Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft
File: PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft (raw, json)
Hash identifier: fdA3aVl1xiOmr8C8/emenNE8hmwqfTp5kMbJR3ZHcYo=
Subject key identifier: FA:C1:31:49:D6:2C:19:46:8C:2E:4E:0C:53:E0:AE:A7:70:EF:8A:35
Authority key identifier: 3E:C1:4C:C6:07:D1:F0:28:38:48:F9:A8:15:DB:E6:75:E2:33:9A:7E
Certificate issuer: /CN=3ec14cc607d1f0283848f9a815dbe675e2339a7e
Certificate serial: 0199FDD947AA52D1090F5DFFF2A398785618
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft
Manifest number: 15CD
Signing time: Sun 19 Oct 2025 19:01:39 +0000
Manifest this update: Sun 19 Oct 2025 19:01:39 +0000
Manifest next update: Mon 20 Oct 2025 19:01:39 +0000
Files and hashes: 1: PsFMxgfR8Cg4SPmoFdvmdeIzmn4.crl (hash: JuBmH83jPkiTZ5y0QYf7Ks2XpEW+770rNP+rQCwp7Qg=)
2: qGeya0gXk3lefb1rAtWCYxucLVU.roa (hash: ZiFD9y1WchAi6R0j+XTv/ZogMIEXrTeY8kphQnBKVUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:47:aa:52:d1:09:0f:5d:ff:f2:a3:98:78:56:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec14cc607d1f0283848f9a815dbe675e2339a7e
Validity
Not Before: Oct 19 19:01:39 2025 GMT
Not After : Oct 20 19:01:39 2025 GMT
Subject: CN=fac13149d62c19468c2e4e0c53e0aea770ef8a35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:3a:29:82:29:f3:76:4d:03:0e:b6:2a:98:1f:
59:e1:cf:a1:8f:6c:30:2f:98:7d:4e:18:34:30:a0:
19:56:96:70:c7:2d:10:2b:1a:9a:ca:61:bc:26:ef:
5d:9e:42:9b:20:56:0d:2c:91:13:5a:a4:14:b5:15:
40:fd:f7:d3:d7:e0:d2:97:35:59:23:aa:76:08:7b:
07:56:d3:9a:50:0f:aa:67:e8:cc:d7:cc:5c:82:64:
c8:9f:24:1d:09:f6:0a:55:c6:f2:4d:8d:5d:14:ab:
1c:5f:d5:1f:c9:b9:73:77:3e:ed:43:cc:f1:d8:dc:
df:e5:f6:2d:47:70:28:0f:09:ae:9e:d2:c4:6c:be:
c9:5b:81:d2:40:79:e7:2e:47:da:9a:d0:c8:85:4e:
2a:40:ce:62:b8:cd:81:3e:bd:5e:54:b5:d0:6b:06:
95:6f:98:b9:12:df:91:f0:d1:b9:a4:9f:47:3c:d6:
1b:1b:64:4e:84:3d:d3:ef:ae:ea:cd:e6:c1:e7:38:
0c:0f:d7:ac:ba:66:69:91:69:38:fe:5e:fb:86:93:
c4:7f:3d:2b:df:46:19:4c:46:cd:17:79:69:9f:52:
bb:56:d5:00:18:d7:96:2f:87:fd:d4:eb:b9:40:1d:
b7:ef:e8:0c:86:e3:e1:fe:7b:8e:5e:c0:98:70:16:
1c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:C1:31:49:D6:2C:19:46:8C:2E:4E:0C:53:E0:AE:A7:70:EF:8A:35
X509v3 Authority Key Identifier:
keyid:3E:C1:4C:C6:07:D1:F0:28:38:48:F9:A8:15:DB:E6:75:E2:33:9A:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:12:df:4d:cf:35:83:18:8f:2d:0f:d1:90:7a:21:f6:83:bb:
89:2d:30:5a:8f:30:18:43:64:46:9d:a1:b1:7b:d3:2e:0d:8c:
7c:cc:0e:b5:9d:40:fc:62:66:f5:25:0a:42:9a:0b:57:48:88:
04:07:40:d7:a5:05:63:54:6f:79:ac:28:c1:b1:c9:ab:9f:22:
c0:e1:d4:f5:7b:34:00:1a:db:d8:2f:8f:35:a6:71:38:78:33:
40:9b:b9:3c:59:fa:b7:94:14:ec:8d:d9:99:e3:4f:d2:f8:66:
a7:34:c7:f7:08:1d:f3:49:db:21:b1:b3:83:24:cf:e6:59:71:
0a:b0:8d:39:ee:ea:de:f1:58:a9:11:c0:c2:a8:27:9a:76:b3:
da:29:5a:a1:f6:c9:eb:37:6a:2d:0e:73:b1:e2:54:45:6a:fb:
05:50:dc:83:53:10:cb:ac:ed:89:c4:1d:75:36:e4:73:52:21:
80:07:8c:fd:6a:1e:1e:38:b6:70:f3:b1:d9:49:8b:6a:0e:e2:
11:b3:67:4f:cc:62:c7:c7:fc:54:3d:b8:3f:19:ef:28:eb:5c:
7b:c7:b4:b2:2b:c3:f8:d8:23:49:b6:bd:77:25:7e:59:63:13:
5c:ba:3e:de:54:8f:1f:cf:37:fb:dc:2e:2b:54:b7:3e:32:19:
b4:b6:c4:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:32:08 2025 by rpki-client