Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/3bfd0a-017f-481f-b676-bc36feeb90b3/1/PSGIrVl7WKqllwA_jwhDSWxsfJM.mft
File: PSGIrVl7WKqllwA_jwhDSWxsfJM.mft (raw, json)
Hash identifier: MPAj+U5YoJufB9dncOV/usZBS4fdpJhDP2dd7ZKCwAE=
Subject key identifier: 40:1B:45:6A:A5:EB:A3:85:B5:6E:E8:4F:D5:58:1D:AC:98:CE:E5:06
Authority key identifier: 3D:21:88:AD:59:7B:58:AA:A5:97:00:3F:8F:08:43:49:6C:6C:7C:93
Certificate issuer: /CN=3d2188ad597b58aaa597003f8f0843496c6c7c93
Certificate serial: 01977007F17483B764332AB5CCD9EC04EB2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PSGIrVl7WKqllwA_jwhDSWxsfJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/3bfd0a-017f-481f-b676-bc36feeb90b3/1/PSGIrVl7WKqllwA_jwhDSWxsfJM.mft
Manifest number: 0E93
Signing time: Sat 14 Jun 2025 20:00:58 +0000
Manifest this update: Sat 14 Jun 2025 20:00:58 +0000
Manifest next update: Sun 15 Jun 2025 20:00:58 +0000
Files and hashes: 1: K-fnSlqCnsMuB-NlWaWBJUmC4FM.roa (hash: j54MZjizcVLzs5xFTxfuwkhp1hDwpOUSaYB4Ws5FVDc=)
2: PSGIrVl7WKqllwA_jwhDSWxsfJM.crl (hash: tvntf9cbCilrMcsCUpvw/8SE/79RnmNn29UmBNt5yc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/3bfd0a-017f-481f-b676-bc36feeb90b3/1/PSGIrVl7WKqllwA_jwhDSWxsfJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/3bfd0a-017f-481f-b676-bc36feeb90b3/1/PSGIrVl7WKqllwA_jwhDSWxsfJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PSGIrVl7WKqllwA_jwhDSWxsfJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:07:f1:74:83:b7:64:33:2a:b5:cc:d9:ec:04:eb:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d2188ad597b58aaa597003f8f0843496c6c7c93
Validity
Not Before: Jun 14 20:00:58 2025 GMT
Not After : Jun 15 20:00:58 2025 GMT
Subject: CN=401b456aa5eba385b56ee84fd5581dac98cee506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:08:61:84:77:94:2b:45:0f:a0:7c:0b:23:99:
d9:79:87:36:ad:06:7b:73:3b:58:f1:fa:40:1b:d5:
0b:5a:45:e7:45:be:90:6e:13:0a:69:65:39:23:9c:
ed:cf:54:10:6a:6e:cb:e5:e0:19:69:25:92:d0:14:
96:aa:93:11:29:77:0a:4a:83:43:36:93:2a:bb:06:
c0:57:78:ef:be:7b:23:65:a7:f5:5d:d2:e2:ef:9a:
e6:0c:c5:2d:f0:44:30:ea:af:4b:cc:33:aa:67:fe:
1a:68:78:48:26:ed:a7:b5:b5:b0:ae:31:23:eb:a3:
02:d2:81:05:21:76:de:c9:1e:12:da:56:4c:65:09:
89:0d:c2:8b:83:51:e9:80:7f:27:5c:7c:8a:d6:ff:
6e:47:7d:81:10:5e:ba:ba:dd:0f:80:e3:01:16:f9:
21:55:47:ef:d8:65:67:70:08:87:c0:fc:44:27:7a:
e3:d5:d6:a2:8f:b6:40:6b:aa:7a:0f:25:c6:1c:f1:
ed:60:ed:8a:b5:96:79:f9:b7:db:8e:c7:03:cf:17:
62:fb:d8:a2:91:9a:69:6c:37:08:49:b0:6d:6d:65:
77:b6:9f:4c:2b:9d:f4:3b:bb:52:d1:a2:fc:6e:93:
ca:28:6c:59:f1:7d:9b:e0:29:62:9b:d6:85:42:07:
aa:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:1B:45:6A:A5:EB:A3:85:B5:6E:E8:4F:D5:58:1D:AC:98:CE:E5:06
X509v3 Authority Key Identifier:
keyid:3D:21:88:AD:59:7B:58:AA:A5:97:00:3F:8F:08:43:49:6C:6C:7C:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PSGIrVl7WKqllwA_jwhDSWxsfJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3bfd0a-017f-481f-b676-bc36feeb90b3/1/PSGIrVl7WKqllwA_jwhDSWxsfJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3bfd0a-017f-481f-b676-bc36feeb90b3/1/PSGIrVl7WKqllwA_jwhDSWxsfJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:4d:49:c2:0a:ed:e7:86:5c:1f:ac:86:71:27:26:40:2d:e6:
8e:13:a2:69:db:44:7c:d3:34:56:1f:37:5d:d0:93:f2:15:85:
29:3f:77:8b:89:bc:51:5b:ac:03:76:ad:eb:7c:90:61:87:59:
46:46:d2:18:58:a8:5e:20:58:90:af:95:b2:b4:3d:12:b4:87:
ec:d0:c2:bf:5c:b9:8c:e8:50:6f:8c:bf:47:b1:5d:c3:45:4e:
d7:8a:c4:9e:9b:98:e2:a4:be:71:b4:ec:d1:f2:0d:8b:a9:ae:
3f:4b:45:fd:5b:63:b3:07:14:d6:d4:c6:1e:09:9d:63:13:d1:
21:1e:98:7a:29:df:c2:b3:0f:9e:aa:9a:74:d7:0a:0d:48:c3:
51:cc:50:f0:76:cd:59:f4:85:60:53:5b:82:ad:26:36:ff:77:
f2:ad:81:72:9f:59:f0:72:10:85:7e:30:69:7e:cf:36:59:01:
5f:73:66:fb:e7:65:4c:06:bc:72:99:fc:57:bc:21:ee:90:38:
1a:19:ec:bf:27:28:df:38:1b:86:d4:96:97:58:23:4b:97:7b:
19:ce:29:98:bb:84:3d:0e:ed:9f:83:9b:a8:0c:7d:51:0a:a1:
98:53:99:a8:ae:b0:54:5a:cf:72:0c:4f:98:77:4a:cd:d0:49:
2f:7d:b5:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:19:30 2025 by rpki-client