Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.mft
File: Psb9kdKkNl09wWch_t9pIXK7MHM.mft (raw, json)
Hash identifier: dbR8h2DwRwB52a6f2mb4h3cvTY+5icUaJU08NqwKpXE=
Subject key identifier: 98:C8:D2:63:50:C2:6A:B2:3D:1C:8F:AB:CC:96:39:A3:A4:8B:FA:7F
Authority key identifier: 3E:C6:FD:91:D2:A4:36:5D:3D:C1:67:21:FE:DF:69:21:72:BB:30:73
Certificate issuer: /CN=3ec6fd91d2a4365d3dc16721fedf692172bb3073
Certificate serial: 019875D193CEAA3786035C1D9954FEF47384
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Psb9kdKkNl09wWch_t9pIXK7MHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.mft
Manifest number: 135C
Signing time: Mon 04 Aug 2025 16:02:05 +0000
Manifest this update: Mon 04 Aug 2025 16:02:05 +0000
Manifest next update: Tue 05 Aug 2025 16:02:05 +0000
Files and hashes: 1: 0OYfvohoTXtpi59LO0J22cI1s3U.roa (hash: s7dK6PK+eP+XDZZ2HKEucZtuMEm89+4+6MLOTTKFjE0=)
2: Psb9kdKkNl09wWch_t9pIXK7MHM.crl (hash: dT58DcIFDXdcKH4jFUzFA0RdHLASO5QTI2taDKgp6Ro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Psb9kdKkNl09wWch_t9pIXK7MHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:d1:93:ce:aa:37:86:03:5c:1d:99:54:fe:f4:73:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec6fd91d2a4365d3dc16721fedf692172bb3073
Validity
Not Before: Aug 4 16:02:05 2025 GMT
Not After : Aug 5 16:02:05 2025 GMT
Subject: CN=98c8d26350c26ab23d1c8fabcc9639a3a48bfa7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:05:94:44:21:45:d7:0a:62:f5:37:95:89:c2:
af:9f:be:25:0c:67:07:a5:a6:3a:14:0b:81:e5:98:
3d:ac:05:7a:1e:4c:d0:de:eb:c2:47:aa:3e:a1:2b:
94:a7:79:d8:5d:27:f1:28:44:49:f5:dd:95:3c:02:
ba:19:23:9d:5f:f6:22:97:c0:6c:e2:19:83:9e:30:
6d:53:94:02:3b:bd:c5:07:0f:d5:98:8f:89:9f:14:
db:c4:c6:d4:a7:42:a8:ec:13:2f:79:05:1f:8a:1b:
61:27:21:4e:45:cb:b6:30:7b:17:ed:d8:b7:7c:a3:
d8:bf:0e:f8:40:3c:36:1e:d9:72:d1:fe:34:42:6d:
d6:2d:c7:91:5a:a5:f1:03:9f:2e:51:53:d0:c5:1e:
eb:d3:3c:95:f8:4e:38:da:55:d9:f7:6f:14:ca:cb:
44:e9:5c:46:1b:41:d1:1c:79:ab:02:bd:59:25:5d:
91:8e:5c:56:45:4b:82:d2:73:4d:3d:59:f9:82:07:
9a:62:16:22:a4:ab:50:69:60:7c:e6:d5:d0:b2:b4:
bc:36:95:54:7e:21:14:36:56:99:f7:d9:05:8a:91:
d6:0f:6e:b2:d5:c5:a9:60:61:9f:0e:1c:9e:ca:70:
a2:af:c2:b9:d8:e3:7c:a5:06:be:fd:8c:42:9c:79:
a9:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:C8:D2:63:50:C2:6A:B2:3D:1C:8F:AB:CC:96:39:A3:A4:8B:FA:7F
X509v3 Authority Key Identifier:
keyid:3E:C6:FD:91:D2:A4:36:5D:3D:C1:67:21:FE:DF:69:21:72:BB:30:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Psb9kdKkNl09wWch_t9pIXK7MHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:27:a3:22:2b:ef:f2:96:7f:41:06:46:c9:85:0d:e1:e5:00:
40:1e:c9:28:13:cc:a7:97:3e:a1:41:f7:83:0b:b3:1f:c8:d2:
53:4e:fb:45:5e:1c:17:45:d1:1c:f0:5f:55:61:fc:5c:6b:4c:
de:2e:cf:03:16:b4:cc:9d:4b:84:6f:d7:69:61:06:78:dd:86:
a3:f0:c2:2f:53:b7:64:80:7f:87:d2:c2:f5:fd:e2:8b:fe:1f:
36:ce:32:15:94:01:04:90:31:d1:2c:7d:84:14:65:2c:d9:52:
43:ea:e4:c4:8f:19:01:35:76:51:9d:30:bb:4a:01:27:5e:0a:
b9:0e:5f:b7:55:ab:75:4e:cf:fc:ac:86:27:ee:74:c3:ff:f6:
26:d8:96:42:c3:17:6b:97:de:96:9c:7f:5a:07:82:3f:fd:7b:
fa:ff:19:78:78:82:9b:67:d3:8d:5f:3e:c0:0b:82:eb:89:13:
24:9f:52:e1:58:69:ab:d6:bc:63:81:06:28:a2:3b:6b:43:51:
73:46:5c:58:13:05:4e:52:8c:1a:0e:b1:77:91:d1:95:10:60:
e6:fb:d3:dc:c3:b9:1b:e4:c1:a4:0f:40:f4:05:dd:80:de:72:
a3:d4:66:6f:a1:76:f5:84:95:3d:9a:ae:5f:3b:5e:81:40:75:
01:1e:61:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:58:42 2025 by rpki-client