Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.mft
File: PsfSv8P6eOcQChuJNZBa_3pJa8k.mft (raw, json)
Hash identifier: Pqj/2z8cBF4gGpiOEE/ShHs7Rn81Uy8WuD71WdAOG3A=
Subject key identifier: D7:68:31:16:A1:18:DF:83:E5:3C:36:19:27:BE:A4:46:87:BD:51:F0
Authority key identifier: 3E:C7:D2:BF:C3:FA:78:E7:10:0A:1B:89:35:90:5A:FF:7A:49:6B:C9
Certificate issuer: /CN=3ec7d2bfc3fa78e7100a1b8935905aff7a496bc9
Certificate serial: 019A71B902045FB3D8A401F2A1B5C9753167
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PsfSv8P6eOcQChuJNZBa_3pJa8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.mft
Manifest number: 0DCC
Signing time: Tue 11 Nov 2025 07:02:21 +0000
Manifest this update: Tue 11 Nov 2025 07:02:21 +0000
Manifest next update: Wed 12 Nov 2025 07:02:21 +0000
Files and hashes: 1: PsfSv8P6eOcQChuJNZBa_3pJa8k.crl (hash: 3tSik5wl3NQWwjYYpkHptBdeKKTv3PgOkSdgjv8u+Zs=)
2: RPdruY8oCYU-NG_cdmDTyaYXs9w.roa (hash: i9rNw7/5XltvLVBXot4AXkRNS8YKs+TQnC29q/66MR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/PsfSv8P6eOcQChuJNZBa_3pJa8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:02:04:5f:b3:d8:a4:01:f2:a1:b5:c9:75:31:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec7d2bfc3fa78e7100a1b8935905aff7a496bc9
Validity
Not Before: Nov 11 07:02:21 2025 GMT
Not After : Nov 12 07:02:21 2025 GMT
Subject: CN=d7683116a118df83e53c361927bea44687bd51f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:17:00:1b:dd:49:0b:ba:00:88:98:25:37:1a:
ed:8e:ea:e2:5c:8b:b2:a2:53:f5:e2:53:85:05:59:
0e:3c:44:47:b7:3a:ca:58:f5:d0:4b:2c:9a:95:a9:
17:aa:19:61:af:90:bb:d2:bc:ad:c9:3e:ef:1f:ad:
bb:b1:47:b3:17:7e:8b:f6:bc:f7:37:77:81:23:8a:
d0:8c:ad:67:78:a2:61:21:78:0e:9e:e0:23:df:7d:
df:73:82:29:92:e7:6f:27:3d:9d:a8:0b:4d:3e:b9:
f4:c8:19:58:9f:21:62:77:d7:1c:1e:a0:94:ff:aa:
e0:ff:b2:6f:aa:b1:e1:fa:40:41:e2:0e:ce:f0:a0:
b1:05:2e:64:93:c3:ee:15:b6:cf:05:bc:0b:16:90:
b4:9a:2b:f1:27:04:fd:75:65:85:b0:b5:28:22:50:
f3:e8:cf:0d:34:c6:f5:a8:f4:44:2a:04:c1:f6:22:
07:7e:cc:d8:7b:b9:9d:0d:35:00:dd:44:15:48:7d:
a8:57:40:81:2a:23:62:92:bd:8b:17:ba:45:51:a0:
ed:93:b4:99:4e:ad:d6:8a:a9:d7:c6:0c:89:0e:d8:
2f:35:f1:dd:26:b1:23:b5:b1:8f:12:2b:46:1f:39:
e9:ca:0c:ae:7d:76:5d:7e:f1:62:9e:d0:44:3b:f4:
13:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:68:31:16:A1:18:DF:83:E5:3C:36:19:27:BE:A4:46:87:BD:51:F0
X509v3 Authority Key Identifier:
keyid:3E:C7:D2:BF:C3:FA:78:E7:10:0A:1B:89:35:90:5A:FF:7A:49:6B:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsfSv8P6eOcQChuJNZBa_3pJa8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:61:cf:bc:87:14:35:3f:85:c6:57:52:d9:13:72:ab:7f:c4:
98:13:32:e2:e3:96:20:a9:15:8a:1f:2c:53:74:6a:2b:40:a2:
34:66:99:1f:a2:7e:e2:94:69:28:e9:3b:28:62:ff:c3:65:6f:
42:68:86:22:1f:7f:e8:5b:94:37:bd:1d:47:6f:aa:73:d9:e4:
3b:c9:34:2f:c2:14:0b:d8:e3:31:71:02:7c:72:ea:2d:03:da:
54:d9:30:06:bd:ed:e1:dc:4d:4f:4b:99:08:2a:25:0d:73:97:
99:79:6f:79:db:47:5e:5c:f5:17:a8:54:c9:e1:5b:b0:22:81:
9e:f0:3b:50:c3:24:82:2d:8e:fc:51:a7:72:20:65:5a:ed:15:
19:dc:36:65:ff:2c:54:55:cb:4d:b5:68:c2:dc:a8:dd:ea:fb:
0b:65:58:d8:74:a1:06:9b:7b:35:6e:e2:57:b3:07:72:b4:49:
15:88:cd:7c:f5:51:a4:6e:d0:bd:51:7c:50:45:2f:98:3b:a4:
65:80:a0:c9:79:f8:58:f2:89:93:8f:b9:c3:da:b9:30:c0:65:
d8:48:a6:e9:aa:1b:ae:69:4f:3c:a2:a8:d0:21:e0:c8:7f:a1:
a3:89:ff:9d:ec:62:26:00:c2:4b:ac:21:15:91:b7:8e:82:b2:
e3:43:2e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:48:21 2025 by rpki-client