Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft
File: Ps1TxmQkw_Npyojuevdq2yXhhFE.mft (raw, json)
Hash identifier: qqkWAr9xdU3X80DXIsCoXHG57vMayzIJZjPOEt/pdlE=
Subject key identifier: 94:55:84:49:46:84:7E:8D:56:58:87:20:77:71:E8:ED:C7:37:25:56
Authority key identifier: 3E:CD:53:C6:64:24:C3:F3:69:CA:88:EE:7A:F7:6A:DB:25:E1:84:51
Certificate issuer: /CN=3ecd53c66424c3f369ca88ee7af76adb25e18451
Certificate serial: 0199FCC64C1EBDFC766B5B9674078CBCEA80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ps1TxmQkw_Npyojuevdq2yXhhFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft
Manifest number: 10AA
Signing time: Sun 19 Oct 2025 14:01:17 +0000
Manifest this update: Sun 19 Oct 2025 14:01:17 +0000
Manifest next update: Mon 20 Oct 2025 14:01:17 +0000
Files and hashes: 1: NFHPImufF3uRqUgALoiOKsyNAWY.roa (hash: P38WvGerxAQEhXHw97XFuU4GA9ZzpqGUq811jnutzZs=)
2: Ps1TxmQkw_Npyojuevdq2yXhhFE.crl (hash: VsJrIvTprSMaOcuxfQH3XLlfg3kImNf6B8n6tUda+9s=)
3: mI6j4UadWN59Ry8sBr4KvB0K8Yc.roa (hash: OgHmwZEN5FVoA8wv5XCNl8ngdl4mQaBcOydLvBf7mUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ps1TxmQkw_Npyojuevdq2yXhhFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:4c:1e:bd:fc:76:6b:5b:96:74:07:8c:bc:ea:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ecd53c66424c3f369ca88ee7af76adb25e18451
Validity
Not Before: Oct 19 14:01:17 2025 GMT
Not After : Oct 20 14:01:17 2025 GMT
Subject: CN=9455844946847e8d565887207771e8edc7372556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:cd:ec:90:a9:d9:84:df:4c:9d:05:0a:24:a3:
f8:d0:b7:74:d7:9e:4b:57:35:f5:50:ba:70:f3:dd:
28:0e:80:d5:9b:c8:0d:c8:17:60:b6:04:a0:64:29:
e4:15:9f:49:f3:6f:92:19:c2:ad:35:c7:d3:fb:4e:
6c:25:1b:23:c8:5b:98:e8:25:38:12:2e:c7:32:03:
79:c6:5c:fd:ba:5b:30:d3:ec:7e:d5:bc:cf:d8:63:
dc:80:73:2f:58:90:6a:0c:62:49:c4:46:ac:0f:32:
3e:35:72:f7:5b:d6:26:13:5e:c8:93:43:13:3d:65:
97:3c:e8:b8:85:e4:f0:b7:d2:ef:33:c1:d5:bb:13:
8d:32:da:ba:73:20:fd:8c:49:7a:20:61:60:c8:7d:
15:60:e5:7b:49:20:ad:92:48:c8:d2:67:2b:b4:a7:
ea:f3:54:a3:cd:b8:80:47:24:ef:f6:fe:49:0b:de:
2e:a5:b2:68:3e:20:f4:95:98:89:94:82:58:a2:f6:
af:83:19:ca:8d:fd:4d:b4:10:9a:4b:6d:4c:2d:28:
82:ba:c9:b2:c3:65:66:13:8b:7d:85:de:6e:ed:f0:
0b:a6:fd:a2:d0:85:10:b9:34:d4:e0:bc:c3:a4:46:
12:8b:39:d2:f0:7b:7e:ca:db:1c:74:c0:e4:91:34:
b0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:55:84:49:46:84:7E:8D:56:58:87:20:77:71:E8:ED:C7:37:25:56
X509v3 Authority Key Identifier:
keyid:3E:CD:53:C6:64:24:C3:F3:69:CA:88:EE:7A:F7:6A:DB:25:E1:84:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ps1TxmQkw_Npyojuevdq2yXhhFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:ab:f0:23:0b:dc:18:51:a9:96:3a:51:8c:2c:33:e8:a4:af:
47:ea:95:23:c0:77:36:f2:4d:23:8c:7b:2c:b2:68:eb:cb:44:
69:87:1f:e0:0a:3b:40:37:fe:a0:9b:2f:69:f1:4d:9c:82:4f:
27:4b:f5:3f:0d:24:90:78:ee:7b:0a:4c:ec:40:47:5b:fe:f8:
a8:54:f3:a9:d3:1e:42:e6:c6:27:98:3f:a6:f7:91:55:25:7b:
eb:cd:b6:42:a9:7f:fc:12:46:bc:91:c0:ee:3c:97:47:bd:51:
64:37:25:34:03:c2:86:03:6c:0e:9f:a0:d6:1b:1c:1d:50:8b:
51:4a:80:cd:8c:7e:0a:84:1d:44:ab:b4:fa:a0:86:83:3c:49:
86:02:41:d6:02:62:19:1e:83:ab:98:48:95:60:8b:ef:9f:6a:
0d:ae:fe:c3:76:fd:45:14:bd:af:70:4c:48:2c:90:18:3a:d5:
89:99:87:b7:df:b7:36:0f:ff:d9:76:82:b6:df:76:66:2e:9b:
33:e2:2a:ca:fc:5d:ce:c7:99:36:6c:f0:75:36:95:c9:af:98:
28:b9:12:67:10:35:e2:5e:c3:0e:15:e0:7e:99:a1:0a:5f:78:
bf:0b:6a:62:cb:ce:a9:a4:cb:36:3b:93:e5:f1:5f:df:79:58:
c8:f5:ea:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:30:08 2025 by rpki-client