Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/PsjCDmXc0z_4pePDCmRZJcXJ-V8.mft
File: PsjCDmXc0z_4pePDCmRZJcXJ-V8.mft (raw, json)
Hash identifier: kDxYr6KvmqvSz531CjYZgA7RVPW5C0WTOVlb9nvA/YM=
Subject key identifier: 36:27:D4:98:00:7D:E3:A1:22:AE:DA:30:6C:F3:EB:C3:27:F1:C5:86
Authority key identifier: 3E:C8:C2:0E:65:DC:D3:3F:F8:A5:E3:C3:0A:64:59:25:C5:C9:F9:5F
Certificate issuer: /CN=3ec8c20e65dcd33ff8a5e3c30a645925c5c9f95f
Certificate serial: 019A1D634738250398B3CF6EBEA6B98FE716
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PsjCDmXc0z_4pePDCmRZJcXJ-V8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/PsjCDmXc0z_4pePDCmRZJcXJ-V8.mft
Manifest number: 16F8
Signing time: Sat 25 Oct 2025 22:00:36 +0000
Manifest this update: Sat 25 Oct 2025 22:00:36 +0000
Manifest next update: Sun 26 Oct 2025 22:00:36 +0000
Files and hashes: 1: 2MDxMm-aOr9Av8UXOYCdSDY5SVw.roa (hash: e92Ni3UZiEOlX4qjyE83BJ38B3EV4PZWBH8ze8DKvoY=)
2: PsjCDmXc0z_4pePDCmRZJcXJ-V8.crl (hash: C5z7p3RYgbr/4vUXAMoF4Zq6dSmrXM+ejVE13xrLqK0=)
3: egtzvRVazNe8WeEfcIG06LemmN8.roa (hash: TsV2yb4uCxxRnC/+s7mjRUpuNbVIbnDgtBTH7E4+YyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/PsjCDmXc0z_4pePDCmRZJcXJ-V8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/PsjCDmXc0z_4pePDCmRZJcXJ-V8.mft
rsync://rpki.ripe.net/repository/DEFAULT/PsjCDmXc0z_4pePDCmRZJcXJ-V8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:59:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1d:63:47:38:25:03:98:b3:cf:6e:be:a6:b9:8f:e7:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec8c20e65dcd33ff8a5e3c30a645925c5c9f95f
Validity
Not Before: Oct 25 22:00:36 2025 GMT
Not After : Oct 26 22:00:36 2025 GMT
Subject: CN=3627d498007de3a122aeda306cf3ebc327f1c586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:28:ed:7d:f3:02:05:5c:2d:74:2a:e2:75:af:
71:a3:59:3c:8d:73:c1:64:51:29:65:be:a2:db:bc:
a4:7e:01:40:3d:61:76:46:4e:d8:0e:5c:75:af:8e:
7e:56:ea:5a:77:d7:bf:9d:f0:64:42:10:e8:f3:20:
89:ee:b5:25:52:d2:9a:10:b5:c0:34:01:e7:91:f8:
af:14:d8:3c:cc:93:38:6f:60:73:39:0c:bc:85:11:
4b:2b:42:c4:06:9d:4b:b5:e1:9f:d4:1a:75:09:d2:
54:24:4d:0f:16:a3:1b:ea:5d:4b:c8:ff:76:a3:1c:
32:b6:ba:4b:f3:34:11:8b:29:0d:53:ad:4c:cf:14:
0b:79:35:66:30:7a:24:63:23:81:17:e8:12:a7:43:
e4:6d:16:17:17:80:8b:dd:c7:b0:70:87:5b:58:0d:
0d:58:97:fc:58:51:b4:6f:ac:56:30:67:dc:8a:4d:
80:72:49:f3:c5:31:8e:51:c4:a0:39:40:b2:a3:31:
b0:51:02:dc:e4:52:26:72:58:28:13:46:e3:aa:e9:
c1:6b:9c:cf:af:88:10:d1:6c:a8:74:17:ae:58:34:
36:9e:61:91:67:6d:d5:1f:5c:85:a9:d6:d4:45:42:
63:e4:9f:c2:20:8a:8c:dc:68:45:dd:62:cb:44:95:
60:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:27:D4:98:00:7D:E3:A1:22:AE:DA:30:6C:F3:EB:C3:27:F1:C5:86
X509v3 Authority Key Identifier:
keyid:3E:C8:C2:0E:65:DC:D3:3F:F8:A5:E3:C3:0A:64:59:25:C5:C9:F9:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsjCDmXc0z_4pePDCmRZJcXJ-V8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/PsjCDmXc0z_4pePDCmRZJcXJ-V8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/PsjCDmXc0z_4pePDCmRZJcXJ-V8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:1e:ee:13:f7:0f:19:31:f0:3a:b5:12:ad:ee:ab:f4:b9:80:
e5:95:d5:44:75:e8:34:63:09:ce:5e:c3:bd:4d:ed:88:47:76:
3a:0a:0e:f9:ff:51:f8:05:7e:55:6f:0d:05:95:7a:2b:f9:ac:
76:18:ac:20:a8:a1:70:5e:fe:8b:ea:e9:8f:f1:b0:5e:4f:a6:
65:d1:b2:fe:ac:33:95:32:7f:ea:83:71:c1:a2:85:13:b2:1a:
cd:50:4a:b2:7a:24:fd:8a:d1:e2:34:81:6e:30:e8:9b:89:23:
b0:1f:11:f9:3a:bf:f5:f8:8b:8a:d9:e6:2c:b4:db:e6:48:c7:
c7:1e:47:b9:95:f1:74:b4:e4:ea:21:3b:91:13:d9:91:43:fa:
3a:92:97:b4:e9:cf:27:c9:c2:3f:47:5c:da:dc:77:1f:f5:ae:
28:dd:38:b0:6f:56:10:ca:05:02:ac:ac:4d:18:51:66:56:88:
ea:14:c1:51:4a:ff:58:87:88:c6:e3:3b:48:b8:5e:a2:f1:c0:
dd:06:01:f0:a4:b0:a8:46:2d:28:96:6e:98:4d:8d:9f:02:2b:
5b:c1:58:27:b4:ae:2a:a5:aa:ee:2a:a0:0a:76:60:b2:5e:30:
4b:08:26:57:89:14:0b:3f:f3:85:86:ee:db:e8:2a:7d:dc:ba:
7c:a0:c3:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 00:04:12 2025 by rpki-client