Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/PsjCDmXc0z_4pePDCmRZJcXJ-V8.mft
File: PsjCDmXc0z_4pePDCmRZJcXJ-V8.mft (raw, json)
Hash identifier: 5xEhxWSoi0I63WXVri4x6W72S6b79/EIWkXNEE5nIN4=
Subject key identifier: 53:D7:D3:BA:D1:7F:BE:59:09:CD:D8:99:2B:77:9B:94:09:F1:6D:2E
Authority key identifier: 3E:C8:C2:0E:65:DC:D3:3F:F8:A5:E3:C3:0A:64:59:25:C5:C9:F9:5F
Certificate issuer: /CN=3ec8c20e65dcd33ff8a5e3c30a645925c5c9f95f
Certificate serial: 0199FC8F2D0086F565D1B14C0B2B7F199DBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PsjCDmXc0z_4pePDCmRZJcXJ-V8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/PsjCDmXc0z_4pePDCmRZJcXJ-V8.mft
Manifest number: 16E7
Signing time: Sun 19 Oct 2025 13:01:05 +0000
Manifest this update: Sun 19 Oct 2025 13:01:05 +0000
Manifest next update: Mon 20 Oct 2025 13:01:05 +0000
Files and hashes: 1: 2MDxMm-aOr9Av8UXOYCdSDY5SVw.roa (hash: e92Ni3UZiEOlX4qjyE83BJ38B3EV4PZWBH8ze8DKvoY=)
2: PsjCDmXc0z_4pePDCmRZJcXJ-V8.crl (hash: cken/ODj9oEkMfdOFDNec7rapBEjbz0J4ME/UrhaovQ=)
3: egtzvRVazNe8WeEfcIG06LemmN8.roa (hash: TsV2yb4uCxxRnC/+s7mjRUpuNbVIbnDgtBTH7E4+YyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/PsjCDmXc0z_4pePDCmRZJcXJ-V8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/PsjCDmXc0z_4pePDCmRZJcXJ-V8.mft
rsync://rpki.ripe.net/repository/DEFAULT/PsjCDmXc0z_4pePDCmRZJcXJ-V8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 13:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:2d:00:86:f5:65:d1:b1:4c:0b:2b:7f:19:9d:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec8c20e65dcd33ff8a5e3c30a645925c5c9f95f
Validity
Not Before: Oct 19 13:01:05 2025 GMT
Not After : Oct 20 13:01:05 2025 GMT
Subject: CN=53d7d3bad17fbe5909cdd8992b779b9409f16d2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f1:a2:29:3d:31:12:ab:85:df:41:e3:f6:14:
aa:e8:41:56:05:44:ab:ae:f2:ec:d6:c0:38:6d:46:
e1:89:a5:58:ed:24:10:00:16:4c:18:02:f2:e2:f5:
3c:fa:c0:39:88:38:d9:6e:72:70:27:2a:53:4b:da:
8c:a0:df:ed:88:0e:bc:0f:58:7a:5d:17:cc:f0:38:
68:fc:ac:0c:b5:81:66:03:7c:98:55:26:ae:53:25:
4f:57:15:cc:be:fe:b5:4e:22:f2:e7:bb:2d:b4:37:
b4:84:de:35:d2:06:90:7a:ad:e1:69:c6:df:c5:0d:
76:40:83:35:22:5d:c7:22:ae:32:ea:26:86:10:a8:
10:b1:c8:25:7a:7a:33:ac:8c:06:40:c6:70:e1:e7:
fa:16:51:4c:8c:47:c3:64:b3:09:7d:d5:0d:62:ff:
90:28:2c:b9:63:dc:b2:2f:31:0f:9f:63:96:33:4a:
bc:d5:4d:f6:1c:29:84:5c:1a:e5:80:86:9f:4f:ab:
25:82:13:8f:98:79:18:1c:ca:51:10:73:65:bc:e5:
66:2b:80:48:eb:58:f4:35:fd:d0:e2:6d:24:0b:01:
2c:f5:1c:ec:2b:ea:bc:50:f7:4b:b0:e1:4a:20:15:
86:21:8b:2f:07:e2:e0:f5:cf:51:7d:1c:27:07:3a:
92:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:D7:D3:BA:D1:7F:BE:59:09:CD:D8:99:2B:77:9B:94:09:F1:6D:2E
X509v3 Authority Key Identifier:
keyid:3E:C8:C2:0E:65:DC:D3:3F:F8:A5:E3:C3:0A:64:59:25:C5:C9:F9:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsjCDmXc0z_4pePDCmRZJcXJ-V8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/PsjCDmXc0z_4pePDCmRZJcXJ-V8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/PsjCDmXc0z_4pePDCmRZJcXJ-V8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:3b:88:8b:c6:46:9d:fa:10:e8:bf:29:ec:ed:e8:6a:b8:a5:
3f:8e:92:6f:61:78:49:03:59:15:f4:ca:50:25:c2:71:fc:f4:
03:c7:db:c2:cc:ff:8b:02:3f:64:b8:a8:8f:8c:31:4b:6e:87:
5c:a9:f5:80:60:d9:da:b6:ec:18:44:6e:d1:52:20:43:25:84:
2f:00:cb:87:5f:23:24:94:8d:4d:73:49:d5:cf:10:c0:e3:05:
a6:84:de:07:7b:1c:4d:43:28:aa:be:27:b5:0b:39:46:05:b3:
ad:4a:b5:fb:dc:60:c7:cd:1c:c1:76:f0:fd:8e:cd:fc:b6:66:
71:30:ef:6e:13:21:15:21:25:9c:22:ee:08:0f:90:a4:f7:3f:
fc:32:58:b5:c9:8c:41:a2:16:5d:77:03:33:92:26:35:be:6d:
4d:69:43:e7:c3:a9:8a:c7:c7:35:32:ec:e8:13:04:ed:2e:fa:
df:dd:d9:9c:1b:7d:a4:be:0c:ff:bc:c2:a8:bb:f2:38:42:ab:
11:ab:a0:9e:9f:28:96:6a:fc:9e:84:fa:26:fe:0d:4d:f8:06:
c0:90:57:21:51:e5:18:ba:f9:1f:19:72:c8:8a:c9:1d:a3:61:
f8:d8:be:a1:0c:9c:75:7a:5c:7d:b0:de:ad:94:51:ed:3c:bc:
8a:15:40:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:30:34 2025 by rpki-client