Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/PS60FH7nv8a6cvwDSUU0mPAA5YE.mft
File: PS60FH7nv8a6cvwDSUU0mPAA5YE.mft (raw, json)
Hash identifier: 9igXKYJ+zPoN+NTLQBr36tbONfwZaNq6EDcMgI5NAcc=
Subject key identifier: 5A:34:93:FD:95:0D:7A:9B:CD:95:ED:2D:22:A2:01:94:C0:33:A5:17
Authority key identifier: 3D:2E:B4:14:7E:E7:BF:C6:BA:72:FC:03:49:45:34:98:F0:00:E5:81
Certificate issuer: /CN=3d2eb4147ee7bfc6ba72fc0349453498f000e581
Certificate serial: 0197B632C363890DE375775DBD50819F74F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PS60FH7nv8a6cvwDSUU0mPAA5YE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/PS60FH7nv8a6cvwDSUU0mPAA5YE.mft
Manifest number: 02A8
Signing time: Sat 28 Jun 2025 11:01:09 +0000
Manifest this update: Sat 28 Jun 2025 11:01:09 +0000
Manifest next update: Sun 29 Jun 2025 11:01:09 +0000
Files and hashes: 1: PS60FH7nv8a6cvwDSUU0mPAA5YE.crl (hash: tJ1wPAJbnjUTZs4VHMbDYusPMj6DJAO981R4nbvt7Y4=)
2: rhHZBrR5DDkzkDSwq2N2DFoItdo.roa (hash: gfniJmHb/llxXTuf6zA06t/WamUafcFVdlCv/KyOq4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/PS60FH7nv8a6cvwDSUU0mPAA5YE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/PS60FH7nv8a6cvwDSUU0mPAA5YE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PS60FH7nv8a6cvwDSUU0mPAA5YE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 11:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:c3:63:89:0d:e3:75:77:5d:bd:50:81:9f:74:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d2eb4147ee7bfc6ba72fc0349453498f000e581
Validity
Not Before: Jun 28 11:01:09 2025 GMT
Not After : Jun 29 11:01:09 2025 GMT
Subject: CN=5a3493fd950d7a9bcd95ed2d22a20194c033a517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fa:a3:48:19:f0:6e:94:f1:77:15:3b:49:d7:
51:de:e1:d0:9c:07:db:69:57:11:35:7c:61:62:0b:
0d:8d:9d:9b:eb:e6:a0:2e:2a:5f:eb:9b:ad:9c:a5:
a2:32:1f:fb:24:18:ec:50:6e:22:8d:1b:91:9e:86:
1b:74:16:91:d4:6d:5b:68:88:84:22:39:76:59:68:
3f:01:9f:2e:aa:d7:c7:3d:36:91:bd:31:8b:bd:3e:
89:fb:14:e7:23:7e:f1:21:30:30:7e:8c:c5:ba:07:
6b:c5:7b:fb:d0:7d:c1:42:62:34:ff:24:70:3f:34:
4d:90:40:6e:9c:3a:75:68:57:a0:23:ca:f8:6c:ed:
18:1b:c6:68:66:65:d2:84:91:5a:4b:b2:2f:3f:7b:
74:50:e5:fc:27:20:be:34:f7:03:00:8c:59:1c:e5:
f1:4f:e9:68:45:db:c7:8c:f7:68:0f:5c:47:8a:2b:
01:79:10:5f:3e:ac:91:ce:d1:72:a9:88:3b:48:da:
ae:ad:22:5c:e8:97:ec:92:fb:16:e9:a5:a5:bd:89:
39:8c:4d:1a:67:a8:6d:64:7a:9f:8d:17:5b:66:78:
b2:fc:00:3e:e1:67:e0:9f:d6:a7:54:50:19:0b:ef:
e0:b2:a4:09:b7:ed:29:2e:96:5c:3c:ec:90:ee:07:
43:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:34:93:FD:95:0D:7A:9B:CD:95:ED:2D:22:A2:01:94:C0:33:A5:17
X509v3 Authority Key Identifier:
keyid:3D:2E:B4:14:7E:E7:BF:C6:BA:72:FC:03:49:45:34:98:F0:00:E5:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PS60FH7nv8a6cvwDSUU0mPAA5YE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/PS60FH7nv8a6cvwDSUU0mPAA5YE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/PS60FH7nv8a6cvwDSUU0mPAA5YE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:5c:ff:3c:90:01:2f:2f:7b:7f:12:95:36:0f:55:41:25:f0:
68:9f:5e:e9:64:b0:28:e9:7e:c4:00:41:96:bd:f2:4f:0c:b0:
00:e2:09:d8:70:ca:54:f0:a5:a1:25:e0:8b:b5:e7:af:c9:25:
04:c8:41:9e:8d:da:02:e8:7d:0e:61:c6:50:2a:66:22:68:a3:
34:3b:66:6a:a5:a4:a7:a5:1d:23:7b:db:36:12:08:e5:0e:84:
91:bd:41:a7:67:6c:0b:1c:2b:a2:d6:de:a5:02:dc:80:be:de:
d4:d9:27:e4:61:21:0b:7e:f4:90:fa:25:04:36:f5:cf:d9:48:
36:91:82:3e:90:26:70:44:c9:7d:71:7f:a2:76:45:e3:d5:7d:
68:58:4b:16:ec:8a:35:36:a7:cb:54:64:f2:c4:86:90:33:0b:
f8:a0:f1:62:d2:26:e2:e8:9d:66:bf:13:57:96:2e:1f:b9:d8:
22:35:3f:81:b3:e7:cc:58:83:df:4b:84:db:58:ef:91:95:e0:
7b:e6:7e:37:84:c9:3a:0a:63:0e:f8:c2:8d:61:a3:ea:b8:11:
ac:e5:22:6e:ef:6c:5d:9c:5a:73:b6:9a:f2:50:78:1c:9d:3e:
20:e3:e7:52:2a:e9:8f:09:a9:a3:a9:75:66:d1:ea:e4:dc:f5:
86:0b:c5:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:19:21 2025 by rpki-client