Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.mft
File: Psb9kdKkNl09wWch_t9pIXK7MHM.mft (raw, json)
Hash identifier: EVPpaWFwgB3f1QgCoWXpqmTPWpsRTRMA8TNAcyDuJeQ=
Subject key identifier: 16:F4:84:59:DB:96:6D:51:6D:A6:9F:95:8E:52:EE:8E:54:F9:9D:1D
Authority key identifier: 3E:C6:FD:91:D2:A4:36:5D:3D:C1:67:21:FE:DF:69:21:72:BB:30:73
Certificate issuer: /CN=3ec6fd91d2a4365d3dc16721fedf692172bb3073
Certificate serial: 01984B550058577E3D29ABF87BB701A95F81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Psb9kdKkNl09wWch_t9pIXK7MHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.mft
Manifest number: 1346
Signing time: Sun 27 Jul 2025 10:01:58 +0000
Manifest this update: Sun 27 Jul 2025 10:01:58 +0000
Manifest next update: Mon 28 Jul 2025 10:01:58 +0000
Files and hashes: 1: 0OYfvohoTXtpi59LO0J22cI1s3U.roa (hash: s7dK6PK+eP+XDZZ2HKEucZtuMEm89+4+6MLOTTKFjE0=)
2: Psb9kdKkNl09wWch_t9pIXK7MHM.crl (hash: vK9u5woCfVrkD5P95ss6durSToSr6MRjF/FhKEo6jF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Psb9kdKkNl09wWch_t9pIXK7MHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:55:00:58:57:7e:3d:29:ab:f8:7b:b7:01:a9:5f:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec6fd91d2a4365d3dc16721fedf692172bb3073
Validity
Not Before: Jul 27 10:01:58 2025 GMT
Not After : Jul 28 10:01:58 2025 GMT
Subject: CN=16f48459db966d516da69f958e52ee8e54f99d1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:50:ad:3a:c8:1f:83:24:0c:2d:ca:f2:a4:3d:
87:eb:ec:34:8c:7b:ef:19:92:f0:87:59:79:a5:24:
d9:5f:86:59:2d:62:bd:ab:21:f5:66:75:a2:c2:5c:
6d:bb:d5:78:92:45:c9:d1:ed:19:3c:4d:15:d9:17:
96:42:2a:85:57:30:36:f4:f0:e2:bf:72:10:08:49:
f3:7e:09:73:e7:7d:af:e2:58:90:cb:f6:07:b6:57:
20:06:d3:09:7d:f3:7e:a9:88:a7:ac:16:28:b9:3a:
35:b1:e9:d5:4e:90:4b:9e:ac:c3:15:6f:38:34:bf:
8b:af:9e:cb:41:61:11:46:4b:36:fb:d3:b3:37:3a:
1c:85:4f:a1:3c:6b:a2:89:af:6f:0b:64:82:d6:2c:
79:4d:c1:12:78:d3:3b:e2:da:2e:96:48:61:20:1b:
cc:59:d3:db:84:c9:a9:bc:3b:68:bc:7e:2a:fc:a2:
f1:e5:d3:41:68:1d:7c:a3:6a:04:6c:5c:94:22:9d:
33:97:a1:86:ac:2f:ea:03:22:87:d1:fa:0a:df:f3:
fe:d3:d4:00:14:26:09:9b:83:4f:e5:6e:ec:2a:b7:
2d:f4:15:3c:ad:a4:61:94:fb:7b:63:72:6d:91:bf:
56:e1:84:92:0e:95:13:49:19:70:e4:20:d2:89:f4:
86:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:F4:84:59:DB:96:6D:51:6D:A6:9F:95:8E:52:EE:8E:54:F9:9D:1D
X509v3 Authority Key Identifier:
keyid:3E:C6:FD:91:D2:A4:36:5D:3D:C1:67:21:FE:DF:69:21:72:BB:30:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Psb9kdKkNl09wWch_t9pIXK7MHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:a2:30:be:00:e3:fd:ce:67:eb:aa:bf:14:1b:bd:12:41:a1:
f1:b1:51:6e:a4:c6:16:07:8f:bf:ab:63:9c:79:8b:ce:61:9a:
e1:b6:55:4a:11:24:57:2b:b9:d3:b3:06:99:02:35:3f:a9:f6:
ea:77:ce:29:61:be:91:a2:71:80:11:6d:69:a1:fa:b0:58:73:
c8:1f:0b:f2:9d:96:c8:79:a5:dd:16:af:7d:12:54:24:1d:9d:
a6:c6:b8:07:ae:6c:7a:8d:b6:a9:00:2a:06:29:9f:a8:67:4d:
1c:31:32:68:11:db:a2:c7:9e:b3:5c:6d:c0:98:5c:6d:f6:11:
cf:39:5c:ef:93:8d:17:ba:87:0f:8e:d6:6b:f5:38:f9:8d:70:
45:9b:c5:8c:a2:ac:85:90:54:5d:d5:71:ce:ac:69:63:10:57:
29:0c:e2:0c:9e:07:e7:88:a8:02:d0:0c:1a:62:5d:01:87:74:
c2:2e:e0:c3:69:36:01:b9:46:39:4d:9a:7f:34:b2:03:94:4f:
51:c7:99:54:66:73:8a:af:d8:06:35:50:df:b6:e9:31:13:dc:
d9:73:fe:8a:52:7d:58:84:a2:57:a0:6c:fe:29:19:ff:50:43:
82:cd:97:fb:6a:0e:84:4b:d7:5c:60:b0:75:d7:09:5f:9e:0f:
f1:91:e4:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhLVQBYV349Kav4e7cBqV+BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlYzZmZDkxZDJhNDM2NWQzZGMxNjcyMWZlZGY2OTIxNzJi
YjMwNzMwHhcNMjUwNzI3MTAwMTU4WhcNMjUwNzI4MTAwMTU4WjAzMTEwLwYDVQQD
EygxNmY0ODQ1OWRiOTY2ZDUxNmRhNjlmOTU4ZTUyZWU4ZTU0Zjk5ZDFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1CtOsgfgyQMLcrypD2H6+w0jHvv
GZLwh1l5pSTZX4ZZLWK9qyH1ZnWiwlxtu9V4kkXJ0e0ZPE0V2ReWQiqFVzA29PDi
v3IQCEnzfglz532v4liQy/YHtlcgBtMJffN+qYinrBYouTo1senVTpBLnqzDFW84
NL+Lr57LQWERRks2+9OzNzochU+hPGuiia9vC2SC1ix5TcESeNM74toulkhhIBvM
WdPbhMmpvDtovH4q/KLx5dNBaB18o2oEbFyUIp0zl6GGrC/qAyKH0foK3/P+09QA
FCYJm4NP5W7sKrct9BU8raRhlPt7Y3Jtkb9W4YSSDpUTSRlw5CDSifSG5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBb0hFnblm1RbaaflY5S7o5U+Z0dMB8GA1UdIwQY
MBaAFD7G/ZHSpDZdPcFnIf7faSFyuzBzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHNiOWtkS2tObDA5d1djaF90OXBJWEs3TUhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC80Y2RhNDctMzg0YS00MzU0LWJjYjQt
YmVmMzU2MDViY2Q0LzEvUHNiOWtkS2tObDA5d1djaF90OXBJWEs3TUhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC80Y2RhNDctMzg0YS00MzU0LWJjYjQtYmVmMzU2MDViY2Q0
LzEvUHNiOWtkS2tObDA5d1djaF90OXBJWEs3TUhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqKIwvgDj
/c5n66q/FBu9EkGh8bFRbqTGFgePv6tjnHmLzmGa4bZVShEkVyu507MGmQI1P6n2
6nfOKWG+kaJxgBFtaaH6sFhzyB8L8p2WyHml3RavfRJUJB2dpsa4B65seo22qQAq
BimfqGdNHDEyaBHbosees1xtwJhcbfYRzzlc75ONF7qHD47Wa/U4+Y1wRZvFjKKs
hZBUXdVxzqxpYxBXKQziDJ4H54ioAtAMGmJdAYd0wi7gw2k2AblGOU2afzSyA5RP
UceZVGZziq/YBjVQ37bpMRPc2XP+ilJ9WISiV6Bs/ikZ/1BDgs2X+2oOhEvXXGCw
ddcJX54P8ZHkUQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 11:58:58 2025 by rpki-client