Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/PsjCDmXc0z_4pePDCmRZJcXJ-V8.mft
File: PsjCDmXc0z_4pePDCmRZJcXJ-V8.mft (raw, json)
Hash identifier: zX2jWQIrQTO9vyUolHGDd6oPzCXmfA40R8VusPgAVLA=
Subject key identifier: 3F:1A:51:69:37:D3:17:DA:ED:F2:55:C9:A2:00:C9:FB:3B:08:8E:31
Authority key identifier: 3E:C8:C2:0E:65:DC:D3:3F:F8:A5:E3:C3:0A:64:59:25:C5:C9:F9:5F
Certificate issuer: /CN=3ec8c20e65dcd33ff8a5e3c30a645925c5c9f95f
Certificate serial: 01984A0A5A033C1DDDCBEA96CF47D48858B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PsjCDmXc0z_4pePDCmRZJcXJ-V8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/PsjCDmXc0z_4pePDCmRZJcXJ-V8.mft
Manifest number: 1606
Signing time: Sun 27 Jul 2025 04:00:49 +0000
Manifest this update: Sun 27 Jul 2025 04:00:49 +0000
Manifest next update: Mon 28 Jul 2025 04:00:49 +0000
Files and hashes: 1: 2MDxMm-aOr9Av8UXOYCdSDY5SVw.roa (hash: e92Ni3UZiEOlX4qjyE83BJ38B3EV4PZWBH8ze8DKvoY=)
2: PsjCDmXc0z_4pePDCmRZJcXJ-V8.crl (hash: ZpZvMuyswOiCImpMtY1HaKXj6q/GOwSjfgGPlwhI4RU=)
3: egtzvRVazNe8WeEfcIG06LemmN8.roa (hash: TsV2yb4uCxxRnC/+s7mjRUpuNbVIbnDgtBTH7E4+YyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/PsjCDmXc0z_4pePDCmRZJcXJ-V8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/PsjCDmXc0z_4pePDCmRZJcXJ-V8.mft
rsync://rpki.ripe.net/repository/DEFAULT/PsjCDmXc0z_4pePDCmRZJcXJ-V8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:5a:03:3c:1d:dd:cb:ea:96:cf:47:d4:88:58:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec8c20e65dcd33ff8a5e3c30a645925c5c9f95f
Validity
Not Before: Jul 27 04:00:49 2025 GMT
Not After : Jul 28 04:00:49 2025 GMT
Subject: CN=3f1a516937d317daedf255c9a200c9fb3b088e31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8c:e9:3b:2c:7f:39:1e:35:ce:a7:fa:16:ce:
79:11:4d:f7:dc:03:4f:0d:b7:bf:e5:76:03:6f:e7:
13:56:81:86:cc:d4:9a:b2:e4:00:08:06:19:d3:49:
de:37:96:68:b6:ca:fe:59:4a:7d:a7:ac:90:c0:47:
ec:52:e5:bf:42:dd:36:06:9a:f0:a2:6f:0e:2e:ab:
5d:96:d0:72:9a:25:13:c3:c5:35:73:4e:ef:21:65:
65:0a:13:ab:85:89:33:bd:cf:90:f6:03:b2:5d:c8:
67:c7:dd:9c:46:c6:78:2d:20:47:af:20:f9:f0:d5:
d8:66:50:ea:e4:84:c0:1f:57:f1:30:44:22:bb:f4:
f5:14:93:41:8c:41:16:55:77:7e:8e:cd:4a:e5:8d:
4a:0b:4e:9b:32:1b:14:c3:bf:4e:f5:eb:35:7f:c2:
d2:5e:41:e5:9e:60:98:4f:2d:9f:dd:84:8b:83:71:
e4:4a:1e:84:f7:9a:fc:97:b7:22:a0:2e:de:24:55:
b9:d2:c7:db:45:9b:f5:65:e0:da:81:f1:84:af:48:
93:75:47:91:27:46:9c:82:68:1b:6f:76:86:ba:bf:
db:68:7b:e8:10:21:15:4e:ec:33:b6:59:0d:d6:2b:
ee:5e:68:47:e9:39:a5:36:c3:84:62:63:e1:e0:93:
51:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:1A:51:69:37:D3:17:DA:ED:F2:55:C9:A2:00:C9:FB:3B:08:8E:31
X509v3 Authority Key Identifier:
keyid:3E:C8:C2:0E:65:DC:D3:3F:F8:A5:E3:C3:0A:64:59:25:C5:C9:F9:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsjCDmXc0z_4pePDCmRZJcXJ-V8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/PsjCDmXc0z_4pePDCmRZJcXJ-V8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/PsjCDmXc0z_4pePDCmRZJcXJ-V8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:a8:85:97:f3:6c:8c:07:8b:d9:5e:c0:1c:8c:04:e2:64:5f:
f5:41:18:1f:14:27:e5:fc:9e:5c:c3:72:66:ad:b5:e6:a7:e1:
ed:0f:ef:23:cf:9a:56:8a:d4:42:85:ea:4b:18:1b:8c:73:8f:
38:19:75:a6:cd:e9:e9:ca:d2:21:fd:94:3a:bd:85:aa:38:38:
cb:08:77:54:68:9d:4a:7d:f1:3c:ce:30:b0:2f:d9:f0:8d:9b:
6b:58:06:39:6b:05:78:41:cf:be:cf:f1:98:e5:9e:88:56:dd:
d6:56:41:77:6f:a6:63:8f:0e:ea:e3:10:df:7e:b0:72:88:d0:
77:24:78:21:d5:de:90:67:5e:30:18:79:3e:b6:c3:1b:05:51:
0a:31:a5:a2:1e:6d:fa:b5:b7:a2:8d:9f:68:d0:ae:d5:c1:c8:
62:ee:03:76:d2:e9:22:c4:91:94:b7:2a:c9:1c:e5:2e:0b:af:
96:29:b7:45:2f:5e:c6:ed:83:d9:0a:e8:8a:0b:91:22:14:6d:
34:4a:b8:ef:e9:2b:63:7f:43:aa:f9:37:96:58:8b:f5:fb:cf:
a8:76:99:b5:bb:37:d7:4f:65:db:75:b8:30:0a:71:d6:a8:68:
54:8a:f1:e8:a1:d1:87:64:f2:4b:ee:61:cc:99:bc:e4:ab:f9:
af:53:eb:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKCloDPB3dy+qWz0fUiFi1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlYzhjMjBlNjVkY2QzM2ZmOGE1ZTNjMzBhNjQ1OTI1YzVj
OWY5NWYwHhcNMjUwNzI3MDQwMDQ5WhcNMjUwNzI4MDQwMDQ5WjAzMTEwLwYDVQQD
EygzZjFhNTE2OTM3ZDMxN2RhZWRmMjU1YzlhMjAwYzlmYjNiMDg4ZTMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYzpOyx/OR41zqf6Fs55EU333ANP
Dbe/5XYDb+cTVoGGzNSasuQACAYZ00neN5Zotsr+WUp9p6yQwEfsUuW/Qt02Bprw
om8OLqtdltBymiUTw8U1c07vIWVlChOrhYkzvc+Q9gOyXchnx92cRsZ4LSBHryD5
8NXYZlDq5ITAH1fxMEQiu/T1FJNBjEEWVXd+js1K5Y1KC06bMhsUw79O9es1f8LS
XkHlnmCYTy2f3YSLg3HkSh6E95r8l7cioC7eJFW50sfbRZv1ZeDagfGEr0iTdUeR
J0acgmgbb3aGur/baHvoECEVTuwztlkN1ivuXmhH6TmlNsOEYmPh4JNRmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD8aUWk30xfa7fJVyaIAyfs7CI4xMB8GA1UdIwQY
MBaAFD7Iwg5l3NM/+KXjwwpkWSXFyflfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHNqQ0RtWGMwel80cGVQRENtUlpKY1hKLVY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS85M2Y2ZWUtMDVlYS00ZjMxLTlhZjYt
ZGZjNWNjNjRhODFlLzEvUHNqQ0RtWGMwel80cGVQRENtUlpKY1hKLVY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS85M2Y2ZWUtMDVlYS00ZjMxLTlhZjYtZGZjNWNjNjRhODFl
LzEvUHNqQ0RtWGMwel80cGVQRENtUlpKY1hKLVY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKqiFl/Ns
jAeL2V7AHIwE4mRf9UEYHxQn5fyeXMNyZq215qfh7Q/vI8+aVorUQoXqSxgbjHOP
OBl1ps3p6crSIf2UOr2Fqjg4ywh3VGidSn3xPM4wsC/Z8I2ba1gGOWsFeEHPvs/x
mOWeiFbd1lZBd2+mY48O6uMQ336wcojQdyR4IdXekGdeMBh5PrbDGwVRCjGloh5t
+rW3oo2faNCu1cHIYu4DdtLpIsSRlLcqyRzlLguvlim3RS9exu2D2QroiguRIhRt
NEq47+krY39Dqvk3lliL9fvPqHaZtbs3109l23W4MApx1qhoVIrx6KHRh2TyS+5h
zJm85Kv5r1PrQg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 13:36:08 2025 by rpki-client