Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/66efb4-d2ec-40d6-9a3e-7990e87bbd5f/1/PSN1jftvHUPc1k0PCrJ-9xUTWVI.mft
File: PSN1jftvHUPc1k0PCrJ-9xUTWVI.mft (raw, json)
Hash identifier: 3Vb1FPxTcI9tQaGeySPbsh7TzL5OMmexWHLiwrKiD84=
Subject key identifier: 23:59:98:AA:E2:82:6E:DA:1F:B7:E7:8F:10:0A:05:BD:F0:CF:65:6C
Authority key identifier: 3D:23:75:8D:FB:6F:1D:43:DC:D6:4D:0F:0A:B2:7E:F7:15:13:59:52
Certificate issuer: /CN=3d23758dfb6f1d43dcd64d0f0ab27ef715135952
Certificate serial: 0199FC8F16B0EBF25918F320B5059A41C643
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PSN1jftvHUPc1k0PCrJ-9xUTWVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/66efb4-d2ec-40d6-9a3e-7990e87bbd5f/1/PSN1jftvHUPc1k0PCrJ-9xUTWVI.mft
Manifest number: 05C2
Signing time: Sun 19 Oct 2025 13:00:59 +0000
Manifest this update: Sun 19 Oct 2025 13:00:59 +0000
Manifest next update: Mon 20 Oct 2025 13:00:59 +0000
Files and hashes: 1: PSN1jftvHUPc1k0PCrJ-9xUTWVI.crl (hash: xdVcCND2dpaHhdwp2sinbgrGKnk+YxyE/INtSbpFFwQ=)
2: cNQzFblAKvFr8hGK7lwE2E-QroQ.roa (hash: 6L0JpdKsg5wIV7DiGvLclmuCfLf4+RgtvQ0jAlVXODk=)
3: sq8t5TnYeFbLwzKDRurrhu8TSwI.roa (hash: BEQOlbgnZNiMmu4zSM6xloAN2ehefN/KrPp5K3vJnWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/66efb4-d2ec-40d6-9a3e-7990e87bbd5f/1/PSN1jftvHUPc1k0PCrJ-9xUTWVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/66efb4-d2ec-40d6-9a3e-7990e87bbd5f/1/PSN1jftvHUPc1k0PCrJ-9xUTWVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/PSN1jftvHUPc1k0PCrJ-9xUTWVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:16:b0:eb:f2:59:18:f3:20:b5:05:9a:41:c6:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d23758dfb6f1d43dcd64d0f0ab27ef715135952
Validity
Not Before: Oct 19 13:00:59 2025 GMT
Not After : Oct 20 13:00:59 2025 GMT
Subject: CN=235998aae2826eda1fb7e78f100a05bdf0cf656c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3d:f1:f4:3f:a0:91:59:97:8c:d7:d9:10:e0:
1e:64:c3:03:a5:cd:64:14:13:2c:70:e9:d4:b5:a7:
8f:ec:f0:8f:80:e1:12:03:5b:88:69:38:d4:e9:0f:
08:11:ac:df:83:6e:fc:cc:63:86:b0:9f:82:5f:a0:
35:22:69:74:1e:f4:08:e8:a9:4b:02:de:38:08:32:
6d:ed:64:96:cc:29:f7:c4:2d:40:b1:c3:5f:58:71:
38:ef:34:ea:53:db:cc:6c:1a:36:f4:2b:2e:10:29:
45:74:27:97:c1:e3:05:76:99:93:c7:dc:fe:c3:87:
d2:4f:b9:cf:8c:e4:96:a4:42:d5:0d:92:b8:62:88:
89:c9:eb:68:d0:f2:6a:ec:c2:61:ae:ea:f9:11:b1:
99:bd:41:a9:f3:e1:42:52:b8:e4:39:d5:1d:f2:cb:
a6:35:b6:e9:a1:85:be:49:7d:56:7e:b8:3e:60:51:
8f:e2:d6:51:d5:bb:5f:25:39:0f:36:91:91:a6:ea:
3a:51:3d:1f:a8:1d:3e:7d:e7:d6:0a:e9:4b:65:53:
4f:c3:f0:c9:9d:94:7a:c5:95:e8:cf:0b:97:10:17:
5d:30:cc:e0:a9:bf:29:ae:fe:5e:96:4d:40:80:22:
96:9c:21:9a:41:30:9d:b7:c3:0e:6f:30:05:de:a6:
fb:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:59:98:AA:E2:82:6E:DA:1F:B7:E7:8F:10:0A:05:BD:F0:CF:65:6C
X509v3 Authority Key Identifier:
keyid:3D:23:75:8D:FB:6F:1D:43:DC:D6:4D:0F:0A:B2:7E:F7:15:13:59:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PSN1jftvHUPc1k0PCrJ-9xUTWVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/66efb4-d2ec-40d6-9a3e-7990e87bbd5f/1/PSN1jftvHUPc1k0PCrJ-9xUTWVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/66efb4-d2ec-40d6-9a3e-7990e87bbd5f/1/PSN1jftvHUPc1k0PCrJ-9xUTWVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:af:ce:cf:74:e8:29:36:58:c5:3e:97:04:0e:e4:75:74:55:
01:b4:47:ee:fc:7a:48:15:c1:e7:13:c4:ad:2d:31:a0:79:89:
8c:a3:8a:13:78:9b:dc:8b:63:83:88:b0:2c:dd:4a:5e:57:b8:
fd:47:11:00:db:b6:1e:c8:7f:79:b0:19:d2:8c:d1:55:67:cf:
e6:0d:a7:6b:b0:2c:ef:df:71:0d:f6:6c:86:37:81:24:a4:8f:
fe:a8:d8:ec:29:b8:c0:dd:8e:51:f3:ff:03:3d:f5:b5:11:75:
b3:52:68:fc:dd:98:43:41:88:93:af:61:a1:c6:aa:4f:6e:91:
c4:b5:38:e9:75:75:16:2c:3c:58:73:ef:b5:09:9e:d5:1b:ca:
43:54:ff:16:86:61:85:da:b7:df:1a:53:c3:ac:11:ef:1f:25:
cb:67:9c:5b:de:06:ab:a4:76:da:a4:fe:e7:eb:0d:21:8f:24:
89:e4:c0:ff:7e:21:7f:de:0e:4c:b9:71:d8:d1:ff:51:cf:7a:
b4:5b:91:34:19:38:1b:b8:6e:a0:e9:dc:41:ca:dc:b2:9b:f9:
9b:c8:82:19:8e:2d:f8:94:95:5f:c6:c8:22:dc:68:e0:56:34:
ce:4c:76:fa:dd:af:95:42:cd:af:b3:5f:d0:86:48:5f:0f:91:
b3:b6:02:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8jxaw6/JZGPMgtQWaQcZDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkMjM3NThkZmI2ZjFkNDNkY2Q2NGQwZjBhYjI3ZWY3MTUx
MzU5NTIwHhcNMjUxMDE5MTMwMDU5WhcNMjUxMDIwMTMwMDU5WjAzMTEwLwYDVQQD
EygyMzU5OThhYWUyODI2ZWRhMWZiN2U3OGYxMDBhMDViZGYwY2Y2NTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxj3x9D+gkVmXjNfZEOAeZMMDpc1k
FBMscOnUtaeP7PCPgOESA1uIaTjU6Q8IEazfg278zGOGsJ+CX6A1Iml0HvQI6KlL
At44CDJt7WSWzCn3xC1AscNfWHE47zTqU9vMbBo29CsuEClFdCeXweMFdpmTx9z+
w4fST7nPjOSWpELVDZK4YoiJyeto0PJq7MJhrur5EbGZvUGp8+FCUrjkOdUd8sum
NbbpoYW+SX1Wfrg+YFGP4tZR1btfJTkPNpGRpuo6UT0fqB0+fefWCulLZVNPw/DJ
nZR6xZXozwuXEBddMMzgqb8prv5elk1AgCKWnCGaQTCdt8MObzAF3qb7hQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCNZmKrigm7aH7fnjxAKBb3wz2VsMB8GA1UdIwQY
MBaAFD0jdY37bx1D3NZNDwqyfvcVE1lSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFNOMWpmdHZIVVBjMWswUENySi05eFVUV1ZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC82NmVmYjQtZDJlYy00MGQ2LTlhM2Ut
Nzk5MGU4N2JiZDVmLzEvUFNOMWpmdHZIVVBjMWswUENySi05eFVUV1ZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC82NmVmYjQtZDJlYy00MGQ2LTlhM2UtNzk5MGU4N2JiZDVm
LzEvUFNOMWpmdHZIVVBjMWswUENySi05eFVUV1ZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADq/Oz3To
KTZYxT6XBA7kdXRVAbRH7vx6SBXB5xPErS0xoHmJjKOKE3ib3Itjg4iwLN1KXle4
/UcRANu2Hsh/ebAZ0ozRVWfP5g2na7As799xDfZshjeBJKSP/qjY7Cm4wN2OUfP/
Az31tRF1s1Jo/N2YQ0GIk69hocaqT26RxLU46XV1Fiw8WHPvtQme1RvKQ1T/FoZh
hdq33xpTw6wR7x8ly2ecW94Gq6R22qT+5+sNIY8kieTA/34hf94OTLlx2NH/Uc96
tFuRNBk4G7huoOncQcrcspv5m8iCGY4t+JSVX8bIItxo4FY0zkx2+t2vlULNr7Nf
0IZIXw+Rs7YCnA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 19:57:18 2025 by rpki-client