Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.mft
File: Psb9kdKkNl09wWch_t9pIXK7MHM.mft (raw, json)
Hash identifier: NzcDTAF0svIlwp7C6IRuIQTVIlJTu6Zm2ILa6flksFQ=
Subject key identifier: 89:E8:D7:B3:7E:B3:97:BF:9A:42:1E:76:D5:89:86:81:26:65:BD:8A
Authority key identifier: 3E:C6:FD:91:D2:A4:36:5D:3D:C1:67:21:FE:DF:69:21:72:BB:30:73
Certificate issuer: /CN=3ec6fd91d2a4365d3dc16721fedf692172bb3073
Certificate serial: 01974A4362A960151024D49345E799CEF8D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Psb9kdKkNl09wWch_t9pIXK7MHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.mft
Manifest number: 12C1
Signing time: Sat 07 Jun 2025 12:00:19 +0000
Manifest this update: Sat 07 Jun 2025 12:00:19 +0000
Manifest next update: Sun 08 Jun 2025 12:00:19 +0000
Files and hashes: 1: 0OYfvohoTXtpi59LO0J22cI1s3U.roa (hash: s7dK6PK+eP+XDZZ2HKEucZtuMEm89+4+6MLOTTKFjE0=)
2: Psb9kdKkNl09wWch_t9pIXK7MHM.crl (hash: UccgLS/vcgQQ+I0W6TAgbvxIC0963AS5/newFMVPxCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Psb9kdKkNl09wWch_t9pIXK7MHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:62:a9:60:15:10:24:d4:93:45:e7:99:ce:f8:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec6fd91d2a4365d3dc16721fedf692172bb3073
Validity
Not Before: Jun 7 12:00:19 2025 GMT
Not After : Jun 8 12:00:19 2025 GMT
Subject: CN=89e8d7b37eb397bf9a421e76d58986812665bd8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:11:d5:13:b3:e4:89:be:aa:1d:57:03:ed:a8:
c1:ca:08:98:fc:a1:66:8a:1b:71:11:1c:e3:ed:72:
b8:1c:19:f6:d9:93:aa:94:f7:ef:fe:37:63:75:c5:
81:1e:d5:5f:6d:5c:5d:83:38:63:42:48:8a:fe:ec:
07:3e:8a:7b:e7:69:7e:d1:08:73:68:62:ac:f5:e1:
ce:8a:fd:dc:c0:10:ee:d4:95:00:fa:0d:f1:53:c1:
fb:58:4b:1f:28:55:24:d3:87:a8:e4:7a:12:28:c2:
a2:33:c1:6e:49:95:27:51:48:70:33:36:be:7c:ee:
e7:99:ff:df:66:df:cb:3a:e2:07:4c:a1:46:49:f2:
e6:7e:2f:00:72:74:51:49:0c:71:73:61:0f:24:57:
33:d3:63:62:64:00:69:75:2b:0d:e1:c6:0a:ff:dd:
98:19:22:ee:80:85:a5:fb:70:c0:95:49:9f:7d:46:
91:b0:3b:20:0a:36:c7:90:84:3f:1d:6d:c2:00:ab:
62:17:cc:c7:0a:c1:7c:71:bc:76:ba:45:24:46:1c:
31:7c:9b:7c:14:c0:34:02:2a:a5:c0:d7:f2:c1:10:
dc:16:9f:7b:01:6b:f5:90:4c:46:ad:49:cb:c1:db:
e6:96:03:84:2b:06:84:ea:33:0d:25:a9:a4:df:17:
98:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:E8:D7:B3:7E:B3:97:BF:9A:42:1E:76:D5:89:86:81:26:65:BD:8A
X509v3 Authority Key Identifier:
keyid:3E:C6:FD:91:D2:A4:36:5D:3D:C1:67:21:FE:DF:69:21:72:BB:30:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Psb9kdKkNl09wWch_t9pIXK7MHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:ab:91:0a:f7:37:38:50:25:2b:dc:65:8e:be:43:c7:56:97:
be:01:b5:e5:4e:80:dd:ed:dd:23:b7:b1:61:20:e2:fd:55:d4:
d7:6d:00:77:03:5b:50:c6:03:cd:55:32:2b:3f:0b:27:04:a5:
50:c0:55:d2:79:fe:8b:a8:c6:44:74:e8:88:99:b4:bd:ce:ad:
48:1f:52:6a:63:74:85:a6:d0:be:34:3b:2c:21:db:23:f9:24:
e0:50:86:c1:36:80:73:07:3c:0b:94:f3:d9:f8:8d:4c:a1:4d:
3e:54:be:5a:0d:2e:0a:29:48:7d:a3:01:47:55:69:a8:bf:13:
f9:69:00:18:c0:f7:84:fa:90:e7:49:2f:ed:56:7d:3a:fd:ab:
a8:9e:ae:f4:9b:7a:de:4b:44:ca:64:b5:55:8b:87:4c:29:d5:
1e:28:83:8b:40:c8:08:29:9e:e3:3d:dd:3e:13:37:d8:be:6f:
1f:0f:eb:8f:c3:d7:fa:e4:4d:ba:49:91:90:2a:1b:fb:af:b9:
81:0f:45:73:a7:70:70:b0:cf:9a:24:93:2f:17:7d:f7:cf:18:
a3:67:18:dc:cc:18:d8:cf:80:ca:8e:8f:44:af:be:11:b3:ed:
91:4e:3c:e6:1d:12:5d:df:30:fe:6f:e5:e4:b9:21:6c:65:30:
cd:3d:16:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:47:27 2025 by rpki-client