Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.mft
File: Psb9kdKkNl09wWch_t9pIXK7MHM.mft (raw, json)
Hash identifier: gGRzkwlaHOapuIiKV8HKr7idURpgcW5qmFLByEQc6ro=
Subject key identifier: 25:53:98:22:31:2C:F2:81:E3:CA:57:E1:0C:96:1D:A4:97:C4:62:FB
Authority key identifier: 3E:C6:FD:91:D2:A4:36:5D:3D:C1:67:21:FE:DF:69:21:72:BB:30:73
Certificate issuer: /CN=3ec6fd91d2a4365d3dc16721fedf692172bb3073
Certificate serial: 019A4EF438263C2361D34E89104DA3A9674C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Psb9kdKkNl09wWch_t9pIXK7MHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.mft
Manifest number: 1451
Signing time: Tue 04 Nov 2025 13:00:19 +0000
Manifest this update: Tue 04 Nov 2025 13:00:19 +0000
Manifest next update: Wed 05 Nov 2025 13:00:19 +0000
Files and hashes: 1: 0OYfvohoTXtpi59LO0J22cI1s3U.roa (hash: s7dK6PK+eP+XDZZ2HKEucZtuMEm89+4+6MLOTTKFjE0=)
2: Psb9kdKkNl09wWch_t9pIXK7MHM.crl (hash: AKqblEzsKbNt9x2RTVLXijyDCm0OTudke3crR7nr+ZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Psb9kdKkNl09wWch_t9pIXK7MHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:38:26:3c:23:61:d3:4e:89:10:4d:a3:a9:67:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec6fd91d2a4365d3dc16721fedf692172bb3073
Validity
Not Before: Nov 4 13:00:19 2025 GMT
Not After : Nov 5 13:00:19 2025 GMT
Subject: CN=25539822312cf281e3ca57e10c961da497c462fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0f:10:86:6d:8a:8b:0f:c6:c9:6d:8d:64:84:
4a:b8:39:b5:0a:5f:8d:22:c4:10:7e:6e:d8:4a:22:
40:bf:93:17:2e:83:79:50:53:5c:3f:81:90:8f:4a:
e6:b6:78:57:1d:07:0d:f3:4b:bc:12:21:9d:93:17:
ab:f5:0b:fc:d0:df:31:fd:4e:c0:a7:8d:b5:57:81:
79:67:67:63:e7:6a:18:f9:6f:af:33:54:02:d6:e4:
c7:ac:a3:0b:a4:90:2e:46:fd:8a:30:36:fb:f7:90:
a9:9b:0f:12:96:87:ed:1f:da:d5:d5:00:cb:d3:89:
af:1b:c5:7a:d2:09:fd:92:aa:85:66:6e:a7:e1:06:
0d:17:90:31:e3:c2:55:af:90:60:52:61:30:18:44:
4d:fa:d4:09:54:68:fe:6c:40:2e:a8:11:a7:77:81:
ac:c5:ca:a8:57:42:34:3d:fb:fa:d0:58:eb:13:1d:
0f:a0:bb:e9:51:1c:a4:88:4b:6d:4f:6f:34:ed:9c:
4f:db:a0:95:d8:32:4d:60:30:f3:95:3f:5d:79:81:
34:95:b8:1d:b2:78:77:b8:dd:0e:d1:96:1f:35:da:
6f:a9:9c:b0:04:00:1d:73:8a:4f:3c:10:28:cc:ab:
77:1f:d2:20:0c:9f:3b:5b:95:2c:e2:9a:29:ed:58:
eb:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:53:98:22:31:2C:F2:81:E3:CA:57:E1:0C:96:1D:A4:97:C4:62:FB
X509v3 Authority Key Identifier:
keyid:3E:C6:FD:91:D2:A4:36:5D:3D:C1:67:21:FE:DF:69:21:72:BB:30:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Psb9kdKkNl09wWch_t9pIXK7MHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:18:5b:ea:ed:57:51:2b:74:81:5d:53:63:65:6b:8e:76:a4:
07:a6:ae:7d:a5:96:3f:4e:a5:a0:2f:73:bc:3f:bb:33:98:a8:
45:12:19:31:8b:b6:17:c4:78:54:d4:b1:91:17:db:83:aa:93:
d5:6e:65:b1:3d:33:6f:ab:c7:ec:04:e8:05:c9:38:59:f3:33:
08:7a:18:72:9e:0c:4e:e5:2f:77:38:18:44:fb:4a:73:51:82:
fb:b5:ec:36:f6:55:cd:7d:57:b7:af:66:0d:e8:62:50:4a:2d:
cf:8c:c1:cd:9e:d2:f8:3b:91:71:7e:4d:c6:d0:ba:30:89:53:
f6:1d:97:d6:e7:db:e1:56:db:f0:22:fa:4d:2b:00:eb:7f:67:
85:dd:de:90:8d:e5:9e:09:a5:69:4d:8f:cc:b3:a9:d5:57:95:
b7:60:9a:42:76:0c:89:e0:4b:ed:4b:2c:d1:f3:94:c6:d9:d1:
df:f2:fc:d9:20:5e:96:1d:f1:0b:10:76:e6:0f:bd:b5:54:8d:
03:64:5e:df:2e:88:b5:7a:33:69:33:df:4f:39:5b:64:aa:1d:
f6:24:89:37:ba:a2:f1:8c:d6:2b:b1:bb:f4:4e:b2:32:f5:dd:
bd:58:85:42:19:a4:bf:71:66:14:86:28:5f:6a:a1:6f:0e:24:
54:af:66:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:53:03 2025 by rpki-client