Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/PeJoHdoAcCp1l6cSV-FPenJeiQ4.mft
File: PeJoHdoAcCp1l6cSV-FPenJeiQ4.mft (raw, json)
Hash identifier: fQQKmjfO5vyYvEtOCnunSMtkJgyuRQA3ZCWP8E074Cs=
Subject key identifier: 70:6E:42:44:B5:B0:0A:46:76:B5:E3:FF:BB:7A:7F:D1:CA:56:50:A5
Authority key identifier: 3D:E2:68:1D:DA:00:70:2A:75:97:A7:12:57:E1:4F:7A:72:5E:89:0E
Certificate issuer: /CN=3de2681dda00702a7597a71257e14f7a725e890e
Certificate serial: 0199FF597AEBFD16B471F5CB6A680722ED42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeJoHdoAcCp1l6cSV-FPenJeiQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/PeJoHdoAcCp1l6cSV-FPenJeiQ4.mft
Manifest number: 0B9B
Signing time: Mon 20 Oct 2025 02:01:18 +0000
Manifest this update: Mon 20 Oct 2025 02:01:18 +0000
Manifest next update: Tue 21 Oct 2025 02:01:18 +0000
Files and hashes: 1: 3bt8Km81z8fgEHaLeSOeYgfebxU.roa (hash: pKoz7jrxy/U6s9br1hGRmLBPhCh8rgMf271vqsN5GJk=)
2: 4Mdmn6MaRoFLUycUXlZaFSGboEs.roa (hash: C9ut+tYKUryPFgIx2+ThOOLJz+YjKuj147RuRXfxtis=)
3: H7RDadMRjVcvma8PhFugcKUdoT0.roa (hash: 6sD2c8/NrghCekThtfpslB8AAW0einNgCY8Rjyouu9I=)
4: Oioxvop9FV5K4rtOSvh02jeAj-g.roa (hash: 1Oax9rdfDuKch357rIzJmOSBUOYvQbkuoDRF8in9c8A=)
5: P0-q-BdDXYrwKYDCUC5gegtCTZE.roa (hash: oO/hx6p/KCHt0e0eW15T8NOjsXnklfDaMDxz69ADiuE=)
6: PeJoHdoAcCp1l6cSV-FPenJeiQ4.crl (hash: 33QbDjLfNMWKqQsEu79i6ExkRdLwau7I7CMveRwxRW4=)
7: ceFPC_Zj6p3cuB8qXQeMqvZfZa4.roa (hash: 01KlZ4a2kJZ4Ly4Y7K5EQ5UlAiINB2ZUF09ye0hG3lc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/PeJoHdoAcCp1l6cSV-FPenJeiQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/PeJoHdoAcCp1l6cSV-FPenJeiQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeJoHdoAcCp1l6cSV-FPenJeiQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:7a:eb:fd:16:b4:71:f5:cb:6a:68:07:22:ed:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de2681dda00702a7597a71257e14f7a725e890e
Validity
Not Before: Oct 20 02:01:18 2025 GMT
Not After : Oct 21 02:01:18 2025 GMT
Subject: CN=706e4244b5b00a4676b5e3ffbb7a7fd1ca5650a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:db:f3:1d:b5:5a:27:27:d8:4a:b9:bc:be:8a:
c0:a8:c4:08:5c:6f:5d:37:6a:57:b7:ac:94:80:75:
b8:50:fa:38:9e:b6:3d:b2:bc:b4:ac:ca:3c:43:21:
4c:2c:da:ad:3c:df:82:9b:b2:d1:4b:01:ad:89:f6:
cf:25:49:2e:8f:bf:38:79:57:9a:28:31:24:ac:c4:
f2:08:8d:9e:13:af:ae:da:c6:fc:3d:79:26:b2:e7:
0b:ed:2d:e3:a2:7d:c7:9e:60:d2:31:93:bc:63:96:
9a:fa:63:ed:eb:8f:26:09:12:04:87:8c:94:57:57:
d8:49:0d:25:7d:c4:6b:fd:92:b7:e1:41:ae:a7:be:
d2:58:a6:93:c3:01:62:8b:91:54:f3:e3:40:35:2a:
b6:a9:06:26:6c:38:b4:a6:ee:a2:12:3a:bb:6e:fb:
a7:6a:b9:2c:65:74:b1:a4:75:e0:98:a2:44:a9:66:
b7:a0:e7:5c:1e:4d:dc:ac:71:8f:65:db:56:b9:fd:
1c:af:6f:fa:01:84:2a:d5:13:ce:8f:86:c2:ab:36:
a4:97:7d:fb:1a:73:bc:a5:9c:b3:e7:f6:87:b2:a7:
a8:98:5b:1e:dc:57:99:7c:86:b2:ef:2b:b5:f1:5f:
9c:ff:09:ab:2d:c6:31:5d:be:23:d6:3e:93:8b:03:
f9:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:6E:42:44:B5:B0:0A:46:76:B5:E3:FF:BB:7A:7F:D1:CA:56:50:A5
X509v3 Authority Key Identifier:
keyid:3D:E2:68:1D:DA:00:70:2A:75:97:A7:12:57:E1:4F:7A:72:5E:89:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeJoHdoAcCp1l6cSV-FPenJeiQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/PeJoHdoAcCp1l6cSV-FPenJeiQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/PeJoHdoAcCp1l6cSV-FPenJeiQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:e6:de:02:ca:21:65:e2:6f:42:22:71:0d:7f:ec:93:a9:b1:
5c:5b:c1:58:af:59:5b:7e:76:6a:db:b4:15:68:d0:70:bc:58:
36:c9:09:a5:51:a0:6e:b7:e8:bd:6c:b9:d5:be:69:cd:b8:25:
ae:80:9d:ab:fe:3e:fa:e8:10:75:e7:de:de:f6:5d:58:07:ee:
9c:e2:8b:ff:40:ac:86:9d:f8:72:49:fc:36:95:7a:69:6f:29:
9e:db:1b:77:cd:8a:a5:d3:af:5c:fb:70:4d:b0:65:a2:26:45:
19:d0:57:12:16:79:4c:68:bc:1a:19:bd:0e:16:8b:09:ef:14:
e1:66:c8:ef:b3:7a:eb:31:46:5e:da:54:28:6a:e6:5c:6d:f5:
1e:40:94:e8:30:b7:07:f1:5c:03:68:75:03:17:ef:13:c4:e4:
01:0b:89:0d:b5:43:a2:16:fc:73:43:ce:de:02:cd:d7:97:18:
ad:16:5d:8e:c3:bf:82:34:1a:f0:75:61:6d:92:a0:5b:69:2a:
81:d6:97:d5:c8:33:d7:f0:02:0c:ae:e0:8b:4b:e4:4e:d6:fa:
7a:03:44:d2:71:01:47:cc:0f:4a:5a:da:0c:00:ec:52:7f:72:
da:3e:2f:61:5c:95:3b:fa:ba:82:db:f1:9e:9e:f1:0f:df:ae:
cf:0b:4c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:57:10 2025 by rpki-client