Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/a87aec-beaa-4aeb-a48e-8f34bd391d18/1/pe6Sbx8VN7m-detLnXkt9B0lzZk.mft
File: pe6Sbx8VN7m-detLnXkt9B0lzZk.mft (raw, json)
Hash identifier: Szzm8EiaiiCb2mLOQaHI0CV2tVjkOT+WpS0fhnX6+DU=
Subject key identifier: 4F:2E:08:2E:59:0B:58:FE:17:AF:78:27:BB:9D:44:6E:85:DB:5A:14
Authority key identifier: A5:EE:92:6F:1F:15:37:B9:BE:75:EB:4B:9D:79:2D:F4:1D:25:CD:99
Certificate issuer: /CN=a5ee926f1f1537b9be75eb4b9d792df41d25cd99
Certificate serial: 0198D54DD4E298176E05B42A551BA4BECB98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pe6Sbx8VN7m-detLnXkt9B0lzZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/a87aec-beaa-4aeb-a48e-8f34bd391d18/1/pe6Sbx8VN7m-detLnXkt9B0lzZk.mft
Manifest number: 0D20
Signing time: Sat 23 Aug 2025 05:01:44 +0000
Manifest this update: Sat 23 Aug 2025 05:01:44 +0000
Manifest next update: Sun 24 Aug 2025 05:01:44 +0000
Files and hashes: 1: WDPyyXGbTlVNzNvHMt_u6jFAfDs.roa (hash: Io6wRfSHyznIog5I1/syrGcc1ZOg6epQfuj3AIJAZhg=)
2: pe6Sbx8VN7m-detLnXkt9B0lzZk.crl (hash: AnR9rUhK6Gl5kDtsjK/U6e9te27vH2OzLbjgBz+5070=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/a87aec-beaa-4aeb-a48e-8f34bd391d18/1/pe6Sbx8VN7m-detLnXkt9B0lzZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/a87aec-beaa-4aeb-a48e-8f34bd391d18/1/pe6Sbx8VN7m-detLnXkt9B0lzZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pe6Sbx8VN7m-detLnXkt9B0lzZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:d4:e2:98:17:6e:05:b4:2a:55:1b:a4:be:cb:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5ee926f1f1537b9be75eb4b9d792df41d25cd99
Validity
Not Before: Aug 23 05:01:44 2025 GMT
Not After : Aug 24 05:01:44 2025 GMT
Subject: CN=4f2e082e590b58fe17af7827bb9d446e85db5a14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:91:6a:c1:34:53:83:7f:7b:2d:8f:49:61:ba:
32:75:9b:18:96:68:3f:57:0a:b9:c2:b7:c3:fd:c6:
62:cb:54:1e:c8:ce:70:cc:cc:c1:ee:d5:0f:47:7f:
a0:6e:99:50:e4:87:12:66:1b:8d:c6:00:a3:f1:07:
71:a4:36:cb:3a:0d:e1:64:a0:b7:f6:2b:d9:5c:1b:
e5:47:d6:a2:71:6e:96:2b:e2:7d:78:47:0b:7d:cd:
23:5c:2f:38:23:1f:3a:b0:54:2f:5d:c8:a1:54:57:
97:4e:0d:60:ec:36:c7:78:e2:57:ae:29:f6:15:f6:
b8:72:2f:b3:d7:64:68:45:eb:d0:8a:51:cf:31:ea:
d7:e8:32:39:54:39:c9:08:37:95:c0:7c:5a:ff:9c:
a6:5b:b8:81:f0:0b:de:df:4f:f3:4a:09:e5:d4:3d:
42:86:a2:e3:25:49:de:34:22:97:8b:60:db:0f:ab:
3d:cc:88:d6:29:31:c9:68:8c:42:ea:72:e1:ac:4f:
3e:02:f5:47:4e:31:0f:6b:94:c9:2e:b3:b2:42:dd:
f5:0b:00:82:61:87:e5:90:99:04:5b:27:31:9d:a9:
e0:a7:db:6f:43:ab:f3:d3:c4:56:b7:ea:b8:3b:21:
7e:30:ef:95:bc:0e:11:a1:dd:42:66:81:16:34:80:
5b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:2E:08:2E:59:0B:58:FE:17:AF:78:27:BB:9D:44:6E:85:DB:5A:14
X509v3 Authority Key Identifier:
keyid:A5:EE:92:6F:1F:15:37:B9:BE:75:EB:4B:9D:79:2D:F4:1D:25:CD:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pe6Sbx8VN7m-detLnXkt9B0lzZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a87aec-beaa-4aeb-a48e-8f34bd391d18/1/pe6Sbx8VN7m-detLnXkt9B0lzZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a87aec-beaa-4aeb-a48e-8f34bd391d18/1/pe6Sbx8VN7m-detLnXkt9B0lzZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:e2:fa:b4:5b:42:9d:ee:5f:9b:35:ba:e2:87:3f:97:3f:1c:
2e:8f:c3:b6:89:00:2e:28:cf:95:ba:9b:e2:73:56:27:10:98:
a2:02:e6:d6:1c:3b:fe:b0:b6:0d:09:24:d4:3d:e8:f4:f0:a7:
23:80:cb:a6:f0:b8:df:9f:f9:30:4d:7b:1f:34:89:42:d6:59:
fb:e5:65:be:32:15:81:01:3d:9f:bf:01:c9:00:bd:df:3a:46:
9e:be:28:fa:f9:e4:33:c3:b7:79:cf:3c:9a:b4:b2:6a:ac:ce:
7b:ef:87:11:2e:71:a7:7a:2b:29:7d:72:33:b2:ae:58:04:e7:
4f:d2:08:65:23:c2:2d:ac:62:4e:5a:43:e2:c4:05:25:c4:8a:
63:05:98:8a:7c:27:45:cb:cb:3c:90:50:b8:f1:6c:b4:0b:88:
ba:f3:f2:59:c1:1d:a7:89:d6:09:b1:f6:94:a9:88:db:69:73:
2b:b0:fb:7f:f7:f8:75:a0:ba:a0:1b:18:49:9e:f3:c9:7a:5d:
45:ee:1d:ae:a6:67:6e:c6:33:9e:03:1f:52:8a:17:00:c8:68:
35:f2:a3:7e:83:1c:19:8c:63:a6:20:32:ef:54:cc:46:56:3b:
66:fb:e2:c4:da:77:05:69:2a:da:52:d8:9f:2d:41:0c:0b:07:
0c:59:6a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:07:21 2025 by rpki-client