Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.mft
File: Psb9kdKkNl09wWch_t9pIXK7MHM.mft (raw, json)
Hash identifier: 9h/2Fxc0Y+v2sPiiudRnmjhQNBEzuwOj92K+6Mhs0YA=
Subject key identifier: F1:7A:04:8B:8E:E5:56:E8:26:63:CA:24:60:D3:42:75:21:5A:7F:C6
Authority key identifier: 3E:C6:FD:91:D2:A4:36:5D:3D:C1:67:21:FE:DF:69:21:72:BB:30:73
Certificate issuer: /CN=3ec6fd91d2a4365d3dc16721fedf692172bb3073
Certificate serial: 01976D067CAA1182027C47F0942A331CD434
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Psb9kdKkNl09wWch_t9pIXK7MHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.mft
Manifest number: 12D3
Signing time: Sat 14 Jun 2025 06:00:31 +0000
Manifest this update: Sat 14 Jun 2025 06:00:31 +0000
Manifest next update: Sun 15 Jun 2025 06:00:31 +0000
Files and hashes: 1: 0OYfvohoTXtpi59LO0J22cI1s3U.roa (hash: s7dK6PK+eP+XDZZ2HKEucZtuMEm89+4+6MLOTTKFjE0=)
2: Psb9kdKkNl09wWch_t9pIXK7MHM.crl (hash: 29LXn7ubOHc/9D2tB5C37Ea1ERawR0e05yjkmu19W+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Psb9kdKkNl09wWch_t9pIXK7MHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:7c:aa:11:82:02:7c:47:f0:94:2a:33:1c:d4:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec6fd91d2a4365d3dc16721fedf692172bb3073
Validity
Not Before: Jun 14 06:00:31 2025 GMT
Not After : Jun 15 06:00:31 2025 GMT
Subject: CN=f17a048b8ee556e82663ca2460d34275215a7fc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:34:06:89:72:9b:59:21:b5:7b:f8:12:93:6f:
4c:70:e1:00:05:cd:ec:c7:87:6c:ee:89:39:2f:be:
2a:17:03:c1:2e:43:8e:a5:71:2f:ac:3d:99:2f:b0:
41:60:76:eb:87:74:2f:aa:1e:29:48:a7:7a:55:ef:
bc:ee:83:90:69:78:76:5f:27:70:cc:64:ea:0e:1a:
9d:b3:e9:f9:8a:25:57:83:b2:f0:16:0b:76:4b:66:
b8:87:17:1c:99:a3:02:04:5f:5f:d1:c2:ae:99:b2:
34:cc:00:b1:f0:b0:c9:dd:a5:a7:a6:05:03:cc:ec:
f8:f0:82:f0:b3:7a:9a:8c:b5:a2:60:58:08:32:cc:
22:48:12:76:1e:7a:54:3a:16:61:ce:90:9f:59:8d:
55:28:06:b0:36:6b:92:41:6e:7a:26:d1:5f:63:0e:
92:f5:32:04:e8:65:ca:5e:9b:17:8c:64:e7:a8:7b:
7f:a2:b6:c7:87:af:2e:3a:5d:35:f6:a6:2b:66:1f:
48:53:8e:4a:3c:b8:e4:15:87:be:be:61:f0:2e:17:
bd:40:8d:a4:4e:3e:36:38:30:81:44:5a:f6:d1:e8:
c3:5a:63:d1:c2:b2:05:2b:88:91:36:c6:e6:53:58:
ba:7c:4e:8f:8d:13:3e:a0:80:e4:6e:32:25:e6:f7:
0f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:7A:04:8B:8E:E5:56:E8:26:63:CA:24:60:D3:42:75:21:5A:7F:C6
X509v3 Authority Key Identifier:
keyid:3E:C6:FD:91:D2:A4:36:5D:3D:C1:67:21:FE:DF:69:21:72:BB:30:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Psb9kdKkNl09wWch_t9pIXK7MHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:e0:e5:86:ee:fb:23:e4:86:11:4d:8e:fe:31:e0:d9:75:97:
3d:49:cb:cb:df:db:00:3e:94:0d:c1:e6:f1:53:18:a9:ae:29:
3e:b9:a1:19:c2:c5:b8:c5:84:03:e5:98:cf:91:ef:11:f7:c5:
48:56:13:2c:b7:88:86:55:12:9b:9b:42:7c:1a:55:2b:5c:5d:
7a:3a:5a:db:3c:53:09:d3:5c:68:9b:e5:8a:ec:26:17:76:51:
f7:68:93:23:92:e2:63:50:62:e1:95:71:b8:1c:56:69:cd:3b:
c7:d7:1b:dc:5a:d2:b2:3f:4c:26:f5:e9:05:ce:ac:a6:9b:fe:
20:de:43:8f:ef:69:55:e4:60:1a:53:7f:3f:77:90:64:0f:66:
5b:7d:c0:5c:c1:fc:e8:5d:fe:65:fd:65:2e:d2:d6:a9:01:d4:
15:72:75:0e:38:eb:2f:cf:91:0a:51:ae:76:0a:3a:80:f8:4a:
06:67:58:39:93:79:6f:93:0d:5b:43:b6:40:8f:71:07:29:bc:
0a:13:53:e6:d9:0e:0f:e5:e1:01:8d:39:41:7f:84:54:f4:8e:
15:1d:af:1d:f7:52:67:30:bd:a3:47:64:b8:d2:e4:c0:7f:b0:
ad:eb:1b:0c:99:57:b3:59:85:fe:db:3b:c8:c3:9a:06:2b:ea:
2c:dc:ac:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:32:16 2025 by rpki-client