Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.mft
File: Psb9kdKkNl09wWch_t9pIXK7MHM.mft (raw, json)
Hash identifier: 5gtcBUFd12bVTov3yz9IQQgx5DUEYI6BKeOquEdWYrk=
Subject key identifier: 23:37:06:B4:90:D4:7C:78:86:9F:F4:0E:54:2C:8C:B3:59:35:3E:A8
Authority key identifier: 3E:C6:FD:91:D2:A4:36:5D:3D:C1:67:21:FE:DF:69:21:72:BB:30:73
Certificate issuer: /CN=3ec6fd91d2a4365d3dc16721fedf692172bb3073
Certificate serial: 0199FBEBC9E573FA4E87364D79C805BBDC04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Psb9kdKkNl09wWch_t9pIXK7MHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.mft
Manifest number: 1426
Signing time: Sun 19 Oct 2025 10:02:37 +0000
Manifest this update: Sun 19 Oct 2025 10:02:37 +0000
Manifest next update: Mon 20 Oct 2025 10:02:37 +0000
Files and hashes: 1: 0OYfvohoTXtpi59LO0J22cI1s3U.roa (hash: s7dK6PK+eP+XDZZ2HKEucZtuMEm89+4+6MLOTTKFjE0=)
2: Psb9kdKkNl09wWch_t9pIXK7MHM.crl (hash: UIdvk+bYpcP2QnEnrCtjbHnssAj4Strkz0bmHkq4hGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Psb9kdKkNl09wWch_t9pIXK7MHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:c9:e5:73:fa:4e:87:36:4d:79:c8:05:bb:dc:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec6fd91d2a4365d3dc16721fedf692172bb3073
Validity
Not Before: Oct 19 10:02:37 2025 GMT
Not After : Oct 20 10:02:37 2025 GMT
Subject: CN=233706b490d47c78869ff40e542c8cb359353ea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a8:21:93:48:75:4a:94:51:71:c7:21:81:3e:
a0:05:19:80:a4:d3:a8:00:b3:e9:1b:57:4b:7c:cd:
53:55:48:db:3f:a5:b9:bf:48:49:51:ef:f0:fd:1d:
0f:75:e7:d4:3c:be:08:a4:73:c4:fd:f0:22:9c:b5:
f0:2d:06:d0:86:28:91:c8:d5:1e:d2:82:8b:94:30:
a2:c0:64:88:06:6c:fa:18:9f:e6:87:53:f1:1b:68:
86:a5:b2:bf:02:1e:d9:4c:89:6c:6f:9b:40:72:10:
f0:3f:4c:df:26:6d:c2:47:37:d4:f2:41:98:d9:51:
fd:d2:3d:47:97:90:b5:04:30:a9:03:59:08:a7:9e:
2c:e0:49:41:65:d0:c7:c5:13:5d:a5:c7:f8:49:03:
89:04:9d:4c:f8:1d:40:44:14:bf:7f:3d:1b:6b:51:
9e:6c:0a:b6:87:67:14:be:0a:c3:9a:15:bf:42:03:
28:8a:db:c3:a2:c1:f7:2f:27:4e:f3:12:94:cd:7d:
6d:6f:96:e4:98:e8:dc:7e:c0:6d:76:f4:e7:19:93:
b9:79:37:5c:63:86:c5:33:d3:ca:08:c2:5d:ba:21:
bb:df:ad:35:d2:ea:d8:b8:ac:7f:c2:d8:aa:0c:60:
1c:d4:b9:53:55:93:a2:c8:55:32:9b:a6:3f:59:44:
73:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:37:06:B4:90:D4:7C:78:86:9F:F4:0E:54:2C:8C:B3:59:35:3E:A8
X509v3 Authority Key Identifier:
keyid:3E:C6:FD:91:D2:A4:36:5D:3D:C1:67:21:FE:DF:69:21:72:BB:30:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Psb9kdKkNl09wWch_t9pIXK7MHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:17:99:35:a2:51:b7:a6:1e:87:7b:aa:2e:b2:10:df:df:f5:
ab:a2:4b:36:07:e2:f8:76:ab:f6:a0:a9:ba:49:18:83:f3:a7:
44:fe:53:bd:12:84:21:78:c1:9c:df:6c:d1:81:88:6a:06:ce:
fe:2f:7e:ab:05:1c:cb:1f:b0:68:da:10:cf:75:9d:32:1e:96:
24:90:83:ad:3f:bd:b7:37:ba:90:67:35:5c:be:0e:a1:85:92:
47:cd:a8:cd:2e:94:66:3f:73:41:aa:5b:23:01:fa:26:7f:60:
42:cf:01:dc:e2:bd:f1:7f:e4:a8:84:ff:e0:00:e2:c7:55:72:
7d:8c:a1:31:54:60:f6:96:cd:6a:2c:79:de:7b:2e:2e:b0:35:
dd:15:69:e7:37:29:b9:b5:2c:37:f0:e8:1e:21:67:1c:9d:dd:
0e:15:ec:7a:ac:60:bf:d3:56:58:b5:ec:a2:e2:47:38:8c:74:
00:91:5d:2c:1d:08:de:46:26:e8:37:21:9f:ee:73:dd:fe:c1:
a9:17:6e:62:03:ee:16:85:3e:3b:c5:48:b7:0f:ce:1e:9b:85:
18:24:f6:1a:4e:4c:a3:93:7f:e5:6e:33:a7:41:d4:fe:f1:4f:
99:ae:95:c5:d1:44:5b:39:93:53:9d:cf:06:8d:f0:b1:11:97:
73:67:df:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:49:08 2025 by rpki-client