Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.mft
File: PSOEt4Txl-oD2sL-2niV_Et0Byk.mft (raw, json)
Hash identifier: kwAYqr+upSyYkTutB7TIxzqLqJ9xlzqdI2vRe0v+Grs=
Subject key identifier: DF:DF:1A:D8:E0:5E:1E:73:2B:07:7B:74:83:7D:62:46:02:95:90:15
Authority key identifier: 3D:23:84:B7:84:F1:97:EA:03:DA:C2:FE:DA:78:95:FC:4B:74:07:29
Certificate issuer: /CN=3d2384b784f197ea03dac2feda7895fc4b740729
Certificate serial: 019A52636516F6782F66F9559F7060F22734
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PSOEt4Txl-oD2sL-2niV_Et0Byk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.mft
Manifest number: 1713
Signing time: Wed 05 Nov 2025 05:00:36 +0000
Manifest this update: Wed 05 Nov 2025 05:00:36 +0000
Manifest next update: Thu 06 Nov 2025 05:00:36 +0000
Files and hashes: 1: Iu-aA6mIgmV7NRaHZwfWxVQwunE.roa (hash: o5Wzr2WPXf+6jJuX+5+5esP5UlB6RWICl6cgQsSyWJw=)
2: PSOEt4Txl-oD2sL-2niV_Et0Byk.crl (hash: 6uplQ5G1mMmMyIPMFVnMS7JDBitYrKncD4sx43cV4Bg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.mft
rsync://rpki.ripe.net/repository/DEFAULT/PSOEt4Txl-oD2sL-2niV_Et0Byk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:65:16:f6:78:2f:66:f9:55:9f:70:60:f2:27:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d2384b784f197ea03dac2feda7895fc4b740729
Validity
Not Before: Nov 5 05:00:36 2025 GMT
Not After : Nov 6 05:00:36 2025 GMT
Subject: CN=dfdf1ad8e05e1e732b077b74837d624602959015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:31:9b:6f:a6:46:99:a8:a5:94:27:11:b3:63:
18:d8:40:14:18:64:ad:10:e3:4e:e7:43:39:ae:cb:
4c:9a:c6:d5:fd:98:f6:1c:a2:9f:bd:84:0b:e5:89:
f9:00:50:88:89:74:a5:64:9c:11:ba:ec:b4:a3:46:
a4:d4:16:de:90:e4:77:3e:1d:95:48:91:e1:10:eb:
97:54:14:de:d9:85:2d:63:24:85:16:7d:e0:eb:de:
aa:55:d5:d6:fa:12:df:5a:34:d7:0e:fd:52:37:0f:
3c:68:9a:3f:e9:2a:82:a1:c5:2b:0d:53:0d:ab:0d:
bf:2e:37:8e:11:bb:d9:ef:2e:36:a8:7c:e9:36:a8:
1c:ff:34:8e:c1:2c:cb:fa:5a:d7:1b:c4:7e:eb:a1:
8d:c1:35:bc:bb:59:fb:5f:86:e6:71:58:67:86:dc:
ad:27:6b:44:10:7b:7c:46:3e:0c:79:68:f6:b7:02:
30:d4:71:d7:34:bb:38:8b:25:15:6e:53:72:15:37:
11:ed:da:95:66:41:a7:31:25:4f:2e:8f:7e:48:fb:
7f:8b:d4:97:ee:8d:76:f6:13:3f:ec:62:33:e1:b2:
4a:9b:21:0e:cf:ea:46:6f:b2:43:47:a1:bd:02:fa:
f2:c0:fd:7e:d2:ae:2a:c7:76:4f:85:98:1e:72:56:
71:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:DF:1A:D8:E0:5E:1E:73:2B:07:7B:74:83:7D:62:46:02:95:90:15
X509v3 Authority Key Identifier:
keyid:3D:23:84:B7:84:F1:97:EA:03:DA:C2:FE:DA:78:95:FC:4B:74:07:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PSOEt4Txl-oD2sL-2niV_Et0Byk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:d1:d1:7c:d6:89:cf:8f:38:86:81:04:b7:08:a6:3c:6f:fd:
e5:1a:ab:a6:cb:25:b9:90:f9:10:62:85:e5:8e:4e:96:95:a6:
99:60:68:07:62:b7:34:6c:6e:16:22:3b:ab:e0:09:02:86:5b:
bf:dd:f1:2a:c8:33:24:75:f0:70:1f:fe:20:e9:e0:a3:9f:68:
84:54:e0:b4:f3:a9:3a:17:1f:ef:68:73:0a:74:19:24:6b:f8:
98:4c:73:bb:8f:27:34:85:92:81:c0:47:a2:65:7a:b5:7b:3c:
61:18:99:1d:db:5a:f5:c1:64:ee:26:40:ae:62:cd:64:74:37:
63:a5:27:5e:35:1e:ca:5d:1e:a4:e2:c7:1a:17:62:07:c2:44:
5b:f4:7a:28:53:82:fa:18:01:85:9d:05:08:5e:a7:b9:90:df:
af:66:16:07:00:6c:84:01:28:b1:14:f6:84:5f:2d:75:65:34:
02:a6:ff:4f:3e:50:b1:4c:f4:43:4e:ff:85:d8:b5:57:23:98:
8c:73:20:93:51:54:6c:3e:d8:cd:6b:b5:77:26:8d:87:59:44:
05:00:f2:2a:5d:e1:a1:b9:8b:30:40:1e:56:e6:b0:94:e7:d2:
e5:39:0d:1f:85:0b:7b:db:83:fb:0e:cf:66:fa:c9:6f:e5:90:
32:71:a4:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:00:50 2025 by rpki-client