Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/PS60FH7nv8a6cvwDSUU0mPAA5YE.mft
File: PS60FH7nv8a6cvwDSUU0mPAA5YE.mft (raw, json)
Hash identifier: I/B3gq2IZnN7AmCgEqlSuXSH4w41Wa8j+kYipJNVm6c=
Subject key identifier: 98:FB:AA:72:9C:4E:F2:A3:C6:21:32:9F:89:C5:47:0B:69:20:C0:48
Authority key identifier: 3D:2E:B4:14:7E:E7:BF:C6:BA:72:FC:03:49:45:34:98:F0:00:E5:81
Certificate issuer: /CN=3d2eb4147ee7bfc6ba72fc0349453498f000e581
Certificate serial: 019779E64200F3E5575B3C990647EB15598B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PS60FH7nv8a6cvwDSUU0mPAA5YE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/PS60FH7nv8a6cvwDSUU0mPAA5YE.mft
Manifest number: 0288
Signing time: Mon 16 Jun 2025 18:00:22 +0000
Manifest this update: Mon 16 Jun 2025 18:00:22 +0000
Manifest next update: Tue 17 Jun 2025 18:00:22 +0000
Files and hashes: 1: HpXNaI-YZ__bNVvsLhzCVmON0vA.roa (hash: 4ppKjsjUaSdmkdjg9+HGXDZITHcsYFbzqeckmlgFcTA=)
2: PS60FH7nv8a6cvwDSUU0mPAA5YE.crl (hash: ROoV+KJ5tXD082d7WWtrBKTRImC5vT9kP1UwISawIN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/PS60FH7nv8a6cvwDSUU0mPAA5YE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/PS60FH7nv8a6cvwDSUU0mPAA5YE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PS60FH7nv8a6cvwDSUU0mPAA5YE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:e6:42:00:f3:e5:57:5b:3c:99:06:47:eb:15:59:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d2eb4147ee7bfc6ba72fc0349453498f000e581
Validity
Not Before: Jun 16 18:00:22 2025 GMT
Not After : Jun 17 18:00:22 2025 GMT
Subject: CN=98fbaa729c4ef2a3c621329f89c5470b6920c048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:1f:10:0c:61:d6:8f:e2:0e:0a:0d:02:b1:b8:
1e:32:0a:56:08:4d:79:cc:0e:41:48:3f:93:e6:fa:
96:ad:25:54:e8:2c:e1:e6:b7:4e:72:63:30:d9:de:
ee:f6:2c:b4:f0:25:3b:f5:66:7b:0e:56:8c:52:a3:
e2:ed:1d:5f:43:df:71:98:75:cb:97:1a:4b:98:7d:
1a:c6:c9:c9:57:e3:f8:bc:8f:ea:a2:29:90:df:9b:
9c:cc:5d:37:a9:0c:a3:75:2e:27:35:a0:4f:62:3d:
97:6d:8f:5d:d7:29:ea:4a:ee:52:13:39:07:c4:42:
ef:37:d0:0c:8b:2b:52:36:4b:f2:55:53:98:19:62:
b4:f4:47:df:f1:7b:24:8a:a4:d7:92:f8:1d:5a:6e:
31:36:38:86:8d:b5:f3:90:20:e0:f9:bb:f0:32:3e:
9f:db:52:be:5c:a4:95:1e:a9:0e:3e:ca:3a:df:44:
b1:14:69:2f:45:6f:2b:a5:7f:6c:03:5d:b9:c3:49:
8d:72:26:cb:59:ed:17:a6:4c:7b:57:9a:db:f4:ec:
83:b8:d3:88:a1:ea:91:c1:b0:e8:9c:15:9c:9d:1e:
ef:ba:67:10:43:19:f2:a7:03:8a:9b:99:50:90:50:
f9:88:3a:9e:29:58:df:82:ab:7f:52:e0:23:72:d3:
92:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:FB:AA:72:9C:4E:F2:A3:C6:21:32:9F:89:C5:47:0B:69:20:C0:48
X509v3 Authority Key Identifier:
keyid:3D:2E:B4:14:7E:E7:BF:C6:BA:72:FC:03:49:45:34:98:F0:00:E5:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PS60FH7nv8a6cvwDSUU0mPAA5YE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/PS60FH7nv8a6cvwDSUU0mPAA5YE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/PS60FH7nv8a6cvwDSUU0mPAA5YE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:8d:92:df:14:f5:5a:29:d2:08:74:6b:74:79:80:bd:14:03:
f9:aa:63:90:5e:fb:4d:b4:60:97:8b:6c:2e:7e:d1:a7:cd:8c:
59:56:cd:7d:af:13:e0:d1:24:f0:04:c6:80:77:38:42:e7:af:
3d:26:53:9b:05:3c:fe:10:47:7f:e7:6a:be:bb:52:2e:ac:f2:
7b:f1:13:03:26:2f:6d:98:06:26:be:09:c2:a0:37:23:8f:39:
ce:5a:8a:ed:75:81:a7:36:b2:b0:60:cb:33:1a:6b:d2:68:8a:
d0:cd:81:04:f9:66:6a:ec:27:3b:9c:3a:00:88:ee:20:94:a6:
ed:6b:b3:20:cb:b0:74:3d:b6:3d:c7:d1:dd:60:3d:d7:14:87:
36:71:2f:cf:d9:9e:0a:84:5c:15:a9:4b:74:06:cc:23:ec:58:
5d:e8:80:52:aa:48:0c:e0:32:f6:d7:ff:e3:e0:7d:2f:f3:ec:
a2:17:08:cf:85:e5:a7:7d:32:d4:6a:a8:fd:1f:59:3c:ff:eb:
95:d4:87:f8:c7:9d:c7:e5:74:ee:b3:8b:1c:89:45:28:bf:ae:
a4:f0:0d:c8:80:65:94:4a:b8:a9:01:e3:5d:8d:de:8f:9f:47:
96:10:9d:11:72:53:7a:6f:18:ed:c4:e5:ca:85:63:db:ab:a2:
81:e2:1d:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 22:42:19 2025 by rpki-client