Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/3bfd0a-017f-481f-b676-bc36feeb90b3/1/PSGIrVl7WKqllwA_jwhDSWxsfJM.mft
File: PSGIrVl7WKqllwA_jwhDSWxsfJM.mft (raw, json)
Hash identifier: asyDyyZ878kuULkZT4wLv5MPhs2HWad94sqg/GcuJ0s=
Subject key identifier: 2D:76:09:7F:38:89:B0:3B:72:36:E4:B7:CC:86:8C:08:63:9F:27:C1
Authority key identifier: 3D:21:88:AD:59:7B:58:AA:A5:97:00:3F:8F:08:43:49:6C:6C:7C:93
Certificate issuer: /CN=3d2188ad597b58aaa597003f8f0843496c6c7c93
Certificate serial: 01974968026DB2B0FD1AE72E62DE259D2003
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PSGIrVl7WKqllwA_jwhDSWxsfJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/3bfd0a-017f-481f-b676-bc36feeb90b3/1/PSGIrVl7WKqllwA_jwhDSWxsfJM.mft
Manifest number: 0E7F
Signing time: Sat 07 Jun 2025 08:00:42 +0000
Manifest this update: Sat 07 Jun 2025 08:00:42 +0000
Manifest next update: Sun 08 Jun 2025 08:00:42 +0000
Files and hashes: 1: K-fnSlqCnsMuB-NlWaWBJUmC4FM.roa (hash: j54MZjizcVLzs5xFTxfuwkhp1hDwpOUSaYB4Ws5FVDc=)
2: PSGIrVl7WKqllwA_jwhDSWxsfJM.crl (hash: Lysma6+kEJY14LpHXf7bZiYMZccsbuAQylzhb9HpCU0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/3bfd0a-017f-481f-b676-bc36feeb90b3/1/PSGIrVl7WKqllwA_jwhDSWxsfJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/3bfd0a-017f-481f-b676-bc36feeb90b3/1/PSGIrVl7WKqllwA_jwhDSWxsfJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PSGIrVl7WKqllwA_jwhDSWxsfJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:68:02:6d:b2:b0:fd:1a:e7:2e:62:de:25:9d:20:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d2188ad597b58aaa597003f8f0843496c6c7c93
Validity
Not Before: Jun 7 08:00:42 2025 GMT
Not After : Jun 8 08:00:42 2025 GMT
Subject: CN=2d76097f3889b03b7236e4b7cc868c08639f27c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5f:9e:75:a3:90:a4:11:1b:9a:e4:2d:69:14:
af:ce:d3:96:ed:d2:c8:38:52:dc:31:b8:78:eb:0c:
f0:79:98:bc:fa:59:e9:ce:1a:f2:b6:bf:76:81:a0:
8d:c7:b1:59:85:b1:db:42:63:fa:1b:d9:0e:75:f6:
6b:a4:ce:bc:a6:de:c1:3c:c6:6b:e6:ab:f3:c2:ab:
b4:48:e7:ff:a9:2b:da:06:36:f3:4e:c8:69:d6:40:
7e:89:28:3f:eb:60:7f:fb:99:bc:93:a0:0f:2b:81:
13:a6:85:9d:d7:02:95:06:4f:df:ca:54:22:e4:3a:
5e:f9:1c:ed:84:b7:a8:fc:c5:b2:7d:c3:7e:10:d1:
95:b3:70:db:47:45:ed:c3:68:d0:4d:bc:6e:24:4a:
02:3f:58:95:61:2b:ae:b0:88:6b:c7:fa:a3:70:04:
c1:20:0f:d9:3c:5f:3b:41:5d:45:df:41:ca:19:33:
bc:7e:49:02:a1:4a:42:f8:df:31:df:de:c2:70:12:
b7:87:86:94:1e:9d:d2:ae:84:d4:6a:51:8f:ac:1b:
1e:31:98:03:a2:5e:82:0f:85:4d:8a:59:b4:6d:c6:
3b:10:0f:c4:0e:53:f8:5c:35:df:67:f2:ac:54:14:
a7:05:6c:e8:79:01:82:91:13:10:88:66:69:01:e8:
cb:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:76:09:7F:38:89:B0:3B:72:36:E4:B7:CC:86:8C:08:63:9F:27:C1
X509v3 Authority Key Identifier:
keyid:3D:21:88:AD:59:7B:58:AA:A5:97:00:3F:8F:08:43:49:6C:6C:7C:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PSGIrVl7WKqllwA_jwhDSWxsfJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3bfd0a-017f-481f-b676-bc36feeb90b3/1/PSGIrVl7WKqllwA_jwhDSWxsfJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3bfd0a-017f-481f-b676-bc36feeb90b3/1/PSGIrVl7WKqllwA_jwhDSWxsfJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:20:66:2f:92:6f:c4:40:ca:bf:82:63:80:3f:c8:8d:6e:72:
5b:72:57:d1:8f:53:47:b3:c9:3e:e6:9d:df:1c:3b:1b:bd:a8:
84:8f:87:2c:a5:91:af:25:f4:3b:43:df:b0:6d:ab:05:4a:59:
9d:f2:43:f3:f8:03:8c:85:fe:9b:a0:21:aa:b0:2a:cc:5d:66:
ed:9f:25:be:4c:24:64:11:ce:26:93:d7:a5:4e:15:3c:95:3c:
e2:f3:77:6f:4a:20:8f:64:17:80:cc:b0:08:5e:e5:93:d5:ab:
bc:87:9b:ea:06:bd:85:23:91:1b:b3:75:93:b3:a1:cd:f6:7f:
db:e2:7b:c7:f1:a3:8f:e7:e9:28:6d:ea:de:0d:90:a0:31:24:
ba:b3:9d:08:4c:f6:e5:a6:ce:ce:fd:62:68:0d:54:95:0d:0f:
cb:54:2f:ee:c4:b2:b1:34:8b:f8:af:70:34:2f:69:46:db:f7:
08:c1:4b:b7:ee:8f:a9:7c:b8:7c:a8:a8:b0:7a:2c:7b:b3:4f:
fb:12:bc:9b:dd:2f:ad:2b:f0:9e:30:b1:9d:7c:3c:22:2f:e3:
78:98:08:8f:75:1f:9c:f5:81:89:f1:76:9a:76:c4:07:11:1b:
7c:72:34:81:2d:9c:18:d6:8f:af:df:2d:70:88:cc:59:b6:3f:
bb:96:de:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:09:37 2025 by rpki-client