Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/a87aec-beaa-4aeb-a48e-8f34bd391d18/1/pe6Sbx8VN7m-detLnXkt9B0lzZk.mft
File: pe6Sbx8VN7m-detLnXkt9B0lzZk.mft (raw, json)
Hash identifier: pxSMaNkHjeDtNrqtr4jXB3KD/6Pg602xxGE0uyIbEBQ=
Subject key identifier: 98:B6:E2:5A:64:E7:3F:6E:EB:AC:4E:A7:1E:BF:BA:4A:BA:63:66:C8
Authority key identifier: A5:EE:92:6F:1F:15:37:B9:BE:75:EB:4B:9D:79:2D:F4:1D:25:CD:99
Certificate issuer: /CN=a5ee926f1f1537b9be75eb4b9d792df41d25cd99
Certificate serial: 0199228C6EF5489117BF6192590938613EAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pe6Sbx8VN7m-detLnXkt9B0lzZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/a87aec-beaa-4aeb-a48e-8f34bd391d18/1/pe6Sbx8VN7m-detLnXkt9B0lzZk.mft
Manifest number: 0D48
Signing time: Sun 07 Sep 2025 05:00:52 +0000
Manifest this update: Sun 07 Sep 2025 05:00:52 +0000
Manifest next update: Mon 08 Sep 2025 05:00:52 +0000
Files and hashes: 1: WDPyyXGbTlVNzNvHMt_u6jFAfDs.roa (hash: Io6wRfSHyznIog5I1/syrGcc1ZOg6epQfuj3AIJAZhg=)
2: pe6Sbx8VN7m-detLnXkt9B0lzZk.crl (hash: tJt7QbG2z8bbwi2H/35ENFFEMxNTegudAUM/txvS2WI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/a87aec-beaa-4aeb-a48e-8f34bd391d18/1/pe6Sbx8VN7m-detLnXkt9B0lzZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/a87aec-beaa-4aeb-a48e-8f34bd391d18/1/pe6Sbx8VN7m-detLnXkt9B0lzZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pe6Sbx8VN7m-detLnXkt9B0lzZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:6e:f5:48:91:17:bf:61:92:59:09:38:61:3e:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5ee926f1f1537b9be75eb4b9d792df41d25cd99
Validity
Not Before: Sep 7 05:00:52 2025 GMT
Not After : Sep 8 05:00:52 2025 GMT
Subject: CN=98b6e25a64e73f6eebac4ea71ebfba4aba6366c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:80:ae:f7:e7:71:91:fb:38:75:62:70:58:75:
2f:bb:7c:37:99:2e:fe:c5:b6:6e:be:5b:8e:34:bf:
f3:22:dd:82:a5:90:c1:76:fa:fb:7b:82:fd:bd:5c:
bb:7f:25:83:c2:ff:55:49:c2:44:92:af:0a:db:d7:
6b:7b:13:64:7a:cf:b7:8c:e6:18:b2:85:92:67:f8:
1a:56:ae:1e:12:0a:06:40:06:da:0b:93:fa:58:0a:
dc:05:e3:2f:ec:54:6e:76:96:26:c8:e6:a7:9e:67:
95:64:ed:60:81:f7:dc:b7:5b:ad:ea:ab:e1:25:31:
85:84:31:ad:1d:34:ce:87:ee:3c:46:f2:43:32:5a:
49:24:a3:1e:82:9a:f0:ef:5e:bc:1f:4a:b0:c9:5b:
3a:45:69:bb:59:64:fb:05:dc:e3:91:48:88:03:97:
a2:da:6f:a5:45:1d:f0:4a:17:5f:eb:24:1b:1c:c4:
95:a2:a7:a0:f9:e9:48:e7:95:08:19:ed:2c:36:a2:
58:86:7e:d4:a5:1b:dc:51:cb:1c:71:45:95:39:87:
79:dc:11:0c:c6:f3:e6:73:e8:b8:4c:04:40:66:5e:
dc:51:b8:79:22:d6:6e:55:ca:b2:f1:c4:d4:11:2c:
1c:af:a0:bb:0c:4a:2e:70:98:7e:aa:72:35:61:94:
f9:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:B6:E2:5A:64:E7:3F:6E:EB:AC:4E:A7:1E:BF:BA:4A:BA:63:66:C8
X509v3 Authority Key Identifier:
keyid:A5:EE:92:6F:1F:15:37:B9:BE:75:EB:4B:9D:79:2D:F4:1D:25:CD:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pe6Sbx8VN7m-detLnXkt9B0lzZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a87aec-beaa-4aeb-a48e-8f34bd391d18/1/pe6Sbx8VN7m-detLnXkt9B0lzZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a87aec-beaa-4aeb-a48e-8f34bd391d18/1/pe6Sbx8VN7m-detLnXkt9B0lzZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:3e:d4:30:c5:94:d1:6e:62:bb:9a:f0:fb:74:56:6a:5b:7e:
f9:de:74:c1:bb:33:49:9c:e8:40:4b:8f:62:46:44:eb:23:cc:
2d:e5:a7:91:48:d2:70:f6:99:93:60:b2:44:7a:a0:c9:c3:67:
f7:45:21:47:8c:fd:da:db:c7:c0:77:cf:27:c6:0e:fd:76:35:
37:68:28:58:5e:f4:eb:f4:1a:60:12:d3:14:d8:a4:8b:60:73:
35:44:d7:92:56:27:7a:17:30:24:b3:ae:85:8c:88:39:66:e6:
98:eb:b4:b1:2a:61:a0:62:67:db:47:4e:64:f4:8c:40:72:9d:
39:01:a9:3a:4e:52:c5:e7:bb:fe:81:9f:05:78:7f:1d:88:9d:
46:a9:34:89:2d:58:e7:aa:41:af:55:eb:6e:99:85:cd:22:1e:
e5:8e:d4:3f:02:1f:9e:43:e7:f9:bb:86:ac:ac:17:8f:c0:c0:
d6:35:86:d4:c5:a7:89:b8:e4:11:80:61:01:87:4a:74:bd:78:
4f:84:c2:14:7a:99:c1:d2:50:83:25:71:2d:0b:cd:2c:bf:40:
74:3e:92:9f:12:b8:c6:77:71:b3:6d:ad:32:84:3f:3b:db:75:
dc:04:de:b0:9e:b3:7c:7e:23:a0:6f:c1:6e:29:91:d5:ca:8f:
2a:c6:2e:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkijG71SJEXv2GSWQk4YT6tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1ZWU5MjZmMWYxNTM3YjliZTc1ZWI0YjlkNzkyZGY0MWQy
NWNkOTkwHhcNMjUwOTA3MDUwMDUyWhcNMjUwOTA4MDUwMDUyWjAzMTEwLwYDVQQD
Eyg5OGI2ZTI1YTY0ZTczZjZlZWJhYzRlYTcxZWJmYmE0YWJhNjM2NmM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4Cu9+dxkfs4dWJwWHUvu3w3mS7+
xbZuvluONL/zIt2CpZDBdvr7e4L9vVy7fyWDwv9VScJEkq8K29drexNkes+3jOYY
soWSZ/gaVq4eEgoGQAbaC5P6WArcBeMv7FRudpYmyOannmeVZO1ggffct1ut6qvh
JTGFhDGtHTTOh+48RvJDMlpJJKMegprw7168H0qwyVs6RWm7WWT7BdzjkUiIA5ei
2m+lRR3wShdf6yQbHMSVoqeg+elI55UIGe0sNqJYhn7UpRvcUcsccUWVOYd53BEM
xvPmc+i4TARAZl7cUbh5ItZuVcqy8cTUESwcr6C7DEoucJh+qnI1YZT5xwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJi24lpk5z9u66xOpx6/ukq6Y2bIMB8GA1UdIwQY
MBaAFKXukm8fFTe5vnXrS515LfQdJc2ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGU2U2J4OFZON20tZGV0TG5Ya3Q5QjBselprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9hODdhZWMtYmVhYS00YWViLWE0OGUt
OGYzNGJkMzkxZDE4LzEvcGU2U2J4OFZON20tZGV0TG5Ya3Q5QjBselprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9hODdhZWMtYmVhYS00YWViLWE0OGUtOGYzNGJkMzkxZDE4
LzEvcGU2U2J4OFZON20tZGV0TG5Ya3Q5QjBselprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFj7UMMWU
0W5iu5rw+3RWalt++d50wbszSZzoQEuPYkZE6yPMLeWnkUjScPaZk2CyRHqgycNn
90UhR4z92tvHwHfPJ8YO/XY1N2goWF706/QaYBLTFNiki2BzNUTXklYnehcwJLOu
hYyIOWbmmOu0sSphoGJn20dOZPSMQHKdOQGpOk5Sxee7/oGfBXh/HYidRqk0iS1Y
56pBr1XrbpmFzSIe5Y7UPwIfnkPn+buGrKwXj8DA1jWG1MWnibjkEYBhAYdKdL14
T4TCFHqZwdJQgyVxLQvNLL9AdD6SnxK4xndxs22tMoQ/O9t13ATesJ6zfH4joG/B
bimR1cqPKsYumQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:43:34 2025 by rpki-client