Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/ebe991-2eb4-4219-b367-0ebfcf38cbef/1/pEKhMJW3m8qG4s2gEuTEz2JGeWk.mft
File: pEKhMJW3m8qG4s2gEuTEz2JGeWk.mft (raw, json)
Hash identifier: +A1pruNCt/UZ3iLMkoFrDm65TvUT5gp3zUcjaXO7Wi0=
Subject key identifier: 87:73:ED:69:24:8C:67:25:45:54:16:39:94:81:AC:25:6E:BD:44:35
Authority key identifier: A4:42:A1:30:95:B7:9B:CA:86:E2:CD:A0:12:E4:C4:CF:62:46:79:69
Certificate issuer: /CN=a442a13095b79bca86e2cda012e4c4cf62467969
Certificate serial: 019A714A06CEB7D7B91A75924801762CAA45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEKhMJW3m8qG4s2gEuTEz2JGeWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/ebe991-2eb4-4219-b367-0ebfcf38cbef/1/pEKhMJW3m8qG4s2gEuTEz2JGeWk.mft
Manifest number: 0103
Signing time: Tue 11 Nov 2025 05:01:08 +0000
Manifest this update: Tue 11 Nov 2025 05:01:08 +0000
Manifest next update: Wed 12 Nov 2025 05:01:08 +0000
Files and hashes: 1: pEKhMJW3m8qG4s2gEuTEz2JGeWk.crl (hash: YUQB3yc1aB4PcaAveSSQJpmuY2g7mYu59qR2hyf24ok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/ebe991-2eb4-4219-b367-0ebfcf38cbef/1/pEKhMJW3m8qG4s2gEuTEz2JGeWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/ebe991-2eb4-4219-b367-0ebfcf38cbef/1/pEKhMJW3m8qG4s2gEuTEz2JGeWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pEKhMJW3m8qG4s2gEuTEz2JGeWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:06:ce:b7:d7:b9:1a:75:92:48:01:76:2c:aa:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a442a13095b79bca86e2cda012e4c4cf62467969
Validity
Not Before: Nov 11 05:01:08 2025 GMT
Not After : Nov 12 05:01:08 2025 GMT
Subject: CN=8773ed69248c6725455416399481ac256ebd4435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:aa:02:b6:f0:5a:c4:43:8d:a2:bc:f0:13:8f:
af:26:27:4e:7a:c4:26:b8:40:4a:98:b7:34:4b:70:
b4:d4:c6:c5:f0:59:2a:a6:78:91:ee:73:36:6c:82:
d2:38:f5:cc:a9:32:eb:38:e9:24:91:77:3b:09:97:
d3:98:eb:21:6d:66:0e:3c:37:eb:c7:55:a5:84:3a:
15:ab:ac:01:82:27:b5:d9:fc:f6:2f:fb:71:1a:d9:
9f:d2:8d:d1:69:97:98:76:8c:48:ba:bf:d7:a1:7c:
d9:32:2d:35:19:54:43:d9:a5:a7:bf:90:f4:c3:eb:
fe:25:21:34:6b:63:cb:d3:3b:5b:b0:f5:99:0f:19:
97:3f:b2:e2:91:59:16:e1:27:b1:d4:08:a6:b4:92:
7e:ed:8b:37:71:43:95:a2:73:84:7a:6c:11:6f:a8:
68:40:bd:43:69:44:0b:8c:85:45:37:9d:b8:c3:42:
f9:ed:00:ee:c3:fb:d1:a9:06:24:ed:d9:21:73:91:
20:1f:b6:5b:df:bd:52:73:31:b7:0f:2c:b5:fe:85:
c3:22:a8:0e:8c:2f:36:4a:f2:fc:48:41:9d:33:77:
c0:70:53:50:64:9a:6a:36:c8:e3:93:46:24:fd:8b:
9d:f5:8f:6d:a0:0c:e7:06:29:91:cc:bd:74:4d:f3:
b8:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:73:ED:69:24:8C:67:25:45:54:16:39:94:81:AC:25:6E:BD:44:35
X509v3 Authority Key Identifier:
keyid:A4:42:A1:30:95:B7:9B:CA:86:E2:CD:A0:12:E4:C4:CF:62:46:79:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEKhMJW3m8qG4s2gEuTEz2JGeWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/ebe991-2eb4-4219-b367-0ebfcf38cbef/1/pEKhMJW3m8qG4s2gEuTEz2JGeWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/ebe991-2eb4-4219-b367-0ebfcf38cbef/1/pEKhMJW3m8qG4s2gEuTEz2JGeWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:eb:79:ac:df:29:9d:94:72:78:50:75:be:4a:2a:39:6a:9a:
1a:4d:69:9c:c5:b1:be:a7:71:41:1b:26:30:c8:ef:4d:9b:e4:
d9:e5:8f:96:86:b5:4a:4a:f2:ef:4e:ff:77:44:6e:43:bb:10:
b6:f4:88:b2:6d:3d:f3:e8:d6:81:7c:8b:ea:3d:4e:56:e6:89:
91:96:f1:3c:2a:b8:eb:d2:c8:d3:58:62:6e:18:e6:fe:af:d0:
63:72:fc:3c:21:c8:c6:89:6d:2a:f8:7d:0b:8e:4a:31:7a:12:
5f:eb:62:7f:9b:0c:de:c4:fa:34:22:58:d5:c3:1f:14:67:bc:
50:c0:41:32:56:f5:47:b9:64:88:65:cf:29:8f:b4:bf:81:6a:
4b:21:59:22:8f:d2:0b:4f:76:40:cc:44:07:f9:da:7a:10:f5:
b3:43:69:31:e1:34:be:51:40:f6:94:d7:da:f4:52:64:88:6a:
b2:c9:9b:9b:72:11:bc:64:a7:77:78:f3:78:ba:4f:c7:89:65:
9c:74:b1:7b:7c:c7:3d:65:8e:32:01:4f:be:3c:2e:fb:d7:92:
f9:40:39:9f:1a:87:4d:63:b3:4b:5f:3b:00:08:8e:e4:dc:46:
4e:55:e0:43:67:b6:9c:3d:de:b6:90:9e:65:8f:35:a6:d5:36:
b2:cd:a7:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxSgbOt9e5GnWSSAF2LKpFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0NDJhMTMwOTViNzliY2E4NmUyY2RhMDEyZTRjNGNmNjI0
Njc5NjkwHhcNMjUxMTExMDUwMTA4WhcNMjUxMTEyMDUwMTA4WjAzMTEwLwYDVQQD
Eyg4NzczZWQ2OTI0OGM2NzI1NDU1NDE2Mzk5NDgxYWMyNTZlYmQ0NDM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqoCtvBaxEONorzwE4+vJidOesQm
uEBKmLc0S3C01MbF8FkqpniR7nM2bILSOPXMqTLrOOkkkXc7CZfTmOshbWYOPDfr
x1WlhDoVq6wBgie12fz2L/txGtmf0o3RaZeYdoxIur/XoXzZMi01GVRD2aWnv5D0
w+v+JSE0a2PL0ztbsPWZDxmXP7LikVkW4Sex1AimtJJ+7Ys3cUOVonOEemwRb6ho
QL1DaUQLjIVFN524w0L57QDuw/vRqQYk7dkhc5EgH7Zb371SczG3Dyy1/oXDIqgO
jC82SvL8SEGdM3fAcFNQZJpqNsjjk0Yk/Yud9Y9toAznBimRzL10TfO4OQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIdz7WkkjGclRVQWOZSBrCVuvUQ1MB8GA1UdIwQY
MBaAFKRCoTCVt5vKhuLNoBLkxM9iRnlpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEVLaE1KVzNtOHFHNHMyZ0V1VEV6MkpHZVdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9lYmU5OTEtMmViNC00MjE5LWIzNjct
MGViZmNmMzhjYmVmLzEvcEVLaE1KVzNtOHFHNHMyZ0V1VEV6MkpHZVdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi9lYmU5OTEtMmViNC00MjE5LWIzNjctMGViZmNmMzhjYmVm
LzEvcEVLaE1KVzNtOHFHNHMyZ0V1VEV6MkpHZVdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgut5rN8p
nZRyeFB1vkoqOWqaGk1pnMWxvqdxQRsmMMjvTZvk2eWPloa1Skry707/d0RuQ7sQ
tvSIsm098+jWgXyL6j1OVuaJkZbxPCq469LI01hibhjm/q/QY3L8PCHIxoltKvh9
C45KMXoSX+tif5sM3sT6NCJY1cMfFGe8UMBBMlb1R7lkiGXPKY+0v4FqSyFZIo/S
C092QMxEB/naehD1s0NpMeE0vlFA9pTX2vRSZIhqssmbm3IRvGSnd3jzeLpPx4ll
nHSxe3zHPWWOMgFPvjwu+9eS+UA5nxqHTWOzS187AAiO5NxGTlXgQ2e2nD3etpCe
ZY81ptU2ss2nwg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:16:09 2025 by rpki-client