Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.mft
File: PsfSv8P6eOcQChuJNZBa_3pJa8k.mft (raw, json)
Hash identifier: R+JUTFojWSK7Ln8ARCiYFfJc84rc2fW5RCzMmBiFFvI=
Subject key identifier: 0B:46:75:53:2F:67:7E:51:9A:87:52:3F:1F:E6:2A:1F:7B:BC:FD:3B
Authority key identifier: 3E:C7:D2:BF:C3:FA:78:E7:10:0A:1B:89:35:90:5A:FF:7A:49:6B:C9
Certificate issuer: /CN=3ec7d2bfc3fa78e7100a1b8935905aff7a496bc9
Certificate serial: 019A4EF42B87D07012691F96F9EA3BBDB81E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PsfSv8P6eOcQChuJNZBa_3pJa8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.mft
Manifest number: 0DBA
Signing time: Tue 04 Nov 2025 13:00:15 +0000
Manifest this update: Tue 04 Nov 2025 13:00:15 +0000
Manifest next update: Wed 05 Nov 2025 13:00:15 +0000
Files and hashes: 1: PsfSv8P6eOcQChuJNZBa_3pJa8k.crl (hash: 7LA/A8sucEwULJTuWJYkkriW+iLmJ8QZzm7DJO7ZH24=)
2: RPdruY8oCYU-NG_cdmDTyaYXs9w.roa (hash: i9rNw7/5XltvLVBXot4AXkRNS8YKs+TQnC29q/66MR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/PsfSv8P6eOcQChuJNZBa_3pJa8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:2b:87:d0:70:12:69:1f:96:f9:ea:3b:bd:b8:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec7d2bfc3fa78e7100a1b8935905aff7a496bc9
Validity
Not Before: Nov 4 13:00:15 2025 GMT
Not After : Nov 5 13:00:15 2025 GMT
Subject: CN=0b4675532f677e519a87523f1fe62a1f7bbcfd3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:86:6a:57:c0:f5:cb:2e:77:79:3a:23:a7:4a:
60:04:f7:6a:2e:1a:25:ce:5b:7d:78:0e:39:70:e5:
fe:7d:0d:c0:d4:32:e2:c2:32:f6:7f:a2:6a:a6:cd:
c2:0b:f6:a9:61:95:fc:84:61:0d:01:b8:3d:15:92:
69:e3:9e:23:18:a8:04:80:c4:0c:39:9a:ac:0b:c0:
03:90:6d:d1:3f:3c:67:7a:88:89:dc:55:4d:14:d0:
04:0d:c4:a1:39:64:00:91:99:c0:ff:d7:54:43:39:
e2:8f:e3:de:3c:59:af:5d:16:44:33:eb:bc:71:bb:
bc:b1:8d:bb:4d:24:e3:cc:30:2a:6f:a6:d4:85:d2:
c7:38:4e:7b:50:f9:33:6c:c1:c5:cc:d4:e4:47:27:
a9:03:19:dd:3a:a8:82:68:54:c8:8e:77:dc:c8:57:
81:03:54:89:5b:05:ad:ef:5b:f6:37:0e:62:25:d2:
11:e3:1d:35:ed:d9:10:7d:29:6c:b2:66:2a:76:5a:
8f:83:40:ad:37:3a:56:aa:ff:28:46:fa:36:61:a0:
82:74:37:6f:0b:7b:f4:92:c7:a8:25:d7:8a:ae:06:
09:81:82:e9:20:34:a3:78:8d:4a:10:c3:d1:c2:db:
40:d6:41:fe:b8:23:36:5b:be:e0:ea:3a:1c:6b:5e:
df:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:46:75:53:2F:67:7E:51:9A:87:52:3F:1F:E6:2A:1F:7B:BC:FD:3B
X509v3 Authority Key Identifier:
keyid:3E:C7:D2:BF:C3:FA:78:E7:10:0A:1B:89:35:90:5A:FF:7A:49:6B:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsfSv8P6eOcQChuJNZBa_3pJa8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:3c:43:38:da:f5:67:f9:bd:e5:33:c5:bb:be:ee:0e:ec:05:
a2:3e:60:01:2c:1e:ea:21:15:65:47:e3:bb:25:66:d1:9e:08:
7b:b2:6c:e2:c4:19:5a:35:6b:76:d1:0f:35:ff:35:0b:53:b8:
de:68:b6:6f:3e:93:9b:ce:41:ee:34:49:42:7d:3d:a5:eb:6f:
d9:06:20:04:f7:56:0f:bb:54:fb:04:07:45:eb:79:98:b4:ae:
11:c1:5b:68:ed:e2:71:94:dc:5b:30:95:46:41:35:81:51:d7:
70:e7:ed:dc:ef:d1:73:bc:39:e5:4c:96:24:88:55:c0:4b:bf:
ff:07:42:5b:54:80:9e:25:25:a6:8b:53:77:b3:96:9c:e2:7d:
99:ab:b6:20:c8:d6:93:c5:88:ca:fd:bd:b9:38:39:ef:8d:93:
e1:ed:4f:af:c0:44:ee:ad:cd:e1:13:82:31:1c:c1:2a:03:00:
74:62:7e:63:e6:10:b3:e2:ac:53:04:43:3d:d1:87:b5:b7:1b:
86:89:44:b9:1a:f6:74:b7:31:93:ac:26:f3:75:ff:19:53:84:
5a:d8:c8:4c:ea:71:d8:a4:b3:9d:9b:9b:00:78:2c:2e:f7:34:
69:7f:a0:3f:39:ee:7f:43:de:97:dc:52:e7:2e:e1:53:fd:e3:
1b:9c:fb:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:49:30 2025 by rpki-client