Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.mft
File: PsfSv8P6eOcQChuJNZBa_3pJa8k.mft (raw, json)
Hash identifier: +ODxITi57Zp/uxKhBXkY8UEooyd06s41sp5VA6Me/9A=
Subject key identifier: 6B:48:5B:99:10:99:37:C4:65:EE:AB:63:44:D1:BF:D8:B1:DB:CE:63
Authority key identifier: 3E:C7:D2:BF:C3:FA:78:E7:10:0A:1B:89:35:90:5A:FF:7A:49:6B:C9
Certificate issuer: /CN=3ec7d2bfc3fa78e7100a1b8935905aff7a496bc9
Certificate serial: 019858DACF2CF0AD615F5A117DD94506606F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PsfSv8P6eOcQChuJNZBa_3pJa8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.mft
Manifest number: 0CB6
Signing time: Wed 30 Jul 2025 01:03:11 +0000
Manifest this update: Wed 30 Jul 2025 01:03:11 +0000
Manifest next update: Thu 31 Jul 2025 01:03:11 +0000
Files and hashes: 1: PsfSv8P6eOcQChuJNZBa_3pJa8k.crl (hash: KBCeARU+nPkCNKftJNwI7ufRiKPmJnSDM35WgGMQj6w=)
2: RPdruY8oCYU-NG_cdmDTyaYXs9w.roa (hash: i9rNw7/5XltvLVBXot4AXkRNS8YKs+TQnC29q/66MR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/PsfSv8P6eOcQChuJNZBa_3pJa8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:58:da:cf:2c:f0:ad:61:5f:5a:11:7d:d9:45:06:60:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec7d2bfc3fa78e7100a1b8935905aff7a496bc9
Validity
Not Before: Jul 30 01:03:11 2025 GMT
Not After : Jul 31 01:03:11 2025 GMT
Subject: CN=6b485b99109937c465eeab6344d1bfd8b1dbce63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c9:14:89:3c:1a:66:60:ca:94:46:63:ae:ec:
c8:12:47:02:cd:f9:13:b3:b0:1a:9c:3f:55:77:06:
2c:28:20:0f:03:d1:90:f5:3c:c3:ad:41:5b:7a:f3:
e2:2d:fd:9c:be:81:64:e8:0c:da:7f:98:ff:a2:de:
54:d4:d3:2b:33:40:80:36:59:b8:7c:f6:9f:19:cd:
e0:77:83:d1:85:0b:a7:b3:f0:d5:0a:36:21:8c:e3:
10:ee:bc:95:b6:7b:dc:e0:80:5e:c9:11:85:e2:ca:
3b:c4:40:20:cd:1a:8b:62:fb:ad:a2:54:d0:34:6c:
27:40:ad:dd:6b:43:2e:b1:12:93:f2:69:ef:96:8a:
4b:81:e2:67:e3:48:89:d2:14:8b:0e:40:e2:b9:d7:
5e:b4:09:29:6f:67:6d:b5:fe:d4:54:98:58:40:52:
a4:c6:0f:a9:dc:5e:4f:30:d1:d4:91:95:27:73:75:
6b:c4:e5:14:68:3c:e5:b4:2c:e9:67:67:56:53:23:
1e:bb:77:fa:33:8d:4b:fa:8f:fe:d9:70:16:33:1a:
00:a2:4f:f5:ac:6f:9c:3a:1d:c1:de:cc:90:e8:41:
d2:25:a8:2c:95:89:ce:b4:76:2c:4e:90:ae:30:4d:
91:56:3a:d1:6c:fd:6e:7c:86:0d:18:e4:6c:98:77:
03:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:48:5B:99:10:99:37:C4:65:EE:AB:63:44:D1:BF:D8:B1:DB:CE:63
X509v3 Authority Key Identifier:
keyid:3E:C7:D2:BF:C3:FA:78:E7:10:0A:1B:89:35:90:5A:FF:7A:49:6B:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsfSv8P6eOcQChuJNZBa_3pJa8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:d2:84:f6:2c:35:8f:38:82:74:2a:bc:90:0b:71:f8:8f:6e:
ab:be:cf:5f:d4:87:b1:a9:95:07:1e:24:24:aa:ee:a2:0a:98:
2e:cd:4e:a2:58:a9:22:f5:be:b3:63:46:2c:f9:4f:f6:c7:a4:
72:36:c2:3c:75:dd:ce:14:08:48:67:19:49:6e:d6:a8:5b:6e:
5f:75:19:a8:a5:13:7c:01:30:a1:1d:cd:b9:eb:95:5e:13:34:
9f:be:5a:a5:44:bd:92:69:a6:9f:80:9a:c5:79:fc:41:83:f6:
e5:68:b3:9c:38:44:38:2f:1d:69:06:e9:c9:67:c8:e5:66:25:
fd:38:8b:d1:43:d7:69:10:09:78:f3:08:cc:b0:70:17:e8:ac:
24:23:44:ac:be:0c:31:0e:e4:d0:2a:58:b1:62:d0:14:f3:55:
ca:8e:0c:a8:1e:8b:99:fd:11:b0:84:93:59:cc:92:1d:d4:ab:
34:93:82:27:d0:83:c8:f3:55:7a:36:13:26:7b:f0:94:2e:69:
49:10:e8:c0:08:01:36:9b:35:24:34:f2:74:30:f5:3f:ca:04:
45:cb:c7:f4:53:36:67:95:96:03:a8:bf:c3:6a:dd:ac:21:05:
0e:20:bb:1d:00:9e:30:52:54:08:0e:4a:5c:3c:38:c9:64:13:
00:b7:2a:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhY2s8s8K1hX1oRfdlFBmBvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlYzdkMmJmYzNmYTc4ZTcxMDBhMWI4OTM1OTA1YWZmN2E0
OTZiYzkwHhcNMjUwNzMwMDEwMzExWhcNMjUwNzMxMDEwMzExWjAzMTEwLwYDVQQD
Eyg2YjQ4NWI5OTEwOTkzN2M0NjVlZWFiNjM0NGQxYmZkOGIxZGJjZTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8kUiTwaZmDKlEZjruzIEkcCzfkT
s7AanD9VdwYsKCAPA9GQ9TzDrUFbevPiLf2cvoFk6Azaf5j/ot5U1NMrM0CANlm4
fPafGc3gd4PRhQuns/DVCjYhjOMQ7ryVtnvc4IBeyRGF4so7xEAgzRqLYvutolTQ
NGwnQK3da0MusRKT8mnvlopLgeJn40iJ0hSLDkDiuddetAkpb2dttf7UVJhYQFKk
xg+p3F5PMNHUkZUnc3VrxOUUaDzltCzpZ2dWUyMeu3f6M41L+o/+2XAWMxoAok/1
rG+cOh3B3syQ6EHSJagslYnOtHYsTpCuME2RVjrRbP1ufIYNGORsmHcDFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGtIW5kQmTfEZe6rY0TRv9ix285jMB8GA1UdIwQY
MBaAFD7H0r/D+njnEAobiTWQWv96SWvJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHNmU3Y4UDZlT2NRQ2h1Sk5aQmFfM3BKYThrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8zOWJiNzItZjZhZi00YTY3LTljNDQt
YmE4ODExMjJjYTYzLzEvUHNmU3Y4UDZlT2NRQ2h1Sk5aQmFfM3BKYThrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy8zOWJiNzItZjZhZi00YTY3LTljNDQtYmE4ODExMjJjYTYz
LzEvUHNmU3Y4UDZlT2NRQ2h1Sk5aQmFfM3BKYThrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL9KE9iw1
jziCdCq8kAtx+I9uq77PX9SHsamVBx4kJKruogqYLs1OolipIvW+s2NGLPlP9sek
cjbCPHXdzhQISGcZSW7WqFtuX3UZqKUTfAEwoR3NueuVXhM0n75apUS9kmmmn4Ca
xXn8QYP25WiznDhEOC8daQbpyWfI5WYl/TiL0UPXaRAJePMIzLBwF+isJCNErL4M
MQ7k0CpYsWLQFPNVyo4MqB6Lmf0RsISTWcySHdSrNJOCJ9CDyPNVejYTJnvwlC5p
SRDowAgBNps1JDTydDD1P8oERcvH9FM2Z5WWA6i/w2rdrCEFDiC7HQCeMFJUCA5K
XDw4yWQTALcqHw==
-----END CERTIFICATE-----
Generated at Wed Jul 30 04:19:56 2025 by rpki-client