Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/ebe991-2eb4-4219-b367-0ebfcf38cbef/1/pEKhMJW3m8qG4s2gEuTEz2JGeWk.mft
File: pEKhMJW3m8qG4s2gEuTEz2JGeWk.mft (raw, json)
Hash identifier: FESxc32CpXaikjAJ1J41dBUJ0+045ncIuVUFP9a9C0I=
Subject key identifier: 45:E2:1E:85:E5:60:6C:DD:6A:60:EC:D1:F6:62:65:04:9A:BD:25:12
Authority key identifier: A4:42:A1:30:95:B7:9B:CA:86:E2:CD:A0:12:E4:C4:CF:62:46:79:69
Certificate issuer: /CN=a442a13095b79bca86e2cda012e4c4cf62467969
Certificate serial: 01992367CEB026AE029E10AD0FC65E49F575
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEKhMJW3m8qG4s2gEuTEz2JGeWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/ebe991-2eb4-4219-b367-0ebfcf38cbef/1/pEKhMJW3m8qG4s2gEuTEz2JGeWk.mft
Manifest number: 56
Signing time: Sun 07 Sep 2025 09:00:29 +0000
Manifest this update: Sun 07 Sep 2025 09:00:29 +0000
Manifest next update: Mon 08 Sep 2025 09:00:29 +0000
Files and hashes: 1: pEKhMJW3m8qG4s2gEuTEz2JGeWk.crl (hash: vd9BNhGuNlCvYyQV8Ln6jOT43Wtoh4tiXbDCBfp4SSI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/ebe991-2eb4-4219-b367-0ebfcf38cbef/1/pEKhMJW3m8qG4s2gEuTEz2JGeWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/ebe991-2eb4-4219-b367-0ebfcf38cbef/1/pEKhMJW3m8qG4s2gEuTEz2JGeWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pEKhMJW3m8qG4s2gEuTEz2JGeWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:67:ce:b0:26:ae:02:9e:10:ad:0f:c6:5e:49:f5:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a442a13095b79bca86e2cda012e4c4cf62467969
Validity
Not Before: Sep 7 09:00:29 2025 GMT
Not After : Sep 8 09:00:29 2025 GMT
Subject: CN=45e21e85e5606cdd6a60ecd1f66265049abd2512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f8:12:32:18:18:66:7a:26:d1:ad:68:32:28:
35:76:0c:3f:d9:6e:5d:31:aa:17:9d:95:bf:55:71:
00:86:9f:13:8c:32:72:b4:d0:f8:65:70:a3:b6:cd:
9e:e4:ce:f7:7a:99:b3:a0:f7:e4:a6:3a:43:49:c4:
ee:2b:42:56:27:c7:b2:fe:b3:22:bc:52:9f:ec:54:
04:65:83:35:d5:da:ed:6a:f6:01:c2:10:31:d5:38:
35:10:67:8b:2e:a6:12:62:34:13:41:99:81:be:3a:
26:e3:18:cf:f0:36:de:fa:3f:65:60:e7:82:9c:21:
f9:9b:47:9d:d0:4e:47:d5:33:56:2e:09:aa:af:bb:
d7:fe:0b:7e:a5:9b:5d:55:ed:dd:71:7d:8e:c0:83:
5d:b1:da:01:98:ec:bc:26:b5:46:46:e6:e6:fd:ae:
43:3a:a3:61:19:38:73:95:d4:af:81:05:5b:ab:0f:
cf:72:30:34:45:25:bc:07:4a:07:d5:e2:b2:55:f3:
5f:9b:bd:9c:de:c4:14:e5:fe:3e:d1:4e:cb:b8:52:
5f:37:0b:03:25:d5:de:b0:23:41:4a:7c:b3:82:31:
6d:9f:a2:92:97:48:ba:c8:b3:c1:a6:65:56:98:70:
51:b5:0a:3b:ea:17:41:52:be:a0:c9:af:1a:d7:f1:
57:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:E2:1E:85:E5:60:6C:DD:6A:60:EC:D1:F6:62:65:04:9A:BD:25:12
X509v3 Authority Key Identifier:
keyid:A4:42:A1:30:95:B7:9B:CA:86:E2:CD:A0:12:E4:C4:CF:62:46:79:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEKhMJW3m8qG4s2gEuTEz2JGeWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/ebe991-2eb4-4219-b367-0ebfcf38cbef/1/pEKhMJW3m8qG4s2gEuTEz2JGeWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/ebe991-2eb4-4219-b367-0ebfcf38cbef/1/pEKhMJW3m8qG4s2gEuTEz2JGeWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:f3:12:5f:dd:b5:48:3a:98:21:fb:9b:14:62:09:f8:8a:76:
d3:9e:b5:69:d1:fe:dc:11:82:e9:e3:cf:b7:4a:1f:93:45:b6:
e1:45:ec:86:f5:bb:7a:c6:65:ef:31:12:bc:34:ea:e7:a6:29:
83:1f:c3:ff:90:86:ad:da:a2:31:54:5a:d8:c4:58:d7:09:9c:
52:e9:e9:16:f7:2f:e4:b8:a1:db:71:04:f6:6a:35:7e:f0:22:
87:5f:ec:11:c2:15:33:a3:d3:59:27:a2:de:d5:44:c5:e2:1f:
26:7a:d3:5e:81:fa:93:8e:e0:6f:a8:fc:75:2b:e3:23:69:45:
ef:2b:76:0b:3d:91:f2:e5:a5:8d:a3:db:ee:c1:cb:45:65:ee:
08:e1:23:e4:11:b3:cc:3f:74:c9:82:ed:1f:12:4e:d6:42:85:
4c:68:e8:9f:26:f4:60:fe:59:70:3b:75:8d:9c:fc:ba:75:be:
76:dc:7f:50:e9:c4:19:bd:2b:30:52:f7:0a:6a:d3:b2:08:97:
66:ff:df:3c:70:66:9b:48:54:fb:65:71:ad:24:89:c1:7b:90:
20:28:ea:dc:48:6f:3f:31:44:ec:20:77:91:17:2f:2c:c6:de:
78:5a:5f:f5:2b:aa:33:4c:31:92:1c:a8:71:fe:17:f5:e2:19:
73:2a:22:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjZ86wJq4CnhCtD8ZeSfV1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0NDJhMTMwOTViNzliY2E4NmUyY2RhMDEyZTRjNGNmNjI0
Njc5NjkwHhcNMjUwOTA3MDkwMDI5WhcNMjUwOTA4MDkwMDI5WjAzMTEwLwYDVQQD
Eyg0NWUyMWU4NWU1NjA2Y2RkNmE2MGVjZDFmNjYyNjUwNDlhYmQyNTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvgSMhgYZnom0a1oMig1dgw/2W5d
MaoXnZW/VXEAhp8TjDJytND4ZXCjts2e5M73epmzoPfkpjpDScTuK0JWJ8ey/rMi
vFKf7FQEZYM11drtavYBwhAx1Tg1EGeLLqYSYjQTQZmBvjom4xjP8Dbe+j9lYOeC
nCH5m0ed0E5H1TNWLgmqr7vX/gt+pZtdVe3dcX2OwINdsdoBmOy8JrVGRubm/a5D
OqNhGThzldSvgQVbqw/PcjA0RSW8B0oH1eKyVfNfm72c3sQU5f4+0U7LuFJfNwsD
JdXesCNBSnyzgjFtn6KSl0i6yLPBpmVWmHBRtQo76hdBUr6gya8a1/FXFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEXiHoXlYGzdamDs0fZiZQSavSUSMB8GA1UdIwQY
MBaAFKRCoTCVt5vKhuLNoBLkxM9iRnlpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEVLaE1KVzNtOHFHNHMyZ0V1VEV6MkpHZVdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9lYmU5OTEtMmViNC00MjE5LWIzNjct
MGViZmNmMzhjYmVmLzEvcEVLaE1KVzNtOHFHNHMyZ0V1VEV6MkpHZVdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi9lYmU5OTEtMmViNC00MjE5LWIzNjctMGViZmNmMzhjYmVm
LzEvcEVLaE1KVzNtOHFHNHMyZ0V1VEV6MkpHZVdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcfMSX921
SDqYIfubFGIJ+Ip20561adH+3BGC6ePPt0ofk0W24UXshvW7esZl7zESvDTq56Yp
gx/D/5CGrdqiMVRa2MRY1wmcUunpFvcv5Lih23EE9mo1fvAih1/sEcIVM6PTWSei
3tVExeIfJnrTXoH6k47gb6j8dSvjI2lF7yt2Cz2R8uWljaPb7sHLRWXuCOEj5BGz
zD90yYLtHxJO1kKFTGjonyb0YP5ZcDt1jZz8unW+dtx/UOnEGb0rMFL3CmrTsgiX
Zv/fPHBmm0hU+2VxrSSJwXuQICjq3EhvPzFE7CB3kRcvLMbeeFpf9SuqM0wxkhyo
cf4X9eIZcyoiug==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:32:59 2025 by rpki-client