Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.mft
File: PsfSv8P6eOcQChuJNZBa_3pJa8k.mft (raw, json)
Hash identifier: UE+WwjOn3TNB/MTcsl603gJpmgKl3g1kgr0No2QzfHI=
Subject key identifier: 1C:95:D7:BE:BF:0B:89:00:C2:43:4E:AA:73:1F:E5:71:70:30:C6:FA
Authority key identifier: 3E:C7:D2:BF:C3:FA:78:E7:10:0A:1B:89:35:90:5A:FF:7A:49:6B:C9
Certificate issuer: /CN=3ec7d2bfc3fa78e7100a1b8935905aff7a496bc9
Certificate serial: 01987D8BDB28E379FBB090624015C333789D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PsfSv8P6eOcQChuJNZBa_3pJa8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.mft
Manifest number: 0CC9
Signing time: Wed 06 Aug 2025 04:02:54 +0000
Manifest this update: Wed 06 Aug 2025 04:02:54 +0000
Manifest next update: Thu 07 Aug 2025 04:02:54 +0000
Files and hashes: 1: PsfSv8P6eOcQChuJNZBa_3pJa8k.crl (hash: KCeCC7v87Eb+9IElj5NY/PUhkexxTp7Mx042QI9NG08=)
2: RPdruY8oCYU-NG_cdmDTyaYXs9w.roa (hash: i9rNw7/5XltvLVBXot4AXkRNS8YKs+TQnC29q/66MR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/PsfSv8P6eOcQChuJNZBa_3pJa8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 04:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8b:db:28:e3:79:fb:b0:90:62:40:15:c3:33:78:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec7d2bfc3fa78e7100a1b8935905aff7a496bc9
Validity
Not Before: Aug 6 04:02:54 2025 GMT
Not After : Aug 7 04:02:54 2025 GMT
Subject: CN=1c95d7bebf0b8900c2434eaa731fe5717030c6fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b6:b7:78:bd:b5:6c:5f:25:9b:ac:a8:6d:e6:
33:fc:ba:3c:7b:01:c3:48:97:ee:b4:bf:ca:28:69:
5f:b6:26:3f:1e:f8:be:4a:f8:08:20:6a:72:b0:3d:
33:79:89:0e:49:eb:03:ae:8e:ec:ed:1c:90:df:9d:
b9:12:74:48:a3:6d:8f:bf:02:ab:a4:7d:69:33:6d:
5d:0b:f3:89:72:03:06:b3:35:04:68:15:27:d2:50:
80:ad:1f:e0:07:0a:23:9b:00:d7:1e:fa:e6:7e:12:
ef:15:0f:f9:80:20:62:5d:57:2d:73:cf:2b:19:fc:
79:01:fb:3e:52:a6:65:09:be:5d:68:82:01:af:00:
ba:96:5f:33:10:87:c3:b4:7b:e4:c6:f7:20:65:d5:
89:5f:e2:b3:e3:83:ad:d3:b1:bd:8a:c7:21:3a:f7:
a4:67:c2:31:87:82:dd:46:4b:b0:fa:0d:1a:42:20:
ba:24:69:70:99:43:a7:48:e0:02:bd:b0:15:93:a7:
4c:bb:0b:1e:6b:df:48:a7:3f:85:f2:f4:d8:0a:d1:
06:e9:68:f5:a2:a6:f8:4b:bc:4e:a4:89:b5:d3:27:
ff:9c:7c:a6:1c:29:e1:f4:8b:66:2e:6e:76:32:44:
88:0d:23:41:f0:b1:fe:80:43:f4:d3:8a:66:aa:e2:
1d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:95:D7:BE:BF:0B:89:00:C2:43:4E:AA:73:1F:E5:71:70:30:C6:FA
X509v3 Authority Key Identifier:
keyid:3E:C7:D2:BF:C3:FA:78:E7:10:0A:1B:89:35:90:5A:FF:7A:49:6B:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsfSv8P6eOcQChuJNZBa_3pJa8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:cf:43:71:44:bd:9e:37:f5:ce:4e:56:52:e6:e5:72:ea:38:
49:7d:ac:80:47:c0:dd:bb:1a:38:4a:a0:c5:97:fa:b6:18:eb:
c8:59:0f:76:03:82:e9:21:94:1b:ce:3f:13:b6:90:df:75:c6:
90:9e:96:6f:42:ca:76:14:f1:d7:1a:fc:eb:d7:db:7b:bb:8e:
25:56:39:82:ff:38:c4:59:e2:05:0a:c8:b9:6c:3c:4b:41:ee:
bb:6c:78:8a:90:ad:6e:43:ee:72:ea:58:e3:3b:3b:ac:7e:59:
62:29:e4:72:39:05:27:96:85:60:b8:78:e7:6f:1e:f0:2b:5e:
14:02:5e:ee:57:09:a2:19:90:a4:b1:bd:9b:ed:8f:7b:44:5b:
81:77:6c:90:92:bb:5c:0b:7b:ae:18:e4:28:43:81:68:28:0f:
90:93:63:b3:34:83:f3:2b:b8:53:2d:f9:a5:b3:c5:7d:f7:1a:
3c:67:f2:91:df:ab:9a:d5:40:a4:cf:9e:26:28:9d:52:a0:88:
db:63:dc:8c:7e:7e:4e:ad:76:f3:f5:73:96:ba:e7:0c:3c:71:
57:68:f4:99:ae:f0:3f:c3:48:aa:24:e4:f0:cc:59:0b:f9:57:
3f:e1:d2:43:3a:09:26:7b:fb:22:89:b6:b2:d8:99:de:69:16:
a7:0f:f2:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:16:45 2025 by rpki-client