Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.mft
File: psb8p1JpxrAQpvpxCeQxXgagg9w.mft (raw, json)
Hash identifier: jwMmaAxKrcnTiQERN8YEEzHdwxeYkJYXrxjbOYsmDK8=
Subject key identifier: D2:C3:1D:E4:0C:89:DE:EB:38:87:BD:7F:B0:21:C4:3E:5E:91:F6:F0
Authority key identifier: A6:C6:FC:A7:52:69:C6:B0:10:A6:FA:71:09:E4:31:5E:06:A0:83:DC
Certificate issuer: /CN=a6c6fca75269c6b010a6fa7109e4315e06a083dc
Certificate serial: 0197C04912AA5D37A3B336732C46C606E7A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/psb8p1JpxrAQpvpxCeQxXgagg9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.mft
Manifest number: 15BD
Signing time: Mon 30 Jun 2025 10:01:43 +0000
Manifest this update: Mon 30 Jun 2025 10:01:43 +0000
Manifest next update: Tue 01 Jul 2025 10:01:43 +0000
Files and hashes: 1: okAV_h5VY2rYZdeinC81X0hRA2Y.roa (hash: Qv1PPO81VnI1ltfb9vhPQi4AdxGUBWm2X2BZUx+f7S0=)
2: psb8p1JpxrAQpvpxCeQxXgagg9w.crl (hash: Vd1p8GGdEAXmHPtivqtJTxApQCwMk1hY4GjmD1R8a7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/psb8p1JpxrAQpvpxCeQxXgagg9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 10:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:49:12:aa:5d:37:a3:b3:36:73:2c:46:c6:06:e7:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6c6fca75269c6b010a6fa7109e4315e06a083dc
Validity
Not Before: Jun 30 10:01:43 2025 GMT
Not After : Jul 1 10:01:43 2025 GMT
Subject: CN=d2c31de40c89deeb3887bd7fb021c43e5e91f6f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:79:03:66:24:4c:ee:b1:36:7a:2f:db:57:a1:
70:48:aa:d8:de:94:c3:21:0c:89:1f:d5:12:57:b2:
c9:22:1b:2f:ae:45:5e:df:56:f8:24:5f:5d:bf:ec:
d5:f3:1d:ff:55:9e:08:46:63:3a:93:06:fa:b2:0d:
00:c4:b8:c6:60:20:df:eb:4e:7c:18:f4:c6:cb:dc:
d8:0c:33:14:e2:be:86:6b:51:6f:60:33:eb:eb:ae:
ef:d1:3c:a7:bc:ac:26:af:9b:c3:62:80:e2:bb:f0:
bc:06:c3:a9:fc:b7:80:da:ad:82:68:6b:77:d8:bd:
07:a6:25:eb:ce:aa:a7:5b:9e:0a:67:8b:8b:44:1e:
e3:a4:98:76:bd:cd:4f:69:6d:80:0b:6d:47:9d:af:
35:9e:b4:d3:d7:d0:33:ec:b0:9a:d8:de:c6:43:2a:
ad:bf:10:62:d1:b0:e9:bb:0e:61:61:21:18:d4:85:
84:ba:c5:b3:b3:1e:c8:30:92:35:e1:bc:c8:ba:01:
59:a6:66:fd:f0:75:cd:1c:5c:00:da:5b:0c:ec:94:
42:f2:c0:80:c5:56:ca:77:50:64:0a:3e:11:4a:5b:
3b:65:c9:24:8a:21:84:4a:bf:e8:2f:03:80:56:f2:
5f:eb:2d:8d:b9:5c:4e:ae:ec:53:21:7f:9b:4f:5a:
4b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:C3:1D:E4:0C:89:DE:EB:38:87:BD:7F:B0:21:C4:3E:5E:91:F6:F0
X509v3 Authority Key Identifier:
keyid:A6:C6:FC:A7:52:69:C6:B0:10:A6:FA:71:09:E4:31:5E:06:A0:83:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/psb8p1JpxrAQpvpxCeQxXgagg9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/eab7ef-8cd6-4dfe-8f1e-86e29f05eb97/1/psb8p1JpxrAQpvpxCeQxXgagg9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:c8:e5:bb:22:d1:7b:6e:20:fd:e2:78:1e:f9:df:ba:c1:82:
7a:00:87:15:79:58:cf:47:a1:a1:64:92:eb:20:3f:ae:1a:3a:
8b:1c:b0:65:3a:75:01:63:38:3f:92:25:df:37:c8:f4:0f:79:
8a:30:94:37:cb:80:6a:3d:a0:1b:d7:4c:28:4c:36:d1:f2:68:
6e:ee:f3:c2:72:69:e6:59:f4:83:80:9d:5b:cb:a5:e7:1e:6f:
e5:27:0d:7f:31:f5:4b:e8:b3:e0:79:45:1e:22:f1:37:94:dd:
c0:4c:48:e6:e5:22:8e:65:af:8a:eb:ea:d4:9d:21:87:1b:ad:
46:07:98:f7:7a:ce:ed:94:c0:91:46:33:48:9b:d9:da:a5:c6:
1b:6c:20:15:37:ca:8c:39:4e:fa:55:97:ea:0c:13:78:ba:9c:
2e:9d:88:95:88:6e:03:0b:05:4f:9c:3f:06:a4:6d:e3:4d:56:
82:49:8d:55:fa:22:22:f1:8f:5e:0c:81:2a:ea:3f:a7:0b:45:
30:93:51:d8:a6:04:cd:cb:87:04:e8:fa:9d:39:84:45:f2:26:
f5:d0:50:c5:b0:5a:dc:14:f5:6d:f1:49:51:ac:0f:22:a5:66:
5e:8d:00:61:7e:e7:43:38:f5:47:aa:52:60:8f:50:c3:c9:3d:
f3:4e:f1:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 17:22:50 2025 by rpki-client