
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.mft
File: psb8p1JpxrAQpvpxCeQxXgagg9w.mft (raw, json)
Hash identifier: kMVdXg1PixMOS5EBtWXBvOBmJ5GmUdsYinCr9BrsIzw=
Subject key identifier: BF:38:24:11:DB:B9:F4:AE:53:48:A5:F1:24:FA:27:60:E9:24:D0:FD
Authority key identifier: A6:C6:FC:A7:52:69:C6:B0:10:A6:FA:71:09:E4:31:5E:06:A0:83:DC
Certificate issuer: /CN=a6c6fca75269c6b010a6fa7109e4315e06a083dc
Certificate serial: 0199FDD973E9EE249805C255E38B3797CCCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/psb8p1JpxrAQpvpxCeQxXgagg9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 19:01:50 +0000
Manifest this update: Sun 19 Oct 2025 19:01:50 +0000
Manifest next update: Mon 20 Oct 2025 19:01:50 +0000
Files and hashes: 1: okAV_h5VY2rYZdeinC81X0hRA2Y.roa (hash: Qv1PPO81VnI1ltfb9vhPQi4AdxGUBWm2X2BZUx+f7S0=)
2: psb8p1JpxrAQpvpxCeQxXgagg9w.crl (hash: GI9o+7VbrzaBbHyZ1jIbUeQJ0jOZ6xL0NzK/NYQDzzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/psb8p1JpxrAQpvpxCeQxXgagg9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:73:e9:ee:24:98:05:c2:55:e3:8b:37:97:cc:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6c6fca75269c6b010a6fa7109e4315e06a083dc
Validity
Not Before: Oct 19 19:01:50 2025 GMT
Not After : Oct 20 19:01:50 2025 GMT
Subject: CN=bf382411dbb9f4ae5348a5f124fa2760e924d0fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7a:47:c2:81:03:be:97:d7:41:96:5b:73:44:
3b:04:5b:0e:7f:bf:44:df:31:49:fd:98:ee:1f:43:
eb:2a:6a:df:b5:a7:95:46:92:4e:83:b3:10:f1:41:
57:43:13:45:73:5a:05:d6:26:96:36:b5:c6:67:23:
0c:19:b7:af:a2:6c:6e:ff:f0:0e:f7:92:f8:5e:58:
14:a0:07:95:14:8e:8d:3b:08:01:42:a1:5c:e6:c2:
7a:88:c7:c7:4d:3f:4d:32:a8:80:39:ca:67:61:04:
7d:59:cb:a4:f7:11:b9:bf:74:f8:66:4c:a9:9b:16:
1d:d6:41:44:09:47:9f:ef:97:de:d7:49:94:52:e6:
6b:0f:9d:be:26:58:52:23:7d:b6:68:cb:f9:e5:c2:
03:e7:18:24:64:01:0e:5d:86:0f:4b:3a:28:fa:2c:
3a:30:e1:a8:4e:b7:69:c7:00:51:43:be:55:b4:ff:
b3:2c:26:3c:44:25:07:15:a0:07:77:b8:ff:bf:a5:
1e:ac:c5:63:61:f1:24:df:b9:fb:88:b7:80:63:86:
10:5e:fb:f7:4b:38:b3:c0:0c:67:92:cd:1c:c5:7f:
b1:b7:7b:48:c6:20:a9:02:31:aa:34:98:16:97:40:
c8:ba:4f:6f:f3:37:1a:6d:8a:18:32:c0:ba:da:cb:
b8:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:38:24:11:DB:B9:F4:AE:53:48:A5:F1:24:FA:27:60:E9:24:D0:FD
X509v3 Authority Key Identifier:
keyid:A6:C6:FC:A7:52:69:C6:B0:10:A6:FA:71:09:E4:31:5E:06:A0:83:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/psb8p1JpxrAQpvpxCeQxXgagg9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:b7:eb:29:cd:c2:ed:a0:5a:a3:18:bd:64:6d:b3:70:d9:cb:
a4:e8:3d:57:8c:ef:c8:44:97:8d:17:2a:9b:ee:ef:be:ef:b5:
03:a2:a6:0b:44:09:e0:d3:eb:3a:dd:f7:38:db:35:b1:a5:32:
ef:0b:a7:0f:60:cd:a2:b5:d6:79:d8:56:1b:f7:11:89:13:2e:
7f:28:4f:e3:51:04:2b:d8:aa:a4:91:bf:a4:7f:e8:33:5a:ff:
5e:b6:ed:89:c5:59:21:21:81:94:f0:c5:1e:e1:fa:75:25:50:
4d:7f:20:d3:d5:9c:e4:3c:32:83:77:cc:20:fe:6b:e7:8d:5e:
3e:b6:89:c0:a3:f4:95:19:ac:7e:15:66:87:68:2a:57:ef:1b:
87:a2:7e:9b:a6:e7:6b:d6:47:12:6c:26:9e:81:b9:15:a6:5b:
c3:1a:dc:f2:35:c8:46:8a:42:a4:88:a6:0b:f0:7e:c1:ae:3e:
04:5f:83:c1:13:2c:bf:74:77:4e:e5:04:7f:6b:cf:20:b2:c5:
64:8e:7f:76:87:52:8c:57:2b:a8:46:ae:50:85:1d:91:1d:f6:
4e:3d:bc:eb:90:33:9a:ea:6b:7f:06:7b:33:e3:7e:27:c5:fb:
a0:24:36:a6:12:92:a9:73:39:1e:a7:15:06:1d:3f:27:c1:29:
e0:ec:2c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:14:06 2025 by rpki-client