Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/PsjCDmXc0z_4pePDCmRZJcXJ-V8.mft
File: PsjCDmXc0z_4pePDCmRZJcXJ-V8.mft (raw, json)
Hash identifier: b/0qlIKfBV4LNcw9eXmrNvro5tavGwopvL5YLLj1+Xg=
Subject key identifier: 8C:C2:B9:F0:A5:B7:B2:A5:7F:2D:68:76:50:ED:DA:AB:CF:15:91:88
Authority key identifier: 3E:C8:C2:0E:65:DC:D3:3F:F8:A5:E3:C3:0A:64:59:25:C5:C9:F9:5F
Certificate issuer: /CN=3ec8c20e65dcd33ff8a5e3c30a645925c5c9f95f
Certificate serial: 0197B745A9B4D0F1063CD9ED9A28B78E6289
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PsjCDmXc0z_4pePDCmRZJcXJ-V8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/PsjCDmXc0z_4pePDCmRZJcXJ-V8.mft
Manifest number: 15BA
Signing time: Sat 28 Jun 2025 16:01:25 +0000
Manifest this update: Sat 28 Jun 2025 16:01:25 +0000
Manifest next update: Sun 29 Jun 2025 16:01:25 +0000
Files and hashes: 1: 2MDxMm-aOr9Av8UXOYCdSDY5SVw.roa (hash: e92Ni3UZiEOlX4qjyE83BJ38B3EV4PZWBH8ze8DKvoY=)
2: PsjCDmXc0z_4pePDCmRZJcXJ-V8.crl (hash: FTNK9Xx7sHbGfqf1bc7jEf/d5cQ4VnzccqevKEmSCy0=)
3: egtzvRVazNe8WeEfcIG06LemmN8.roa (hash: TsV2yb4uCxxRnC/+s7mjRUpuNbVIbnDgtBTH7E4+YyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/PsjCDmXc0z_4pePDCmRZJcXJ-V8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/PsjCDmXc0z_4pePDCmRZJcXJ-V8.mft
rsync://rpki.ripe.net/repository/DEFAULT/PsjCDmXc0z_4pePDCmRZJcXJ-V8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:a9:b4:d0:f1:06:3c:d9:ed:9a:28:b7:8e:62:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec8c20e65dcd33ff8a5e3c30a645925c5c9f95f
Validity
Not Before: Jun 28 16:01:25 2025 GMT
Not After : Jun 29 16:01:25 2025 GMT
Subject: CN=8cc2b9f0a5b7b2a57f2d687650eddaabcf159188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:14:7c:f0:f3:1a:23:bb:99:1b:89:25:30:3e:
4f:47:f1:ba:5a:83:6e:3d:ec:bd:31:6d:18:b2:b9:
55:47:f5:82:05:29:b3:24:4d:d9:6f:37:ea:66:51:
56:0d:eb:92:57:62:2d:dd:a2:d7:fa:f1:b9:a8:25:
60:93:bd:77:5b:af:87:cf:9b:0a:b7:96:74:64:c6:
ff:09:32:ad:db:f0:a0:93:97:6a:e2:fb:44:3d:b0:
d9:be:16:9a:7e:3c:01:98:03:18:87:50:cb:d2:02:
c2:8a:0b:7a:0d:78:ea:c4:08:5a:f6:36:9c:7b:60:
27:c3:3b:32:bc:f6:31:63:bd:ce:ad:07:fa:79:47:
df:89:e8:6c:9b:38:59:b1:d5:23:96:cc:21:84:70:
7e:c8:89:1e:06:f2:0b:60:ce:c9:d0:15:96:a9:c0:
bb:8d:c3:ef:eb:1e:b0:a8:30:a1:21:f8:04:f3:f4:
ea:0e:f6:96:e6:bc:d7:ac:99:57:4d:09:f2:ee:a6:
96:58:ac:0b:ce:89:99:c8:03:42:0f:85:1a:41:e4:
c0:87:d2:38:b9:62:b3:e0:93:aa:be:7c:78:ca:82:
ef:8b:79:93:5f:15:b6:28:55:43:49:f0:fa:5b:49:
62:9d:b5:63:3d:d4:a7:07:3d:26:c3:a2:73:05:2e:
ac:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:C2:B9:F0:A5:B7:B2:A5:7F:2D:68:76:50:ED:DA:AB:CF:15:91:88
X509v3 Authority Key Identifier:
keyid:3E:C8:C2:0E:65:DC:D3:3F:F8:A5:E3:C3:0A:64:59:25:C5:C9:F9:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsjCDmXc0z_4pePDCmRZJcXJ-V8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/PsjCDmXc0z_4pePDCmRZJcXJ-V8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/PsjCDmXc0z_4pePDCmRZJcXJ-V8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:5f:de:21:f1:d2:b4:e5:85:0d:7b:2d:56:3a:b6:ab:e8:1d:
ca:e6:28:da:69:66:94:49:78:ab:32:46:20:fa:c2:e7:b5:34:
d9:68:0e:83:ef:dc:e8:50:11:a9:2f:59:6a:ae:87:88:85:02:
6c:8c:6a:49:4f:7f:89:77:1f:0f:3a:fb:02:d8:c7:6c:a1:d3:
a9:3c:29:92:a5:bb:3f:3f:9f:af:46:cb:06:86:75:97:c8:ea:
dd:89:61:35:07:7e:32:97:d2:0b:84:53:37:07:6f:59:95:29:
e4:53:77:67:f0:b0:8f:82:74:4e:f8:93:f9:1b:be:bc:e4:9f:
20:46:41:78:02:cc:c5:00:55:b2:58:cb:ba:46:57:d4:6b:de:
2b:f2:6d:0a:0f:78:66:13:26:0a:35:c1:47:88:bf:62:39:6e:
0a:ab:d1:f0:dc:ef:04:47:3c:5e:6a:16:5b:af:e1:6e:22:76:
9b:85:7e:96:d7:77:41:09:5f:60:fd:c2:b4:31:bf:1f:1a:4d:
c7:5b:ef:bd:71:e4:c5:00:74:df:7d:7c:28:f6:4c:f3:66:a2:
dd:59:bc:a8:ab:a8:af:99:a5:a2:74:c3:9f:04:9e:7f:c0:08:
14:07:08:6e:d3:8b:8a:bc:54:8a:05:0a:a4:ae:93:9c:ed:5f:
a0:2f:db:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:30:05 2025 by rpki-client