Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft
File: Ps1TxmQkw_Npyojuevdq2yXhhFE.mft (raw, json)
Hash identifier: Hc5W+I8iVEptH162h8WnniQtp5FyksKbmdrru+qQ9Gg=
Subject key identifier: F8:48:AD:F5:D7:F7:7B:94:27:E4:9B:2C:E1:9F:95:75:66:FF:50:8F
Authority key identifier: 3E:CD:53:C6:64:24:C3:F3:69:CA:88:EE:7A:F7:6A:DB:25:E1:84:51
Certificate issuer: /CN=3ecd53c66424c3f369ca88ee7af76adb25e18451
Certificate serial: 0197B96B16BDD50AF4C81220C286F6A8E624
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ps1TxmQkw_Npyojuevdq2yXhhFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft
Manifest number: 0F7E
Signing time: Sun 29 Jun 2025 02:01:32 +0000
Manifest this update: Sun 29 Jun 2025 02:01:32 +0000
Manifest next update: Mon 30 Jun 2025 02:01:32 +0000
Files and hashes: 1: NFHPImufF3uRqUgALoiOKsyNAWY.roa (hash: P38WvGerxAQEhXHw97XFuU4GA9ZzpqGUq811jnutzZs=)
2: Ps1TxmQkw_Npyojuevdq2yXhhFE.crl (hash: nqf8mWgfDrmRntEMItpVk4nywSMs4ALCz3yGV9LO2gA=)
3: mI6j4UadWN59Ry8sBr4KvB0K8Yc.roa (hash: OgHmwZEN5FVoA8wv5XCNl8ngdl4mQaBcOydLvBf7mUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ps1TxmQkw_Npyojuevdq2yXhhFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:6b:16:bd:d5:0a:f4:c8:12:20:c2:86:f6:a8:e6:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ecd53c66424c3f369ca88ee7af76adb25e18451
Validity
Not Before: Jun 29 02:01:32 2025 GMT
Not After : Jun 30 02:01:32 2025 GMT
Subject: CN=f848adf5d7f77b9427e49b2ce19f957566ff508f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:dd:00:ce:8c:89:53:6b:bd:fa:e4:c7:ef:10:
0c:70:5e:d0:66:a8:6c:8f:e1:f5:8e:fd:0e:08:75:
83:e4:0e:54:e5:68:4d:21:eb:6e:e5:59:99:2a:42:
ba:e2:fd:d4:9c:af:30:6a:02:4b:70:fa:bd:1f:b6:
3e:67:e7:89:34:bb:69:97:75:96:d5:01:fe:77:83:
1b:96:6a:6e:d3:1c:43:e6:0e:90:5d:03:34:05:5b:
35:a5:52:d5:d5:1e:13:d4:cf:9b:bf:10:49:bd:15:
d3:5a:39:bc:15:80:e4:a2:ed:9e:c3:3e:3c:13:ea:
e1:dd:41:de:b2:e4:bc:e0:9a:89:f0:41:84:fa:43:
4f:75:d8:9a:84:56:55:94:51:14:f2:04:0f:c9:bc:
ad:eb:37:2a:cc:f3:48:a1:4f:55:d3:5f:e8:4c:69:
cf:cd:f0:5d:36:7f:4d:2e:4e:69:d2:02:b2:72:2f:
d1:45:27:b6:b7:c7:8b:59:c8:93:18:7d:7b:fb:eb:
66:2c:78:3c:49:89:ef:91:4c:51:b5:cf:9f:5a:e2:
aa:0b:85:94:0a:2a:28:66:cb:45:cc:58:0d:27:f3:
5d:03:15:07:61:63:bb:1a:a7:55:21:79:5c:72:01:
22:c0:32:3f:ca:35:5f:51:e3:77:8f:1b:a6:cb:f3:
af:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:48:AD:F5:D7:F7:7B:94:27:E4:9B:2C:E1:9F:95:75:66:FF:50:8F
X509v3 Authority Key Identifier:
keyid:3E:CD:53:C6:64:24:C3:F3:69:CA:88:EE:7A:F7:6A:DB:25:E1:84:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ps1TxmQkw_Npyojuevdq2yXhhFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:89:45:10:4b:37:65:16:83:86:52:6e:dd:99:bd:2f:1a:2d:
a1:5b:a5:2d:a6:32:4e:77:7e:1e:a7:10:c6:39:20:3f:5c:93:
8a:13:60:46:87:a4:81:55:e5:7b:ce:c7:67:74:69:22:99:ee:
3c:1e:ea:f4:15:8c:d3:55:cf:55:a2:95:60:2f:1c:ff:42:f7:
0b:f2:cb:a6:5c:cf:4a:9d:95:6d:a3:f6:ab:c8:37:d4:db:6f:
91:bf:ed:c0:3c:f8:e8:cb:fe:eb:4e:6e:88:0d:a0:be:47:1e:
03:3c:8c:a9:28:a2:1c:3c:21:f0:d6:4d:7b:18:2f:ca:f1:b4:
79:9d:62:4f:85:f3:93:63:c3:b7:62:4a:4c:96:a4:b2:22:d5:
e9:63:9d:e0:27:cc:7d:54:1a:72:f8:5f:da:6b:dd:38:27:34:
a1:6d:ef:a0:39:71:ab:99:9a:fc:52:b3:2c:64:ae:0c:7f:9b:
f4:5d:0c:5c:e3:87:6c:75:7d:60:36:78:70:a2:cd:cd:ac:46:
ab:c0:1d:b2:eb:90:6e:02:a9:d4:0f:25:ff:27:7f:2d:be:6b:
c7:8d:50:a7:14:fa:66:41:49:d4:46:86:96:80:47:e9:97:ff:
27:08:16:00:2b:4b:5f:48:7a:a2:6a:79:da:a3:d4:a7:76:be:
9d:63:20:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:29:49 2025 by rpki-client