Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft
File: PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft (raw, json)
Hash identifier: 0kh3WXh+OMYer8K+OxN9+EzIIRyleNMFHpYbJ4WqWRg=
Subject key identifier: 63:0F:9F:2C:51:92:B2:92:FB:8A:8B:CB:B0:BC:F1:18:57:06:CA:96
Authority key identifier: 3E:C1:4C:C6:07:D1:F0:28:38:48:F9:A8:15:DB:E6:75:E2:33:9A:7E
Certificate issuer: /CN=3ec14cc607d1f0283848f9a815dbe675e2339a7e
Certificate serial: 019A4EF44DDC654E0145639817CAEB04C990
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft
Manifest number: 15F7
Signing time: Tue 04 Nov 2025 13:00:24 +0000
Manifest this update: Tue 04 Nov 2025 13:00:24 +0000
Manifest next update: Wed 05 Nov 2025 13:00:24 +0000
Files and hashes: 1: PsFMxgfR8Cg4SPmoFdvmdeIzmn4.crl (hash: vrtyMkUucjzlR8jSK7BeXcVJEOS0XsTX+qtS5p1ujrE=)
2: qGeya0gXk3lefb1rAtWCYxucLVU.roa (hash: ZiFD9y1WchAi6R0j+XTv/ZogMIEXrTeY8kphQnBKVUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:4d:dc:65:4e:01:45:63:98:17:ca:eb:04:c9:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec14cc607d1f0283848f9a815dbe675e2339a7e
Validity
Not Before: Nov 4 13:00:24 2025 GMT
Not After : Nov 5 13:00:24 2025 GMT
Subject: CN=630f9f2c5192b292fb8a8bcbb0bcf1185706ca96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:8d:01:45:43:76:71:30:94:75:5e:d7:e9:f8:
10:ab:f1:58:d5:fc:21:71:a4:22:ee:f7:68:4a:fd:
f3:c1:5b:d6:2f:87:f3:b2:85:fe:d8:c3:7b:07:cc:
19:29:15:f9:08:86:de:cf:6a:e7:c1:ba:e7:af:57:
d0:dc:7d:52:04:d8:aa:5a:fc:7a:05:0f:6e:1e:98:
ee:76:d4:b7:57:0d:fa:36:66:9c:a2:7d:93:43:94:
92:6b:14:a2:0d:9f:d0:a9:ce:b7:38:1c:b7:b6:7a:
03:d6:dc:5a:8c:0c:4a:ee:f4:ee:fc:f4:35:a8:ae:
d3:ed:fb:46:64:8c:ad:2f:f7:72:11:cd:34:58:32:
3c:0c:13:97:c3:a2:3e:73:cb:3d:e7:81:dc:ab:bf:
49:ce:70:07:b5:aa:f8:59:43:1b:7b:e8:f7:26:87:
a5:d8:0f:dd:59:03:9a:1e:b8:78:0a:2b:fa:13:54:
19:33:21:91:eb:68:a8:28:fc:49:05:57:94:25:d5:
13:1c:1d:ae:d0:03:af:54:cf:79:a9:12:b3:54:8e:
60:08:3a:b0:44:2a:ce:df:38:7d:3c:c4:73:d1:c0:
94:50:22:01:95:7a:88:8b:d9:62:09:d5:0a:6e:e0:
ac:c9:11:fb:a4:bb:a4:ff:db:ea:49:8c:a4:70:f0:
37:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:0F:9F:2C:51:92:B2:92:FB:8A:8B:CB:B0:BC:F1:18:57:06:CA:96
X509v3 Authority Key Identifier:
keyid:3E:C1:4C:C6:07:D1:F0:28:38:48:F9:A8:15:DB:E6:75:E2:33:9A:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:37:d3:8b:94:d0:15:41:2d:9a:ed:7a:e3:99:8a:68:91:33:
24:8a:30:ba:3b:00:e7:d6:21:f9:c4:a8:46:c1:06:14:3d:c5:
5c:20:21:30:38:ef:51:62:ff:d9:08:f1:db:4d:af:4a:23:2c:
89:84:cf:df:ee:b3:16:10:a5:70:df:e7:cd:e7:fc:e6:39:79:
cb:68:c2:2b:e6:d2:a1:ad:d1:8d:cf:09:c8:95:bf:57:dd:25:
f2:39:a6:d7:f3:34:ee:63:a6:5a:e7:5d:4f:f2:c6:be:d1:13:
1d:09:d8:fc:4f:88:75:45:25:bc:19:c6:5e:9f:88:62:f1:98:
f5:1a:52:ce:38:49:7a:b9:e1:51:0d:35:4d:8a:b9:55:a4:ed:
6f:a4:a5:5f:ab:09:53:bb:e4:c0:f4:e6:e3:2a:93:4e:20:b3:
2d:13:8a:23:b6:c5:ee:1e:de:51:f5:3f:00:4d:56:fd:5f:57:
6d:28:7f:48:30:c2:7e:bf:d5:bc:e1:5a:ae:5b:02:77:67:1b:
96:ba:c9:77:8d:58:df:7a:2c:bb:38:4b:70:4b:c8:91:90:80:
6b:c6:a8:13:32:2f:ff:02:cd:d8:6e:9d:54:fc:6c:d7:d5:8a:
be:73:3d:36:74:db:33:6b:66:2d:ee:9a:3c:51:83:cf:48:85:
fb:51:14:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:56:55 2025 by rpki-client