Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft
File: Ps1TxmQkw_Npyojuevdq2yXhhFE.mft (raw, json)
Hash identifier: DQtn9OZzdrkcgNsLyNm5QAbJQ/+HXP7iobQ1PzayC6s=
Subject key identifier: D1:7D:64:41:46:3C:73:75:39:AD:2C:7D:76:13:8E:62:EB:FD:C2:86
Authority key identifier: 3E:CD:53:C6:64:24:C3:F3:69:CA:88:EE:7A:F7:6A:DB:25:E1:84:51
Certificate issuer: /CN=3ecd53c66424c3f369ca88ee7af76adb25e18451
Certificate serial: 01974D45205451A6C8423F8A992CF46EC3BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ps1TxmQkw_Npyojuevdq2yXhhFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft
Manifest number: 0F46
Signing time: Sun 08 Jun 2025 02:01:05 +0000
Manifest this update: Sun 08 Jun 2025 02:01:05 +0000
Manifest next update: Mon 09 Jun 2025 02:01:05 +0000
Files and hashes: 1: NFHPImufF3uRqUgALoiOKsyNAWY.roa (hash: P38WvGerxAQEhXHw97XFuU4GA9ZzpqGUq811jnutzZs=)
2: Ps1TxmQkw_Npyojuevdq2yXhhFE.crl (hash: aqPZIKDTNBGgORNPdtkejOWMSriuIe5c9pLZI+jAH1I=)
3: mI6j4UadWN59Ry8sBr4KvB0K8Yc.roa (hash: OgHmwZEN5FVoA8wv5XCNl8ngdl4mQaBcOydLvBf7mUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ps1TxmQkw_Npyojuevdq2yXhhFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 02:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:45:20:54:51:a6:c8:42:3f:8a:99:2c:f4:6e:c3:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ecd53c66424c3f369ca88ee7af76adb25e18451
Validity
Not Before: Jun 8 02:01:05 2025 GMT
Not After : Jun 9 02:01:05 2025 GMT
Subject: CN=d17d6441463c737539ad2c7d76138e62ebfdc286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:bb:20:db:7a:bb:4f:39:45:98:e5:43:d6:a9:
f3:be:1c:1d:60:aa:37:61:79:0f:0f:73:e6:cc:d1:
64:cb:94:c5:6f:b4:d7:8c:10:ad:bf:b7:cd:c8:64:
60:b8:8d:59:fd:1a:8d:25:8a:ec:e3:3e:b8:8e:33:
f2:f8:9e:5a:21:b6:fb:8a:9a:57:16:72:97:70:e1:
17:54:91:9a:96:57:48:f1:f9:45:ff:9c:e0:74:45:
e0:9f:1a:67:ff:ed:ea:cd:be:3e:a3:bc:2d:6e:51:
6d:26:28:2f:5f:12:23:16:ba:8c:41:a8:8e:ce:57:
da:b3:c2:d4:69:fe:55:7c:57:18:8a:04:31:40:aa:
41:9f:59:f0:17:bc:b4:34:d0:8e:f1:b8:2b:be:82:
7e:d3:65:38:84:c4:9c:cc:55:55:07:51:65:77:a8:
0a:99:6b:2f:3e:f3:44:60:fc:35:e8:c8:5e:88:47:
c3:11:03:6a:39:a4:d9:11:eb:53:9d:88:3a:31:b6:
2d:c1:1b:0f:79:7b:73:fc:4a:77:2c:88:68:1e:5b:
88:59:0f:be:94:52:aa:53:f9:df:64:f0:96:13:ea:
4c:32:3c:d5:3d:43:2e:ea:ed:9f:c4:e3:2d:a6:4c:
8c:88:8f:b4:39:50:bb:fa:05:f1:32:89:4b:0a:77:
08:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:7D:64:41:46:3C:73:75:39:AD:2C:7D:76:13:8E:62:EB:FD:C2:86
X509v3 Authority Key Identifier:
keyid:3E:CD:53:C6:64:24:C3:F3:69:CA:88:EE:7A:F7:6A:DB:25:E1:84:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ps1TxmQkw_Npyojuevdq2yXhhFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:da:38:95:48:23:02:28:63:97:91:50:a2:12:a4:46:87:eb:
cf:31:5e:06:c5:7f:21:7c:27:3d:44:b0:64:1b:c6:cf:e3:8a:
81:09:91:9f:0b:28:0b:8e:1b:eb:b4:b4:99:75:91:b4:f4:f9:
67:bd:7c:e8:60:7a:2a:a0:86:68:23:ed:8a:4f:18:54:43:76:
3d:6f:4d:97:df:cc:14:e2:f3:62:76:a8:cf:41:dc:87:af:0b:
26:9b:e8:7e:c3:d4:ba:68:09:67:c7:d7:cd:dd:07:a3:3c:d2:
6d:cb:74:0e:56:c0:82:80:16:89:49:21:25:97:2f:88:44:08:
fd:e4:07:6f:25:ad:da:7a:e8:60:d1:7c:5c:2c:97:a5:0e:8b:
4d:25:2a:74:2d:b6:3b:24:e3:83:b8:fa:95:3d:52:f9:50:4d:
5e:60:40:f0:6f:46:d4:c3:2c:4f:93:69:f5:22:81:60:a9:17:
c0:71:85:b8:58:fc:56:d5:b9:04:46:52:36:a9:da:02:8c:15:
3d:8a:ba:64:6d:c0:51:78:4a:a0:a5:ef:d0:af:65:08:7a:a7:
37:dd:b3:ab:13:fb:3f:10:53:f5:b6:db:b6:87:80:10:c2:e4:
ec:23:c6:19:63:56:b3:e9:2d:0d:07:63:a7:43:07:f5:cc:b0:
c2:30:64:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:21:15 2025 by rpki-client