Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.mft
File: PsfSv8P6eOcQChuJNZBa_3pJa8k.mft (raw, json)
Hash identifier: g8BCpcIaPKpcbc1wWCUlUWHdrUtkLO8y+WaKJkDLJps=
Subject key identifier: 0B:C8:0C:93:D4:FD:6F:37:AE:00:B1:19:C8:7A:9C:D4:0F:BB:88:01
Authority key identifier: 3E:C7:D2:BF:C3:FA:78:E7:10:0A:1B:89:35:90:5A:FF:7A:49:6B:C9
Certificate issuer: /CN=3ec7d2bfc3fa78e7100a1b8935905aff7a496bc9
Certificate serial: 0197488C8BEA06B93FF719DBAD7DE844E4C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PsfSv8P6eOcQChuJNZBa_3pJa8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.mft
Manifest number: 0C29
Signing time: Sat 07 Jun 2025 04:00:59 +0000
Manifest this update: Sat 07 Jun 2025 04:00:59 +0000
Manifest next update: Sun 08 Jun 2025 04:00:59 +0000
Files and hashes: 1: PsfSv8P6eOcQChuJNZBa_3pJa8k.crl (hash: lZia21vSLjJKnEaIjGAYvtjXDe6YBmKoE8i+ZBdUz0Y=)
2: RPdruY8oCYU-NG_cdmDTyaYXs9w.roa (hash: i9rNw7/5XltvLVBXot4AXkRNS8YKs+TQnC29q/66MR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/PsfSv8P6eOcQChuJNZBa_3pJa8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:8b:ea:06:b9:3f:f7:19:db:ad:7d:e8:44:e4:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec7d2bfc3fa78e7100a1b8935905aff7a496bc9
Validity
Not Before: Jun 7 04:00:59 2025 GMT
Not After : Jun 8 04:00:59 2025 GMT
Subject: CN=0bc80c93d4fd6f37ae00b119c87a9cd40fbb8801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4b:9f:dc:bf:28:38:2d:cf:07:01:02:2e:2b:
5e:8f:e9:ea:f3:80:cd:ea:e6:94:a0:be:98:0e:22:
46:a0:0f:6a:d3:6c:f9:28:5a:28:74:68:91:90:8c:
57:e7:63:42:30:71:29:6e:39:ff:a1:eb:0f:49:52:
99:77:69:c6:10:dc:20:96:5a:4e:f0:27:96:7a:7a:
7c:32:d2:aa:bc:d0:50:08:18:1f:a9:d0:d4:d9:6e:
00:ac:96:e2:67:2e:bc:89:e9:90:e8:e5:1f:da:2e:
2b:30:fa:21:54:6c:76:7a:e6:5e:04:cb:48:72:fb:
11:b5:4a:3e:d9:51:54:38:f6:a7:13:a8:a5:bb:80:
a0:c9:c7:75:c6:40:01:d3:4b:ad:c5:8d:d6:f6:f2:
6b:17:d1:e0:11:78:cb:8a:32:c4:b1:fa:ce:f5:0f:
19:b5:76:b3:79:fc:df:ee:38:9d:39:38:a8:36:14:
9f:c8:20:a9:62:11:73:27:c3:0c:70:b2:c7:fa:48:
92:17:67:01:ef:89:b1:61:6c:f3:f9:60:62:79:63:
04:81:13:f2:98:35:e4:45:6f:20:28:c4:f1:5e:c7:
63:73:fa:33:e9:ee:32:7e:ee:a0:27:86:16:66:df:
c1:b2:db:c4:17:a4:87:c5:89:a3:fe:63:e7:62:3e:
1b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:C8:0C:93:D4:FD:6F:37:AE:00:B1:19:C8:7A:9C:D4:0F:BB:88:01
X509v3 Authority Key Identifier:
keyid:3E:C7:D2:BF:C3:FA:78:E7:10:0A:1B:89:35:90:5A:FF:7A:49:6B:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsfSv8P6eOcQChuJNZBa_3pJa8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:e4:da:38:cf:4f:32:f5:03:f7:cc:73:70:3e:81:ae:ac:18:
a5:15:eb:c5:40:44:df:f1:63:c4:7d:1f:8f:cb:a0:84:03:db:
db:31:9a:90:e2:bc:1e:8e:89:4d:d0:7c:ad:24:83:fd:7f:10:
d6:4e:4a:5c:7a:0a:24:9a:ea:8e:82:6e:3c:8b:70:67:04:9c:
68:a9:4e:4b:1b:59:82:71:87:0a:f9:3f:8d:dd:ea:df:8c:28:
fa:83:1b:15:61:a4:69:f7:a5:62:43:f9:61:7f:97:94:f4:e9:
40:28:e6:13:76:63:f2:47:f6:43:4d:38:e5:9a:b1:09:6e:4d:
f4:4b:46:1d:4b:31:d4:3d:13:10:0c:b2:fe:e0:e1:62:93:3b:
a5:47:05:88:97:12:33:24:93:d7:c9:3f:7a:f4:84:47:33:49:
e8:6d:db:29:3e:61:7f:54:d6:df:a7:7e:5f:61:34:ab:af:0c:
09:c5:5d:f6:27:de:02:a2:ac:a3:b3:7a:72:d9:2c:b6:eb:80:
05:27:ee:ca:cf:d0:cb:70:f0:4e:f5:cf:25:6a:5c:5d:60:ec:
03:a6:85:ce:2a:82:50:f2:77:ac:97:43:9e:d4:ad:90:f5:e8:
ab:17:b1:43:5e:1e:c7:51:07:21:b3:37:97:52:92:c9:cf:d8:
d9:54:11:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:30:01 2025 by rpki-client