Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.mft
File: PSOEt4Txl-oD2sL-2niV_Et0Byk.mft (raw, json)
Hash identifier: yMJOgkZ4SpGUsUpXwnZZmEliDpvmVCDypUXA9GapR1I=
Subject key identifier: D9:DE:AF:8B:39:EE:A6:FF:70:5D:71:CE:9B:23:71:DF:53:7A:AB:2A
Authority key identifier: 3D:23:84:B7:84:F1:97:EA:03:DA:C2:FE:DA:78:95:FC:4B:74:07:29
Certificate issuer: /CN=3d2384b784f197ea03dac2feda7895fc4b740729
Certificate serial: 0199FB7D060CD27F8B4A9A17FEA36B653F0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PSOEt4Txl-oD2sL-2niV_Et0Byk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 08:01:38 +0000
Manifest this update: Sun 19 Oct 2025 08:01:38 +0000
Manifest next update: Mon 20 Oct 2025 08:01:38 +0000
Files and hashes: 1: Iu-aA6mIgmV7NRaHZwfWxVQwunE.roa (hash: o5Wzr2WPXf+6jJuX+5+5esP5UlB6RWICl6cgQsSyWJw=)
2: PSOEt4Txl-oD2sL-2niV_Et0Byk.crl (hash: KRoqSfKncP/DvqgBajkrg15V5LjO7oOxFge7efq/Zds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.mft
rsync://rpki.ripe.net/repository/DEFAULT/PSOEt4Txl-oD2sL-2niV_Et0Byk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7d:06:0c:d2:7f:8b:4a:9a:17:fe:a3:6b:65:3f:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d2384b784f197ea03dac2feda7895fc4b740729
Validity
Not Before: Oct 19 08:01:38 2025 GMT
Not After : Oct 20 08:01:38 2025 GMT
Subject: CN=d9deaf8b39eea6ff705d71ce9b2371df537aab2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1b:19:ad:91:19:fa:37:e4:11:23:03:fb:2b:
2e:f4:fa:78:21:b0:24:e8:c0:f4:a3:ee:84:09:31:
ce:ae:6a:17:d4:a7:4a:c0:38:98:2d:c5:51:74:9d:
fd:31:21:6a:ae:37:16:a6:3f:aa:0c:ca:6c:3e:7d:
55:0a:52:3d:22:51:5f:5b:3a:95:80:af:ee:c9:84:
e1:4e:14:00:3a:17:d2:96:ca:b3:93:58:c5:63:c3:
11:c2:56:d4:6f:25:3c:f3:39:9a:c4:56:30:fc:a7:
5b:53:a0:c2:9c:a2:ec:85:0c:a4:4c:fb:e6:5f:d7:
90:5e:bf:fe:e0:b3:e1:08:67:f1:1d:84:f8:03:19:
1d:20:db:2c:3d:b2:a2:0c:d9:8b:ac:aa:3b:b6:5b:
d6:7e:de:c9:0f:47:eb:26:67:a7:d1:61:fd:db:b5:
e4:85:2c:de:6e:ff:bd:70:9c:a5:b2:c2:ec:2d:69:
2f:a6:6a:88:fa:8e:41:23:2d:d7:db:50:07:b1:9e:
46:ce:02:d7:f9:64:6b:5c:28:59:f4:64:47:be:61:
6a:2c:b9:b6:84:2d:0a:e8:a2:f5:00:37:99:ca:e9:
9f:e0:81:2d:97:a1:11:43:6a:30:96:db:72:4f:83:
57:57:95:34:3d:c3:ee:93:82:ff:0a:22:8d:a1:3b:
cc:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:DE:AF:8B:39:EE:A6:FF:70:5D:71:CE:9B:23:71:DF:53:7A:AB:2A
X509v3 Authority Key Identifier:
keyid:3D:23:84:B7:84:F1:97:EA:03:DA:C2:FE:DA:78:95:FC:4B:74:07:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PSOEt4Txl-oD2sL-2niV_Et0Byk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:53:c6:77:72:86:15:b4:98:ba:c7:44:b4:f3:42:2a:da:b7:
00:04:bf:37:ee:37:26:ad:6c:98:79:3b:e7:38:5d:ef:78:fa:
98:1b:25:1c:9f:ed:22:e5:59:f5:50:ab:c6:f1:4f:c1:4a:a4:
d9:f7:d1:f1:f9:0e:f0:b6:0e:73:de:27:71:8d:0a:69:2c:11:
3e:47:f2:53:6a:45:6b:49:b0:a0:2d:a8:34:85:c3:96:c4:0a:
78:3a:a0:45:4c:a5:0e:0c:37:48:d5:10:3c:77:c6:26:b1:62:
53:6f:66:15:2f:1b:b9:1e:62:fd:5a:0d:6a:4c:80:07:d6:0d:
5f:0f:f6:4b:73:ee:cf:9b:e8:c0:2c:11:91:7c:91:3b:cc:61:
3a:46:5e:96:89:f2:80:05:27:42:6b:83:d7:a2:2e:96:e1:25:
3d:5d:34:ce:aa:12:53:e2:38:3f:1b:db:55:40:bc:c5:04:b2:
70:09:3d:b2:10:f6:4c:84:95:67:3c:8e:e9:ec:6d:0e:54:28:
d3:0e:f1:c8:e9:e6:61:bb:e3:94:47:fc:ec:02:cf:73:64:f2:
ec:d0:e0:a1:d3:6a:e2:82:e2:24:2e:cb:23:79:a2:0f:df:fd:
a2:9a:85:52:e7:6f:fd:9b:53:63:fb:7f:b7:7f:99:ff:bf:12:
2d:8d:33:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:33:48 2025 by rpki-client