Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft
File: PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft (raw, json)
Hash identifier: QQIHKM+SNunYXu2YFCXNQ1EHGf8erwhqEZ8587ydDCM=
Subject key identifier: EF:FB:CA:3C:C8:25:4B:E7:6E:CF:65:33:BE:09:04:32:44:CB:77:EA
Authority key identifier: 3E:C1:4C:C6:07:D1:F0:28:38:48:F9:A8:15:DB:E6:75:E2:33:9A:7E
Certificate issuer: /CN=3ec14cc607d1f0283848f9a815dbe675e2339a7e
Certificate serial: 0198D4A84530C2FABDA4F897F26307D77186
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft
Manifest number: 1533
Signing time: Sat 23 Aug 2025 02:00:54 +0000
Manifest this update: Sat 23 Aug 2025 02:00:54 +0000
Manifest next update: Sun 24 Aug 2025 02:00:54 +0000
Files and hashes: 1: PsFMxgfR8Cg4SPmoFdvmdeIzmn4.crl (hash: dnMk0OMYl/klBkF31i6LUnn+/e3W8cmTIpS1bAPKPtc=)
2: qGeya0gXk3lefb1rAtWCYxucLVU.roa (hash: ZiFD9y1WchAi6R0j+XTv/ZogMIEXrTeY8kphQnBKVUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:45:30:c2:fa:bd:a4:f8:97:f2:63:07:d7:71:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec14cc607d1f0283848f9a815dbe675e2339a7e
Validity
Not Before: Aug 23 02:00:54 2025 GMT
Not After : Aug 24 02:00:54 2025 GMT
Subject: CN=effbca3cc8254be76ecf6533be09043244cb77ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9a:28:03:cd:17:9b:ca:51:f2:01:33:c8:59:
9d:df:61:6b:e6:f2:ea:29:18:73:b7:b3:ba:c5:bc:
1a:ab:e8:e3:91:a1:fe:3b:9f:6e:64:30:bd:11:b1:
4f:fe:d5:91:35:aa:0c:dc:c9:de:25:42:2c:97:1c:
68:52:d0:23:cd:50:49:e3:94:e8:fa:c5:0f:2d:7a:
2a:3d:27:ca:51:2b:a5:c0:03:8a:7a:95:82:a0:8a:
e7:32:77:7a:19:bc:28:47:fa:4c:4a:6f:02:b7:c9:
de:9e:5c:ae:e2:2c:11:7c:20:dc:db:88:b3:4e:28:
d0:32:2e:89:31:06:ed:cd:18:35:0e:d7:46:5e:a6:
bc:ba:c9:f5:8d:e9:41:c6:09:fc:e1:31:49:13:cf:
6a:8d:ae:11:73:10:f3:f6:16:0e:80:8e:08:16:99:
57:07:ec:f7:28:e3:09:d5:fa:91:41:0b:d1:95:a5:
2f:dd:7d:21:19:f2:90:4e:72:e4:77:e7:c6:54:26:
99:1a:d6:4f:47:f9:3c:bc:b7:fc:8c:a7:19:3e:99:
fd:d3:62:94:ff:1f:fe:4b:e4:60:87:80:c1:d7:0b:
d6:65:ae:37:34:ce:d0:75:6e:9f:92:33:5c:68:20:
a0:97:27:84:08:6d:8b:3f:d7:c0:78:5c:25:19:e8:
42:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:FB:CA:3C:C8:25:4B:E7:6E:CF:65:33:BE:09:04:32:44:CB:77:EA
X509v3 Authority Key Identifier:
keyid:3E:C1:4C:C6:07:D1:F0:28:38:48:F9:A8:15:DB:E6:75:E2:33:9A:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:f1:c7:8c:2f:b0:34:39:01:4d:1b:33:90:24:01:78:6b:42:
30:08:62:4e:8b:0a:3d:32:24:44:fe:85:b4:a5:e7:dd:05:01:
00:c9:97:b3:fa:a4:a6:1a:bb:9f:92:d4:17:e5:cc:de:4a:82:
6d:62:31:53:75:ee:c3:f7:85:75:a4:a2:24:1a:0f:e4:66:ed:
98:d2:e4:23:40:c6:22:2c:9b:b4:58:f8:69:88:bd:17:21:4a:
9d:e6:c0:e9:ef:b1:3b:cb:45:ab:e7:c7:03:df:d2:2e:9c:bb:
2a:0a:92:8a:3d:27:e4:a3:fa:ce:47:a6:82:90:30:84:31:27:
a7:20:5b:15:fa:79:6a:63:45:68:fb:a5:eb:a1:7d:86:11:12:
41:66:35:0d:26:a0:20:7e:2c:4d:0f:bd:3d:3a:c2:09:1b:e7:
6a:77:3a:aa:90:b9:a2:34:65:55:7b:e1:14:2a:62:fb:a9:9e:
c9:e7:c6:fd:30:a2:5a:6e:47:04:7a:b4:3c:5c:16:25:11:77:
94:15:b7:2a:4e:62:ee:1b:49:ef:63:8a:e2:26:c4:e6:61:00:
70:48:73:92:63:ce:d3:29:6b:0e:b7:f2:7d:04:90:ca:a9:29:
0e:21:4c:df:e2:9e:80:c5:17:a2:d0:ea:43:17:79:c6:53:75:
4d:77:42:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:10:40 2025 by rpki-client