Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft
File: Ps1TxmQkw_Npyojuevdq2yXhhFE.mft (raw, json)
Hash identifier: SbHVsCZqcOVzrlKbt2ReiDjeYA+N0NvIxlz1vGSwF/w=
Subject key identifier: B2:4F:51:42:36:7C:60:F5:3A:0D:96:3D:2C:48:81:7C:75:A3:43:E7
Authority key identifier: 3E:CD:53:C6:64:24:C3:F3:69:CA:88:EE:7A:F7:6A:DB:25:E1:84:51
Certificate issuer: /CN=3ecd53c66424c3f369ca88ee7af76adb25e18451
Certificate serial: 01987C77B1CCB1F50F71D74CF12ECE26A09E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ps1TxmQkw_Npyojuevdq2yXhhFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft
Manifest number: 0FE3
Signing time: Tue 05 Aug 2025 23:01:15 +0000
Manifest this update: Tue 05 Aug 2025 23:01:15 +0000
Manifest next update: Wed 06 Aug 2025 23:01:15 +0000
Files and hashes: 1: NFHPImufF3uRqUgALoiOKsyNAWY.roa (hash: P38WvGerxAQEhXHw97XFuU4GA9ZzpqGUq811jnutzZs=)
2: Ps1TxmQkw_Npyojuevdq2yXhhFE.crl (hash: qK2YM9fIKQWunQPtdFdZ7hRAi/e4xe9lbcNsyPBMiUE=)
3: mI6j4UadWN59Ry8sBr4KvB0K8Yc.roa (hash: OgHmwZEN5FVoA8wv5XCNl8ngdl4mQaBcOydLvBf7mUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ps1TxmQkw_Npyojuevdq2yXhhFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:77:b1:cc:b1:f5:0f:71:d7:4c:f1:2e:ce:26:a0:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ecd53c66424c3f369ca88ee7af76adb25e18451
Validity
Not Before: Aug 5 23:01:15 2025 GMT
Not After : Aug 6 23:01:15 2025 GMT
Subject: CN=b24f5142367c60f53a0d963d2c48817c75a343e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:67:66:3b:82:bf:f1:8a:ba:78:49:67:be:3d:
93:27:e2:6e:f4:f0:4b:9b:82:a6:b6:3d:09:bf:1d:
49:0c:9d:70:9f:e4:d8:c0:40:58:ed:0b:b2:ea:af:
ec:86:08:8d:96:a5:62:6b:a5:e3:c6:d7:3a:ae:25:
f7:4f:25:9c:bd:ac:0e:6d:27:6b:9d:66:c7:00:70:
f7:db:b4:20:0d:ee:fa:06:04:7f:ee:a6:b3:f4:6d:
b7:0d:db:ba:ff:3e:c7:b4:17:1d:78:97:8c:17:7c:
5d:8f:df:a2:7c:7a:c9:b6:ac:06:69:b9:e5:20:4d:
53:14:53:af:60:1b:84:fb:d0:8f:41:cf:62:cf:33:
15:9c:2d:38:3e:5c:51:f0:7e:24:b7:5e:d8:54:1a:
bf:0b:5b:40:e8:f2:ab:ac:aa:65:c6:6c:9d:64:b3:
4c:9f:e2:7b:1c:b0:2d:c9:6d:f5:a3:88:4e:ea:74:
92:4a:85:c9:89:33:16:c3:c7:0a:7b:c6:ac:30:f8:
34:72:6b:4c:b7:39:f3:a0:d8:82:02:60:70:2a:10:
14:92:b9:01:1b:8f:a2:96:84:19:54:41:49:90:67:
5f:ce:77:36:a5:8a:25:81:c1:ac:07:db:9d:8e:f9:
4e:ce:4f:c8:fc:df:39:0e:b1:ad:ff:89:b2:42:69:
76:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:4F:51:42:36:7C:60:F5:3A:0D:96:3D:2C:48:81:7C:75:A3:43:E7
X509v3 Authority Key Identifier:
keyid:3E:CD:53:C6:64:24:C3:F3:69:CA:88:EE:7A:F7:6A:DB:25:E1:84:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ps1TxmQkw_Npyojuevdq2yXhhFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:b5:8e:d5:8f:5c:54:3c:c4:ca:7f:ab:7f:d7:b8:28:a7:57:
47:22:6c:79:1c:8f:3c:a2:20:70:92:d1:7a:da:c4:a4:5d:81:
69:1d:bb:54:0a:fe:d6:09:76:68:85:88:92:28:b9:de:44:9d:
2c:60:38:bf:f4:b1:8a:1b:18:8e:bd:38:01:40:a9:43:40:38:
d4:47:7e:e8:a9:28:70:ba:41:e1:46:8d:a0:fb:7a:b6:dc:9c:
c9:3b:37:58:73:64:04:aa:c9:a7:89:0e:bb:dd:22:87:8f:c5:
15:21:44:a4:81:c0:82:c1:48:cf:7a:81:b5:02:52:7b:82:66:
39:c2:96:0e:c9:0f:e9:7c:15:29:22:ab:08:c6:9f:12:53:5e:
52:32:66:f7:2f:26:9b:73:b1:b1:92:6b:51:d8:ab:bb:b4:45:
c4:d4:7f:b2:c1:22:29:a9:da:ed:ca:41:bb:f7:c8:06:4f:0e:
e2:f6:42:93:ae:fd:c2:1e:1c:82:a5:e3:36:a2:08:d0:f6:f2:
04:c7:94:4f:42:c9:3a:51:09:bc:63:35:7f:b3:d0:05:e1:18:
36:dd:69:77:03:0d:0e:e6:8d:96:81:29:6f:23:b6:97:f4:d7:
92:b3:71:13:cb:7e:c2:2f:fb:05:de:c5:cc:9d:86:4c:48:30:
23:58:97:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:28:11 2025 by rpki-client