Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft
File: Ps1TxmQkw_Npyojuevdq2yXhhFE.mft (raw, json)
Hash identifier: KDDc1w3panHBIX6c/8k62CBg9A0AgsZZmd0Na6MgPrE=
Subject key identifier: 47:C8:EE:1D:EF:9E:F0:91:6F:F5:22:9E:70:C2:31:D7:0E:BD:7C:C7
Authority key identifier: 3E:CD:53:C6:64:24:C3:F3:69:CA:88:EE:7A:F7:6A:DB:25:E1:84:51
Certificate issuer: /CN=3ecd53c66424c3f369ca88ee7af76adb25e18451
Certificate serial: 019A4FCFB6B926F6D77CD74A6265220F658D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ps1TxmQkw_Npyojuevdq2yXhhFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft
Manifest number: 10D5
Signing time: Tue 04 Nov 2025 17:00:03 +0000
Manifest this update: Tue 04 Nov 2025 17:00:03 +0000
Manifest next update: Wed 05 Nov 2025 17:00:03 +0000
Files and hashes: 1: NFHPImufF3uRqUgALoiOKsyNAWY.roa (hash: P38WvGerxAQEhXHw97XFuU4GA9ZzpqGUq811jnutzZs=)
2: Ps1TxmQkw_Npyojuevdq2yXhhFE.crl (hash: 1GCnwToektwsgHSTrWDzUxC87wLhT/cKjt/urpNSJ2o=)
3: mI6j4UadWN59Ry8sBr4KvB0K8Yc.roa (hash: OgHmwZEN5FVoA8wv5XCNl8ngdl4mQaBcOydLvBf7mUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ps1TxmQkw_Npyojuevdq2yXhhFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:cf:b6:b9:26:f6:d7:7c:d7:4a:62:65:22:0f:65:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ecd53c66424c3f369ca88ee7af76adb25e18451
Validity
Not Before: Nov 4 17:00:03 2025 GMT
Not After : Nov 5 17:00:03 2025 GMT
Subject: CN=47c8ee1def9ef0916ff5229e70c231d70ebd7cc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:da:12:92:85:07:54:8e:d6:81:91:07:fa:01:
7e:88:4f:43:13:02:87:16:f7:66:f7:b5:9b:85:af:
f5:46:71:aa:af:8f:9a:f4:2f:1c:01:8c:c3:e6:2d:
9d:7e:d3:9a:e0:5e:e3:4a:e2:44:60:1d:bf:6c:db:
b1:30:06:0a:9c:a8:3b:dc:81:9a:e8:e1:43:1e:7f:
6c:18:48:3d:20:21:0d:f1:77:2d:b1:3b:9d:b1:f6:
04:a9:d3:df:bd:5d:8c:07:85:63:dc:ae:40:d7:0e:
d5:16:6c:b9:9a:53:14:0d:24:10:79:d1:60:f9:b0:
ed:b0:ad:21:d3:75:fa:64:30:28:14:ce:94:2d:c3:
4c:fd:7a:22:8e:25:1d:ea:99:dd:e5:d0:ea:cc:13:
cf:64:cf:89:54:03:5f:e7:6b:3c:8b:c5:c9:7d:e6:
fa:90:2f:29:7b:a3:15:17:e6:c0:6e:eb:f9:c0:57:
79:62:b8:20:d6:fc:99:60:b5:63:3a:c2:d7:8a:fb:
0e:b1:1e:2e:4a:d9:4c:f4:fb:cd:a0:af:81:d0:2a:
6c:68:d9:f8:5a:1a:be:12:1d:23:92:83:e7:d3:26:
5e:3d:fe:a6:09:70:ae:9e:a9:31:84:d5:f2:e6:1a:
79:b9:b2:fd:2f:19:90:f8:81:37:2f:0b:a1:cb:46:
f6:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:C8:EE:1D:EF:9E:F0:91:6F:F5:22:9E:70:C2:31:D7:0E:BD:7C:C7
X509v3 Authority Key Identifier:
keyid:3E:CD:53:C6:64:24:C3:F3:69:CA:88:EE:7A:F7:6A:DB:25:E1:84:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ps1TxmQkw_Npyojuevdq2yXhhFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:0b:03:80:25:a2:bb:4c:55:67:6a:38:11:4c:ac:d6:f0:0c:
2a:99:ea:49:a6:78:ee:8e:8b:56:d2:76:bf:62:26:a9:a6:25:
e5:cb:ec:e0:f6:7c:53:94:57:26:6b:4c:c5:df:c9:69:70:84:
95:ee:27:ef:d1:1a:3e:c4:35:f2:4c:64:d8:49:bf:0b:83:33:
d0:b3:47:09:12:ad:dc:e5:63:18:49:1e:34:05:2f:4b:36:53:
08:74:70:fc:95:2b:c3:b2:11:eb:72:71:ba:0a:3a:80:b4:ed:
a0:6d:a3:5b:54:da:97:c7:c6:36:88:ec:75:b9:cf:f9:09:b4:
4b:f6:65:1f:39:29:c5:ab:b5:6e:ad:25:ad:b2:ca:4b:cd:35:
52:b1:64:e3:d0:0b:ba:cd:09:75:34:cf:3e:5b:b3:56:c0:68:
b7:a1:6f:bf:02:d3:41:84:48:4c:06:a4:49:38:99:28:e8:c7:
01:ae:d5:14:61:f7:f4:9c:0c:de:05:a0:87:60:6b:ed:9b:c0:
61:52:7a:02:7f:16:b5:22:f0:9e:f2:50:f0:43:ad:98:35:af:
67:d5:ea:b2:a6:44:0d:e8:1c:01:ed:cb:7b:a7:5b:d0:10:59:
5d:cd:f7:a9:54:66:b1:17:e6:ac:24:73:63:a7:60:c7:86:9a:
e3:0a:36:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:45:44 2025 by rpki-client