Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.mft
File: PSOEt4Txl-oD2sL-2niV_Et0Byk.mft (raw, json)
Hash identifier: ScC4qKSu7CgfySX9SeDr//++YVHi4JetVtfNKrD/HcQ=
Subject key identifier: 8A:31:C2:F8:96:54:3D:A6:35:0C:61:EE:26:E8:6C:E9:A4:16:EA:BC
Authority key identifier: 3D:23:84:B7:84:F1:97:EA:03:DA:C2:FE:DA:78:95:FC:4B:74:07:29
Certificate issuer: /CN=3d2384b784f197ea03dac2feda7895fc4b740729
Certificate serial: 0197BA0F378CF8EAAB536932BDA0E3D2B81A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PSOEt4Txl-oD2sL-2niV_Et0Byk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.mft
Manifest number: 15BB
Signing time: Sun 29 Jun 2025 05:00:48 +0000
Manifest this update: Sun 29 Jun 2025 05:00:48 +0000
Manifest next update: Mon 30 Jun 2025 05:00:48 +0000
Files and hashes: 1: Iu-aA6mIgmV7NRaHZwfWxVQwunE.roa (hash: o5Wzr2WPXf+6jJuX+5+5esP5UlB6RWICl6cgQsSyWJw=)
2: PSOEt4Txl-oD2sL-2niV_Et0Byk.crl (hash: kvpoF7U8661PBKDdPnsCzvSeZIAGupqsxZ1lcThE91Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.mft
rsync://rpki.ripe.net/repository/DEFAULT/PSOEt4Txl-oD2sL-2niV_Et0Byk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:0f:37:8c:f8:ea:ab:53:69:32:bd:a0:e3:d2:b8:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d2384b784f197ea03dac2feda7895fc4b740729
Validity
Not Before: Jun 29 05:00:48 2025 GMT
Not After : Jun 30 05:00:48 2025 GMT
Subject: CN=8a31c2f896543da6350c61ee26e86ce9a416eabc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:89:40:09:94:d1:24:cf:28:46:21:87:4e:72:
cd:d8:44:f5:93:d6:c6:04:f2:46:4d:4c:c8:33:81:
63:7d:82:bb:64:66:05:a4:ea:3f:68:9e:e3:f7:66:
61:be:60:56:c4:87:49:c1:2b:da:d3:3b:83:99:31:
e7:b6:51:f9:4e:dc:76:83:9b:cc:1c:21:71:bc:01:
d8:75:80:b6:fe:80:e0:c6:05:2e:26:b5:1c:18:84:
cd:65:ee:84:1b:95:07:81:0c:ab:34:86:1e:16:cc:
26:23:e0:f6:67:1e:cb:ae:3b:2f:6c:74:7f:84:06:
de:af:a1:f1:9b:d5:4d:8a:3b:47:ae:5f:29:fd:6f:
ca:bb:5a:38:51:0c:c0:f6:eb:84:38:9a:43:42:40:
09:5c:e9:90:2d:57:c7:d8:7b:ad:0c:85:c0:27:51:
8e:fd:45:d2:0a:2f:80:a2:55:d0:8b:8e:21:00:15:
fc:68:3c:28:89:34:4e:50:67:5e:7e:2d:b1:5b:10:
c7:f7:53:b0:f9:24:d4:d8:13:b0:7b:95:b0:3a:23:
3a:58:32:5f:dd:51:01:39:55:c4:94:d5:be:7c:75:
77:70:03:58:3a:14:ff:c8:ed:a5:e6:5d:05:04:51:
16:f2:ce:9a:b2:84:25:f9:a5:d0:9a:13:ca:52:60:
ee:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:31:C2:F8:96:54:3D:A6:35:0C:61:EE:26:E8:6C:E9:A4:16:EA:BC
X509v3 Authority Key Identifier:
keyid:3D:23:84:B7:84:F1:97:EA:03:DA:C2:FE:DA:78:95:FC:4B:74:07:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PSOEt4Txl-oD2sL-2niV_Et0Byk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:c3:39:a0:b8:c6:79:40:ca:6d:e2:67:bb:ef:c0:cd:03:3a:
84:82:f7:71:41:76:4b:b5:b6:c7:f4:a2:21:36:6a:5f:33:4e:
f4:f7:9a:0e:21:03:82:57:8f:a5:56:28:bc:cc:2a:ae:2d:e7:
0c:b9:6c:65:51:56:c4:5f:1f:06:1f:ec:2f:04:70:60:a7:3c:
2f:d3:d9:ce:15:5e:fe:4f:35:6b:5c:50:00:80:f9:90:51:1e:
9e:ea:24:56:25:02:09:4d:42:b8:96:58:62:f3:cc:f7:da:75:
1e:9c:ff:1c:16:68:c2:cd:eb:d0:d8:60:5f:a4:9d:36:bc:67:
4c:ca:3d:69:64:b9:dd:bd:7f:3d:09:f5:ee:df:99:0b:42:fc:
43:77:00:b1:0e:cc:93:d1:c5:29:9b:8f:43:7f:24:cf:1e:25:
17:66:df:f3:e1:7a:2c:b9:ab:cf:cd:76:32:c2:1a:98:d0:b3:
b9:51:91:d5:54:d2:23:4a:6a:d0:4e:8d:8c:8e:7c:b5:a8:01:
2f:a9:9d:b6:e9:fd:6d:6d:a6:bc:06:e3:14:33:e7:18:68:f3:
dc:47:14:dd:10:5b:43:d4:6d:40:3c:19:1e:d4:96:58:91:71:
c7:13:a1:8f:7a:bb:74:2c:1f:93:79:0c:9f:11:28:5a:b7:7d:
c0:c9:87:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:35:28 2025 by rpki-client