Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.mft
File: psb8p1JpxrAQpvpxCeQxXgagg9w.mft (raw, json)
Hash identifier: kQ9cOfiCZZDDRoZ2QUtKA9wJVWLwXDrgdlRzirP4iDc=
Subject key identifier: 09:F0:64:1D:66:36:11:00:BB:89:6C:E3:98:5D:C1:1E:2D:C8:CE:FF
Authority key identifier: A6:C6:FC:A7:52:69:C6:B0:10:A6:FA:71:09:E4:31:5E:06:A0:83:DC
Certificate issuer: /CN=a6c6fca75269c6b010a6fa7109e4315e06a083dc
Certificate serial: 019A50E2FC43658DB57364A590484DC872AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/psb8p1JpxrAQpvpxCeQxXgagg9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.mft
Manifest number: 1711
Signing time: Tue 04 Nov 2025 22:00:44 +0000
Manifest this update: Tue 04 Nov 2025 22:00:44 +0000
Manifest next update: Wed 05 Nov 2025 22:00:44 +0000
Files and hashes: 1: okAV_h5VY2rYZdeinC81X0hRA2Y.roa (hash: Qv1PPO81VnI1ltfb9vhPQi4AdxGUBWm2X2BZUx+f7S0=)
2: psb8p1JpxrAQpvpxCeQxXgagg9w.crl (hash: ES/TVQZlqGs1GtR/VFu01a9xW/1D4sksCGwQNZ6Akok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/psb8p1JpxrAQpvpxCeQxXgagg9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:fc:43:65:8d:b5:73:64:a5:90:48:4d:c8:72:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6c6fca75269c6b010a6fa7109e4315e06a083dc
Validity
Not Before: Nov 4 22:00:44 2025 GMT
Not After : Nov 5 22:00:44 2025 GMT
Subject: CN=09f0641d66361100bb896ce3985dc11e2dc8ceff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c8:c3:fa:ec:5d:0f:6b:1c:b0:2d:70:7d:1c:
6a:93:9c:b2:6b:22:c2:5d:e7:40:0f:84:10:d3:0b:
b4:6a:93:aa:ea:2e:19:1f:d8:01:66:85:ab:84:2a:
de:13:a9:26:12:a7:77:9c:30:6c:19:ef:2d:90:29:
80:55:a3:93:c0:6d:a5:5b:1b:f6:d6:c9:ed:8a:41:
eb:a7:f0:3b:c5:22:06:40:2f:59:d0:25:99:85:fc:
42:d8:4b:35:66:6c:7c:d0:36:b3:b9:8d:80:f8:69:
32:c4:d6:e9:b5:ec:9b:08:82:21:f4:8a:1a:e1:9a:
0e:51:d5:45:8b:78:c7:3d:81:23:54:2a:52:38:68:
fd:e0:32:6e:4e:50:70:c2:b7:0c:8d:9d:33:60:40:
f8:49:6d:94:10:86:6d:7c:f1:95:d6:77:d7:54:2b:
ee:86:4f:f4:f7:43:44:90:0b:79:82:f3:c2:31:da:
99:71:81:3b:cf:53:8c:43:5f:d6:3a:ad:eb:d3:ab:
73:af:0d:77:17:4b:fb:b9:be:e4:40:c4:18:09:5e:
12:6f:ce:c6:e4:22:00:7b:71:09:85:5a:5b:aa:87:
b5:d5:c6:5f:04:bf:d8:52:f9:60:5e:c4:c3:7c:d2:
ca:fc:7c:04:d3:92:53:5c:6f:ff:50:31:d8:97:45:
98:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:F0:64:1D:66:36:11:00:BB:89:6C:E3:98:5D:C1:1E:2D:C8:CE:FF
X509v3 Authority Key Identifier:
keyid:A6:C6:FC:A7:52:69:C6:B0:10:A6:FA:71:09:E4:31:5E:06:A0:83:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/psb8p1JpxrAQpvpxCeQxXgagg9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:41:a4:ba:b7:d1:9d:2a:0e:b6:6a:ac:75:2e:83:2d:68:90:
b7:fe:c2:00:9a:0f:da:52:a2:39:2b:54:c7:4e:73:e8:ef:49:
ab:65:b4:e7:77:52:07:74:86:ce:ac:0f:3b:52:30:d2:ca:98:
85:ca:03:62:70:05:ca:23:b2:67:11:b6:5e:5e:e2:74:6d:c7:
6d:b5:a6:66:49:c0:30:31:5d:07:9e:da:db:06:57:46:57:7b:
ec:fe:ef:ef:7a:93:b2:5a:a1:58:c7:61:86:33:1b:97:94:75:
03:e5:bb:17:ed:71:a0:fa:e4:4d:02:5e:bb:80:81:6a:2e:4e:
68:14:bc:77:1a:09:d2:e8:2b:bc:d5:97:eb:ed:c4:03:af:d3:
14:2d:45:6e:87:5c:03:b0:09:da:ab:b9:a7:33:4f:a0:27:15:
ee:04:e6:7f:3e:f8:26:48:d5:7c:0b:7b:6e:76:0e:77:04:ef:
f4:1e:7f:23:76:aa:11:8b:61:02:11:88:2c:f4:d2:ae:3d:ac:
30:95:e9:59:ce:39:34:d6:97:1f:ed:1d:5c:6b:91:36:1a:9c:
4d:ea:08:98:0a:8d:7d:06:ef:02:3c:38:c1:1b:c1:1d:b3:03:
4e:69:5b:ce:4c:f8:50:35:67:eb:86:21:e1:b2:74:3b:a1:fe:
c9:4b:4e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:54:14 2025 by rpki-client