Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/6ccab3-479b-4da8-ae98-2cb6e3fdf9cd/1/Psn7DRNVKq0E86qutY1N1OfPQPA.mft
File: Psn7DRNVKq0E86qutY1N1OfPQPA.mft (raw, json)
Hash identifier: jhCSyfBkf5kCT9peAYfy9mmdaMXMu9EENFMYI9oXN+E=
Subject key identifier: 1F:C2:6E:86:2F:12:57:A0:F7:09:C8:35:44:3D:3C:6C:C9:44:2F:13
Authority key identifier: 3E:C9:FB:0D:13:55:2A:AD:04:F3:AA:AE:B5:8D:4D:D4:E7:CF:40:F0
Certificate issuer: /CN=3ec9fb0d13552aad04f3aaaeb58d4dd4e7cf40f0
Certificate serial: 019921B2476E4928692BD97284FD1385832A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Psn7DRNVKq0E86qutY1N1OfPQPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/6ccab3-479b-4da8-ae98-2cb6e3fdf9cd/1/Psn7DRNVKq0E86qutY1N1OfPQPA.mft
Manifest number: 1674
Signing time: Sun 07 Sep 2025 01:02:35 +0000
Manifest this update: Sun 07 Sep 2025 01:02:35 +0000
Manifest next update: Mon 08 Sep 2025 01:02:35 +0000
Files and hashes: 1: Psn7DRNVKq0E86qutY1N1OfPQPA.crl (hash: d4af+bwZDsRR2kCtxJENH1vqNay2QB6yv/iza64/OJY=)
2: yUqCwPk0Ei-cViitt4Gqnb4KxdE.roa (hash: rJJZNa4cHpwDRyt4aQOGhddvG2b+c/8oiLA2xlie2pA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/6ccab3-479b-4da8-ae98-2cb6e3fdf9cd/1/Psn7DRNVKq0E86qutY1N1OfPQPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/6ccab3-479b-4da8-ae98-2cb6e3fdf9cd/1/Psn7DRNVKq0E86qutY1N1OfPQPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Psn7DRNVKq0E86qutY1N1OfPQPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b2:47:6e:49:28:69:2b:d9:72:84:fd:13:85:83:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec9fb0d13552aad04f3aaaeb58d4dd4e7cf40f0
Validity
Not Before: Sep 7 01:02:35 2025 GMT
Not After : Sep 8 01:02:35 2025 GMT
Subject: CN=1fc26e862f1257a0f709c835443d3c6cc9442f13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0c:e3:eb:e8:e7:a4:46:b7:52:2f:75:0b:00:
d6:42:66:96:af:24:38:d3:cf:c4:fa:2f:56:0a:9b:
7b:93:fa:2b:6b:fa:49:7a:cc:22:f5:16:e3:63:94:
f1:d4:97:92:f1:22:8b:7a:73:8e:bc:6d:ae:6d:54:
64:bb:a0:b5:9b:16:7d:b4:a8:6a:35:53:9c:38:46:
b3:0f:1e:f2:4d:37:52:5b:fa:bb:08:b7:13:54:b5:
65:f7:85:a4:10:de:fe:8c:bc:4f:1f:6b:16:6b:98:
62:22:a6:81:a6:2f:55:70:4a:a2:ef:f1:6c:9c:0c:
cb:ce:03:82:1a:c8:65:5a:cc:f4:5b:3e:ee:7e:da:
55:20:9b:d7:89:e9:1b:59:d1:fd:23:78:a6:52:1a:
82:f9:c4:cc:38:aa:17:c6:ab:39:a7:66:73:c1:b9:
ae:bd:a8:2e:1f:b4:2f:78:bc:fe:b7:8c:ee:4f:c6:
44:64:7e:97:f1:68:f4:87:ba:f0:60:2a:50:41:b2:
e7:3c:81:30:2e:6e:ce:f7:a8:94:53:79:55:71:8e:
01:d9:28:52:d8:87:86:6d:71:45:57:e4:f0:d1:63:
15:9d:ed:d1:39:c7:67:6c:59:90:60:d0:92:45:dd:
4a:e7:f1:20:e7:88:3a:13:be:0d:73:fa:f4:c5:0c:
23:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:C2:6E:86:2F:12:57:A0:F7:09:C8:35:44:3D:3C:6C:C9:44:2F:13
X509v3 Authority Key Identifier:
keyid:3E:C9:FB:0D:13:55:2A:AD:04:F3:AA:AE:B5:8D:4D:D4:E7:CF:40:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Psn7DRNVKq0E86qutY1N1OfPQPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6ccab3-479b-4da8-ae98-2cb6e3fdf9cd/1/Psn7DRNVKq0E86qutY1N1OfPQPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6ccab3-479b-4da8-ae98-2cb6e3fdf9cd/1/Psn7DRNVKq0E86qutY1N1OfPQPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:8c:32:dc:e7:01:71:c7:b8:91:dc:a2:0b:45:d2:b2:56:ba:
00:0b:66:37:63:35:ca:ae:b8:0f:12:9a:92:49:a6:c9:8c:4d:
08:5b:bc:1d:af:f9:ae:ff:32:8c:af:8e:1a:07:dc:3e:38:d3:
59:ab:d3:98:dd:04:48:08:ca:6b:92:09:ac:0d:93:ce:1d:94:
d0:d8:21:98:74:7f:34:e4:01:bd:23:f0:99:43:4e:c9:62:94:
7d:5c:5c:19:f8:b9:5e:7e:80:87:f3:92:55:d5:20:04:5a:58:
b9:88:2c:a5:c2:3d:ee:f9:21:82:b8:47:d0:d6:5f:6a:ea:ba:
ea:40:9e:a2:9e:a8:e7:c7:2d:57:a1:5d:0f:8b:51:70:3d:4f:
a9:11:ea:1e:e8:12:6d:24:95:ec:a1:d1:21:a5:75:77:00:54:
e7:b2:fb:b4:a8:17:79:68:b4:79:be:c7:14:e9:14:c3:2d:ee:
64:cf:0e:92:83:c6:7d:77:cb:4f:49:60:9a:bf:b4:b3:c1:bb:
60:c4:76:46:b6:93:15:a8:67:ca:37:75:e5:38:2e:c1:89:cb:
83:32:f7:b6:50:7e:c1:72:c0:4b:a7:02:57:a7:bd:a3:7d:e6:
dd:b5:2c:3d:f9:e9:60:47:ef:21:44:16:32:21:53:a7:0f:ba:
0f:27:ed:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkhskduSShpK9lyhP0ThYMqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlYzlmYjBkMTM1NTJhYWQwNGYzYWFhZWI1OGQ0ZGQ0ZTdj
ZjQwZjAwHhcNMjUwOTA3MDEwMjM1WhcNMjUwOTA4MDEwMjM1WjAzMTEwLwYDVQQD
EygxZmMyNmU4NjJmMTI1N2EwZjcwOWM4MzU0NDNkM2M2Y2M5NDQyZjEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwzj6+jnpEa3Ui91CwDWQmaWryQ4
08/E+i9WCpt7k/ora/pJeswi9RbjY5Tx1JeS8SKLenOOvG2ubVRku6C1mxZ9tKhq
NVOcOEazDx7yTTdSW/q7CLcTVLVl94WkEN7+jLxPH2sWa5hiIqaBpi9VcEqi7/Fs
nAzLzgOCGshlWsz0Wz7uftpVIJvXiekbWdH9I3imUhqC+cTMOKoXxqs5p2Zzwbmu
vaguH7QveLz+t4zuT8ZEZH6X8Wj0h7rwYCpQQbLnPIEwLm7O96iUU3lVcY4B2ShS
2IeGbXFFV+Tw0WMVne3ROcdnbFmQYNCSRd1K5/Eg54g6E74Nc/r0xQwjqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB/CboYvEleg9wnINUQ9PGzJRC8TMB8GA1UdIwQY
MBaAFD7J+w0TVSqtBPOqrrWNTdTnz0DwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHNuN0RSTlZLcTBFODZxdXRZMU4xT2ZQUVBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny82Y2NhYjMtNDc5Yi00ZGE4LWFlOTgt
MmNiNmUzZmRmOWNkLzEvUHNuN0RSTlZLcTBFODZxdXRZMU4xT2ZQUVBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny82Y2NhYjMtNDc5Yi00ZGE4LWFlOTgtMmNiNmUzZmRmOWNk
LzEvUHNuN0RSTlZLcTBFODZxdXRZMU4xT2ZQUVBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmowy3OcB
cce4kdyiC0XSsla6AAtmN2M1yq64DxKakkmmyYxNCFu8Ha/5rv8yjK+OGgfcPjjT
WavTmN0ESAjKa5IJrA2Tzh2U0NghmHR/NOQBvSPwmUNOyWKUfVxcGfi5Xn6Ah/OS
VdUgBFpYuYgspcI97vkhgrhH0NZfauq66kCeop6o58ctV6FdD4tRcD1PqRHqHugS
bSSV7KHRIaV1dwBU57L7tKgXeWi0eb7HFOkUwy3uZM8OkoPGfXfLT0lgmr+0s8G7
YMR2RraTFahnyjd15TguwYnLgzL3tlB+wXLAS6cCV6e9o33m3bUsPfnpYEfvIUQW
MiFTpw+6Dyft1Q==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:06:20 2025 by rpki-client