Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/PseNgibLWq_xXGdSWvK4q8t7X5I.mft
File: PseNgibLWq_xXGdSWvK4q8t7X5I.mft (raw, json)
Hash identifier: 1rMB8xPage0lJvICAq9c01kAL49fSXIaRFGGrtQym/E=
Subject key identifier: 6D:F1:FC:75:41:16:F6:E8:03:39:85:B6:CE:75:08:17:D1:B0:0A:19
Authority key identifier: 3E:C7:8D:82:26:CB:5A:AF:F1:5C:67:52:5A:F2:B8:AB:CB:7B:5F:92
Certificate issuer: /CN=3ec78d8226cb5aaff15c67525af2b8abcb7b5f92
Certificate serial: 019A5C7A6D0A4587D628A62B6AE608ADB6EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PseNgibLWq_xXGdSWvK4q8t7X5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/PseNgibLWq_xXGdSWvK4q8t7X5I.mft
Manifest number: 1714
Signing time: Fri 07 Nov 2025 04:01:58 +0000
Manifest this update: Fri 07 Nov 2025 04:01:58 +0000
Manifest next update: Sat 08 Nov 2025 04:01:58 +0000
Files and hashes: 1: PseNgibLWq_xXGdSWvK4q8t7X5I.crl (hash: 7bSC1JwhOETRW/yW1FnpW+47hz5Np9aD863JSVBWZVE=)
2: RGavrFD9QlH9mvEK00LE9vM0Ylo.roa (hash: in3DOj7fuK/tRP2Np73D85wEHXvdsqUOTjKtL4z+mG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/PseNgibLWq_xXGdSWvK4q8t7X5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/PseNgibLWq_xXGdSWvK4q8t7X5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PseNgibLWq_xXGdSWvK4q8t7X5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Nov 2025 04:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:5c:7a:6d:0a:45:87:d6:28:a6:2b:6a:e6:08:ad:b6:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec78d8226cb5aaff15c67525af2b8abcb7b5f92
Validity
Not Before: Nov 7 04:01:58 2025 GMT
Not After : Nov 8 04:01:58 2025 GMT
Subject: CN=6df1fc754116f6e8033985b6ce750817d1b00a19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:69:19:d1:a9:98:76:cf:f5:5c:63:b1:0c:16:
e5:49:d6:d2:35:ae:0b:d9:49:52:29:36:37:f7:b5:
91:fc:ba:a0:cd:a2:58:ac:99:92:dd:c5:1b:3c:64:
01:db:86:bd:57:87:17:ba:3d:38:79:c9:9b:c4:0d:
c4:a2:c5:7c:a8:38:9c:0b:d9:97:64:dc:6e:12:8d:
d0:e6:0a:39:e9:7e:bc:ac:18:f4:eb:e1:2e:1f:07:
04:b3:ce:9d:01:96:f5:c1:de:72:2d:35:5d:df:41:
7b:93:eb:8f:24:37:b3:be:55:fc:ed:77:e7:85:77:
8a:17:94:d8:e4:11:5d:c9:6c:fc:6c:34:a2:0d:54:
83:3e:f9:7c:bc:0e:56:8e:7e:90:ba:33:be:d1:cb:
10:bd:dc:e9:c9:11:6a:67:71:01:90:89:fe:03:7f:
7e:7c:75:ac:5f:e4:a1:33:b8:c0:8a:26:ab:cf:67:
75:b8:b6:69:a4:1d:b1:be:85:46:71:ca:b1:1b:cb:
53:7e:af:5d:5a:f8:37:6c:3e:92:75:0c:0e:6e:cb:
fb:61:ad:50:8f:26:d7:d9:c7:87:be:5c:ac:60:bd:
b5:3d:42:32:c1:47:ce:4e:53:e0:32:da:b2:33:54:
65:42:8d:82:cd:b2:f4:8c:d6:d6:d3:89:e0:54:70:
69:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:F1:FC:75:41:16:F6:E8:03:39:85:B6:CE:75:08:17:D1:B0:0A:19
X509v3 Authority Key Identifier:
keyid:3E:C7:8D:82:26:CB:5A:AF:F1:5C:67:52:5A:F2:B8:AB:CB:7B:5F:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PseNgibLWq_xXGdSWvK4q8t7X5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/PseNgibLWq_xXGdSWvK4q8t7X5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/PseNgibLWq_xXGdSWvK4q8t7X5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:9b:25:37:d2:43:d7:fc:f1:31:ee:21:2b:4d:2d:f5:8f:9b:
9b:24:a6:16:28:19:7e:6e:dc:c5:03:ae:d1:bb:7d:95:9b:34:
2d:6c:b3:0f:16:dc:8a:2b:93:87:b9:b2:16:71:be:05:a8:21:
f5:95:ae:87:fa:d9:ec:6c:87:a6:31:86:46:65:ed:87:5d:63:
7e:f6:76:33:f4:a7:e7:87:bb:77:0b:4f:42:8d:dd:5f:d7:b5:
d5:45:fc:66:fc:a3:74:83:0f:dc:1e:0b:b4:f2:92:9e:e7:2e:
d9:ab:69:27:39:c0:d8:00:23:53:fd:3f:f7:99:97:4a:68:6a:
d2:6f:81:f1:b8:fe:ea:c6:14:6d:4e:be:58:f6:36:93:1a:ea:
07:ac:29:a9:47:cb:67:e6:ac:0a:bb:a5:72:bf:f1:97:7f:e8:
ae:07:ac:c1:6f:bb:99:c7:18:46:46:3a:d3:73:f2:99:32:06:
74:e1:80:08:7c:45:c8:e2:88:cd:61:01:12:80:c7:c4:c4:d5:
c9:ee:6b:2e:2a:4e:df:30:4c:73:36:bc:93:9d:a4:0d:c6:a3:
cc:ed:3b:9f:4d:c3:aa:46:86:19:dd:8e:af:3e:46:bf:13:89:
5c:54:09:65:5e:d5:4d:e1:75:47:3f:2f:86:1f:86:f7:28:a1:
11:45:76:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 7 12:41:44 2025 by rpki-client