Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/3bfd0a-017f-481f-b676-bc36feeb90b3/1/PSGIrVl7WKqllwA_jwhDSWxsfJM.mft
File: PSGIrVl7WKqllwA_jwhDSWxsfJM.mft (raw, json)
Hash identifier: J8vOuvrwTl2FRIoGu6PNLSBLIosg2uMFN/dGaPU340k=
Subject key identifier: C9:8D:D9:FD:EA:EA:51:84:79:99:6F:BE:19:68:2B:94:EB:AA:F7:2B
Authority key identifier: 3D:21:88:AD:59:7B:58:AA:A5:97:00:3F:8F:08:43:49:6C:6C:7C:93
Certificate issuer: /CN=3d2188ad597b58aaa597003f8f0843496c6c7c93
Certificate serial: 0198D73B44FAF120D34203CB461B887A5B49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PSGIrVl7WKqllwA_jwhDSWxsfJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/3bfd0a-017f-481f-b676-bc36feeb90b3/1/PSGIrVl7WKqllwA_jwhDSWxsfJM.mft
Manifest number: 0F4D
Signing time: Sat 23 Aug 2025 14:00:42 +0000
Manifest this update: Sat 23 Aug 2025 14:00:42 +0000
Manifest next update: Sun 24 Aug 2025 14:00:42 +0000
Files and hashes: 1: K-fnSlqCnsMuB-NlWaWBJUmC4FM.roa (hash: j54MZjizcVLzs5xFTxfuwkhp1hDwpOUSaYB4Ws5FVDc=)
2: PSGIrVl7WKqllwA_jwhDSWxsfJM.crl (hash: /ImWYOE03wBoaE3nwj8zzNFgyybOp/qP33KcD0qE+5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/3bfd0a-017f-481f-b676-bc36feeb90b3/1/PSGIrVl7WKqllwA_jwhDSWxsfJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/3bfd0a-017f-481f-b676-bc36feeb90b3/1/PSGIrVl7WKqllwA_jwhDSWxsfJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PSGIrVl7WKqllwA_jwhDSWxsfJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:44:fa:f1:20:d3:42:03:cb:46:1b:88:7a:5b:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d2188ad597b58aaa597003f8f0843496c6c7c93
Validity
Not Before: Aug 23 14:00:42 2025 GMT
Not After : Aug 24 14:00:42 2025 GMT
Subject: CN=c98dd9fdeaea518479996fbe19682b94ebaaf72b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:14:df:c7:a6:5d:f7:a3:8d:71:0c:b4:6f:29:
0a:98:c5:a3:09:f2:5e:b4:58:f9:58:5f:ed:7f:d9:
40:cf:6e:e0:87:ce:65:95:b1:ad:5c:cd:ab:72:69:
50:b4:1a:aa:b5:b2:81:2a:65:7a:f0:94:00:59:cb:
98:0b:d7:24:24:5b:a8:6a:08:85:3e:6d:2e:2f:03:
28:d0:22:e9:59:07:c2:07:9d:d5:09:59:e8:99:97:
9e:de:19:5a:6c:40:18:56:ae:6e:3e:48:2d:b8:11:
d2:2e:5c:c1:94:b8:a8:78:f0:0b:f5:6a:dc:cb:ae:
f1:f8:5f:64:42:70:95:67:18:c8:58:4c:05:4f:6b:
b7:d8:f9:e7:b2:0c:5c:1e:3f:5f:e5:72:5f:28:3d:
3b:cb:5b:c4:1b:f8:17:c6:79:4a:ad:38:00:5f:ad:
81:eb:c5:af:c0:33:ba:51:0a:1b:8e:f8:2b:ba:21:
f7:63:98:a0:64:c5:e3:dc:0a:c8:11:b8:bd:ba:70:
29:77:d7:92:d1:be:3a:8e:07:ef:97:52:38:c0:b2:
ed:89:76:65:8d:e2:c6:7e:e5:3e:23:54:ba:6f:54:
bf:a7:ba:5c:83:b9:b8:f0:ea:93:b8:e5:b7:d9:4a:
50:d7:5d:31:9b:08:6d:0d:94:a1:46:f7:12:1d:d1:
4f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:8D:D9:FD:EA:EA:51:84:79:99:6F:BE:19:68:2B:94:EB:AA:F7:2B
X509v3 Authority Key Identifier:
keyid:3D:21:88:AD:59:7B:58:AA:A5:97:00:3F:8F:08:43:49:6C:6C:7C:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PSGIrVl7WKqllwA_jwhDSWxsfJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3bfd0a-017f-481f-b676-bc36feeb90b3/1/PSGIrVl7WKqllwA_jwhDSWxsfJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3bfd0a-017f-481f-b676-bc36feeb90b3/1/PSGIrVl7WKqllwA_jwhDSWxsfJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:9d:44:fa:42:6f:98:97:4f:a6:fb:14:1d:a0:5d:c8:e1:e6:
ea:1e:ec:f0:64:46:0b:8c:d6:0d:5e:ba:d8:3b:06:22:7e:0b:
16:17:6c:e0:17:b5:6f:c5:38:4f:cf:b2:f3:56:2e:63:e9:c4:
a4:c0:07:b5:c6:d4:b6:a7:6a:4a:e3:fe:03:b7:60:99:c8:ee:
26:4d:cd:86:08:fa:71:d5:65:51:c8:d1:cb:31:09:70:c7:7c:
d4:8a:97:98:3c:83:27:2d:f2:b0:78:77:41:87:21:96:7a:28:
53:75:40:cc:a1:37:52:fb:bf:b9:1f:20:aa:ad:b4:78:f5:32:
66:25:62:41:09:bd:3f:ac:41:32:13:a0:e3:2a:ec:e3:60:97:
1d:4a:96:6f:8f:43:2d:11:88:f1:a3:23:fb:ca:ae:00:01:dc:
4e:07:75:93:85:bd:26:74:da:e4:2c:6b:a0:df:ec:be:26:8e:
c2:a5:1d:5b:f2:f0:e1:f9:b6:db:bb:07:5b:57:da:6d:3b:bc:
be:57:6a:75:8b:0e:0b:28:a4:49:7a:4b:b1:a3:41:55:bb:04:
8b:90:c6:1e:b9:85:d2:e6:40:89:9e:10:bd:e3:b9:6f:ea:89:
a2:8b:a9:3c:d2:30:5d:40:37:9b:c3:b8:13:9e:3d:0c:5b:7f:
19:3c:43:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:21:21 2025 by rpki-client