Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.mft
File: Psb9kdKkNl09wWch_t9pIXK7MHM.mft (raw, json)
Hash identifier: crbBCmIhnYRf1hu8Ow92B31T9+3peoyZHXv3PlvlVDA=
Subject key identifier: A5:09:B0:58:97:19:84:EE:85:C5:2E:3C:98:5C:06:F5:6B:62:5A:AA
Authority key identifier: 3E:C6:FD:91:D2:A4:36:5D:3D:C1:67:21:FE:DF:69:21:72:BB:30:73
Certificate issuer: /CN=3ec6fd91d2a4365d3dc16721fedf692172bb3073
Certificate serial: 0198D47458F39326DF1847100A7B35138ACF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Psb9kdKkNl09wWch_t9pIXK7MHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.mft
Manifest number: 138D
Signing time: Sat 23 Aug 2025 01:04:11 +0000
Manifest this update: Sat 23 Aug 2025 01:04:11 +0000
Manifest next update: Sun 24 Aug 2025 01:04:11 +0000
Files and hashes: 1: 0OYfvohoTXtpi59LO0J22cI1s3U.roa (hash: s7dK6PK+eP+XDZZ2HKEucZtuMEm89+4+6MLOTTKFjE0=)
2: Psb9kdKkNl09wWch_t9pIXK7MHM.crl (hash: +iaVIwi0MfFjXOQTKiezKyTrMpC5UXmiyaE0ifD+Ufo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Psb9kdKkNl09wWch_t9pIXK7MHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:04:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:58:f3:93:26:df:18:47:10:0a:7b:35:13:8a:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec6fd91d2a4365d3dc16721fedf692172bb3073
Validity
Not Before: Aug 23 01:04:11 2025 GMT
Not After : Aug 24 01:04:11 2025 GMT
Subject: CN=a509b058971984ee85c52e3c985c06f56b625aaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:1f:2e:2b:36:33:fe:bc:09:da:1c:f2:7b:97:
30:de:81:3b:73:97:b1:c7:03:59:c6:76:34:9c:bd:
66:13:92:7a:3e:2a:34:62:8c:88:36:6d:d3:87:04:
8c:65:43:82:64:b1:6d:6e:8a:d1:cd:58:71:ac:f6:
61:84:5c:5f:ad:fb:5c:1a:d9:33:76:bc:08:cf:46:
ec:bd:c6:c6:60:ef:ef:8e:98:ee:0a:51:f6:2d:a2:
8f:3d:ae:8b:3f:f6:d6:25:4b:d4:66:1c:31:c7:68:
4a:d1:c4:34:d2:22:2c:f7:57:4d:1b:ba:cf:5f:52:
03:f1:d7:df:76:f9:e2:36:e8:7b:63:c6:e4:d7:67:
cb:81:74:ba:f7:b8:10:ff:35:55:00:41:66:b3:32:
5e:97:18:fd:22:94:30:fc:20:6a:01:de:91:3a:3f:
43:f9:31:19:ff:48:de:32:03:a6:41:41:fb:b6:bf:
13:8a:14:b0:59:8e:a4:13:fa:fe:2c:e7:a2:83:73:
55:99:27:8a:c0:40:3f:ce:11:8b:26:5c:52:37:1d:
6f:6c:74:95:a6:57:8f:92:91:66:77:af:b2:2b:27:
a2:ce:cc:47:35:5b:db:c1:8a:ab:a5:86:40:30:50:
d0:53:44:d4:32:c2:24:6b:28:60:a5:61:e0:f5:af:
71:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:09:B0:58:97:19:84:EE:85:C5:2E:3C:98:5C:06:F5:6B:62:5A:AA
X509v3 Authority Key Identifier:
keyid:3E:C6:FD:91:D2:A4:36:5D:3D:C1:67:21:FE:DF:69:21:72:BB:30:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Psb9kdKkNl09wWch_t9pIXK7MHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:81:1d:ff:d1:e4:2f:23:a0:49:8c:8e:82:bc:e8:81:da:ca:
43:95:09:77:b8:35:bc:fd:15:ea:ac:90:ba:81:8e:4b:6e:0a:
b0:6c:c2:a5:36:6a:ba:d3:65:05:e8:3f:df:a0:57:bb:e9:d7:
06:08:29:27:15:9b:43:5d:1a:b6:ac:35:3e:7c:0d:7d:65:5a:
7a:25:ca:a1:4a:94:9c:05:4e:76:fe:a9:8b:18:04:51:7a:2c:
32:ec:1a:69:c5:5a:5a:c9:9c:5b:9c:93:ba:15:70:cb:87:b0:
de:27:d5:bd:36:8a:d2:ea:de:05:25:d9:43:d0:02:d3:69:7c:
ae:47:1e:f6:8a:78:8e:6e:ab:03:62:e1:47:93:92:ee:62:92:
90:79:4e:a4:fc:1d:99:76:c5:0c:66:d9:10:b3:e3:6f:c6:56:
6b:77:2e:ae:5b:df:db:72:f9:7f:d6:e4:e9:6a:10:f3:db:bd:
64:23:fa:fe:35:4e:4a:28:d3:7a:0d:a7:21:c1:23:8c:13:b6:
a3:3c:d0:54:ca:35:8a:1f:15:42:66:26:34:5f:94:69:33:b3:
96:9f:7b:40:ce:d9:83:40:e0:5b:9d:15:d9:eb:bb:74:a0:0a:
10:f7:c9:12:57:e7:b7:e6:fb:1c:98:1f:22:18:65:57:b7:3a:
87:47:23:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:41 2025 by rpki-client