Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/a87aec-beaa-4aeb-a48e-8f34bd391d18/1/pe6Sbx8VN7m-detLnXkt9B0lzZk.mft
File: pe6Sbx8VN7m-detLnXkt9B0lzZk.mft (raw, json)
Hash identifier: 9z7CfmEjD7jW4hpdozBTu6SJH1boyVUXTbp0T7Fr0NU=
Subject key identifier: B6:82:8E:D9:9F:B5:B0:83:D1:C5:4A:C9:2B:0F:03:7F:B3:38:4D:87
Authority key identifier: A5:EE:92:6F:1F:15:37:B9:BE:75:EB:4B:9D:79:2D:F4:1D:25:CD:99
Certificate issuer: /CN=a5ee926f1f1537b9be75eb4b9d792df41d25cd99
Certificate serial: 0199FCC620871D64ED6CC2998D0C4A499AB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pe6Sbx8VN7m-detLnXkt9B0lzZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/a87aec-beaa-4aeb-a48e-8f34bd391d18/1/pe6Sbx8VN7m-detLnXkt9B0lzZk.mft
Manifest number: 0DB9
Signing time: Sun 19 Oct 2025 14:01:06 +0000
Manifest this update: Sun 19 Oct 2025 14:01:06 +0000
Manifest next update: Mon 20 Oct 2025 14:01:06 +0000
Files and hashes: 1: WDPyyXGbTlVNzNvHMt_u6jFAfDs.roa (hash: Io6wRfSHyznIog5I1/syrGcc1ZOg6epQfuj3AIJAZhg=)
2: pe6Sbx8VN7m-detLnXkt9B0lzZk.crl (hash: 6Vj/bXwBTZEUj1apN813Ix78T110o2T++rwq+jfyqIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/a87aec-beaa-4aeb-a48e-8f34bd391d18/1/pe6Sbx8VN7m-detLnXkt9B0lzZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/a87aec-beaa-4aeb-a48e-8f34bd391d18/1/pe6Sbx8VN7m-detLnXkt9B0lzZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pe6Sbx8VN7m-detLnXkt9B0lzZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:20:87:1d:64:ed:6c:c2:99:8d:0c:4a:49:9a:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5ee926f1f1537b9be75eb4b9d792df41d25cd99
Validity
Not Before: Oct 19 14:01:06 2025 GMT
Not After : Oct 20 14:01:06 2025 GMT
Subject: CN=b6828ed99fb5b083d1c54ac92b0f037fb3384d87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9a:33:9e:f2:72:33:ce:af:c5:7c:d4:70:23:
cd:f2:bc:cf:b3:e0:de:98:78:38:3c:68:99:f5:42:
14:5b:37:9e:e9:68:aa:f6:a8:41:0a:b3:b5:e9:89:
35:65:2b:1d:da:8c:51:e7:66:c6:ec:e1:fc:e6:a8:
e1:5f:7c:02:56:68:86:f7:d0:a1:8d:ab:0e:34:46:
63:c2:62:28:86:77:85:31:5f:89:ac:d5:cd:ec:fb:
f7:16:33:76:41:28:d7:c8:e4:02:b2:66:b5:c3:26:
ff:59:23:20:99:6b:df:03:0a:70:55:cb:23:1d:6e:
00:40:97:32:d1:45:31:c5:71:43:14:17:6d:18:99:
7d:62:0a:ef:3d:50:6e:ac:2b:7a:af:91:95:ba:f9:
34:00:be:88:19:e5:06:29:75:d5:e2:18:06:cb:ff:
39:4a:70:ee:d7:14:f1:10:44:05:16:8f:34:d6:2c:
37:f1:8c:53:25:3b:49:27:2d:b8:8f:f3:20:48:86:
18:14:8f:a7:f5:dd:6d:60:3c:ed:ab:7a:55:1a:15:
31:e2:0a:07:b3:c1:b5:97:08:0d:ae:1e:b5:40:93:
a9:e7:8e:51:05:e4:3e:c8:92:6d:54:cf:3e:7d:dc:
b8:ef:db:85:f5:9d:9f:d2:f9:92:45:55:79:d8:45:
9d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:82:8E:D9:9F:B5:B0:83:D1:C5:4A:C9:2B:0F:03:7F:B3:38:4D:87
X509v3 Authority Key Identifier:
keyid:A5:EE:92:6F:1F:15:37:B9:BE:75:EB:4B:9D:79:2D:F4:1D:25:CD:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pe6Sbx8VN7m-detLnXkt9B0lzZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a87aec-beaa-4aeb-a48e-8f34bd391d18/1/pe6Sbx8VN7m-detLnXkt9B0lzZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a87aec-beaa-4aeb-a48e-8f34bd391d18/1/pe6Sbx8VN7m-detLnXkt9B0lzZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:f8:6e:85:ca:80:61:31:4c:49:8a:de:64:e2:02:df:3e:f0:
a9:9d:0e:fa:90:7c:2b:9b:b1:d3:07:42:15:7a:64:89:68:69:
ad:88:48:51:53:69:a7:91:87:28:9c:37:52:b7:97:59:fa:96:
da:fe:05:b7:62:cd:b2:b4:01:f8:74:72:29:fa:dc:a8:e5:af:
29:44:c2:ef:4a:3a:03:2c:b3:13:30:0b:c4:b8:d8:4c:07:26:
4a:6d:37:e4:82:10:78:03:a5:a9:09:4e:02:61:f1:c0:7c:42:
08:17:d3:4b:01:c6:11:9d:40:60:ad:67:9c:68:9b:82:fc:71:
2c:43:dc:2b:7c:23:b9:80:90:f2:a0:fc:93:b8:44:11:bd:02:
49:0e:25:6c:4f:eb:f5:d6:02:f6:9d:a6:b8:30:8f:1e:e1:34:
67:89:1c:aa:ab:9d:f8:9c:b2:40:b2:2f:60:c6:14:07:b8:62:
4a:19:5a:a8:d7:f4:37:45:67:a2:7c:9d:c2:14:2e:77:c2:13:
5b:73:11:44:8a:9e:d6:b5:32:80:ef:04:6b:d2:b7:5b:df:4e:
6a:ea:34:14:93:92:32:bb:49:5a:09:0d:b8:2b:d1:11:59:00:
41:03:fa:37:b0:1f:df:0a:2c:1b:14:54:51:28:cb:b3:20:52:
9b:57:a3:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xiCHHWTtbMKZjQxKSZqzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1ZWU5MjZmMWYxNTM3YjliZTc1ZWI0YjlkNzkyZGY0MWQy
NWNkOTkwHhcNMjUxMDE5MTQwMTA2WhcNMjUxMDIwMTQwMTA2WjAzMTEwLwYDVQQD
EyhiNjgyOGVkOTlmYjViMDgzZDFjNTRhYzkyYjBmMDM3ZmIzMzg0ZDg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpoznvJyM86vxXzUcCPN8rzPs+De
mHg4PGiZ9UIUWzee6Wiq9qhBCrO16Yk1ZSsd2oxR52bG7OH85qjhX3wCVmiG99Ch
jasONEZjwmIohneFMV+JrNXN7Pv3FjN2QSjXyOQCsma1wyb/WSMgmWvfAwpwVcsj
HW4AQJcy0UUxxXFDFBdtGJl9YgrvPVBurCt6r5GVuvk0AL6IGeUGKXXV4hgGy/85
SnDu1xTxEEQFFo801iw38YxTJTtJJy24j/MgSIYYFI+n9d1tYDztq3pVGhUx4goH
s8G1lwgNrh61QJOp545RBeQ+yJJtVM8+fdy479uF9Z2f0vmSRVV52EWdqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLaCjtmftbCD0cVKySsPA3+zOE2HMB8GA1UdIwQY
MBaAFKXukm8fFTe5vnXrS515LfQdJc2ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGU2U2J4OFZON20tZGV0TG5Ya3Q5QjBselprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9hODdhZWMtYmVhYS00YWViLWE0OGUt
OGYzNGJkMzkxZDE4LzEvcGU2U2J4OFZON20tZGV0TG5Ya3Q5QjBselprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9hODdhZWMtYmVhYS00YWViLWE0OGUtOGYzNGJkMzkxZDE4
LzEvcGU2U2J4OFZON20tZGV0TG5Ya3Q5QjBselprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVPhuhcqA
YTFMSYreZOIC3z7wqZ0O+pB8K5ux0wdCFXpkiWhprYhIUVNpp5GHKJw3UreXWfqW
2v4Ft2LNsrQB+HRyKfrcqOWvKUTC70o6AyyzEzALxLjYTAcmSm035IIQeAOlqQlO
AmHxwHxCCBfTSwHGEZ1AYK1nnGibgvxxLEPcK3wjuYCQ8qD8k7hEEb0CSQ4lbE/r
9dYC9p2muDCPHuE0Z4kcqqud+JyyQLIvYMYUB7hiShlaqNf0N0VnonydwhQud8IT
W3MRRIqe1rUygO8Ea9K3W99Oauo0FJOSMrtJWgkNuCvREVkAQQP6N7Af3wosGxRU
USjLsyBSm1ejwQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:52:00 2025 by rpki-client