Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/6ccab3-479b-4da8-ae98-2cb6e3fdf9cd/1/Psn7DRNVKq0E86qutY1N1OfPQPA.mft
File: Psn7DRNVKq0E86qutY1N1OfPQPA.mft (raw, json)
Hash identifier: 7bk1n5WoggOE2Xbd+uB0wqUg9ElIJjD4UcB2wH9VFj4=
Subject key identifier: 6A:15:E5:85:AE:34:5C:B6:1E:7D:FA:CD:18:C8:BA:81:29:D7:BB:4C
Authority key identifier: 3E:C9:FB:0D:13:55:2A:AD:04:F3:AA:AE:B5:8D:4D:D4:E7:CF:40:F0
Certificate issuer: /CN=3ec9fb0d13552aad04f3aaaeb58d4dd4e7cf40f0
Certificate serial: 019A19F444349FB1F119E3A3AF9824EAC7BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Psn7DRNVKq0E86qutY1N1OfPQPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/6ccab3-479b-4da8-ae98-2cb6e3fdf9cd/1/Psn7DRNVKq0E86qutY1N1OfPQPA.mft
Manifest number: 16F5
Signing time: Sat 25 Oct 2025 06:00:29 +0000
Manifest this update: Sat 25 Oct 2025 06:00:29 +0000
Manifest next update: Sun 26 Oct 2025 06:00:29 +0000
Files and hashes: 1: 0KEFVdvGv-ChijDIsnLGIgCil34.roa (hash: Nw1+hiEOS4011D4TsgMditziwNaP7ka9v6nY3VfECKY=)
2: Psn7DRNVKq0E86qutY1N1OfPQPA.crl (hash: eflC9cxY9iAckLde77S5hrc77Pbu2mszfpShV5vKwHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/6ccab3-479b-4da8-ae98-2cb6e3fdf9cd/1/Psn7DRNVKq0E86qutY1N1OfPQPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/6ccab3-479b-4da8-ae98-2cb6e3fdf9cd/1/Psn7DRNVKq0E86qutY1N1OfPQPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Psn7DRNVKq0E86qutY1N1OfPQPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:19:f4:44:34:9f:b1:f1:19:e3:a3:af:98:24:ea:c7:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec9fb0d13552aad04f3aaaeb58d4dd4e7cf40f0
Validity
Not Before: Oct 25 06:00:29 2025 GMT
Not After : Oct 26 06:00:29 2025 GMT
Subject: CN=6a15e585ae345cb61e7dfacd18c8ba8129d7bb4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:52:d5:49:28:33:67:b6:93:81:9f:11:c0:62:
b6:05:c6:03:60:4e:a5:97:ee:f7:6c:ed:b8:50:d4:
d7:a4:8a:78:26:b9:43:cc:2f:0b:5f:81:b1:95:45:
77:9a:ea:41:86:24:1e:43:df:69:4a:dc:d2:8c:8c:
63:a8:a5:02:97:e0:7c:e5:6c:b0:04:b4:fa:9c:58:
f6:e3:cc:31:85:56:31:12:66:c9:45:10:90:3c:fd:
49:75:78:b7:f8:70:f0:d2:24:ce:25:7e:f6:74:5f:
d2:7e:7d:7f:6d:9f:f2:bb:6c:57:f2:63:4b:82:97:
22:5f:fd:10:2c:2f:01:23:e8:7b:71:1e:d1:ff:ae:
03:49:27:5e:13:87:13:cc:95:62:61:d6:fb:71:79:
2c:6d:47:d9:23:7c:b1:85:0c:b5:01:47:69:13:97:
9b:ad:39:01:d3:bf:2d:7e:81:11:4d:8e:76:29:e0:
63:55:ad:e5:e3:09:2c:89:b1:6e:27:cd:b2:46:3f:
13:4b:ff:8b:6a:6e:a6:17:19:4d:9d:37:db:2e:f0:
f8:d5:b1:ec:ca:07:1f:7a:1a:13:b7:2e:e3:17:51:
03:29:98:2d:99:36:1a:05:da:f3:1e:30:e2:7f:2b:
ef:ef:d9:a1:ce:7d:23:af:a0:53:8c:d6:b4:86:6a:
44:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:15:E5:85:AE:34:5C:B6:1E:7D:FA:CD:18:C8:BA:81:29:D7:BB:4C
X509v3 Authority Key Identifier:
keyid:3E:C9:FB:0D:13:55:2A:AD:04:F3:AA:AE:B5:8D:4D:D4:E7:CF:40:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Psn7DRNVKq0E86qutY1N1OfPQPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6ccab3-479b-4da8-ae98-2cb6e3fdf9cd/1/Psn7DRNVKq0E86qutY1N1OfPQPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6ccab3-479b-4da8-ae98-2cb6e3fdf9cd/1/Psn7DRNVKq0E86qutY1N1OfPQPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:3e:d4:c9:b8:f0:72:0f:c3:1c:7d:e1:60:51:1f:e9:ce:db:
a0:8a:ef:2a:d1:22:44:d9:a3:9a:dc:78:43:ad:54:60:6a:a9:
e4:d3:b1:be:d5:97:36:b3:a3:fb:71:a8:40:56:30:49:84:92:
a9:a2:16:d4:8a:44:39:0a:42:03:73:92:ca:1e:1a:57:b5:e3:
19:5c:22:77:6a:54:54:17:9f:5f:81:20:a3:e5:7a:43:45:25:
99:98:1d:10:83:92:fc:6d:94:1e:48:f5:55:21:2c:ee:19:8e:
47:3b:d4:cb:30:14:90:2a:6a:3d:b9:6b:2f:b7:5d:3a:0b:b0:
57:8c:8f:3b:ef:cb:07:af:9a:32:28:06:05:41:32:ee:0f:f9:
a3:82:c0:ca:96:3c:a8:a5:ae:8c:0d:48:87:f1:9f:69:6b:60:
b5:d2:6c:a6:c6:d4:32:7c:b9:57:40:44:f2:95:0c:43:c0:7d:
14:02:26:1d:c0:b9:ae:d2:ea:76:b6:aa:b7:41:e3:e6:e3:1c:
53:df:d5:72:13:35:b8:9f:b5:63:68:47:cb:b9:0b:b4:0f:27:
32:96:0d:d4:24:b1:44:47:8f:c9:f8:9c:cb:b5:3f:28:69:fc:
c0:49:37:68:ec:b6:d6:f0:ec:af:86:f1:f8:be:b5:c0:32:49:
07:73:ab:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 09:52:47 2025 by rpki-client