Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.mft
File: PeSbGET-RCKvvhDN0oGcdEgnfmU.mft (raw, json)
Hash identifier: ZrtdWaI6iInfT//qbwBQkloFjp7EQFW5pFoydTm7R5k=
Subject key identifier: 81:BA:E4:0D:6D:7A:79:90:70:6D:5F:8B:8B:82:9C:4A:44:90:7B:2A
Authority key identifier: 3D:E4:9B:18:44:FE:44:22:AF:BE:10:CD:D2:81:9C:74:48:27:7E:65
Certificate issuer: /CN=3de49b1844fe4422afbe10cdd2819c7448277e65
Certificate serial: 0197B88F8CD067477097CF6BDBD2319C03C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeSbGET-RCKvvhDN0oGcdEgnfmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.mft
Manifest number: 0965
Signing time: Sat 28 Jun 2025 22:01:44 +0000
Manifest this update: Sat 28 Jun 2025 22:01:44 +0000
Manifest next update: Sun 29 Jun 2025 22:01:44 +0000
Files and hashes: 1: Fw_E1L4Nw5Hr77P4PSs-fCdld4o.roa (hash: 02j0pLQbdlE9MH5ggabxr1xIMQYmyzEOYjg+Z13q0BA=)
2: PeSbGET-RCKvvhDN0oGcdEgnfmU.crl (hash: epO0ZJO4Lu/Aj9tA2Fa2fyo/ZvEOqJpDc/uB64qnh50=)
3: VrCXOdxzLdld1tE0j_xLZ92cqsk.roa (hash: QEJHs3sdF5W7Kc4VSrPn7L7Yyup7NDcWYP/rulbrnEw=)
4: wbEopCsHgdsUwl85d1p6YVkQyt4.roa (hash: Mueh9tzlM1Esxrp4PnyphjifQnr2qX7ryaFawIufllw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeSbGET-RCKvvhDN0oGcdEgnfmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 22:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:8c:d0:67:47:70:97:cf:6b:db:d2:31:9c:03:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de49b1844fe4422afbe10cdd2819c7448277e65
Validity
Not Before: Jun 28 22:01:44 2025 GMT
Not After : Jun 29 22:01:44 2025 GMT
Subject: CN=81bae40d6d7a7990706d5f8b8b829c4a44907b2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a7:27:f7:39:13:0d:2c:e6:77:06:e1:5b:76:
44:c0:8e:09:30:2c:73:e0:c3:cc:b9:ce:72:3b:45:
26:37:cd:1b:0f:20:1d:35:8f:45:91:99:27:c7:15:
76:f8:8a:7e:15:c1:6d:b5:b6:e9:84:83:54:49:0d:
ef:f9:c1:97:72:43:84:03:89:94:70:45:3b:c0:91:
10:f9:b7:c1:b2:b2:c5:b6:b5:53:9c:8b:9d:87:50:
16:2c:cf:c1:68:24:52:2d:3f:8c:67:6b:03:6c:96:
f6:84:7d:06:e7:ae:55:59:27:29:f1:77:c5:34:39:
97:14:1b:ca:98:ec:b2:81:e8:3f:85:45:3f:a7:ab:
b6:de:b8:ab:94:72:2c:a4:f6:92:01:d5:44:80:93:
c7:71:ff:a1:7d:31:d8:34:e0:e0:c3:a2:63:e0:f5:
35:d2:07:d4:6c:82:49:43:69:fb:22:93:b7:39:6c:
70:3c:b0:71:a1:39:09:82:ee:40:15:3e:fc:86:c9:
32:99:88:bb:e8:25:c9:29:05:a7:fb:c5:ef:73:f3:
52:d9:be:70:4c:c1:a9:fe:dc:2c:e2:9d:99:dd:97:
19:e8:a2:a7:38:55:a9:e6:9a:83:ee:1d:5d:e9:f3:
97:6a:46:09:2e:20:89:15:65:45:b4:74:e9:27:9e:
45:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:BA:E4:0D:6D:7A:79:90:70:6D:5F:8B:8B:82:9C:4A:44:90:7B:2A
X509v3 Authority Key Identifier:
keyid:3D:E4:9B:18:44:FE:44:22:AF:BE:10:CD:D2:81:9C:74:48:27:7E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeSbGET-RCKvvhDN0oGcdEgnfmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:2c:98:90:3a:9a:a0:29:52:56:ec:49:2b:ae:e8:3d:36:0e:
de:33:8a:04:21:e7:b5:ed:e3:92:7e:33:5b:a2:f9:08:dc:28:
9b:32:4a:f2:5b:1e:dc:85:f5:ac:1e:eb:ec:51:f3:9b:55:b7:
74:9c:37:94:d6:bf:23:79:a0:95:da:69:8c:76:21:c6:a3:a1:
b0:9d:a0:64:90:53:7b:1a:64:36:dd:a5:58:33:13:b0:53:3f:
73:02:24:23:56:8a:81:bb:99:7d:dc:ab:d8:2c:d3:36:63:9f:
1d:ee:b3:98:a6:39:4e:22:2a:ed:27:c7:23:f1:16:23:3f:c6:
c1:30:a8:1b:af:83:b7:d6:45:8b:56:64:1f:ad:89:2f:75:f3:
45:06:7a:4b:1a:ef:e5:f7:22:a5:b9:c6:85:b2:8b:a0:fa:1b:
56:6c:8c:d8:ed:c6:44:2a:a1:c7:b0:c2:97:6c:64:23:e3:8f:
12:dd:00:5f:43:5d:69:4e:6e:2d:36:cd:ad:53:4e:19:5f:08:
e7:3a:27:6b:78:c0:c9:10:d8:3c:09:2e:ba:13:18:1d:d0:74:
0f:1e:d3:75:18:57:96:71:92:ad:c9:3d:3b:85:cd:02:d7:b7:
e2:3a:f3:be:a3:81:18:86:ae:60:e5:49:26:a3:76:7f:db:d0:
b7:df:2d:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:08:39 2025 by rpki-client