Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/6ccab3-479b-4da8-ae98-2cb6e3fdf9cd/1/Psn7DRNVKq0E86qutY1N1OfPQPA.mft
File: Psn7DRNVKq0E86qutY1N1OfPQPA.mft (raw, json)
Hash identifier: OY46CNp50WbnGUwJ4zfRH/1JKCZ+j4kRcoDqfrb/Vts=
Subject key identifier: 5B:44:9C:A5:02:39:6A:C3:FF:9E:ED:E4:39:F5:FA:24:59:C3:07:2B
Authority key identifier: 3E:C9:FB:0D:13:55:2A:AD:04:F3:AA:AE:B5:8D:4D:D4:E7:CF:40:F0
Certificate issuer: /CN=3ec9fb0d13552aad04f3aaaeb58d4dd4e7cf40f0
Certificate serial: 0197485543E14CF06DD35B9076BD9C2A5CC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Psn7DRNVKq0E86qutY1N1OfPQPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/6ccab3-479b-4da8-ae98-2cb6e3fdf9cd/1/Psn7DRNVKq0E86qutY1N1OfPQPA.mft
Manifest number: 157F
Signing time: Sat 07 Jun 2025 03:00:36 +0000
Manifest this update: Sat 07 Jun 2025 03:00:36 +0000
Manifest next update: Sun 08 Jun 2025 03:00:36 +0000
Files and hashes: 1: Psn7DRNVKq0E86qutY1N1OfPQPA.crl (hash: enejGAuyLBQzRWWr4Q7jPajL1WHf3O6A+HPlFJ8swBg=)
2: yUqCwPk0Ei-cViitt4Gqnb4KxdE.roa (hash: rJJZNa4cHpwDRyt4aQOGhddvG2b+c/8oiLA2xlie2pA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/6ccab3-479b-4da8-ae98-2cb6e3fdf9cd/1/Psn7DRNVKq0E86qutY1N1OfPQPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/6ccab3-479b-4da8-ae98-2cb6e3fdf9cd/1/Psn7DRNVKq0E86qutY1N1OfPQPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Psn7DRNVKq0E86qutY1N1OfPQPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 03:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:55:43:e1:4c:f0:6d:d3:5b:90:76:bd:9c:2a:5c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec9fb0d13552aad04f3aaaeb58d4dd4e7cf40f0
Validity
Not Before: Jun 7 03:00:36 2025 GMT
Not After : Jun 8 03:00:36 2025 GMT
Subject: CN=5b449ca502396ac3ff9eede439f5fa2459c3072b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:07:d5:2c:40:17:f7:56:5a:47:8a:45:e9:35:
af:1b:d6:02:64:02:63:3f:3d:44:7b:51:5e:32:49:
00:5c:f2:d4:d8:6d:e5:a8:78:4f:71:9e:d9:9e:5e:
19:e1:b9:2d:81:94:81:8d:62:19:9e:f8:cd:9e:7a:
bb:f6:c6:d2:57:26:8e:39:23:f2:bf:c0:b2:c5:57:
cf:91:c1:2c:ee:04:59:57:e5:c8:eb:c1:98:94:e9:
1e:41:b6:70:6f:71:15:b9:42:96:af:38:ae:b1:17:
a5:d9:bb:23:f7:b0:d1:c7:60:6a:b8:6c:55:91:75:
89:de:67:3b:e0:15:fa:96:39:d0:b7:91:b9:9f:14:
52:af:06:8c:cf:0a:45:6b:51:60:b0:1f:38:ea:cf:
6a:64:21:4c:a8:14:11:9f:ed:a7:08:dc:f5:c0:57:
6a:b4:fa:49:73:f1:65:1e:56:ef:af:b6:8c:24:65:
47:9e:aa:5e:e5:e5:fe:b2:9d:3e:a6:8a:b0:4f:f5:
5f:fc:b0:d0:73:b2:9a:de:08:0f:9b:8a:ea:60:c0:
68:45:9a:05:45:09:f2:73:9e:8f:df:35:b7:49:af:
80:a3:82:3c:71:76:e2:f6:7b:f1:dc:5b:48:72:82:
d2:24:d9:f7:2c:3f:64:2a:2a:d2:82:8c:b4:e8:60:
f2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:44:9C:A5:02:39:6A:C3:FF:9E:ED:E4:39:F5:FA:24:59:C3:07:2B
X509v3 Authority Key Identifier:
keyid:3E:C9:FB:0D:13:55:2A:AD:04:F3:AA:AE:B5:8D:4D:D4:E7:CF:40:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Psn7DRNVKq0E86qutY1N1OfPQPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6ccab3-479b-4da8-ae98-2cb6e3fdf9cd/1/Psn7DRNVKq0E86qutY1N1OfPQPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6ccab3-479b-4da8-ae98-2cb6e3fdf9cd/1/Psn7DRNVKq0E86qutY1N1OfPQPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:69:9b:93:e3:10:54:3b:7d:d4:8a:76:31:42:9d:21:9f:47:
2f:21:ad:83:18:81:2a:3f:6e:ea:70:c7:01:87:ff:a4:14:31:
fb:7f:b7:85:ad:2b:5e:46:b6:2e:af:06:8c:ac:de:fd:4f:f9:
80:f8:61:f1:bd:34:f4:52:76:2a:68:8b:48:7c:55:a8:02:97:
58:4e:13:6e:b3:c9:dc:c0:51:39:8e:dd:b4:d3:e0:7c:eb:69:
32:f0:4a:58:ae:d8:9f:8a:27:35:7c:76:2c:d0:73:bf:d8:4b:
84:61:66:fa:a2:fa:ed:46:56:ef:03:a8:6f:a8:7a:59:f4:c5:
a7:88:4f:66:ea:6f:c4:7d:6d:a8:7e:3a:62:a4:78:60:ae:8a:
95:eb:7b:79:08:66:0a:2b:41:60:7b:2c:c3:2a:65:72:2e:99:
99:cc:98:47:78:1f:bf:6b:3e:14:9c:a3:b4:7e:d1:47:e2:bf:
81:1e:9a:61:8b:e5:0d:bc:b5:26:90:66:18:37:ce:56:e4:aa:
0a:a7:6c:60:b3:37:44:5b:32:59:f6:cc:86:42:2e:0d:a9:f1:
bb:e4:fa:0d:2c:30:43:97:36:6f:d4:30:2d:46:16:eb:8c:50:
36:9c:a1:fc:9f:33:cf:81:9b:19:f4:ea:a2:90:99:87:7b:a0:
81:d8:00:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIVUPhTPBt01uQdr2cKlzAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlYzlmYjBkMTM1NTJhYWQwNGYzYWFhZWI1OGQ0ZGQ0ZTdj
ZjQwZjAwHhcNMjUwNjA3MDMwMDM2WhcNMjUwNjA4MDMwMDM2WjAzMTEwLwYDVQQD
Eyg1YjQ0OWNhNTAyMzk2YWMzZmY5ZWVkZTQzOWY1ZmEyNDU5YzMwNzJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7QfVLEAX91ZaR4pF6TWvG9YCZAJj
Pz1Ee1FeMkkAXPLU2G3lqHhPcZ7Znl4Z4bktgZSBjWIZnvjNnnq79sbSVyaOOSPy
v8CyxVfPkcEs7gRZV+XI68GYlOkeQbZwb3EVuUKWrziusRel2bsj97DRx2BquGxV
kXWJ3mc74BX6ljnQt5G5nxRSrwaMzwpFa1FgsB846s9qZCFMqBQRn+2nCNz1wFdq
tPpJc/FlHlbvr7aMJGVHnqpe5eX+sp0+poqwT/Vf/LDQc7Ka3ggPm4rqYMBoRZoF
RQnyc56P3zW3Sa+Ao4I8cXbi9nvx3FtIcoLSJNn3LD9kKirSgoy06GDyywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFtEnKUCOWrD/57t5Dn1+iRZwwcrMB8GA1UdIwQY
MBaAFD7J+w0TVSqtBPOqrrWNTdTnz0DwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHNuN0RSTlZLcTBFODZxdXRZMU4xT2ZQUVBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny82Y2NhYjMtNDc5Yi00ZGE4LWFlOTgt
MmNiNmUzZmRmOWNkLzEvUHNuN0RSTlZLcTBFODZxdXRZMU4xT2ZQUVBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny82Y2NhYjMtNDc5Yi00ZGE4LWFlOTgtMmNiNmUzZmRmOWNk
LzEvUHNuN0RSTlZLcTBFODZxdXRZMU4xT2ZQUVBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfmmbk+MQ
VDt91Ip2MUKdIZ9HLyGtgxiBKj9u6nDHAYf/pBQx+3+3ha0rXka2Lq8GjKze/U/5
gPhh8b009FJ2KmiLSHxVqAKXWE4TbrPJ3MBROY7dtNPgfOtpMvBKWK7Yn4onNXx2
LNBzv9hLhGFm+qL67UZW7wOob6h6WfTFp4hPZupvxH1tqH46YqR4YK6Klet7eQhm
CitBYHsswyplci6ZmcyYR3gfv2s+FJyjtH7RR+K/gR6aYYvlDby1JpBmGDfOVuSq
CqdsYLM3RFsyWfbMhkIuDanxu+T6DSwwQ5c2b9QwLUYW64xQNpyh/J8zz4GbGfTq
opCZh3uggdgArA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 12:26:50 2025 by rpki-client