Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/ef76a6-c4e1-427f-973b-2c1c29014548/1/Pem-PEevueCl_DA78thKc_IIL6w.mft
File: Pem-PEevueCl_DA78thKc_IIL6w.mft (raw, json)
Hash identifier: 35m8PFIxr8onKZacdhaAYrInqq86hI1R3Oj8quX1BAg=
Subject key identifier: 0D:2E:4C:E6:4D:89:C0:D0:DA:D1:08:86:8F:85:50:12:0F:8A:A6:20
Authority key identifier: 3D:E9:BE:3C:47:AF:B9:E0:A5:FC:30:3B:F2:D8:4A:73:F2:08:2F:AC
Certificate issuer: /CN=3de9be3c47afb9e0a5fc303bf2d84a73f2082fac
Certificate serial: 019A2289E1D76136696956A3CA4FE375A9A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pem-PEevueCl_DA78thKc_IIL6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/ef76a6-c4e1-427f-973b-2c1c29014548/1/Pem-PEevueCl_DA78thKc_IIL6w.mft
Manifest number: 21
Signing time: Sun 26 Oct 2025 22:00:52 +0000
Manifest this update: Sun 26 Oct 2025 22:00:52 +0000
Manifest next update: Mon 27 Oct 2025 22:00:52 +0000
Files and hashes: 1: MK8cxn7bUsFJpBuEtPxkYKBreSQ.roa (hash: C1RacTZdjwPZlfow+hor5mnPRzIoBUQ9t7zMcZ9IcC8=)
2: Pem-PEevueCl_DA78thKc_IIL6w.crl (hash: ndMMLDs8Xl2VE8FQypc4x8yg5k6+RmAobw4RkhMPhBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/ef76a6-c4e1-427f-973b-2c1c29014548/1/Pem-PEevueCl_DA78thKc_IIL6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/ef76a6-c4e1-427f-973b-2c1c29014548/1/Pem-PEevueCl_DA78thKc_IIL6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pem-PEevueCl_DA78thKc_IIL6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 22:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:89:e1:d7:61:36:69:69:56:a3:ca:4f:e3:75:a9:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de9be3c47afb9e0a5fc303bf2d84a73f2082fac
Validity
Not Before: Oct 26 22:00:52 2025 GMT
Not After : Oct 27 22:00:52 2025 GMT
Subject: CN=0d2e4ce64d89c0d0dad108868f8550120f8aa620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:c2:f4:99:8f:d2:7e:d2:15:23:d0:cf:68:c6:
19:41:1a:27:c4:c0:c5:fa:b7:75:c6:2a:f5:b3:a8:
54:fb:af:f5:e9:ad:11:ac:fb:a5:21:e8:b0:24:86:
c3:c2:f7:e2:13:8c:e6:3b:d4:8d:92:6e:b7:f5:57:
eb:d8:fb:9f:a1:0b:15:a3:48:21:cf:f8:de:c7:29:
a3:3a:8a:78:e7:be:b0:f5:81:cc:ea:bc:02:45:da:
75:3c:58:9b:35:d8:50:f4:7f:e5:f3:9a:ae:ad:c1:
d8:31:b7:62:9b:e0:48:6c:c6:a3:40:54:b6:e0:eb:
50:20:ec:0f:f8:76:9c:22:96:6c:e7:04:5f:a9:a9:
b2:13:bc:d2:bc:26:35:71:63:8c:59:0f:8b:81:33:
56:4e:00:3c:84:34:e8:c6:45:25:9c:04:54:04:18:
71:75:52:fb:7b:df:75:1e:ef:da:02:66:38:35:e6:
bb:11:ed:ce:85:e2:5e:86:54:41:f7:52:2a:bc:b8:
ca:a0:bc:33:8d:08:72:ff:1d:a3:85:06:2b:fa:1a:
08:3e:fb:66:cd:28:90:4f:f4:34:00:bf:16:c9:7c:
48:ed:f7:bb:a8:be:b6:d0:6d:f0:fd:9b:a9:8c:20:
4d:4d:e7:f5:c9:56:a9:86:36:88:6c:ca:b2:e5:d4:
f1:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:2E:4C:E6:4D:89:C0:D0:DA:D1:08:86:8F:85:50:12:0F:8A:A6:20
X509v3 Authority Key Identifier:
keyid:3D:E9:BE:3C:47:AF:B9:E0:A5:FC:30:3B:F2:D8:4A:73:F2:08:2F:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pem-PEevueCl_DA78thKc_IIL6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ef76a6-c4e1-427f-973b-2c1c29014548/1/Pem-PEevueCl_DA78thKc_IIL6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ef76a6-c4e1-427f-973b-2c1c29014548/1/Pem-PEevueCl_DA78thKc_IIL6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:4a:08:44:99:b2:1e:38:96:26:6d:9f:55:dc:02:2f:cb:ac:
55:a6:45:20:06:9e:cc:ed:cb:f3:1f:e3:0d:01:b5:2d:9e:cb:
0b:d9:3f:33:04:d7:3e:e3:2e:7c:5f:31:4f:f7:88:12:73:70:
0a:26:61:50:63:6c:93:49:05:af:76:28:3b:e4:da:bd:fc:74:
99:2c:09:d7:d8:45:8c:73:61:bf:af:35:d8:70:d6:4f:8f:a0:
8a:f6:1a:b8:50:14:ca:62:ab:e2:05:10:43:ec:0f:58:73:2c:
82:2d:67:72:f6:df:04:6d:f9:43:3e:88:9f:67:77:bd:d6:dd:
13:e3:84:0b:a7:05:2d:f5:9b:55:61:98:65:a4:ce:d6:95:f3:
fe:f1:d4:3b:1a:75:99:11:e8:bf:38:3f:e4:57:98:6a:f0:90:
04:56:7d:ac:40:32:c9:b2:e7:69:f8:ff:e5:f9:d0:a0:a3:50:
d8:c6:96:e1:58:14:78:49:c6:55:2a:ba:a8:9b:05:75:28:79:
3e:3b:eb:b9:54:83:87:f4:7a:4e:d6:2a:b5:40:cd:0b:38:f0:
e3:34:db:ce:7e:6d:b9:85:9f:d2:5e:1c:2d:2b:b0:43:03:18:
f8:44:85:bc:20:ca:ce:f5:4c:b3:d6:5c:f2:8f:b8:5e:37:a2:
d0:85:fe:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 07:05:01 2025 by rpki-client