Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft
File: PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft (raw, json)
Hash identifier: uxbLMBIkeP6QzuaH9Vlm5rKFNoXHsiofJCYVU++LL4o=
Subject key identifier: C0:ED:28:2B:1E:F7:D7:46:00:07:7E:51:43:0A:A9:F4:51:B3:D9:25
Authority key identifier: 3E:C1:4C:C6:07:D1:F0:28:38:48:F9:A8:15:DB:E6:75:E2:33:9A:7E
Certificate issuer: /CN=3ec14cc607d1f0283848f9a815dbe675e2339a7e
Certificate serial: 019923D5C6264263F7C5078E8111CFE9D42A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft
Manifest number: 155C
Signing time: Sun 07 Sep 2025 11:00:36 +0000
Manifest this update: Sun 07 Sep 2025 11:00:36 +0000
Manifest next update: Mon 08 Sep 2025 11:00:36 +0000
Files and hashes: 1: PsFMxgfR8Cg4SPmoFdvmdeIzmn4.crl (hash: haOpGeUY+Ak9E8s9bvGqRMGpvEpop3+ytMxxZw6R4OU=)
2: qGeya0gXk3lefb1rAtWCYxucLVU.roa (hash: ZiFD9y1WchAi6R0j+XTv/ZogMIEXrTeY8kphQnBKVUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:d5:c6:26:42:63:f7:c5:07:8e:81:11:cf:e9:d4:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec14cc607d1f0283848f9a815dbe675e2339a7e
Validity
Not Before: Sep 7 11:00:36 2025 GMT
Not After : Sep 8 11:00:36 2025 GMT
Subject: CN=c0ed282b1ef7d74600077e51430aa9f451b3d925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:38:f2:66:d7:98:a5:43:d4:8b:48:db:2a:fe:
aa:b6:da:f1:fa:57:02:0a:74:6d:43:f9:35:e2:10:
8f:9b:92:f1:fb:fb:11:3f:58:42:2c:b4:9f:29:e8:
60:4e:b2:92:e4:db:e4:3a:1d:49:20:07:6d:f2:09:
67:ff:b1:e8:a0:2b:58:ac:20:fb:71:79:9c:11:ff:
55:06:1e:2d:83:89:17:6b:a3:78:ab:6b:30:c9:26:
d1:82:64:d7:dd:4c:0b:e4:4a:70:df:b7:c4:e3:e3:
a0:69:cc:06:3c:f5:85:27:44:e0:b9:58:cb:72:fa:
d5:16:2b:7e:5c:12:e8:bf:70:ce:96:08:26:fb:a7:
40:37:13:d3:fa:1c:f3:1c:9c:2e:99:40:ad:7a:05:
c9:1a:e6:09:56:02:7a:31:15:e1:18:30:12:17:b2:
15:6f:cc:81:b4:c4:da:87:9c:ce:83:57:6e:3d:59:
c2:a6:ea:63:a5:bd:81:f6:45:93:07:53:ac:98:27:
38:b0:2c:a9:84:7f:a5:e4:c0:03:ad:3c:e6:89:03:
d3:fc:2a:01:a2:84:da:eb:e3:0a:fc:b3:17:8a:6d:
67:9f:19:e9:63:f6:58:d5:94:70:51:90:6b:f2:cb:
fa:52:89:90:b6:67:4e:4d:79:50:df:04:aa:96:6b:
90:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:ED:28:2B:1E:F7:D7:46:00:07:7E:51:43:0A:A9:F4:51:B3:D9:25
X509v3 Authority Key Identifier:
keyid:3E:C1:4C:C6:07:D1:F0:28:38:48:F9:A8:15:DB:E6:75:E2:33:9A:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:5a:f5:c1:99:53:66:4d:a5:c5:87:81:19:ca:16:04:8a:9d:
a5:47:08:19:8b:8b:49:d7:c2:c0:f6:e3:4f:66:5f:07:a8:52:
ba:6f:82:47:55:a0:ea:c3:eb:9a:73:5c:d6:c4:f2:ad:84:c8:
59:94:f3:e4:54:f2:81:9d:67:b4:59:08:97:55:ee:9a:3c:d0:
dc:fa:82:7a:c5:fe:6e:ab:90:b9:5e:cc:6b:fb:7d:90:ce:a2:
cc:19:36:06:63:98:a3:2f:de:58:33:68:3e:4f:01:3a:83:f7:
a6:49:2b:27:55:af:8f:e7:99:59:2e:a0:cb:83:0d:cd:c8:2b:
6f:8a:48:8f:e5:2e:8f:4f:ec:51:2a:79:fd:80:7e:13:89:33:
4a:0d:a4:55:62:cc:3d:0d:7d:4c:94:30:45:fe:f8:2c:27:93:
d2:47:67:07:c4:42:f6:1e:d8:76:de:4f:be:e6:4f:4a:ed:6c:
8b:b9:87:07:16:c5:45:d1:a6:2c:8f:d2:06:b0:50:fc:67:05:
30:80:a3:3a:8a:48:6a:a2:e2:cc:48:34:24:7a:70:ba:1a:55:
e4:da:ed:0b:82:7f:09:17:8e:de:7b:85:d2:64:c5:f0:0b:22:
0a:fc:f0:66:68:22:41:87:14:58:51:70:b8:39:f0:f3:d0:f6:
50:0a:70:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:30:55 2025 by rpki-client