Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/6ccab3-479b-4da8-ae98-2cb6e3fdf9cd/1/Psn7DRNVKq0E86qutY1N1OfPQPA.mft
File: Psn7DRNVKq0E86qutY1N1OfPQPA.mft (raw, json)
Hash identifier: T0uO4OMyzZckHSGE3IOIyjzqRTFBsZyDQide7mbcqEQ=
Subject key identifier: EB:6C:A6:5C:54:CF:75:45:02:6D:C9:81:96:F7:30:2D:0F:D9:B4:F0
Authority key identifier: 3E:C9:FB:0D:13:55:2A:AD:04:F3:AA:AE:B5:8D:4D:D4:E7:CF:40:F0
Certificate issuer: /CN=3ec9fb0d13552aad04f3aaaeb58d4dd4e7cf40f0
Certificate serial: 0197B6A1981EDCF9DB8B9C4A887B16814682
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Psn7DRNVKq0E86qutY1N1OfPQPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/6ccab3-479b-4da8-ae98-2cb6e3fdf9cd/1/Psn7DRNVKq0E86qutY1N1OfPQPA.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 13:02:12 +0000
Manifest this update: Sat 28 Jun 2025 13:02:12 +0000
Manifest next update: Sun 29 Jun 2025 13:02:12 +0000
Files and hashes: 1: Psn7DRNVKq0E86qutY1N1OfPQPA.crl (hash: GuVBWXfjO3IkZOcdB5Lza0K+dYq4gAKCwh4bJP+2Qfk=)
2: yUqCwPk0Ei-cViitt4Gqnb4KxdE.roa (hash: rJJZNa4cHpwDRyt4aQOGhddvG2b+c/8oiLA2xlie2pA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/6ccab3-479b-4da8-ae98-2cb6e3fdf9cd/1/Psn7DRNVKq0E86qutY1N1OfPQPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/6ccab3-479b-4da8-ae98-2cb6e3fdf9cd/1/Psn7DRNVKq0E86qutY1N1OfPQPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Psn7DRNVKq0E86qutY1N1OfPQPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:98:1e:dc:f9:db:8b:9c:4a:88:7b:16:81:46:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec9fb0d13552aad04f3aaaeb58d4dd4e7cf40f0
Validity
Not Before: Jun 28 13:02:12 2025 GMT
Not After : Jun 29 13:02:12 2025 GMT
Subject: CN=eb6ca65c54cf7545026dc98196f7302d0fd9b4f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b1:7f:6b:a7:69:3c:d5:0d:6d:35:87:13:f0:
d4:cc:7b:34:a9:5c:45:2e:58:a6:19:07:6a:f4:3d:
8b:56:07:fb:24:a2:e5:8f:74:b9:6d:37:c8:d6:76:
38:53:62:4d:1f:8e:65:4f:60:0c:34:7a:10:50:ba:
39:fb:f0:cc:15:ee:23:e3:ff:2a:c8:25:f1:49:62:
cf:7f:c8:1f:99:22:38:c0:5d:09:1f:26:77:ab:04:
92:e4:16:d2:76:f8:39:05:60:56:12:d1:87:b5:ba:
87:7a:72:80:2e:2b:e4:96:fd:63:33:8f:88:4d:5a:
19:aa:4e:8b:ab:50:15:07:92:64:d9:bc:48:95:88:
10:00:87:1c:86:76:18:70:9c:3b:e7:7a:47:f4:63:
2c:fd:ac:ca:7c:f8:26:57:43:6e:a2:cc:b0:56:6f:
b2:d1:74:99:47:15:16:46:a2:64:27:3f:cd:3a:55:
60:2d:09:b3:78:3f:e3:a2:3b:be:1b:e9:b4:5a:b2:
8a:c5:7d:bb:42:fd:af:31:81:f3:b2:22:b2:bc:29:
aa:83:83:f3:80:31:7e:86:6f:dc:09:fc:bd:80:22:
e5:b8:12:17:69:d7:99:c9:4c:db:a9:5d:e4:77:fa:
f0:80:fb:aa:66:2e:91:c3:84:83:95:c2:cf:2c:ab:
f0:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:6C:A6:5C:54:CF:75:45:02:6D:C9:81:96:F7:30:2D:0F:D9:B4:F0
X509v3 Authority Key Identifier:
keyid:3E:C9:FB:0D:13:55:2A:AD:04:F3:AA:AE:B5:8D:4D:D4:E7:CF:40:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Psn7DRNVKq0E86qutY1N1OfPQPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6ccab3-479b-4da8-ae98-2cb6e3fdf9cd/1/Psn7DRNVKq0E86qutY1N1OfPQPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6ccab3-479b-4da8-ae98-2cb6e3fdf9cd/1/Psn7DRNVKq0E86qutY1N1OfPQPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:e9:d7:9e:dc:b4:63:66:be:62:39:d3:0d:f1:d3:48:af:f2:
63:cf:d2:49:30:cb:0c:7b:98:5b:90:1a:00:68:cd:03:e5:e0:
6c:5f:73:7c:47:0b:4e:5f:da:ba:ac:7c:09:44:23:ef:44:b9:
d8:8b:9e:03:fc:c0:15:cc:be:8f:d3:18:94:87:a9:c1:b5:eb:
ed:d3:01:75:2d:2f:88:93:f3:4d:e4:01:5e:02:74:41:95:2d:
c5:f7:00:30:ad:ba:50:ba:c1:cf:8e:59:a5:70:4c:96:6c:cb:
33:ca:63:04:ed:4d:99:0b:4f:d0:76:f0:06:1d:36:fe:4b:96:
8b:6e:6a:86:4c:62:09:0b:04:58:d4:a7:0a:c9:17:d7:8b:ed:
10:33:8a:48:14:04:87:3b:67:a1:ac:2b:2f:4d:b8:04:50:f3:
94:5a:47:b6:b4:0d:a1:04:58:ad:37:65:e4:89:07:f9:34:28:
56:f3:46:b1:b6:6a:31:47:56:81:3c:9b:c2:b6:7d:ab:24:06:
6f:98:ff:c7:a4:8e:75:b9:82:12:cd:2b:e7:6d:4c:26:14:d3:
2d:57:76:12:16:0e:2a:06:b9:0d:57:cd:93:c7:62:12:03:82:
26:02:15:d5:48:6d:c1:51:c1:3f:1e:26:f8:48:ab:10:ec:ce:
c3:c7:5c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:48:18 2025 by rpki-client