Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/870c2a-394c-45c2-a434-b21e0f4c0c0a/1/PEi5LoCU13gCF-MlTFlyC8Kpdjg.mft
File: PEi5LoCU13gCF-MlTFlyC8Kpdjg.mft (raw, json)
Hash identifier: NRzmCB6DPhioYsQxR+Wmfz8pqlGMyAx9f8qufCvOSxA=
Subject key identifier: D9:15:B8:A2:AC:58:1D:51:33:79:1D:85:FE:A6:A8:D8:D2:DD:D4:0B
Authority key identifier: 3C:48:B9:2E:80:94:D7:78:02:17:E3:25:4C:59:72:0B:C2:A9:76:38
Certificate issuer: /CN=3c48b92e8094d7780217e3254c59720bc2a97638
Certificate serial: 019A71807E4C139B513745B1163E07D0E2F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PEi5LoCU13gCF-MlTFlyC8Kpdjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/870c2a-394c-45c2-a434-b21e0f4c0c0a/1/PEi5LoCU13gCF-MlTFlyC8Kpdjg.mft
Manifest number: 37
Signing time: Tue 11 Nov 2025 06:00:37 +0000
Manifest this update: Tue 11 Nov 2025 06:00:37 +0000
Manifest next update: Wed 12 Nov 2025 06:00:37 +0000
Files and hashes: 1: PEi5LoCU13gCF-MlTFlyC8Kpdjg.crl (hash: dljFbTCQnfIefVp5Bb5qj7ZcMTuHRDAOb9jP9pcvMxI=)
2: VW-YuWVLiGv-E6ZLvfIgaqZdhpg.roa (hash: PO7JJdxWkEpl29WJvFTHI2q+RPZjLYRyCcgwDE07rCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/870c2a-394c-45c2-a434-b21e0f4c0c0a/1/PEi5LoCU13gCF-MlTFlyC8Kpdjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/870c2a-394c-45c2-a434-b21e0f4c0c0a/1/PEi5LoCU13gCF-MlTFlyC8Kpdjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PEi5LoCU13gCF-MlTFlyC8Kpdjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 06:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:80:7e:4c:13:9b:51:37:45:b1:16:3e:07:d0:e2:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c48b92e8094d7780217e3254c59720bc2a97638
Validity
Not Before: Nov 11 06:00:37 2025 GMT
Not After : Nov 12 06:00:37 2025 GMT
Subject: CN=d915b8a2ac581d5133791d85fea6a8d8d2ddd40b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:68:fa:52:b7:e7:88:f7:63:89:f0:33:08:ae:
32:19:11:96:d5:0b:d4:f7:be:31:d7:3f:7c:7a:91:
49:9f:cf:c5:81:80:92:32:9a:da:2d:ca:c5:89:86:
41:9c:29:53:76:02:44:b2:b7:89:39:fa:ed:70:d4:
f8:d7:0d:23:0d:68:40:bd:7f:b9:9f:a5:5a:3b:5e:
3b:40:09:14:4b:22:f2:53:cb:fd:84:35:f3:30:fa:
e3:c4:3f:03:11:9f:5b:09:4d:0a:d0:af:38:35:e2:
01:c1:38:f9:2c:f3:a9:9e:43:c6:4a:7f:fd:73:ce:
6b:5b:44:ac:97:57:45:85:b8:71:e5:82:7c:f3:44:
9e:c7:00:c4:d4:93:7a:4b:78:e7:55:4a:e4:84:86:
00:23:f4:17:8e:34:84:4a:db:31:48:cd:4d:e9:2b:
e1:41:72:7c:a3:be:57:aa:8e:8b:e4:f8:d0:b7:e2:
1c:2c:37:7f:85:76:26:2f:e7:30:78:c1:50:eb:3b:
56:df:d5:ca:97:31:a9:70:68:bb:0b:8b:83:aa:70:
27:35:c8:f9:70:7c:1d:26:9b:8b:1b:c7:2b:34:06:
56:4f:b8:d2:ef:ea:40:38:20:d1:8a:f3:6c:e6:9a:
06:ad:09:f5:b5:e6:56:51:60:87:14:ea:bd:ef:9f:
9c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:15:B8:A2:AC:58:1D:51:33:79:1D:85:FE:A6:A8:D8:D2:DD:D4:0B
X509v3 Authority Key Identifier:
keyid:3C:48:B9:2E:80:94:D7:78:02:17:E3:25:4C:59:72:0B:C2:A9:76:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PEi5LoCU13gCF-MlTFlyC8Kpdjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/870c2a-394c-45c2-a434-b21e0f4c0c0a/1/PEi5LoCU13gCF-MlTFlyC8Kpdjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/870c2a-394c-45c2-a434-b21e0f4c0c0a/1/PEi5LoCU13gCF-MlTFlyC8Kpdjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:bc:ab:7f:9d:6e:85:b8:b8:7f:03:74:2a:fb:56:bf:63:3f:
4a:88:50:b8:41:ae:7d:d2:16:4b:af:e3:8f:b9:3c:54:e1:82:
0f:f4:a0:f5:0b:3f:aa:61:e0:a4:d5:7e:5e:05:44:b6:1a:bc:
b3:65:53:7d:98:3b:38:92:76:12:22:28:89:c7:d3:31:f1:dd:
9b:87:29:6c:c2:eb:25:43:3a:66:33:76:a9:fc:af:ed:46:34:
db:d8:d3:81:da:9c:58:8a:fc:b9:60:38:4a:0b:c9:29:cc:0a:
a8:4d:79:12:5d:ca:c9:cf:51:27:aa:2a:0b:34:67:40:53:62:
45:76:9d:2e:76:6d:d4:5b:52:5d:04:4f:9d:72:3e:de:3c:20:
79:0e:b3:08:27:2e:38:6c:c6:88:c0:b0:3f:ad:4d:0c:ab:28:
7e:78:5f:3d:d4:44:7f:38:59:da:96:14:f4:13:af:57:76:20:
9c:ce:d2:1c:92:c4:83:e4:a4:d4:2d:1c:d7:c7:8c:e8:74:a4:
85:3a:83:fd:94:b8:7f:3f:6f:b7:7b:3f:d4:c4:4b:8c:08:eb:
93:d6:f3:ed:12:26:99:7e:94:04:db:f1:66:9b:c3:7b:ae:a6:
1a:3f:71:75:12:f6:65:e9:a2:bd:42:78:87:dc:e1:7d:3f:6f:
f0:aa:c2:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxgH5ME5tRN0WxFj4H0OL3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjNDhiOTJlODA5NGQ3NzgwMjE3ZTMyNTRjNTk3MjBiYzJh
OTc2MzgwHhcNMjUxMTExMDYwMDM3WhcNMjUxMTEyMDYwMDM3WjAzMTEwLwYDVQQD
EyhkOTE1YjhhMmFjNTgxZDUxMzM3OTFkODVmZWE2YThkOGQyZGRkNDBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Wj6UrfniPdjifAzCK4yGRGW1QvU
974x1z98epFJn8/FgYCSMpraLcrFiYZBnClTdgJEsreJOfrtcNT41w0jDWhAvX+5
n6VaO147QAkUSyLyU8v9hDXzMPrjxD8DEZ9bCU0K0K84NeIBwTj5LPOpnkPGSn/9
c85rW0Ssl1dFhbhx5YJ880SexwDE1JN6S3jnVUrkhIYAI/QXjjSEStsxSM1N6Svh
QXJ8o75Xqo6L5PjQt+IcLDd/hXYmL+cweMFQ6ztW39XKlzGpcGi7C4uDqnAnNcj5
cHwdJpuLG8crNAZWT7jS7+pAOCDRivNs5poGrQn1teZWUWCHFOq975+cMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNkVuKKsWB1RM3kdhf6mqNjS3dQLMB8GA1UdIwQY
MBaAFDxIuS6AlNd4AhfjJUxZcgvCqXY4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEVpNUxvQ1UxM2dDRi1NbFRGbHlDOEtwZGpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC84NzBjMmEtMzk0Yy00NWMyLWE0MzQt
YjIxZTBmNGMwYzBhLzEvUEVpNUxvQ1UxM2dDRi1NbFRGbHlDOEtwZGpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC84NzBjMmEtMzk0Yy00NWMyLWE0MzQtYjIxZTBmNGMwYzBh
LzEvUEVpNUxvQ1UxM2dDRi1NbFRGbHlDOEtwZGpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVryrf51u
hbi4fwN0KvtWv2M/SohQuEGufdIWS6/jj7k8VOGCD/Sg9Qs/qmHgpNV+XgVEthq8
s2VTfZg7OJJ2EiIoicfTMfHdm4cpbMLrJUM6ZjN2qfyv7UY029jTgdqcWIr8uWA4
SgvJKcwKqE15El3Kyc9RJ6oqCzRnQFNiRXadLnZt1FtSXQRPnXI+3jwgeQ6zCCcu
OGzGiMCwP61NDKsofnhfPdREfzhZ2pYU9BOvV3YgnM7SHJLEg+Sk1C0c18eM6HSk
hTqD/ZS4fz9vt3s/1MRLjAjrk9bz7RImmX6UBNvxZpvDe66mGj9xdRL2ZemivUJ4
h9zhfT9v8KrC7A==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:56:43 2025 by rpki-client