Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft
File: PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft (raw, json)
Hash identifier: oUvoB+vmqstgQZXEfV1zLVBuSfb2yOpq+3+M1TIZsvo=
Subject key identifier: 60:17:46:A7:C8:9F:BD:FB:22:DD:26:F6:28:5F:23:34:17:B9:0C:B7
Authority key identifier: 3E:C1:4C:C6:07:D1:F0:28:38:48:F9:A8:15:DB:E6:75:E2:33:9A:7E
Certificate issuer: /CN=3ec14cc607d1f0283848f9a815dbe675e2339a7e
Certificate serial: 01987418F2A4481DE12B204B414BEA854D4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft
Manifest number: 1501
Signing time: Mon 04 Aug 2025 08:00:48 +0000
Manifest this update: Mon 04 Aug 2025 08:00:48 +0000
Manifest next update: Tue 05 Aug 2025 08:00:48 +0000
Files and hashes: 1: PsFMxgfR8Cg4SPmoFdvmdeIzmn4.crl (hash: 66laXJkwI8+y0q27eVwZ+TB8LHXKUv31iETZCPm+fPI=)
2: qGeya0gXk3lefb1rAtWCYxucLVU.roa (hash: ZiFD9y1WchAi6R0j+XTv/ZogMIEXrTeY8kphQnBKVUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:18:f2:a4:48:1d:e1:2b:20:4b:41:4b:ea:85:4d:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec14cc607d1f0283848f9a815dbe675e2339a7e
Validity
Not Before: Aug 4 08:00:48 2025 GMT
Not After : Aug 5 08:00:48 2025 GMT
Subject: CN=601746a7c89fbdfb22dd26f6285f233417b90cb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:16:4c:fd:dc:18:d3:df:a4:6e:a7:f2:86:02:
32:41:07:79:0f:9b:b5:3b:a0:0c:96:4f:f3:28:ad:
bc:8f:60:8a:55:22:41:c1:56:83:52:fa:a4:a9:b3:
db:e4:0b:9c:cf:c0:71:e4:3a:68:2f:8c:c6:fd:ab:
bc:33:98:9e:f7:a2:65:41:3b:d7:d5:7f:2a:30:fa:
99:15:2e:1f:4e:59:91:91:0c:ce:d2:f7:14:78:c0:
7a:44:ee:47:12:31:f9:9b:06:37:24:90:83:8d:2a:
7c:45:04:c2:07:67:0e:ee:1f:29:c0:64:90:76:f3:
66:0e:f8:f8:7b:e5:97:67:27:d0:b2:8b:ea:b6:4a:
81:b4:e1:c6:6b:42:ee:f5:ef:da:d4:8d:2f:90:e7:
b5:a5:77:34:a7:b3:a8:24:2b:01:d6:6c:2b:31:89:
bb:84:19:05:f2:1f:32:40:9c:78:d0:69:00:8c:92:
66:d0:5b:45:9e:68:c4:16:29:b1:86:56:57:e2:99:
21:d2:d4:c0:49:e5:34:c6:89:f2:c5:91:9e:05:4b:
26:a3:05:33:3d:87:51:13:14:e1:97:55:07:2f:77:
8d:b1:41:9e:1e:3e:6c:0f:28:b0:db:17:bd:55:8c:
40:eb:89:5a:5d:5e:c5:7b:90:70:1c:a3:26:8f:8d:
6a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:17:46:A7:C8:9F:BD:FB:22:DD:26:F6:28:5F:23:34:17:B9:0C:B7
X509v3 Authority Key Identifier:
keyid:3E:C1:4C:C6:07:D1:F0:28:38:48:F9:A8:15:DB:E6:75:E2:33:9A:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:e5:9c:49:83:d9:6b:30:17:92:81:b6:70:d9:eb:42:cc:4e:
6b:b3:56:eb:31:a5:f7:3d:2d:ba:2f:48:83:ea:43:c5:74:10:
e5:ca:16:2b:a9:37:8e:75:07:23:28:b3:b1:45:a3:17:65:8f:
2c:67:31:87:95:db:88:07:a7:4f:8b:3f:5a:89:6a:9d:4e:e8:
20:48:56:12:6f:03:30:1c:cf:9b:22:44:2f:95:23:dd:2d:ef:
31:8b:29:d6:4e:82:a8:62:cc:39:85:48:8e:ae:35:02:2f:28:
85:68:cb:2d:41:81:a4:9b:a6:d4:f1:71:22:24:13:ec:62:71:
ff:67:dd:7f:41:01:98:3a:10:ec:ad:ec:82:bb:cb:cb:9c:64:
41:df:e4:62:69:10:2a:48:23:a7:1f:68:9b:e0:30:26:44:4f:
67:15:68:fc:5a:d9:be:6f:73:6c:2d:b8:95:25:5c:c4:cc:ff:
f6:f0:3c:d3:a4:56:20:30:1b:9f:9d:49:60:83:be:00:5e:f2:
ab:a5:7e:71:cb:e9:75:e8:d8:24:68:9c:9a:9a:98:51:ea:51:
b9:c8:27:90:9c:3f:6d:e7:b7:73:67:92:e2:c6:a8:9b:fc:92:
aa:84:95:84:dc:44:0e:67:26:45:3c:db:ae:47:be:0b:99:d2:
d9:7a:33:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:06:50 2025 by rpki-client