Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.mft
File: PeSbGET-RCKvvhDN0oGcdEgnfmU.mft (raw, json)
Hash identifier: Awyl26G0g0oxrblwnq/4udVlumxGDsTMFA13rFCuIQs=
Subject key identifier: E0:45:4E:DC:D0:5A:7F:01:D1:02:D2:37:1A:3C:0A:EE:18:9B:98:1C
Authority key identifier: 3D:E4:9B:18:44:FE:44:22:AF:BE:10:CD:D2:81:9C:74:48:27:7E:65
Certificate issuer: /CN=3de49b1844fe4422afbe10cdd2819c7448277e65
Certificate serial: 019919F8204CAC3306AA700BB56D8FADF4CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeSbGET-RCKvvhDN0oGcdEgnfmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.mft
Manifest number: 0A1C
Signing time: Fri 05 Sep 2025 13:01:55 +0000
Manifest this update: Fri 05 Sep 2025 13:01:55 +0000
Manifest next update: Sat 06 Sep 2025 13:01:55 +0000
Files and hashes: 1: Fw_E1L4Nw5Hr77P4PSs-fCdld4o.roa (hash: 02j0pLQbdlE9MH5ggabxr1xIMQYmyzEOYjg+Z13q0BA=)
2: PeSbGET-RCKvvhDN0oGcdEgnfmU.crl (hash: gzVCVDCj5m6KHq4JB2L4Kyd1Ixzh4HEsjzkJ0zbHppo=)
3: VrCXOdxzLdld1tE0j_xLZ92cqsk.roa (hash: QEJHs3sdF5W7Kc4VSrPn7L7Yyup7NDcWYP/rulbrnEw=)
4: wbEopCsHgdsUwl85d1p6YVkQyt4.roa (hash: Mueh9tzlM1Esxrp4PnyphjifQnr2qX7ryaFawIufllw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeSbGET-RCKvvhDN0oGcdEgnfmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 10:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:19:f8:20:4c:ac:33:06:aa:70:0b:b5:6d:8f:ad:f4:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de49b1844fe4422afbe10cdd2819c7448277e65
Validity
Not Before: Sep 5 13:01:55 2025 GMT
Not After : Sep 6 13:01:55 2025 GMT
Subject: CN=e0454edcd05a7f01d102d2371a3c0aee189b981c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:25:4e:9b:78:23:16:49:f4:8a:4d:e6:46:4a:
32:1a:c2:8f:59:5f:07:fa:9e:f3:ae:14:6f:ff:a9:
11:2f:20:2c:3c:8c:96:a7:9e:01:d1:86:de:b2:62:
8f:bd:14:a9:ca:dd:0c:d3:05:65:ed:19:63:87:de:
82:60:4e:96:3e:ba:9f:44:8e:04:70:88:c3:89:1f:
00:3d:54:7f:d9:31:8c:0b:07:7a:5e:e6:22:73:53:
9d:d5:21:d0:64:f0:4e:6b:da:3f:3b:3e:67:f5:e4:
0d:ab:44:48:69:20:55:f9:cb:30:d4:ee:1e:dd:31:
73:19:11:54:eb:26:63:11:9b:b7:48:29:e3:7a:30:
c9:85:e9:c8:df:f8:93:d5:85:a4:60:f3:71:c1:a7:
22:b6:cd:22:e7:d0:63:2a:a5:8b:af:63:4b:5b:84:
09:64:60:3f:5d:51:4d:95:62:ce:fd:49:22:7f:e4:
cf:29:3a:6b:09:da:45:d9:00:36:f0:d6:4b:20:16:
8e:77:38:af:b6:0e:bf:f1:3d:e2:1c:8f:e6:c0:6b:
70:ef:8a:33:ed:2f:63:c8:33:74:1c:aa:d6:9c:22:
9b:a3:94:9d:8d:7e:8f:bd:8c:93:e1:75:a1:72:c0:
51:28:13:df:8f:94:37:7b:1b:7e:85:82:d9:1d:f3:
8b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:45:4E:DC:D0:5A:7F:01:D1:02:D2:37:1A:3C:0A:EE:18:9B:98:1C
X509v3 Authority Key Identifier:
keyid:3D:E4:9B:18:44:FE:44:22:AF:BE:10:CD:D2:81:9C:74:48:27:7E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeSbGET-RCKvvhDN0oGcdEgnfmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:63:5b:c8:c8:6a:0f:64:f0:bd:09:69:0f:cb:a4:ee:75:81:
50:04:f0:dc:c7:28:7a:23:e3:1d:36:a5:21:b3:7f:9f:ef:3c:
50:69:e7:e9:76:0d:d7:30:5b:b8:8c:02:44:4a:31:9d:8d:38:
c8:fe:83:15:65:b5:ba:81:81:87:9d:40:a2:10:4e:90:a3:7e:
bd:4c:64:e3:1d:5a:94:1a:f0:30:d1:d7:d0:f2:9a:cc:64:89:
6b:0e:1d:43:79:ce:03:d0:56:06:ab:e7:f5:bc:eb:95:aa:18:
f1:b0:a4:29:81:e6:a5:a5:fd:dc:0c:b1:48:8c:be:7e:00:4a:
63:97:43:d1:43:86:8d:60:3e:bd:c6:29:a8:3c:fd:8f:bf:09:
84:99:47:58:07:89:73:c6:81:7d:8c:68:e7:ce:56:e0:3e:6e:
38:3c:97:99:0b:81:b4:bf:33:dd:f7:aa:6e:bb:cf:8e:a8:88:
14:8b:41:33:04:b8:f8:61:7e:30:e1:25:22:2f:df:8b:91:2a:
f5:b0:dd:fc:ce:cc:90:90:d7:88:59:c4:fe:6e:ca:66:8f:bf:
e7:2f:94:5d:52:9f:0f:54:92:b2:31:c3:00:ea:4b:d7:b0:05:
ba:2b:d6:0a:f6:b6:af:ac:fa:fd:d4:36:ff:23:29:46:3c:9c:
14:5d:ec:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 18:33:59 2025 by rpki-client