Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/6ccab3-479b-4da8-ae98-2cb6e3fdf9cd/1/Psn7DRNVKq0E86qutY1N1OfPQPA.mft
File: Psn7DRNVKq0E86qutY1N1OfPQPA.mft (raw, json)
Hash identifier: /5/rryHa8SDVPjBvec4dU/9gRJk8LdD0BKghz8RwpEw=
Subject key identifier: 2A:69:15:5A:25:3D:19:A3:CB:82:ED:00:C0:2F:7B:92:E6:FB:CB:FF
Authority key identifier: 3E:C9:FB:0D:13:55:2A:AD:04:F3:AA:AE:B5:8D:4D:D4:E7:CF:40:F0
Certificate issuer: /CN=3ec9fb0d13552aad04f3aaaeb58d4dd4e7cf40f0
Certificate serial: 01988544505958011274110D049317374505
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Psn7DRNVKq0E86qutY1N1OfPQPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/6ccab3-479b-4da8-ae98-2cb6e3fdf9cd/1/Psn7DRNVKq0E86qutY1N1OfPQPA.mft
Manifest number: 1623
Signing time: Thu 07 Aug 2025 16:01:43 +0000
Manifest this update: Thu 07 Aug 2025 16:01:43 +0000
Manifest next update: Fri 08 Aug 2025 16:01:43 +0000
Files and hashes: 1: Psn7DRNVKq0E86qutY1N1OfPQPA.crl (hash: x9Xh2pXpepJbAB7pO2ptBdXCTaLCHUtZWuii0lP2mOo=)
2: yUqCwPk0Ei-cViitt4Gqnb4KxdE.roa (hash: rJJZNa4cHpwDRyt4aQOGhddvG2b+c/8oiLA2xlie2pA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/6ccab3-479b-4da8-ae98-2cb6e3fdf9cd/1/Psn7DRNVKq0E86qutY1N1OfPQPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/6ccab3-479b-4da8-ae98-2cb6e3fdf9cd/1/Psn7DRNVKq0E86qutY1N1OfPQPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Psn7DRNVKq0E86qutY1N1OfPQPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 16:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:85:44:50:59:58:01:12:74:11:0d:04:93:17:37:45:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec9fb0d13552aad04f3aaaeb58d4dd4e7cf40f0
Validity
Not Before: Aug 7 16:01:43 2025 GMT
Not After : Aug 8 16:01:43 2025 GMT
Subject: CN=2a69155a253d19a3cb82ed00c02f7b92e6fbcbff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7e:e5:b8:b6:42:7c:1e:43:18:ad:1d:76:ba:
1a:6c:2e:e8:f6:27:fc:40:6f:d8:e1:36:9e:bf:81:
fb:88:aa:09:e0:17:5a:49:fb:44:24:75:47:22:8a:
12:08:b5:4a:af:9f:c7:ed:67:13:f2:9b:96:5e:49:
99:1e:6b:da:91:a6:8c:e8:6c:0a:d8:67:3b:59:79:
d2:9d:78:96:73:c3:df:8c:02:0a:e7:ab:2d:25:78:
67:e3:a9:cd:23:69:7a:59:7f:d0:8e:85:92:98:e9:
aa:e7:95:cd:16:52:32:11:14:3a:9a:45:f0:7c:3b:
1f:56:37:a7:64:9a:15:f6:0e:64:06:d4:02:3e:27:
9d:a5:62:cb:07:96:31:a7:5c:2e:b2:29:d6:75:cc:
3e:46:a8:2e:2a:4a:5c:88:ed:19:86:8f:65:bf:f9:
e7:62:2a:14:50:b3:55:01:33:1d:00:d8:cf:46:ef:
f6:5b:a8:3f:ad:a2:6b:d6:b3:84:63:a1:16:fc:cc:
fe:8b:fd:84:57:9a:9c:b0:4d:6b:48:ba:2e:77:7d:
9d:88:e0:3b:3e:43:16:10:b7:34:eb:19:97:ce:03:
90:ce:cf:a7:37:3c:64:93:68:09:81:15:26:d1:15:
e9:0f:a0:f8:d0:0d:89:8a:8f:8d:a3:73:66:7e:cd:
99:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:69:15:5A:25:3D:19:A3:CB:82:ED:00:C0:2F:7B:92:E6:FB:CB:FF
X509v3 Authority Key Identifier:
keyid:3E:C9:FB:0D:13:55:2A:AD:04:F3:AA:AE:B5:8D:4D:D4:E7:CF:40:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Psn7DRNVKq0E86qutY1N1OfPQPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6ccab3-479b-4da8-ae98-2cb6e3fdf9cd/1/Psn7DRNVKq0E86qutY1N1OfPQPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6ccab3-479b-4da8-ae98-2cb6e3fdf9cd/1/Psn7DRNVKq0E86qutY1N1OfPQPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:87:f2:a6:86:14:39:87:bc:7b:73:51:af:de:c1:40:cd:04:
a4:f1:89:72:55:a6:52:4b:a8:e3:0a:5e:78:a7:6f:9b:96:05:
d9:84:d0:f6:f1:19:17:3a:13:98:89:65:da:6c:15:01:50:b4:
f5:61:ea:fe:76:f4:c0:c5:54:2e:db:f0:71:94:da:fb:bc:38:
6d:4f:17:dc:f2:c5:25:66:0e:12:29:33:27:13:5d:24:be:5a:
de:28:07:33:8c:f0:47:21:c8:76:21:7a:c7:6d:e3:b9:4c:40:
2c:35:eb:92:41:61:6b:c1:d6:fa:44:83:45:45:3b:5f:1a:56:
7e:3d:45:fb:66:bf:f0:b1:06:09:93:96:b8:18:e1:d5:ea:0f:
e5:35:29:12:f9:4d:b9:26:e7:44:bc:12:20:ef:4d:8f:0c:20:
32:a6:bb:72:e8:c5:a0:84:f0:a0:10:e5:f7:a9:cc:ed:60:cf:
f8:18:91:ad:4f:f7:88:85:23:c6:ad:66:bb:88:b0:f6:1f:da:
5e:ec:1f:2b:5b:f7:eb:aa:1f:12:f1:ea:27:21:8c:28:8e:5d:
98:dd:6e:63:3a:cd:e1:72:78:73:1a:1b:43:0d:d8:eb:ab:ce:
9e:8c:21:f9:7f:1f:40:76:98:fa:e2:e9:af:78:24:b4:f1:ad:
88:ae:d6:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:12:04 2025 by rpki-client