Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft
File: Ps1TxmQkw_Npyojuevdq2yXhhFE.mft (raw, json)
Hash identifier: 7JeR0B63CtnTHjYZmSto6MZXHB8N5a0zToeCpLAqf54=
Subject key identifier: 3D:58:9B:DE:AD:B8:93:A8:02:D0:7E:2F:86:56:64:05:4A:C9:F0:00
Authority key identifier: 3E:CD:53:C6:64:24:C3:F3:69:CA:88:EE:7A:F7:6A:DB:25:E1:84:51
Certificate issuer: /CN=3ecd53c66424c3f369ca88ee7af76adb25e18451
Certificate serial: 019952D387DC89CB0DAE9CF263FCFEB9CAC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ps1TxmQkw_Npyojuevdq2yXhhFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft
Manifest number: 1052
Signing time: Tue 16 Sep 2025 14:00:18 +0000
Manifest this update: Tue 16 Sep 2025 14:00:18 +0000
Manifest next update: Wed 17 Sep 2025 14:00:18 +0000
Files and hashes: 1: NFHPImufF3uRqUgALoiOKsyNAWY.roa (hash: P38WvGerxAQEhXHw97XFuU4GA9ZzpqGUq811jnutzZs=)
2: Ps1TxmQkw_Npyojuevdq2yXhhFE.crl (hash: XOX880iessXNBSlFikR5Q1fY/nteroJo3XAej4+QW1o=)
3: mI6j4UadWN59Ry8sBr4KvB0K8Yc.roa (hash: OgHmwZEN5FVoA8wv5XCNl8ngdl4mQaBcOydLvBf7mUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ps1TxmQkw_Npyojuevdq2yXhhFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Sep 2025 13:46:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:52:d3:87:dc:89:cb:0d:ae:9c:f2:63:fc:fe:b9:ca:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ecd53c66424c3f369ca88ee7af76adb25e18451
Validity
Not Before: Sep 16 14:00:18 2025 GMT
Not After : Sep 17 14:00:18 2025 GMT
Subject: CN=3d589bdeadb893a802d07e2f865664054ac9f000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4c:31:4d:7e:a6:d0:6e:f6:03:c2:de:d9:11:
4e:e5:73:86:7c:aa:3c:23:f1:17:07:32:e9:17:db:
cc:0d:89:b3:17:ea:df:9c:23:b9:6d:78:15:8f:18:
cb:f1:b3:42:9a:69:3f:72:8d:44:9a:af:55:1b:1d:
03:c8:e6:9f:3d:d2:14:37:2b:b7:01:67:55:53:a8:
16:3f:22:c0:e5:45:c0:ca:67:f5:c0:a2:e0:6e:6b:
96:de:bb:e2:a2:50:1e:e4:eb:ef:c2:97:24:ec:81:
a6:2f:c4:fa:9f:9e:6a:e3:16:94:c5:e1:75:97:38:
71:84:d0:76:c9:b0:5c:31:5f:02:a5:81:bc:cc:b3:
67:52:34:cf:de:94:ce:66:12:69:16:04:11:00:98:
97:26:7b:53:20:bd:e9:c9:e5:00:19:42:0f:de:0a:
e5:ef:fa:97:9b:93:46:e5:bf:97:c4:4e:05:65:a5:
44:8f:e7:4c:83:3f:f0:16:08:45:e7:58:18:a8:73:
da:89:e9:94:dd:91:6d:b1:41:de:80:3c:52:5a:d0:
23:98:02:e5:a4:36:1f:e3:57:37:57:13:5f:63:af:
c1:8c:34:65:9c:35:15:63:de:30:e9:a5:16:fd:de:
d0:7b:3e:ad:83:c0:7d:36:2a:4a:25:97:94:06:5a:
93:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:58:9B:DE:AD:B8:93:A8:02:D0:7E:2F:86:56:64:05:4A:C9:F0:00
X509v3 Authority Key Identifier:
keyid:3E:CD:53:C6:64:24:C3:F3:69:CA:88:EE:7A:F7:6A:DB:25:E1:84:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ps1TxmQkw_Npyojuevdq2yXhhFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:95:a4:3d:c3:e6:ed:a8:02:70:fd:20:6c:ce:5a:ac:f7:56:
b3:6f:ec:8e:ec:38:7e:c5:10:5e:f2:3d:69:c1:2f:84:9d:64:
3c:8a:17:91:38:c5:0e:ec:63:c1:30:7d:4c:ae:06:db:b8:cf:
4a:df:20:ec:aa:56:51:f7:f4:fe:dc:07:89:15:9b:f4:92:df:
7f:8e:59:7a:3a:75:57:c8:75:a5:eb:40:fb:00:e3:db:23:ca:
8f:73:66:92:bb:84:89:e3:cf:97:68:ef:fa:80:14:8a:35:61:
25:8b:c2:d9:5f:5e:cb:a9:a4:f1:13:9b:ce:0d:31:55:57:05:
7f:c1:8a:c9:ca:af:b7:21:d0:7e:9a:ec:28:12:05:45:5d:2e:
1b:d6:ae:6d:c0:18:24:9a:7e:05:63:ae:65:b7:93:07:6b:1e:
bd:3a:ad:5c:79:e3:2c:32:b8:37:70:31:98:f5:47:a9:f4:72:
06:a9:d2:b9:5a:b4:53:95:dd:77:e7:7d:7c:5f:cd:89:92:39:
32:fb:d9:a2:b7:3a:c6:fc:86:98:aa:fb:9b:62:8c:27:7a:35:
5f:9c:73:39:ac:73:e3:2c:46:de:e1:2c:71:10:e5:8a:65:04:
d3:0c:93:00:7c:b9:00:8f:9b:d3:58:1d:00:e1:21:b4:15:8c:
41:db:9f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 20:48:35 2025 by rpki-client