Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.mft
File: Psb9kdKkNl09wWch_t9pIXK7MHM.mft (raw, json)
Hash identifier: N805+4hyJkM9EX6nbsAHgTuzkQ+IhUcxaSSv4HCEOqw=
Subject key identifier: 01:AB:14:21:DA:A9:BA:71:6B:A9:A2:AF:CE:32:E3:CB:45:1E:29:CB
Authority key identifier: 3E:C6:FD:91:D2:A4:36:5D:3D:C1:67:21:FE:DF:69:21:72:BB:30:73
Certificate issuer: /CN=3ec6fd91d2a4365d3dc16721fedf692172bb3073
Certificate serial: 0197B6A146E825F51FE3105AE6E0FEA32B23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Psb9kdKkNl09wWch_t9pIXK7MHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.mft
Manifest number: 12F9
Signing time: Sat 28 Jun 2025 13:01:51 +0000
Manifest this update: Sat 28 Jun 2025 13:01:51 +0000
Manifest next update: Sun 29 Jun 2025 13:01:51 +0000
Files and hashes: 1: 0OYfvohoTXtpi59LO0J22cI1s3U.roa (hash: s7dK6PK+eP+XDZZ2HKEucZtuMEm89+4+6MLOTTKFjE0=)
2: Psb9kdKkNl09wWch_t9pIXK7MHM.crl (hash: Uto0df+T4z/ddMlfztJDOUeHlggzeoB2UvS9wrONrR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Psb9kdKkNl09wWch_t9pIXK7MHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:46:e8:25:f5:1f:e3:10:5a:e6:e0:fe:a3:2b:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec6fd91d2a4365d3dc16721fedf692172bb3073
Validity
Not Before: Jun 28 13:01:51 2025 GMT
Not After : Jun 29 13:01:51 2025 GMT
Subject: CN=01ab1421daa9ba716ba9a2afce32e3cb451e29cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a5:b6:0b:77:a8:4f:82:bd:2c:13:99:7d:92:
48:d1:dd:1e:26:8a:82:b4:f1:97:3f:84:00:45:f0:
ce:97:ca:55:f4:b2:3c:b4:84:ea:c0:17:a4:a8:2b:
a4:fc:f7:9d:cc:c4:6e:43:82:c1:08:96:a2:d6:e7:
6f:9a:03:0f:16:90:8b:10:4d:79:d5:55:6c:94:81:
50:0e:5a:1a:b2:5d:3f:61:48:f3:6f:18:a9:cc:9f:
7a:38:51:42:6c:89:d7:d1:8e:6c:01:37:94:2d:e4:
c6:bb:68:52:82:26:24:ad:35:3f:a3:72:50:5c:2a:
9f:87:fb:8f:8e:05:b7:43:a5:57:de:f0:8d:06:d9:
8a:c7:40:1a:be:ce:e5:56:8e:93:ef:d3:4a:d1:dd:
7f:48:fd:c1:69:56:30:85:c6:c3:bd:4c:24:11:89:
55:41:4c:69:63:5a:10:33:40:3c:5b:19:b5:0e:93:
62:02:35:fb:2b:c7:e3:87:ac:c4:73:85:eb:e5:87:
8f:a6:8b:f7:32:2d:58:21:14:a6:96:d8:16:27:e8:
c2:52:50:34:0b:89:7a:a4:3c:5c:3b:a3:ba:af:d1:
f4:13:4d:1d:99:68:d3:fa:f8:8a:9a:5a:5f:b0:3d:
57:bd:ed:af:a8:76:43:00:54:25:10:f3:91:28:ed:
1e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:AB:14:21:DA:A9:BA:71:6B:A9:A2:AF:CE:32:E3:CB:45:1E:29:CB
X509v3 Authority Key Identifier:
keyid:3E:C6:FD:91:D2:A4:36:5D:3D:C1:67:21:FE:DF:69:21:72:BB:30:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Psb9kdKkNl09wWch_t9pIXK7MHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:d3:6a:69:1e:6a:93:7d:73:ac:90:1e:1b:97:05:15:d7:d9:
f1:1f:c2:24:44:a8:83:e3:8a:79:d3:b7:d7:5c:ab:ff:b0:cf:
10:61:c6:3e:12:74:f2:ef:fd:03:af:3d:ea:3f:7b:24:7c:f5:
5c:bf:07:dd:0f:89:e0:81:09:cc:5d:b1:80:4a:5c:a0:fd:27:
31:c7:69:e2:43:c3:83:24:6a:0f:34:ce:c5:cc:6a:22:d1:07:
d6:28:5c:fc:af:1f:75:9c:52:f9:a7:6c:c6:98:41:8d:5a:bf:
22:18:28:13:c5:2f:27:79:6f:ee:15:1b:5e:3e:fa:e8:2d:84:
aa:69:a5:fc:18:19:30:9f:14:5e:e5:3b:39:e8:df:b9:b3:f9:
b8:bf:a5:0b:a9:ad:07:6f:6f:00:01:0d:2d:8b:d9:a0:9f:21:
de:31:df:2e:4e:e6:ee:99:cd:65:55:b2:ee:6e:c1:ef:16:0f:
1d:83:f0:29:27:3c:05:cf:c3:9e:8b:40:88:0b:19:0a:cd:96:
85:78:43:67:89:d8:a4:1f:4d:6d:bc:ed:a6:1e:f1:f3:5b:f5:
01:d2:93:38:12:c5:0f:a0:b3:a2:a2:44:98:45:7d:fb:20:fd:
ec:42:dd:be:ce:5d:b8:a7:e3:a5:47:1f:2d:4c:13:50:46:bb:
65:90:48:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:49:49 2025 by rpki-client