Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.mft
File: psb8p1JpxrAQpvpxCeQxXgagg9w.mft (raw, json)
Hash identifier: 8Ar2YYXgciOJ6wUAZayf1FfvI1FaFDRDig7Kz3eVfKI=
Subject key identifier: 56:B9:E3:04:35:42:F3:7E:7F:26:9A:D5:FF:FF:2C:0A:68:5F:82:B0
Authority key identifier: A6:C6:FC:A7:52:69:C6:B0:10:A6:FA:71:09:E4:31:5E:06:A0:83:DC
Certificate issuer: /CN=a6c6fca75269c6b010a6fa7109e4315e06a083dc
Certificate serial: 019881692C22CE054C02D6B7083CE964DCDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/psb8p1JpxrAQpvpxCeQxXgagg9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.mft
Manifest number: 1621
Signing time: Wed 06 Aug 2025 22:03:30 +0000
Manifest this update: Wed 06 Aug 2025 22:03:30 +0000
Manifest next update: Thu 07 Aug 2025 22:03:30 +0000
Files and hashes: 1: okAV_h5VY2rYZdeinC81X0hRA2Y.roa (hash: Qv1PPO81VnI1ltfb9vhPQi4AdxGUBWm2X2BZUx+f7S0=)
2: psb8p1JpxrAQpvpxCeQxXgagg9w.crl (hash: 3nlQmPPAr61CUpTZ1jRcxAoUG7TL2rrX1bIHIiVrxc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/psb8p1JpxrAQpvpxCeQxXgagg9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:69:2c:22:ce:05:4c:02:d6:b7:08:3c:e9:64:dc:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6c6fca75269c6b010a6fa7109e4315e06a083dc
Validity
Not Before: Aug 6 22:03:30 2025 GMT
Not After : Aug 7 22:03:30 2025 GMT
Subject: CN=56b9e3043542f37e7f269ad5ffff2c0a685f82b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e3:ef:22:3b:3f:6f:92:74:a0:4d:53:81:d0:
40:61:db:bd:83:d4:cc:a8:af:cd:e1:07:90:f8:d9:
93:0a:c1:45:22:d9:fb:fb:e9:df:15:64:46:d0:5d:
da:35:0d:99:e8:d8:0a:1e:37:fd:00:02:12:18:b9:
eb:0d:37:ca:14:6f:62:93:de:8f:a2:66:96:38:03:
78:87:32:2d:87:70:9e:f3:a8:06:52:09:64:85:0a:
33:c0:f5:6b:1d:ba:c8:61:51:02:e7:9b:52:cb:bd:
41:58:cd:c2:77:3f:ef:e1:46:e5:e4:ea:1a:08:3d:
36:92:5c:87:92:1b:c1:95:f7:c3:aa:15:ed:df:c2:
f9:af:0c:84:aa:88:b7:58:35:8b:3e:91:c5:d0:2f:
15:65:35:d9:f9:92:3f:61:fe:8a:e0:94:28:55:91:
26:7a:68:2f:01:4f:64:cf:8a:7a:ed:bd:16:f3:4d:
bd:68:e9:5c:14:b5:34:7f:3f:13:c9:ce:b9:0a:e8:
7f:7a:34:09:3a:b7:a8:c3:4c:09:a2:02:63:54:8c:
44:74:da:b7:54:ad:71:49:51:ad:fc:8b:8b:50:05:
09:95:c3:b6:9f:64:92:a6:13:0a:e5:0a:ca:3d:9c:
f7:a4:ae:d4:66:36:92:5c:2f:e7:53:ab:3e:44:fc:
75:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:B9:E3:04:35:42:F3:7E:7F:26:9A:D5:FF:FF:2C:0A:68:5F:82:B0
X509v3 Authority Key Identifier:
keyid:A6:C6:FC:A7:52:69:C6:B0:10:A6:FA:71:09:E4:31:5E:06:A0:83:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/psb8p1JpxrAQpvpxCeQxXgagg9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:b6:a5:3b:2f:e5:40:86:fa:06:f5:5b:d8:3b:96:d4:61:62:
78:93:b4:af:10:96:7f:4e:31:7f:cf:78:0a:12:11:48:61:dc:
14:6a:c2:c6:5e:d3:b0:17:02:e0:20:6a:c5:0a:37:14:f4:5e:
b7:a3:54:4b:cb:ac:01:ca:d5:22:a4:13:a6:b7:5e:89:b7:1b:
e4:4a:90:31:3c:1c:a1:3c:85:0a:71:23:cb:1a:00:eb:d9:df:
18:49:24:6c:e0:d8:b6:5e:89:a3:d0:73:b3:08:18:a0:9c:15:
d3:79:b7:f0:28:3b:5d:43:5a:fa:c0:b5:ad:9f:d7:3c:71:09:
c2:b0:db:3b:ef:2a:7e:cb:4b:61:f3:dc:c3:76:c5:18:0e:47:
0f:7f:1c:6f:d4:44:69:d2:68:43:35:a2:cc:ee:f8:c4:7b:7a:
ef:9f:fc:e8:1e:0f:67:4d:99:72:a2:0e:c7:08:08:c0:5c:37:
cc:71:4c:1b:bb:de:8d:fa:da:2e:c4:fe:65:78:09:08:b3:ae:
0b:20:af:1a:c5:55:36:22:c3:b2:dc:bd:dd:73:8a:f6:51:ea:
57:8f:17:f7:64:47:95:b7:95:0a:9a:ee:26:4d:53:57:37:d6:
32:d9:62:ef:04:59:75:d7:cc:8b:90:5c:e4:9e:ed:f6:c3:9c:
f9:2c:ba:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:02:21 2025 by rpki-client