Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/3bfd0a-017f-481f-b676-bc36feeb90b3/1/PSGIrVl7WKqllwA_jwhDSWxsfJM.mft
File: PSGIrVl7WKqllwA_jwhDSWxsfJM.mft (raw, json)
Hash identifier: WBDJoj7HvxVAIaJ27xXP/KtF6kwDs7LH6kwt1YWhq8E=
Subject key identifier: 01:20:35:73:1C:51:76:84:ED:F8:B0:05:9A:34:EF:1E:B6:E8:6A:9E
Authority key identifier: 3D:21:88:AD:59:7B:58:AA:A5:97:00:3F:8F:08:43:49:6C:6C:7C:93
Certificate issuer: /CN=3d2188ad597b58aaa597003f8f0843496c6c7c93
Certificate serial: 019A7293624009AA7B96C119C04497154A0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PSGIrVl7WKqllwA_jwhDSWxsfJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/3bfd0a-017f-481f-b676-bc36feeb90b3/1/PSGIrVl7WKqllwA_jwhDSWxsfJM.mft
Manifest number: 1022
Signing time: Tue 11 Nov 2025 11:00:52 +0000
Manifest this update: Tue 11 Nov 2025 11:00:52 +0000
Manifest next update: Wed 12 Nov 2025 11:00:52 +0000
Files and hashes: 1: K-fnSlqCnsMuB-NlWaWBJUmC4FM.roa (hash: j54MZjizcVLzs5xFTxfuwkhp1hDwpOUSaYB4Ws5FVDc=)
2: PSGIrVl7WKqllwA_jwhDSWxsfJM.crl (hash: qA5rSAZWA7oje+LSSZBHLSuflFoDyLEWHtW4l+vrlI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/3bfd0a-017f-481f-b676-bc36feeb90b3/1/PSGIrVl7WKqllwA_jwhDSWxsfJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/3bfd0a-017f-481f-b676-bc36feeb90b3/1/PSGIrVl7WKqllwA_jwhDSWxsfJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PSGIrVl7WKqllwA_jwhDSWxsfJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:62:40:09:aa:7b:96:c1:19:c0:44:97:15:4a:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d2188ad597b58aaa597003f8f0843496c6c7c93
Validity
Not Before: Nov 11 11:00:52 2025 GMT
Not After : Nov 12 11:00:52 2025 GMT
Subject: CN=012035731c517684edf8b0059a34ef1eb6e86a9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:57:a5:58:96:86:c2:99:fc:6e:7d:8f:48:b2:
fa:a4:e2:77:c1:13:6a:18:ff:23:8a:a2:db:65:9d:
4f:48:43:b2:32:60:76:c8:3b:53:2c:8e:be:09:ca:
f0:10:a3:90:83:29:8f:58:db:3b:1f:ad:f6:0f:75:
16:c4:0d:12:0f:87:50:26:1f:26:84:fe:3a:e1:9e:
1c:47:bc:86:d6:98:ac:e2:20:19:77:60:90:1b:88:
38:21:ba:87:aa:b2:f3:02:89:82:74:25:74:d2:a8:
30:1b:8f:ae:f3:c2:e4:ac:43:1f:7e:2a:41:a0:c3:
ac:66:b5:e4:fb:12:bc:4c:15:d3:cf:79:56:17:94:
0f:5e:fd:06:9b:ed:89:08:bf:f5:28:93:2e:04:97:
51:07:98:ec:b6:43:66:a4:9e:1e:a1:f7:f0:98:7f:
eb:ac:61:30:7b:1b:ee:f6:c8:fc:d8:7d:fe:39:35:
97:94:00:e0:a2:b8:ca:e6:da:5a:0e:13:33:72:b2:
98:2c:2a:5a:a7:9e:8f:3d:f6:54:7a:3a:be:8e:b5:
03:51:0e:fb:c8:ea:7f:19:d0:51:1f:1e:83:6a:c6:
4f:1c:40:85:9b:f1:2e:ae:2a:37:02:79:d5:cf:98:
20:cf:1e:9b:ac:e2:5c:19:78:b4:fa:80:d2:59:b9:
69:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:20:35:73:1C:51:76:84:ED:F8:B0:05:9A:34:EF:1E:B6:E8:6A:9E
X509v3 Authority Key Identifier:
keyid:3D:21:88:AD:59:7B:58:AA:A5:97:00:3F:8F:08:43:49:6C:6C:7C:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PSGIrVl7WKqllwA_jwhDSWxsfJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3bfd0a-017f-481f-b676-bc36feeb90b3/1/PSGIrVl7WKqllwA_jwhDSWxsfJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3bfd0a-017f-481f-b676-bc36feeb90b3/1/PSGIrVl7WKqllwA_jwhDSWxsfJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:5b:44:3f:7e:25:1f:6e:17:96:9f:0b:cf:bd:08:ec:c5:98:
26:a2:5f:fb:b4:ca:6b:9c:32:8e:5f:cd:b9:42:99:3e:a8:9b:
b0:29:6d:5c:c1:a7:f6:77:ac:a1:0c:61:8d:84:37:ff:17:a8:
9c:73:89:90:14:0c:bd:cc:0a:e5:d7:da:64:ec:89:e6:4a:cb:
cc:26:82:18:52:42:79:d0:fd:9c:79:15:f9:c9:d5:a0:b5:6a:
2c:db:1c:1c:07:e2:a4:1e:66:39:37:f4:5d:f2:6b:dd:93:fb:
24:18:88:74:65:7a:cc:f8:7a:80:b4:84:70:71:e4:4e:87:b0:
72:80:6e:0c:b0:22:3a:d5:81:18:b2:00:85:40:74:9c:d0:4f:
34:62:db:9c:24:b0:c5:52:b7:c9:63:1d:9b:9f:0a:50:5d:1a:
92:42:c2:dd:ae:06:1a:e5:8c:23:ff:0a:bc:71:15:35:be:66:
3b:42:7f:19:9c:78:62:a4:6b:3d:bb:43:fb:cc:0d:85:57:d9:
fd:7e:24:01:2d:95:b4:2f:e8:74:86:b7:e9:2c:2d:3f:b4:29:
51:92:be:3a:8c:40:cd:1f:56:24:46:8b:52:d5:99:b3:e6:86:
2b:ed:63:d3:59:55:b7:54:7f:f1:9c:78:98:16:05:f9:41:c4:
0e:db:00:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:25:06 2025 by rpki-client