Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft
File: PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft (raw, json)
Hash identifier: i9VU47Oy6P2yDkIic58T3RjoDrtDxytyOVZX/jPkm34=
Subject key identifier: 4B:19:AB:A8:97:03:87:1C:FA:D2:45:CB:4C:FC:BF:B2:86:4E:9A:34
Authority key identifier: 3E:C1:4C:C6:07:D1:F0:28:38:48:F9:A8:15:DB:E6:75:E2:33:9A:7E
Certificate issuer: /CN=3ec14cc607d1f0283848f9a815dbe675e2339a7e
Certificate serial: 019A71B801C174DAA8C9167C214D91029BB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft
Manifest number: 1609
Signing time: Tue 11 Nov 2025 07:01:15 +0000
Manifest this update: Tue 11 Nov 2025 07:01:15 +0000
Manifest next update: Wed 12 Nov 2025 07:01:15 +0000
Files and hashes: 1: PsFMxgfR8Cg4SPmoFdvmdeIzmn4.crl (hash: z6WsGBZaNHtkz35dUQxza8yV3TNrwrkPHqKzyLITGKU=)
2: qGeya0gXk3lefb1rAtWCYxucLVU.roa (hash: ZiFD9y1WchAi6R0j+XTv/ZogMIEXrTeY8kphQnBKVUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:01:c1:74:da:a8:c9:16:7c:21:4d:91:02:9b:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec14cc607d1f0283848f9a815dbe675e2339a7e
Validity
Not Before: Nov 11 07:01:15 2025 GMT
Not After : Nov 12 07:01:15 2025 GMT
Subject: CN=4b19aba89703871cfad245cb4cfcbfb2864e9a34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:12:2d:1f:7a:ff:97:00:0c:4e:2f:89:4f:b2:
95:d3:ea:cb:a8:33:94:96:d4:b8:2e:fe:43:3f:0b:
58:27:d6:23:f3:ca:fe:93:7c:b4:24:07:39:6a:81:
0b:92:c4:17:16:6b:bc:01:a3:55:f4:d7:75:f4:5d:
d5:29:8b:f3:9b:58:93:1f:e7:63:82:26:7a:46:35:
bc:18:99:b0:8a:ea:47:49:f8:cf:a6:05:35:a9:5b:
ae:67:78:e5:13:e4:47:b5:d2:d9:eb:0c:06:d4:8d:
ea:c6:70:b2:79:bb:d6:5f:c5:88:d6:13:7e:74:ac:
54:e0:ea:8a:f6:74:df:32:80:87:9c:1a:2b:e1:63:
de:67:f3:73:c1:4e:17:d3:0a:3f:97:9f:28:c2:80:
09:b5:f5:48:83:db:b3:bd:4a:4f:46:9e:d7:7b:ec:
00:99:13:25:98:1c:6f:6f:c4:a6:74:7c:11:0e:67:
25:05:62:28:d3:20:a8:d2:7e:3e:6b:2a:09:33:87:
47:86:ad:64:71:77:b4:86:9d:b8:ed:32:d1:d1:07:
ae:7f:c5:23:28:11:d6:eb:09:bf:f6:9f:0b:ef:9e:
40:e9:c5:3a:91:e7:c5:2a:5e:64:82:86:81:da:a3:
53:4d:fa:42:93:71:38:62:95:60:d3:2f:b8:a7:9f:
23:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:19:AB:A8:97:03:87:1C:FA:D2:45:CB:4C:FC:BF:B2:86:4E:9A:34
X509v3 Authority Key Identifier:
keyid:3E:C1:4C:C6:07:D1:F0:28:38:48:F9:A8:15:DB:E6:75:E2:33:9A:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:47:b0:6d:55:ce:a0:52:5c:86:01:0d:0a:a2:05:33:42:9d:
0c:3f:2e:0d:ca:24:34:de:6a:cd:f3:b2:c8:89:2a:af:94:5e:
36:a0:60:1d:57:ee:56:97:08:17:80:33:ee:53:dc:8e:7b:09:
54:51:dd:72:e5:be:04:0f:07:e9:7d:98:1c:f1:4b:fe:48:35:
53:5c:6c:d8:03:3c:2b:f2:ef:dc:d1:d5:50:72:ad:ed:23:31:
47:e5:dd:fb:3f:aa:f0:fc:d3:c2:c6:d6:3c:8c:f2:c6:12:2a:
ca:6d:e8:c2:f7:b5:62:2b:3b:28:3f:8e:0f:6f:03:e0:f9:6f:
26:47:9e:ba:94:a0:67:a0:41:dd:52:e4:42:74:d6:dc:78:43:
00:ce:f7:73:04:20:d1:8f:03:b0:88:f1:7e:4a:77:21:30:fe:
cf:93:eb:da:1a:0a:e6:9e:50:06:cb:ba:94:a5:48:b4:0f:43:
01:5d:66:58:10:6c:b1:0f:0b:6c:68:7d:87:f4:78:6f:89:ae:
26:1a:55:e3:cb:38:97:cc:d7:ce:81:28:7e:06:e5:82:f8:72:
59:4e:90:61:23:21:b1:b9:94:2d:76:a9:5f:cf:c2:a5:24:0d:
08:53:51:ff:6c:5d:f1:a8:4a:de:6c:a2:35:19:c5:2f:ad:1c:
7b:91:99:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:39:11 2025 by rpki-client