Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/66efb4-d2ec-40d6-9a3e-7990e87bbd5f/1/PSN1jftvHUPc1k0PCrJ-9xUTWVI.mft
File: PSN1jftvHUPc1k0PCrJ-9xUTWVI.mft (raw, json)
Hash identifier: J6V5ercWEZGJUTYkCzZ1k0QQLs3/pS7E5j6hfCSJQc0=
Subject key identifier: 0B:69:22:9A:01:58:21:66:6B:2E:8B:7D:64:05:C9:26:91:63:33:DB
Authority key identifier: 3D:23:75:8D:FB:6F:1D:43:DC:D6:4D:0F:0A:B2:7E:F7:15:13:59:52
Certificate issuer: /CN=3d23758dfb6f1d43dcd64d0f0ab27ef715135952
Certificate serial: 0197B7451BCFCFF0FDA15EF62ED0DE11A543
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PSN1jftvHUPc1k0PCrJ-9xUTWVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/66efb4-d2ec-40d6-9a3e-7990e87bbd5f/1/PSN1jftvHUPc1k0PCrJ-9xUTWVI.mft
Manifest number: 0495
Signing time: Sat 28 Jun 2025 16:00:48 +0000
Manifest this update: Sat 28 Jun 2025 16:00:48 +0000
Manifest next update: Sun 29 Jun 2025 16:00:48 +0000
Files and hashes: 1: PSN1jftvHUPc1k0PCrJ-9xUTWVI.crl (hash: NspzYJsf0Dc2nF8s0aJm2NWsy+zlA5sDXgWkFXOcgo8=)
2: cNQzFblAKvFr8hGK7lwE2E-QroQ.roa (hash: 6L0JpdKsg5wIV7DiGvLclmuCfLf4+RgtvQ0jAlVXODk=)
3: sq8t5TnYeFbLwzKDRurrhu8TSwI.roa (hash: BEQOlbgnZNiMmu4zSM6xloAN2ehefN/KrPp5K3vJnWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/66efb4-d2ec-40d6-9a3e-7990e87bbd5f/1/PSN1jftvHUPc1k0PCrJ-9xUTWVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/66efb4-d2ec-40d6-9a3e-7990e87bbd5f/1/PSN1jftvHUPc1k0PCrJ-9xUTWVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/PSN1jftvHUPc1k0PCrJ-9xUTWVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:1b:cf:cf:f0:fd:a1:5e:f6:2e:d0:de:11:a5:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d23758dfb6f1d43dcd64d0f0ab27ef715135952
Validity
Not Before: Jun 28 16:00:48 2025 GMT
Not After : Jun 29 16:00:48 2025 GMT
Subject: CN=0b69229a015821666b2e8b7d6405c926916333db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e1:da:ea:48:20:9f:e5:dc:a3:76:26:62:43:
0a:11:c7:82:44:ba:1d:ac:14:ce:e8:19:17:83:13:
32:ca:6b:de:06:2a:0e:31:95:85:22:fc:87:b0:d8:
c9:26:d3:b7:3d:e3:dc:c9:bf:07:b4:19:88:4b:b1:
42:26:1c:ca:af:83:e1:d3:99:41:46:2b:e0:4b:de:
5f:e6:98:0a:0c:91:28:32:da:0e:b6:ed:d6:ee:76:
10:c8:5e:39:77:20:fe:23:71:95:c9:01:49:9f:45:
f4:10:84:2e:00:3f:36:3e:a2:9b:da:e0:a1:df:2a:
67:65:d8:0a:14:18:a6:34:a9:12:dd:a6:3e:9d:56:
0b:e5:38:9d:a9:14:24:5b:1c:34:04:05:82:de:90:
3d:05:4c:dc:ce:97:d7:52:ca:5b:71:c9:e1:a6:a7:
1a:4f:10:c9:fd:1f:15:4a:88:92:b4:cb:d0:dc:b1:
2d:4e:1e:c0:0c:18:c7:d5:30:55:46:5a:e3:14:9a:
8e:02:e6:e6:80:72:fd:40:15:ff:c5:88:8d:f7:0e:
f5:b9:99:53:9c:e5:88:2d:71:72:09:4b:d6:35:29:
97:d0:ab:9c:09:51:21:89:3e:7d:e5:56:b4:af:79:
b5:67:05:05:68:5a:16:8e:ab:c1:60:aa:a2:40:30:
2c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:69:22:9A:01:58:21:66:6B:2E:8B:7D:64:05:C9:26:91:63:33:DB
X509v3 Authority Key Identifier:
keyid:3D:23:75:8D:FB:6F:1D:43:DC:D6:4D:0F:0A:B2:7E:F7:15:13:59:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PSN1jftvHUPc1k0PCrJ-9xUTWVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/66efb4-d2ec-40d6-9a3e-7990e87bbd5f/1/PSN1jftvHUPc1k0PCrJ-9xUTWVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/66efb4-d2ec-40d6-9a3e-7990e87bbd5f/1/PSN1jftvHUPc1k0PCrJ-9xUTWVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:cb:a7:c4:01:a2:24:b2:d5:31:b6:d5:05:bd:5f:ef:bd:47:
7f:4f:f4:6b:f4:5e:87:98:d2:b6:17:9c:9e:5d:e2:0c:20:76:
cf:7a:d4:fb:b7:43:3f:92:b0:4e:cc:80:27:79:5b:36:ce:e6:
f7:2f:39:b7:9a:96:3b:9f:6a:c1:90:dc:5d:2f:50:c3:08:b0:
3c:4b:4d:5f:32:9f:ca:aa:92:33:1a:09:26:2b:94:35:a3:62:
78:f3:fa:ed:ad:33:aa:06:da:e9:0b:0b:fe:8d:05:cd:42:8d:
53:bb:fc:c5:d1:8b:0f:9d:80:fd:c2:f7:e4:8c:71:4f:2e:e9:
ec:fb:61:75:35:00:76:5e:6c:e7:cf:5f:c0:0b:e7:26:94:55:
9b:8e:59:8e:95:c6:23:96:43:52:41:87:96:6e:38:2b:d8:cf:
ed:af:cb:b4:f1:64:04:4a:17:9b:2c:ab:2b:58:90:4f:f1:c2:
a5:f4:bb:c5:64:90:65:99:8e:88:e0:f9:f7:85:94:0f:19:88:
fb:7f:c0:24:0a:27:16:d7:e3:ba:7c:2d:50:33:cf:a4:f5:dc:
69:26:0d:d9:ee:66:c4:ea:63:fa:4d:b4:43:76:b8:90:3e:5c:
c7:d6:24:34:bc:1d:58:c6:36:50:8d:2e:56:2f:08:6c:2b:b6:
f2:bd:50:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:26:58 2025 by rpki-client