Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/PsjCDmXc0z_4pePDCmRZJcXJ-V8.mft
File: PsjCDmXc0z_4pePDCmRZJcXJ-V8.mft (raw, json)
Hash identifier: USX+zNqQKCzdMjWE6oweWVfxZG1JIknrwj/Fbud7bZQ=
Subject key identifier: 0D:22:4B:57:7C:C6:EE:FF:17:FF:91:98:A6:55:66:5B:D2:F0:BA:DB
Authority key identifier: 3E:C8:C2:0E:65:DC:D3:3F:F8:A5:E3:C3:0A:64:59:25:C5:C9:F9:5F
Certificate issuer: /CN=3ec8c20e65dcd33ff8a5e3c30a645925c5c9f95f
Certificate serial: 0198D705B4F33BD2CFED69B41327B1C7E6BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PsjCDmXc0z_4pePDCmRZJcXJ-V8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/PsjCDmXc0z_4pePDCmRZJcXJ-V8.mft
Manifest number: 164F
Signing time: Sat 23 Aug 2025 13:02:11 +0000
Manifest this update: Sat 23 Aug 2025 13:02:11 +0000
Manifest next update: Sun 24 Aug 2025 13:02:11 +0000
Files and hashes: 1: 2MDxMm-aOr9Av8UXOYCdSDY5SVw.roa (hash: e92Ni3UZiEOlX4qjyE83BJ38B3EV4PZWBH8ze8DKvoY=)
2: PsjCDmXc0z_4pePDCmRZJcXJ-V8.crl (hash: 3nXT9atI5EViYZ+zEwzrVyc50CQZI17n9Ur/Qbv8VzU=)
3: egtzvRVazNe8WeEfcIG06LemmN8.roa (hash: TsV2yb4uCxxRnC/+s7mjRUpuNbVIbnDgtBTH7E4+YyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/PsjCDmXc0z_4pePDCmRZJcXJ-V8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/PsjCDmXc0z_4pePDCmRZJcXJ-V8.mft
rsync://rpki.ripe.net/repository/DEFAULT/PsjCDmXc0z_4pePDCmRZJcXJ-V8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:b4:f3:3b:d2:cf:ed:69:b4:13:27:b1:c7:e6:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec8c20e65dcd33ff8a5e3c30a645925c5c9f95f
Validity
Not Before: Aug 23 13:02:11 2025 GMT
Not After : Aug 24 13:02:11 2025 GMT
Subject: CN=0d224b577cc6eeff17ff9198a655665bd2f0badb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:d4:f4:d3:05:60:40:6d:bb:f1:d5:9a:ae:a0:
9d:bf:9c:0d:1a:27:9f:96:86:3d:54:f1:85:1f:19:
a5:fa:37:2b:0d:45:81:1f:5c:07:f5:3c:5d:f3:18:
44:89:f2:8e:15:3f:17:a1:6b:0c:3d:96:7f:a9:e9:
17:d2:69:85:de:39:63:6b:4e:2d:fe:01:9a:5f:2a:
20:34:9b:2f:fc:64:59:80:7b:16:3d:10:9b:e0:0d:
5f:39:e1:c6:f0:96:bb:b0:10:81:55:72:41:41:fb:
3f:a2:38:43:87:f2:ed:8a:0b:92:bf:8f:89:84:4e:
eb:2f:e6:34:be:67:86:01:6f:e1:5a:07:5d:e2:61:
fd:74:a7:1a:7c:43:49:cb:fb:1d:14:84:4a:cc:db:
31:18:20:cd:36:18:0c:7d:a3:16:09:a5:ba:a7:4a:
fb:0c:05:7a:53:f9:9b:c3:ae:3a:f8:a5:b7:f8:fd:
ba:f9:9b:b9:62:b8:0a:a4:fd:50:25:f2:50:22:5c:
4a:7b:ab:72:24:23:1f:81:65:4e:b4:68:e6:fb:d5:
2d:8c:4d:6c:94:3c:ae:83:db:0b:a9:43:c6:75:2b:
3d:d2:e5:35:6f:89:96:62:6f:2a:94:38:1b:24:6e:
c2:76:eb:10:1d:8e:c1:58:3c:5f:c9:90:81:47:5b:
86:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:22:4B:57:7C:C6:EE:FF:17:FF:91:98:A6:55:66:5B:D2:F0:BA:DB
X509v3 Authority Key Identifier:
keyid:3E:C8:C2:0E:65:DC:D3:3F:F8:A5:E3:C3:0A:64:59:25:C5:C9:F9:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsjCDmXc0z_4pePDCmRZJcXJ-V8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/PsjCDmXc0z_4pePDCmRZJcXJ-V8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/PsjCDmXc0z_4pePDCmRZJcXJ-V8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:22:49:2e:03:97:64:19:8b:63:d1:5b:1c:ef:2b:7e:e0:7d:
cb:aa:d3:cb:33:c6:ff:3d:ae:db:fb:4a:40:64:b5:e8:6b:a4:
34:5e:3e:e1:4b:2d:4e:85:4c:bc:92:08:82:b6:8e:e7:96:6e:
05:25:bc:63:22:52:91:ff:5e:61:86:98:20:13:3c:da:3c:3f:
f0:08:a4:36:c8:93:c4:ef:28:f4:02:e0:70:c9:71:c9:c8:6e:
2b:23:c3:a4:e1:ca:1c:d4:4d:ca:72:91:03:13:67:ac:a2:71:
30:d4:f0:20:fd:7d:d7:cf:d5:bd:8c:37:13:2c:7e:a0:b2:04:
08:8c:d2:2c:76:f9:7a:ff:cc:b2:32:3e:3a:d6:66:3a:d9:f0:
1b:83:7c:4b:5e:6b:81:24:b7:5c:b1:f4:b0:b2:ba:37:a8:4c:
3b:f4:11:ae:cb:3b:8c:bf:1d:19:64:c2:37:4e:56:da:aa:48:
83:dc:02:e7:9b:b1:29:f5:36:9d:fc:32:02:7a:1a:f1:95:2f:
2e:be:8c:b1:a1:9b:31:64:e1:1f:23:e1:72:18:cf:73:33:8c:
ff:53:fc:08:ca:79:e7:e5:f7:36:c9:b0:53:8e:a5:c4:36:ad:
d6:39:c3:dc:33:08:b9:85:ea:72:c2:d1:7c:d4:dd:5b:18:98:
59:c4:93:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:48:31 2025 by rpki-client