Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft
File: Ps1TxmQkw_Npyojuevdq2yXhhFE.mft (raw, json)
Hash identifier: j59gEQvrzjDTIVgIg31DHgH5AawKYSaMQnumRDu0Z7Y=
Subject key identifier: FC:6F:FB:D6:16:F9:BB:80:A2:E0:46:D4:91:52:D1:3C:FA:B6:39:36
Authority key identifier: 3E:CD:53:C6:64:24:C3:F3:69:CA:88:EE:7A:F7:6A:DB:25:E1:84:51
Certificate issuer: /CN=3ecd53c66424c3f369ca88ee7af76adb25e18451
Certificate serial: 019853E90F5496BF0EA045926666055E7D20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ps1TxmQkw_Npyojuevdq2yXhhFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft
Manifest number: 0FCE
Signing time: Tue 29 Jul 2025 02:00:39 +0000
Manifest this update: Tue 29 Jul 2025 02:00:39 +0000
Manifest next update: Wed 30 Jul 2025 02:00:39 +0000
Files and hashes: 1: NFHPImufF3uRqUgALoiOKsyNAWY.roa (hash: P38WvGerxAQEhXHw97XFuU4GA9ZzpqGUq811jnutzZs=)
2: Ps1TxmQkw_Npyojuevdq2yXhhFE.crl (hash: bDwY9BRQSdS0gjmH11dFg5WUlofGlc1ddlYPqG6GpqM=)
3: mI6j4UadWN59Ry8sBr4KvB0K8Yc.roa (hash: OgHmwZEN5FVoA8wv5XCNl8ngdl4mQaBcOydLvBf7mUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ps1TxmQkw_Npyojuevdq2yXhhFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:e9:0f:54:96:bf:0e:a0:45:92:66:66:05:5e:7d:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ecd53c66424c3f369ca88ee7af76adb25e18451
Validity
Not Before: Jul 29 02:00:39 2025 GMT
Not After : Jul 30 02:00:39 2025 GMT
Subject: CN=fc6ffbd616f9bb80a2e046d49152d13cfab63936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:23:f8:4a:4d:40:06:c0:0f:66:4e:89:5b:e7:
a6:cf:c0:64:9a:bd:1f:51:19:41:f7:02:6c:96:84:
a5:15:29:df:f8:c5:c0:80:6f:b5:09:58:91:6a:e6:
fd:fd:9b:96:25:ab:6c:6c:98:18:c6:a5:0a:10:06:
c4:ca:26:16:ac:40:a8:36:8f:1a:e0:0d:79:4c:a6:
66:46:7e:3e:4f:f8:79:95:af:7e:f5:ce:89:e4:6e:
64:5d:96:dc:69:df:38:8b:74:4f:5d:b1:ec:02:9b:
75:26:0e:f6:39:42:1f:0b:0b:2d:4c:0f:d5:e9:2b:
d3:d7:16:7c:d7:b3:fe:8b:a0:96:44:55:d0:60:ce:
33:7f:6c:7c:ba:72:a8:ec:0d:47:0e:a8:8e:70:43:
0a:13:db:57:47:e1:91:fe:20:b3:6c:0e:db:d6:01:
2e:42:20:e2:0e:8b:74:78:fe:09:d7:51:5b:04:71:
d7:0a:74:ac:6a:b7:ff:e2:b3:b6:f0:fa:49:e4:84:
cf:71:95:5b:a8:59:a0:4d:4d:96:aa:18:82:a2:06:
4d:28:21:16:f6:65:54:fd:79:d5:0c:29:6e:91:7c:
a2:b2:2f:13:28:c8:a8:0f:66:a2:ca:e0:0a:b4:40:
82:8d:5e:16:5c:ed:6a:bf:01:41:85:5a:2f:20:cc:
eb:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:6F:FB:D6:16:F9:BB:80:A2:E0:46:D4:91:52:D1:3C:FA:B6:39:36
X509v3 Authority Key Identifier:
keyid:3E:CD:53:C6:64:24:C3:F3:69:CA:88:EE:7A:F7:6A:DB:25:E1:84:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ps1TxmQkw_Npyojuevdq2yXhhFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:5b:d7:5c:85:97:77:c4:05:2b:2e:41:8f:4b:db:11:f2:2e:
1b:01:1c:e7:df:b3:77:fe:e4:ce:4a:c5:1d:35:b0:f4:ea:61:
06:22:b8:2e:0e:7d:10:bc:a6:c3:3b:f6:05:4f:42:92:3f:57:
f0:0c:59:e6:9f:ec:67:1a:8d:0c:e9:a0:89:4d:78:49:23:60:
26:46:60:70:27:01:f6:37:9a:86:d5:80:d1:01:c8:35:63:85:
8c:0a:4b:d8:e3:ef:a8:be:12:db:14:19:cf:81:47:45:95:29:
c8:05:2a:91:2b:f9:ba:0e:65:b4:7a:81:13:22:ff:00:e2:3c:
07:b0:46:f8:35:b8:1a:79:e5:5c:b1:77:ff:d3:d2:de:82:01:
55:61:fd:c2:e2:4c:0f:c8:0e:f9:89:d9:32:45:1e:91:5f:e2:
52:d0:3f:30:b4:ee:69:11:4d:89:c5:9d:28:75:db:8a:df:27:
d9:a2:a4:d0:1f:c2:7f:ee:17:11:65:b9:f1:a7:2f:3b:ce:33:
49:f5:a9:ed:d9:67:36:ca:96:5f:4f:c1:e5:02:73:9d:71:7c:
3e:9d:cd:88:41:6a:4e:04:28:87:03:2d:d6:07:b8:e7:d3:4a:
e9:88:81:c8:53:57:50:0d:4d:aa:5a:c7:d1:90:39:a3:ef:db:
28:e6:3d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:38:38 2025 by rpki-client