Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/46d943-8cbd-41a2-b9f2-52058f8a9a1a/1/PsY-XbBDXC0-dKayitPZww1qjO4.mft
File: PsY-XbBDXC0-dKayitPZww1qjO4.mft (raw, json)
Hash identifier: gXZBUeKigEdxUAtUpi2UWUFe1nYydoSAJDyKC7K97RI=
Subject key identifier: F5:B0:78:2A:C1:7A:09:96:C3:52:86:01:ED:7A:82:FB:42:4C:D4:A6
Authority key identifier: 3E:C6:3E:5D:B0:43:5C:2D:3E:74:A6:B2:8A:D3:D9:C3:0D:6A:8C:EE
Certificate issuer: /CN=3ec63e5db0435c2d3e74a6b28ad3d9c30d6a8cee
Certificate serial: 0198477749DD23EFE2BF6C19866263302209
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PsY-XbBDXC0-dKayitPZww1qjO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/46d943-8cbd-41a2-b9f2-52058f8a9a1a/1/PsY-XbBDXC0-dKayitPZww1qjO4.mft
Manifest number: 0E0F
Signing time: Sat 26 Jul 2025 16:00:56 +0000
Manifest this update: Sat 26 Jul 2025 16:00:56 +0000
Manifest next update: Sun 27 Jul 2025 16:00:56 +0000
Files and hashes: 1: GSEh8gIZdCBsRKOnb9fKkFOFuZk.roa (hash: u2uTEL6Ts0fKYl8Es1LELd2Ambr6iVn6vwhJ7qDD50c=)
2: PsY-XbBDXC0-dKayitPZww1qjO4.crl (hash: ft+el36WNoN7W0r8PYJzZIF1MyAXTN9y109FN7LaxbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/46d943-8cbd-41a2-b9f2-52058f8a9a1a/1/PsY-XbBDXC0-dKayitPZww1qjO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/46d943-8cbd-41a2-b9f2-52058f8a9a1a/1/PsY-XbBDXC0-dKayitPZww1qjO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PsY-XbBDXC0-dKayitPZww1qjO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:77:49:dd:23:ef:e2:bf:6c:19:86:62:63:30:22:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec63e5db0435c2d3e74a6b28ad3d9c30d6a8cee
Validity
Not Before: Jul 26 16:00:56 2025 GMT
Not After : Jul 27 16:00:56 2025 GMT
Subject: CN=f5b0782ac17a0996c3528601ed7a82fb424cd4a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5e:d5:e6:55:e3:95:27:46:db:63:b2:85:22:
e1:19:39:a1:ea:3e:c5:01:bd:e6:59:8e:99:8d:b3:
4a:fc:81:25:c4:45:36:d0:b5:91:f7:6c:f1:b3:f3:
93:05:e0:ff:a1:68:bf:5b:b9:7b:1e:4f:47:d1:55:
f8:49:4d:96:33:be:00:ae:78:62:91:f7:4b:1c:5e:
92:5a:1a:5a:f9:d8:bf:d2:44:8f:22:17:a4:df:99:
86:27:bb:db:60:a9:8b:e0:93:04:3b:3c:fb:35:f0:
a8:59:78:71:74:60:c1:48:67:3f:03:50:1f:31:75:
db:c5:7f:bb:c8:eb:de:d3:85:7e:bf:e9:36:af:2b:
8b:b2:7d:cb:26:28:14:45:c8:60:18:e0:84:4c:48:
f5:7e:6b:e2:64:92:df:b7:a8:bf:71:90:bf:e1:1a:
8a:01:8b:28:97:d5:0f:1c:86:33:2b:49:bc:02:c3:
4b:71:d5:ff:d9:ce:b6:88:18:02:2e:e8:e5:ae:65:
88:74:85:82:09:cb:9e:0b:3d:7f:4a:f3:10:47:55:
68:86:d6:42:21:bf:fd:6f:42:af:27:4b:8e:10:5a:
1d:d9:73:c2:22:cb:ed:5a:02:13:a8:4d:f2:2b:3a:
40:26:12:8a:fa:72:b2:a2:ba:a3:76:2b:57:b8:37:
eb:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:B0:78:2A:C1:7A:09:96:C3:52:86:01:ED:7A:82:FB:42:4C:D4:A6
X509v3 Authority Key Identifier:
keyid:3E:C6:3E:5D:B0:43:5C:2D:3E:74:A6:B2:8A:D3:D9:C3:0D:6A:8C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsY-XbBDXC0-dKayitPZww1qjO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/46d943-8cbd-41a2-b9f2-52058f8a9a1a/1/PsY-XbBDXC0-dKayitPZww1qjO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/46d943-8cbd-41a2-b9f2-52058f8a9a1a/1/PsY-XbBDXC0-dKayitPZww1qjO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:fc:88:0d:0f:28:12:12:af:bb:ec:f8:f3:c7:4b:f9:a6:8c:
27:2e:22:2b:a4:a6:0b:b1:d7:6a:e6:38:32:0d:04:c5:b4:c4:
5f:3c:9f:2f:7b:d1:e6:99:b7:46:72:cc:a2:26:dc:41:cb:a6:
86:15:c9:84:d7:e9:af:74:e8:94:76:55:55:87:bc:8c:65:21:
a7:ff:b7:2e:63:b2:e1:70:b2:f6:ca:c9:b2:18:4e:37:a3:bf:
53:22:1d:a7:a4:36:bf:06:35:d5:7f:a1:f7:f7:44:21:2a:18:
cb:b0:8d:61:13:25:75:9c:74:06:35:ae:3d:c4:4f:35:fa:a7:
a4:8e:57:bf:83:8e:80:58:98:a9:1f:2c:bb:4e:32:40:b3:64:
4c:33:b6:05:cd:a5:67:6e:e7:fe:1e:32:11:5e:31:ab:c6:45:
bc:17:aa:01:e2:de:65:41:92:53:ae:cd:17:34:c2:3b:21:16:
4a:f8:2c:8f:54:a2:f4:7a:ce:8c:05:85:5e:32:96:30:5e:7c:
d7:a1:1a:0a:19:b8:d5:a8:10:51:52:30:d7:28:59:9d:33:1f:
ba:e7:cc:a8:77:f5:24:7a:84:60:93:ef:b3:44:89:34:55:b2:
3d:68:26:c1:f9:0e:40:78:e7:58:95:ab:60:0d:9d:cf:06:0c:
dc:57:f5:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 19:18:35 2025 by rpki-client