Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/ebe991-2eb4-4219-b367-0ebfcf38cbef/1/pEKhMJW3m8qG4s2gEuTEz2JGeWk.mft
File: pEKhMJW3m8qG4s2gEuTEz2JGeWk.mft (raw, json)
Hash identifier: fhH1IlZhP7HfiTtMFf/VvD9Qls4qk6Mf9BjZpTz2Nsc=
Subject key identifier: B9:C9:35:37:DA:08:E0:69:E1:59:91:A2:75:4B:D1:1C:B1:78:BA:B0
Authority key identifier: A4:42:A1:30:95:B7:9B:CA:86:E2:CD:A0:12:E4:C4:CF:62:46:79:69
Certificate issuer: /CN=a442a13095b79bca86e2cda012e4c4cf62467969
Certificate serial: 0199FB7CCC97DDA09CFF5A07D0ED30C35119
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEKhMJW3m8qG4s2gEuTEz2JGeWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/ebe991-2eb4-4219-b367-0ebfcf38cbef/1/pEKhMJW3m8qG4s2gEuTEz2JGeWk.mft
Manifest number: C6
Signing time: Sun 19 Oct 2025 08:01:23 +0000
Manifest this update: Sun 19 Oct 2025 08:01:23 +0000
Manifest next update: Mon 20 Oct 2025 08:01:23 +0000
Files and hashes: 1: pEKhMJW3m8qG4s2gEuTEz2JGeWk.crl (hash: G/o8yT9RigkERShGNIRPivVT6TQM/G/PqgBiEm/KB+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/ebe991-2eb4-4219-b367-0ebfcf38cbef/1/pEKhMJW3m8qG4s2gEuTEz2JGeWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/ebe991-2eb4-4219-b367-0ebfcf38cbef/1/pEKhMJW3m8qG4s2gEuTEz2JGeWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pEKhMJW3m8qG4s2gEuTEz2JGeWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:cc:97:dd:a0:9c:ff:5a:07:d0:ed:30:c3:51:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a442a13095b79bca86e2cda012e4c4cf62467969
Validity
Not Before: Oct 19 08:01:23 2025 GMT
Not After : Oct 20 08:01:23 2025 GMT
Subject: CN=b9c93537da08e069e15991a2754bd11cb178bab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6a:df:0e:22:6a:03:bb:04:47:66:e9:83:17:
e7:19:e2:cb:9e:05:cd:c8:68:6b:ec:46:b0:31:00:
34:5e:f7:b6:46:10:dc:0b:55:45:ba:92:a5:1e:ba:
29:6b:37:a0:b7:9b:18:71:61:79:67:43:bd:95:d9:
2b:cd:c8:91:c4:cc:2b:29:06:fd:ac:35:e4:79:48:
1c:6f:90:44:80:8f:e9:7f:e2:e2:aa:e7:82:78:32:
08:a7:16:89:8e:b6:17:8e:b1:dc:7c:22:8d:bc:b4:
e6:11:40:a6:10:53:77:d7:51:d0:e1:f0:2d:ef:29:
0a:fb:91:66:c5:40:57:6c:52:61:f9:ec:4e:f5:a2:
1b:f6:37:b7:57:ba:9f:a4:1e:28:ae:f6:86:41:52:
2a:b0:96:98:c7:52:80:86:8b:bb:58:8f:ad:5d:cb:
d9:e7:a8:00:73:47:22:db:a8:11:ca:99:4d:2f:b3:
bd:d8:0a:d6:98:5f:5a:1b:c1:b6:c3:d5:60:db:73:
e2:93:01:db:87:90:7c:30:04:e4:c9:a8:fd:bd:2f:
85:2a:9a:b4:65:05:75:99:df:31:bf:09:69:64:c3:
91:b0:9b:ca:21:6d:12:84:44:78:07:d9:17:4a:40:
b5:f0:d3:96:de:bf:8b:1d:c3:ed:7e:31:95:c1:2c:
0b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:C9:35:37:DA:08:E0:69:E1:59:91:A2:75:4B:D1:1C:B1:78:BA:B0
X509v3 Authority Key Identifier:
keyid:A4:42:A1:30:95:B7:9B:CA:86:E2:CD:A0:12:E4:C4:CF:62:46:79:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEKhMJW3m8qG4s2gEuTEz2JGeWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/ebe991-2eb4-4219-b367-0ebfcf38cbef/1/pEKhMJW3m8qG4s2gEuTEz2JGeWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/ebe991-2eb4-4219-b367-0ebfcf38cbef/1/pEKhMJW3m8qG4s2gEuTEz2JGeWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:1a:bd:7c:b5:fb:ca:3d:47:9d:c3:85:ca:22:23:08:e9:a6:
22:d4:91:ae:5a:c1:df:84:47:1b:2c:7f:43:91:b4:df:1f:a8:
23:35:0d:9a:a1:a5:1e:de:cd:1a:6f:02:28:c4:99:82:52:24:
10:af:e2:57:95:6f:6a:f6:93:c3:b1:e8:87:27:9e:70:48:c3:
32:0e:88:c1:f2:66:26:44:bc:d9:a7:f2:eb:4c:b5:c3:89:77:
38:b6:25:ec:cb:55:55:fe:2a:73:e2:2b:7c:55:8c:ef:93:11:
42:d6:b7:51:a3:c6:3e:c4:7d:1d:89:a4:ba:eb:2a:b0:1f:d4:
94:76:5d:b4:d6:3e:2e:90:11:1f:a7:45:ca:0e:5c:4f:21:3a:
54:dd:bd:70:a9:47:ae:3d:2d:7a:06:e6:4f:4d:95:bc:06:61:
82:91:80:f1:0a:82:3b:4a:ab:69:34:9b:ec:ca:93:f8:fd:dd:
74:13:34:c7:dc:4e:4c:17:38:e1:53:6c:9a:44:e0:9b:aa:4d:
67:ab:69:18:2d:b6:5c:44:fa:68:89:d7:85:be:6f:e5:7e:81:
da:b9:c6:06:74:fa:84:f1:16:8a:48:bb:e9:2a:7f:18:cb:a9:
54:38:c0:02:68:54:ed:4c:33:8f:2f:b3:93:a1:6a:a9:37:52:
1b:65:81:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fMyX3aCc/1oH0O0ww1EZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0NDJhMTMwOTViNzliY2E4NmUyY2RhMDEyZTRjNGNmNjI0
Njc5NjkwHhcNMjUxMDE5MDgwMTIzWhcNMjUxMDIwMDgwMTIzWjAzMTEwLwYDVQQD
EyhiOWM5MzUzN2RhMDhlMDY5ZTE1OTkxYTI3NTRiZDExY2IxNzhiYWIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumrfDiJqA7sER2bpgxfnGeLLngXN
yGhr7EawMQA0Xve2RhDcC1VFupKlHropazegt5sYcWF5Z0O9ldkrzciRxMwrKQb9
rDXkeUgcb5BEgI/pf+LiqueCeDIIpxaJjrYXjrHcfCKNvLTmEUCmEFN311HQ4fAt
7ykK+5FmxUBXbFJh+exO9aIb9je3V7qfpB4orvaGQVIqsJaYx1KAhou7WI+tXcvZ
56gAc0ci26gRyplNL7O92ArWmF9aG8G2w9Vg23PikwHbh5B8MATkyaj9vS+FKpq0
ZQV1md8xvwlpZMORsJvKIW0ShER4B9kXSkC18NOW3r+LHcPtfjGVwSwLOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLnJNTfaCOBp4VmRonVL0RyxeLqwMB8GA1UdIwQY
MBaAFKRCoTCVt5vKhuLNoBLkxM9iRnlpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEVLaE1KVzNtOHFHNHMyZ0V1VEV6MkpHZVdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9lYmU5OTEtMmViNC00MjE5LWIzNjct
MGViZmNmMzhjYmVmLzEvcEVLaE1KVzNtOHFHNHMyZ0V1VEV6MkpHZVdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi9lYmU5OTEtMmViNC00MjE5LWIzNjctMGViZmNmMzhjYmVm
LzEvcEVLaE1KVzNtOHFHNHMyZ0V1VEV6MkpHZVdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAARq9fLX7
yj1HncOFyiIjCOmmItSRrlrB34RHGyx/Q5G03x+oIzUNmqGlHt7NGm8CKMSZglIk
EK/iV5VvavaTw7HohyeecEjDMg6IwfJmJkS82afy60y1w4l3OLYl7MtVVf4qc+Ir
fFWM75MRQta3UaPGPsR9HYmkuusqsB/UlHZdtNY+LpARH6dFyg5cTyE6VN29cKlH
rj0tegbmT02VvAZhgpGA8QqCO0qraTSb7MqT+P3ddBM0x9xOTBc44VNsmkTgm6pN
Z6tpGC22XET6aInXhb5v5X6B2rnGBnT6hPEWiki76Sp/GMupVDjAAmhU7Uwzjy+z
k6FqqTdSG2WBdA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:06 2025 by rpki-client