Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/PseNgibLWq_xXGdSWvK4q8t7X5I.mft
File: PseNgibLWq_xXGdSWvK4q8t7X5I.mft (raw, json)
Hash identifier: iqafHtrmYSzDZ7hMPo47kDsfqdTHPGrIABMKrH1VHZ8=
Subject key identifier: 71:5A:B6:4F:CE:7C:4B:AF:47:1C:66:38:F2:2A:B8:CD:AF:B1:BE:74
Authority key identifier: 3E:C7:8D:82:26:CB:5A:AF:F1:5C:67:52:5A:F2:B8:AB:CB:7B:5F:92
Certificate issuer: /CN=3ec78d8226cb5aaff15c67525af2b8abcb7b5f92
Certificate serial: 019A71B8C9ABE6E95A78C7B6C6D3E4E8AA80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PseNgibLWq_xXGdSWvK4q8t7X5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/PseNgibLWq_xXGdSWvK4q8t7X5I.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 07:02:06 +0000
Manifest this update: Tue 11 Nov 2025 07:02:06 +0000
Manifest next update: Wed 12 Nov 2025 07:02:06 +0000
Files and hashes: 1: PseNgibLWq_xXGdSWvK4q8t7X5I.crl (hash: EWzx9DmemZ4LJwe+NconDkKvhEhdsvkAzzVJo8kj8v0=)
2: RGavrFD9QlH9mvEK00LE9vM0Ylo.roa (hash: in3DOj7fuK/tRP2Np73D85wEHXvdsqUOTjKtL4z+mG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/PseNgibLWq_xXGdSWvK4q8t7X5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/PseNgibLWq_xXGdSWvK4q8t7X5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PseNgibLWq_xXGdSWvK4q8t7X5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:c9:ab:e6:e9:5a:78:c7:b6:c6:d3:e4:e8:aa:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec78d8226cb5aaff15c67525af2b8abcb7b5f92
Validity
Not Before: Nov 11 07:02:06 2025 GMT
Not After : Nov 12 07:02:06 2025 GMT
Subject: CN=715ab64fce7c4baf471c6638f22ab8cdafb1be74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:60:68:31:ec:46:8b:3e:0a:78:3b:cb:e1:2f:
91:a6:9a:6d:00:cc:31:02:78:f2:33:b7:00:92:4f:
7a:91:1b:91:ab:58:c5:a8:18:bf:0f:d6:39:52:98:
75:ad:30:db:ed:f9:3d:8d:cf:e8:c6:36:ca:26:10:
87:e1:a5:f7:1c:3e:01:b7:53:58:53:99:3a:3b:be:
b4:91:b4:c7:44:74:a7:10:18:6b:45:7d:75:20:12:
6b:ed:1e:b1:33:90:ec:a8:20:05:bf:d7:07:2b:26:
3a:d1:f6:27:36:90:f1:c4:62:dc:b2:85:52:5d:c2:
42:2d:5a:fb:6c:52:b5:dd:71:ef:38:92:68:a9:31:
44:01:37:48:6f:0b:50:27:a5:4c:63:88:9e:17:7e:
eb:69:83:ff:4e:66:02:1a:5b:1e:77:b4:33:29:63:
4f:6f:8f:91:e6:df:df:4a:98:f8:e3:2a:f2:96:57:
c6:05:7b:78:ec:c9:e6:19:0b:0b:ad:df:fe:7d:6a:
b2:d6:a4:b1:cc:d5:58:43:08:04:89:fb:a5:98:4c:
67:f5:50:49:aa:c0:a4:34:66:75:f3:2e:52:8e:b1:
f0:71:c1:cd:25:34:9f:7f:03:ed:d3:b3:26:a5:be:
90:48:eb:c0:3c:08:08:c6:35:17:3d:60:4d:60:b2:
c1:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:5A:B6:4F:CE:7C:4B:AF:47:1C:66:38:F2:2A:B8:CD:AF:B1:BE:74
X509v3 Authority Key Identifier:
keyid:3E:C7:8D:82:26:CB:5A:AF:F1:5C:67:52:5A:F2:B8:AB:CB:7B:5F:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PseNgibLWq_xXGdSWvK4q8t7X5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/PseNgibLWq_xXGdSWvK4q8t7X5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/PseNgibLWq_xXGdSWvK4q8t7X5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:e4:90:05:d4:c3:e1:35:0b:87:b1:91:03:3b:58:01:88:04:
74:22:f1:21:df:e2:45:97:bd:f2:18:b3:81:a6:4d:0e:85:59:
fd:79:77:31:84:87:d7:3a:71:b1:2e:99:dd:aa:0d:9c:27:48:
59:bf:17:18:5a:79:0d:93:35:a7:a8:52:77:07:57:d2:2f:d1:
61:b1:84:8e:80:98:62:76:b3:07:f7:50:5f:2a:f6:04:9c:a3:
9f:bc:86:7b:d9:1b:d4:5e:cc:73:d3:16:b4:73:42:64:c3:0e:
69:6a:80:a1:7a:72:60:ad:04:7c:64:30:38:f2:16:69:4b:1f:
15:8c:fa:bd:20:5d:e2:8a:13:17:60:9e:4c:4b:01:ca:39:0a:
7f:d5:71:43:11:02:bd:93:1e:69:a9:17:04:70:da:45:87:33:
33:f3:c1:23:0e:d2:99:64:57:a8:e9:e9:45:2e:95:52:d9:e7:
35:f6:37:72:b6:6a:14:08:6e:48:2a:f4:39:68:bf:c6:14:a1:
ad:0d:ef:88:a5:47:67:c1:08:f6:45:ff:e0:ad:43:79:85:ef:
3f:a5:0a:eb:15:3f:84:8a:25:0e:58:a3:dc:6f:a5:3c:79:24:
c5:e4:22:74:ec:c7:3d:6c:1f:8c:1c:e7:08:aa:72:9d:2f:22:
dd:0c:30:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:56 2025 by rpki-client