Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/3bfd0a-017f-481f-b676-bc36feeb90b3/1/PSGIrVl7WKqllwA_jwhDSWxsfJM.mft
File: PSGIrVl7WKqllwA_jwhDSWxsfJM.mft (raw, json)
Hash identifier: p2e1bpnYqyySZmUOo7LfY8WzblqeXhWzJtSjBh2l8/E=
Subject key identifier: 6B:DC:28:EA:97:04:13:FF:C4:B1:4F:A0:80:90:63:B0:D8:F9:5E:69
Authority key identifier: 3D:21:88:AD:59:7B:58:AA:A5:97:00:3F:8F:08:43:49:6C:6C:7C:93
Certificate issuer: /CN=3d2188ad597b58aaa597003f8f0843496c6c7c93
Certificate serial: 019A51BEEDBA5A374B08C0ABD94A91F442B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PSGIrVl7WKqllwA_jwhDSWxsfJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/3bfd0a-017f-481f-b676-bc36feeb90b3/1/PSGIrVl7WKqllwA_jwhDSWxsfJM.mft
Manifest number: 1011
Signing time: Wed 05 Nov 2025 02:00:58 +0000
Manifest this update: Wed 05 Nov 2025 02:00:58 +0000
Manifest next update: Thu 06 Nov 2025 02:00:58 +0000
Files and hashes: 1: K-fnSlqCnsMuB-NlWaWBJUmC4FM.roa (hash: j54MZjizcVLzs5xFTxfuwkhp1hDwpOUSaYB4Ws5FVDc=)
2: PSGIrVl7WKqllwA_jwhDSWxsfJM.crl (hash: 64qeJ9qLJxkcdHWJ4mA4J1WKkJRtkBCUM11gZbLG5vo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/3bfd0a-017f-481f-b676-bc36feeb90b3/1/PSGIrVl7WKqllwA_jwhDSWxsfJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/3bfd0a-017f-481f-b676-bc36feeb90b3/1/PSGIrVl7WKqllwA_jwhDSWxsfJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PSGIrVl7WKqllwA_jwhDSWxsfJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 02:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:ed:ba:5a:37:4b:08:c0:ab:d9:4a:91:f4:42:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d2188ad597b58aaa597003f8f0843496c6c7c93
Validity
Not Before: Nov 5 02:00:58 2025 GMT
Not After : Nov 6 02:00:58 2025 GMT
Subject: CN=6bdc28ea970413ffc4b14fa0809063b0d8f95e69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:96:e9:fb:74:a1:7d:8f:a9:b6:a7:d3:d7:7c:
2f:fc:c2:2e:c2:98:4a:90:f4:a9:5b:9e:76:63:4b:
5a:3e:6b:40:02:9d:c7:f2:ac:30:96:d4:47:97:a3:
f1:88:a4:57:c2:c2:80:fb:33:24:af:ab:0f:e2:46:
a4:69:65:98:8c:98:99:46:f0:e3:55:37:11:02:cc:
d8:8f:be:cb:cd:d6:9e:d3:96:7f:ff:13:67:e6:11:
f8:b7:6d:72:40:a7:94:75:12:aa:12:13:e7:78:5d:
3a:74:0c:93:7f:ce:2e:03:e2:96:3f:a6:02:e3:31:
3e:ec:70:9f:8c:e0:7e:45:2a:1b:9e:19:d5:69:99:
49:c9:ce:c8:be:5f:c6:5f:f3:4d:71:1e:da:08:3d:
b7:0c:40:50:4b:9b:c6:38:1e:e2:24:f6:24:ce:dc:
80:d7:e9:8f:ae:23:67:e0:d0:4b:07:73:be:45:64:
b4:9d:00:52:86:e4:39:06:ce:57:fa:2e:ce:b1:e2:
51:fa:07:8d:1e:38:64:56:43:7b:1e:9c:71:2e:79:
c5:d9:ee:d0:8c:d5:a2:24:2e:35:67:2f:17:2d:54:
52:62:5a:ea:04:7b:63:44:45:6f:cf:ec:db:eb:3d:
f3:8d:97:9c:d0:9d:1b:a9:08:b2:c2:8d:a0:78:ea:
7c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:DC:28:EA:97:04:13:FF:C4:B1:4F:A0:80:90:63:B0:D8:F9:5E:69
X509v3 Authority Key Identifier:
keyid:3D:21:88:AD:59:7B:58:AA:A5:97:00:3F:8F:08:43:49:6C:6C:7C:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PSGIrVl7WKqllwA_jwhDSWxsfJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3bfd0a-017f-481f-b676-bc36feeb90b3/1/PSGIrVl7WKqllwA_jwhDSWxsfJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3bfd0a-017f-481f-b676-bc36feeb90b3/1/PSGIrVl7WKqllwA_jwhDSWxsfJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:dd:dd:98:b8:4d:5f:e0:c5:7d:dd:77:c8:5d:14:f6:2c:56:
78:28:d9:bb:ed:ad:33:2d:53:9a:24:74:bf:f0:78:36:74:81:
b2:15:18:14:d2:b0:ee:98:e4:d4:bd:a8:e3:be:d8:4c:ad:49:
ec:18:94:0a:83:1a:e1:25:f0:0d:33:fe:68:f1:32:bf:bb:e9:
c5:56:23:c5:56:18:42:33:e0:8e:ff:2b:91:f5:21:da:2a:6e:
ca:dc:0d:2b:8e:7d:5f:af:59:14:fa:fd:63:2c:74:bf:ca:50:
6c:f3:a5:ca:91:e3:cf:d1:a0:29:8e:8b:ad:5d:bb:54:c1:ac:
23:d1:70:cf:1d:54:aa:44:d1:eb:f7:c9:a0:fc:bd:a4:2d:ec:
65:6a:69:d2:12:d8:46:14:c6:0a:fd:aa:60:c0:2b:f7:60:11:
bb:d0:2e:be:10:3a:85:c1:98:8c:60:a5:7a:c6:45:b4:32:26:
6c:48:f5:76:b1:fa:70:9f:ac:22:e0:97:91:43:3c:ac:2b:2a:
68:3e:2d:a6:50:3b:be:f1:b1:74:8f:27:38:30:d9:dc:28:5f:
c4:97:89:b9:01:44:98:e0:bb:9b:4b:88:b1:1b:dd:2c:09:d1:
bb:77:33:a6:93:d3:b3:42:ae:12:65:32:0d:15:89:ce:bb:8f:
e7:c6:7c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:08:27 2025 by rpki-client