Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/PS60FH7nv8a6cvwDSUU0mPAA5YE.mft
File: PS60FH7nv8a6cvwDSUU0mPAA5YE.mft (raw, json)
Hash identifier: 9q3S6vQQCB1K2FSvUqTpGrpwkoqUyFrfYK4wgYIw9Qs=
Subject key identifier: 7F:D4:84:37:EB:21:E9:02:7A:F5:49:8F:97:84:0C:7B:0A:CE:07:9E
Authority key identifier: 3D:2E:B4:14:7E:E7:BF:C6:BA:72:FC:03:49:45:34:98:F0:00:E5:81
Certificate issuer: /CN=3d2eb4147ee7bfc6ba72fc0349453498f000e581
Certificate serial: 019A5074EBC14304711CA35A52953A0B7FDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PS60FH7nv8a6cvwDSUU0mPAA5YE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/PS60FH7nv8a6cvwDSUU0mPAA5YE.mft
Manifest number: 0401
Signing time: Tue 04 Nov 2025 20:00:31 +0000
Manifest this update: Tue 04 Nov 2025 20:00:31 +0000
Manifest next update: Wed 05 Nov 2025 20:00:31 +0000
Files and hashes: 1: PS60FH7nv8a6cvwDSUU0mPAA5YE.crl (hash: skV0lPcfqAEGFOOyKMH6ky2NAwAmGfhdvBbXjvMCRgo=)
2: rhHZBrR5DDkzkDSwq2N2DFoItdo.roa (hash: gfniJmHb/llxXTuf6zA06t/WamUafcFVdlCv/KyOq4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/PS60FH7nv8a6cvwDSUU0mPAA5YE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/PS60FH7nv8a6cvwDSUU0mPAA5YE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PS60FH7nv8a6cvwDSUU0mPAA5YE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:eb:c1:43:04:71:1c:a3:5a:52:95:3a:0b:7f:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d2eb4147ee7bfc6ba72fc0349453498f000e581
Validity
Not Before: Nov 4 20:00:31 2025 GMT
Not After : Nov 5 20:00:31 2025 GMT
Subject: CN=7fd48437eb21e9027af5498f97840c7b0ace079e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:59:11:0c:b7:8b:bf:cb:f2:45:91:93:10:14:
48:bf:e3:f5:81:d4:04:83:0c:19:a0:1e:12:dd:eb:
c8:45:44:a9:95:a6:da:7f:39:5d:ae:70:28:3a:c4:
2a:15:f7:3b:61:46:1f:50:27:fc:c9:6e:b0:de:ab:
59:29:a4:54:03:95:9b:f3:af:3a:87:ae:1a:2a:7b:
1c:b3:18:92:3e:01:f2:e4:9e:ba:80:dd:42:06:f9:
c2:b4:73:b5:d3:cc:c6:3b:d4:0d:5a:62:e8:c7:66:
ad:f5:29:81:59:88:50:27:38:86:67:38:49:a4:0f:
bc:7b:19:38:14:86:b9:35:b6:18:54:af:9a:b6:52:
a6:2a:39:82:0f:03:d5:78:59:b8:10:d6:f7:d1:66:
d6:a8:97:64:21:0a:f6:ea:ac:b5:f0:03:23:be:38:
72:b3:ba:6f:ec:50:a5:99:0c:c1:d1:f0:ca:90:34:
33:23:1e:fc:7c:ed:f8:50:ef:db:19:c3:67:9b:fd:
33:a2:7a:66:09:52:4e:bd:c0:de:36:fb:1b:88:96:
71:63:59:4a:9b:ce:03:88:22:86:59:04:7d:7e:c2:
8c:9b:e3:34:33:f2:72:79:c6:44:9e:95:00:43:7b:
c9:fc:b7:c0:83:41:6a:47:5c:7f:cf:c4:87:41:3c:
ad:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:D4:84:37:EB:21:E9:02:7A:F5:49:8F:97:84:0C:7B:0A:CE:07:9E
X509v3 Authority Key Identifier:
keyid:3D:2E:B4:14:7E:E7:BF:C6:BA:72:FC:03:49:45:34:98:F0:00:E5:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PS60FH7nv8a6cvwDSUU0mPAA5YE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/PS60FH7nv8a6cvwDSUU0mPAA5YE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/PS60FH7nv8a6cvwDSUU0mPAA5YE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:cf:8f:d3:66:28:f4:ec:ac:ad:57:88:40:b6:38:9e:c5:8c:
49:b6:fe:6c:51:57:d6:a4:6e:1e:c5:76:a6:a8:2d:f9:3c:c9:
33:20:37:5e:83:ad:82:be:4d:d2:70:93:32:60:98:17:7d:f0:
8d:d7:d0:fd:74:8e:e9:08:8b:32:e3:f7:c4:ef:bb:ed:ba:e2:
69:41:26:e2:9c:7b:f0:11:aa:10:4d:10:bf:a8:3b:b7:b1:5c:
3c:a9:6e:30:ef:32:ca:9c:e0:66:3c:45:15:4b:bf:a8:e1:6a:
5a:43:c5:24:80:4a:31:ba:d1:01:1f:31:8a:66:d0:2e:58:72:
1f:9f:69:73:bc:9e:33:80:b8:0f:66:6c:66:2c:35:1b:61:11:
75:04:57:f7:9c:cc:5b:88:08:2f:50:f7:ba:d5:a3:d8:57:0c:
60:bd:c5:cc:20:c9:25:27:6b:82:04:f5:64:0a:61:a5:c4:d0:
21:26:81:60:6b:ca:00:af:7a:df:cb:62:cc:b8:f3:a4:c2:e1:
4e:ef:7b:6a:0f:7b:95:8b:1e:68:e4:3e:c5:92:b7:92:90:70:
56:33:54:61:2f:72:29:e0:9c:eb:a4:aa:14:80:d9:4f:c3:09:
66:63:25:6b:28:cd:4b:b5:23:c0:ea:05:d0:ab:31:54:d8:35:
aa:75:c9:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:59:15 2025 by rpki-client