Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.mft
File: PsfSv8P6eOcQChuJNZBa_3pJa8k.mft (raw, json)
Hash identifier: XwcFgSQvXHHdFGO6fQdxCKE9FhYc98Oe6kufc70pdsk=
Subject key identifier: EE:77:49:6D:B4:76:4F:4B:D9:92:1C:F7:D7:60:FA:A6:E2:99:9D:C7
Authority key identifier: 3E:C7:D2:BF:C3:FA:78:E7:10:0A:1B:89:35:90:5A:FF:7A:49:6B:C9
Certificate issuer: /CN=3ec7d2bfc3fa78e7100a1b8935905aff7a496bc9
Certificate serial: 01977CB1865E692D1EBF6AEE0949F45579B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PsfSv8P6eOcQChuJNZBa_3pJa8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.mft
Manifest number: 0C44
Signing time: Tue 17 Jun 2025 07:01:38 +0000
Manifest this update: Tue 17 Jun 2025 07:01:38 +0000
Manifest next update: Wed 18 Jun 2025 07:01:38 +0000
Files and hashes: 1: PsfSv8P6eOcQChuJNZBa_3pJa8k.crl (hash: Kfc1/paX9DlXFCedmgRwBAskLaT4ap0AIW4wXmPiQcY=)
2: RPdruY8oCYU-NG_cdmDTyaYXs9w.roa (hash: i9rNw7/5XltvLVBXot4AXkRNS8YKs+TQnC29q/66MR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/PsfSv8P6eOcQChuJNZBa_3pJa8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 07:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7c:b1:86:5e:69:2d:1e:bf:6a:ee:09:49:f4:55:79:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec7d2bfc3fa78e7100a1b8935905aff7a496bc9
Validity
Not Before: Jun 17 07:01:38 2025 GMT
Not After : Jun 18 07:01:38 2025 GMT
Subject: CN=ee77496db4764f4bd9921cf7d760faa6e2999dc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b1:b2:66:ed:75:18:46:31:3c:69:db:1e:30:
e8:75:45:72:97:5c:5d:6a:70:90:93:ab:25:08:a9:
e2:73:e5:42:4c:14:7c:09:c2:34:58:2d:54:64:cd:
24:aa:19:a2:53:b8:50:44:d8:dc:40:4c:99:f6:44:
b6:cf:8c:8d:c4:42:9b:89:29:8d:2e:3b:a7:f4:fa:
4b:53:07:18:88:8d:bb:e0:28:3c:29:0d:48:a9:fd:
3b:8d:23:ce:b4:aa:b5:95:de:6c:86:e3:5f:18:e5:
32:ab:e2:f6:6e:75:2b:66:90:00:67:d2:fc:1a:e4:
b2:ef:07:ed:b6:57:e8:28:f7:56:d3:a1:ff:e7:0b:
a5:8f:80:e3:4b:fa:c0:db:1e:ae:89:ab:7f:47:ef:
e0:ff:2a:e1:18:07:d1:1e:f0:a0:30:e6:9b:16:8d:
0a:ba:4f:73:6d:e3:2d:17:4e:1b:b7:14:a5:b6:a8:
a6:35:45:c8:2b:8b:ff:5a:57:d8:97:43:c1:27:54:
33:0a:34:0d:29:eb:e9:b6:bf:f2:18:80:0b:22:0c:
72:ed:79:8f:82:3f:5f:80:23:08:05:08:c1:87:b2:
0d:37:0c:d0:a6:23:7e:be:89:ce:fc:99:0c:c6:c6:
a7:87:bd:9c:41:e9:dd:25:0c:29:75:76:a8:04:28:
fc:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:77:49:6D:B4:76:4F:4B:D9:92:1C:F7:D7:60:FA:A6:E2:99:9D:C7
X509v3 Authority Key Identifier:
keyid:3E:C7:D2:BF:C3:FA:78:E7:10:0A:1B:89:35:90:5A:FF:7A:49:6B:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsfSv8P6eOcQChuJNZBa_3pJa8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:80:37:82:f1:4b:0e:e6:12:29:3a:14:be:e5:53:e2:89:ee:
af:a3:ad:02:ce:6a:b4:c5:07:29:19:81:31:1b:55:3f:ba:72:
0f:67:57:80:fb:de:33:40:8d:a2:db:42:61:7a:16:c4:4e:11:
0e:be:b3:82:36:42:af:ca:83:28:48:6b:70:b5:57:ec:30:fb:
38:88:2d:90:0f:20:ab:77:10:10:aa:6d:02:1f:2b:b3:0e:b3:
b0:50:16:d9:68:37:2a:a7:5c:ac:2c:cf:c7:80:e6:56:3c:17:
4f:26:b3:d0:a3:57:3a:36:a0:8d:eb:c5:ee:d4:e0:61:9e:ba:
86:34:f0:a7:ef:cf:f9:eb:75:7a:a8:74:5e:31:ee:8c:e9:0d:
e4:99:e5:be:76:4d:37:92:be:18:71:ae:31:3c:5d:26:30:ac:
46:b1:d4:c6:ee:21:45:5a:ab:5f:5a:67:44:70:c8:d1:45:9a:
88:38:37:47:b5:73:c1:ac:d6:a0:b4:b2:13:87:03:a7:41:f8:
98:de:41:0a:6a:29:c7:eb:4e:5d:0e:e0:7f:4a:8b:e4:90:12:
ca:53:eb:f7:23:21:55:13:3e:0f:fb:75:d7:92:06:18:27:e2:
f0:26:56:59:42:dd:c8:ed:07:eb:9e:18:e4:ec:fd:50:82:c6:
9f:60:e2:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 16:16:27 2025 by rpki-client