtNTc4NC00ZTAzLTgxM2MtMTNiMjkwNzUwZmI5
LzEvcGVDNVR3dE9USVJ1LWM4bnpjaUJFSWRySFBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALr066R5C
LSQFXAFGNafAwDApxEUhhMzNzYrqw8f+ji4+hprs2iXboJ7dHVrJkmDFbPGA+PVY
3KqYukb88iUk+Wd+g7OvrAnAnXdYGLnXaW4GzON4WxmcxTY04XLCIAKnZZz+cxGi
uKh4TOd0DDSF83h/dvINNFoHd7mo0Ytrk9KvoOfHf98YqCjzNOutVznFKr3U74hf
JtLBMNBxv3ZfWPfiKm6f2ssjODXE99MZnjYZieMfrLYPRX5bjEByj3xLSq1nMjzN
tiECcB6B3IvDpxaFibCRcyrjRE090PA3qapzQfKH1bPWZbL5RJQnAC4wf/g96Esp
UAyF9YJs2jglVw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:17:03 2025 by rpki-client