Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/PseNgibLWq_xXGdSWvK4q8t7X5I.mft
File: PseNgibLWq_xXGdSWvK4q8t7X5I.mft (raw, json)
Hash identifier: ce2kZnj1t9gAFANdIDukxq4N1xXSdpN8Oi3IK1nU7ag=
Subject key identifier: 98:28:E6:1D:36:7B:45:CB:50:8E:A2:AE:B2:31:9F:D2:05:AD:2D:2A
Authority key identifier: 3E:C7:8D:82:26:CB:5A:AF:F1:5C:67:52:5A:F2:B8:AB:CB:7B:5F:92
Certificate issuer: /CN=3ec78d8226cb5aaff15c67525af2b8abcb7b5f92
Certificate serial: 0197B6A1DD2C610D3B2DDEEEC6C10A81DCA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PseNgibLWq_xXGdSWvK4q8t7X5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/PseNgibLWq_xXGdSWvK4q8t7X5I.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 13:02:30 +0000
Manifest this update: Sat 28 Jun 2025 13:02:30 +0000
Manifest next update: Sun 29 Jun 2025 13:02:30 +0000
Files and hashes: 1: PseNgibLWq_xXGdSWvK4q8t7X5I.crl (hash: icJDQLIgSW+XMWrenC43enYmjPV/r3rhUeOgNzVHvz4=)
2: RGavrFD9QlH9mvEK00LE9vM0Ylo.roa (hash: in3DOj7fuK/tRP2Np73D85wEHXvdsqUOTjKtL4z+mG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/PseNgibLWq_xXGdSWvK4q8t7X5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/PseNgibLWq_xXGdSWvK4q8t7X5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PseNgibLWq_xXGdSWvK4q8t7X5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:dd:2c:61:0d:3b:2d:de:ee:c6:c1:0a:81:dc:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec78d8226cb5aaff15c67525af2b8abcb7b5f92
Validity
Not Before: Jun 28 13:02:30 2025 GMT
Not After : Jun 29 13:02:30 2025 GMT
Subject: CN=9828e61d367b45cb508ea2aeb2319fd205ad2d2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:bf:71:6d:81:5a:f9:15:0d:cc:dc:b7:55:21:
38:b0:4f:32:22:2b:db:e0:14:9b:ec:72:bc:26:0e:
39:72:b0:ed:1f:8d:42:a3:05:a8:60:58:ff:e4:5b:
64:f3:15:f5:e6:77:5e:8a:58:8d:29:e6:25:52:b7:
dc:64:5d:13:3f:ff:91:62:cd:19:0b:83:c1:2f:cb:
5d:cb:d7:0a:70:6a:b6:d4:23:53:a2:8e:bc:38:88:
f4:2a:63:96:98:59:ea:0a:ed:07:f1:93:a9:1e:e4:
72:57:b2:69:c2:c6:81:2f:7c:22:6a:76:03:d0:b1:
38:0d:7c:9c:45:ce:a3:c0:40:9e:76:57:50:55:44:
c3:b8:6b:09:b0:53:1f:f3:a5:a8:32:6a:e0:da:bc:
5c:e8:b8:0e:fe:45:66:12:bb:34:13:98:ea:2c:ff:
7d:5c:ce:c3:c3:2b:45:5a:d6:88:80:d4:6f:d0:91:
0d:5d:9c:a2:47:13:1a:2f:b7:81:bc:31:ad:c1:60:
09:0a:57:23:e0:79:08:e9:1f:87:58:b0:5d:a2:7a:
f5:e8:da:53:66:89:6a:85:ac:ee:95:0d:fc:3e:8a:
c7:48:2f:de:09:6c:00:b5:e7:67:25:fb:0a:80:39:
20:03:33:c3:b5:d6:3b:1f:6f:fb:87:7f:2f:4e:f1:
bf:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:28:E6:1D:36:7B:45:CB:50:8E:A2:AE:B2:31:9F:D2:05:AD:2D:2A
X509v3 Authority Key Identifier:
keyid:3E:C7:8D:82:26:CB:5A:AF:F1:5C:67:52:5A:F2:B8:AB:CB:7B:5F:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PseNgibLWq_xXGdSWvK4q8t7X5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/PseNgibLWq_xXGdSWvK4q8t7X5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/PseNgibLWq_xXGdSWvK4q8t7X5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:ac:c5:f3:db:b1:e1:73:08:ac:84:1d:5a:83:b0:22:bc:ac:
83:83:69:d5:b6:eb:c7:c6:4f:48:f4:21:93:2d:c3:3f:0a:f6:
8b:44:cd:1b:66:46:6a:5d:7f:c4:17:56:cd:c6:cc:e6:23:14:
b4:bd:10:5f:39:9d:c6:74:14:d0:a7:d8:19:07:53:62:18:1f:
e4:68:b4:d1:0b:f9:98:63:96:da:56:5b:62:38:cc:be:f0:a9:
38:84:a6:08:fb:78:3f:c6:a6:1d:a6:16:13:9a:52:aa:85:0e:
fe:7f:98:06:93:a4:49:26:92:1c:3b:2f:29:6f:3a:cd:6f:75:
19:3f:d3:27:7b:9a:dc:2b:f7:55:94:ab:f7:8b:2f:16:e1:7b:
d5:98:18:95:6f:9c:b9:a7:cb:12:f0:5d:89:6a:4e:79:4b:6c:
6d:a2:1a:fc:5a:52:1d:14:ba:3f:88:ed:eb:5f:e5:d5:05:67:
ea:16:ab:a5:eb:36:de:04:e7:0a:58:32:9f:eb:13:57:92:1b:
3a:5b:3b:b1:1b:5b:75:55:b9:49:7c:0b:09:88:64:24:4f:8e:
b1:da:26:26:38:ef:27:dc:87:61:e4:64:71:1f:6a:a0:57:45:
21:77:06:e3:31:9f:b3:1f:ef:d6:55:6a:01:85:9f:54:aa:c6:
d5:51:34:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:37:24 2025 by rpki-client