Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/58d14d-6d62-43e1-b6bb-7cb26bc1d4d0/1/pSNBhTlzXL2bC6PCeew1V9cmJlo.mft
File: pSNBhTlzXL2bC6PCeew1V9cmJlo.mft (raw, json)
Hash identifier: W8faRZVgUnnyZsVfuurIXeej57z/ryA9nVYVSfOZkNo=
Subject key identifier: 1C:72:D1:0A:EB:7F:F5:02:CE:80:A5:A1:1D:ED:DE:D4:6B:30:4F:48
Authority key identifier: A5:23:41:85:39:73:5C:BD:9B:0B:A3:C2:79:EC:35:57:D7:26:26:5A
Certificate issuer: /CN=a523418539735cbd9b0ba3c279ec3557d726265a
Certificate serial: 01992330EF5FD07E52DEF1932721740D4535
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pSNBhTlzXL2bC6PCeew1V9cmJlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/58d14d-6d62-43e1-b6bb-7cb26bc1d4d0/1/pSNBhTlzXL2bC6PCeew1V9cmJlo.mft
Manifest number: 1428
Signing time: Sun 07 Sep 2025 08:00:33 +0000
Manifest this update: Sun 07 Sep 2025 08:00:33 +0000
Manifest next update: Mon 08 Sep 2025 08:00:33 +0000
Files and hashes: 1: 8KUZkjjtOyH8rVf3rEamu4d2Fpg.roa (hash: Ub5Ka+iibeNMtT5d651FP9y1wedTUH3xQXSWP3OHFL0=)
2: pSNBhTlzXL2bC6PCeew1V9cmJlo.crl (hash: Wg4Hx1MDex6aX6UIytsHjrxtu7wY5kFRcRAzQF3q5M4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/58d14d-6d62-43e1-b6bb-7cb26bc1d4d0/1/pSNBhTlzXL2bC6PCeew1V9cmJlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/58d14d-6d62-43e1-b6bb-7cb26bc1d4d0/1/pSNBhTlzXL2bC6PCeew1V9cmJlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pSNBhTlzXL2bC6PCeew1V9cmJlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:30:ef:5f:d0:7e:52:de:f1:93:27:21:74:0d:45:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a523418539735cbd9b0ba3c279ec3557d726265a
Validity
Not Before: Sep 7 08:00:33 2025 GMT
Not After : Sep 8 08:00:33 2025 GMT
Subject: CN=1c72d10aeb7ff502ce80a5a11dedded46b304f48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:91:75:68:f9:88:d3:5d:1b:a9:62:f6:7e:e1:
79:dc:9f:3c:db:05:e4:02:44:94:7b:5c:40:a8:d4:
97:26:92:16:70:33:46:d6:ff:57:ba:22:f0:b0:5b:
e8:ff:1f:be:be:6a:bb:08:0c:d4:d4:fd:9e:d2:a4:
90:52:ec:1f:1c:ff:34:a2:f3:14:11:35:96:96:8c:
fd:56:ee:3a:1a:4a:cc:8d:26:aa:1e:b8:13:20:b2:
27:c4:0b:ac:5b:fe:f7:06:2b:cb:81:73:d7:56:88:
38:42:b0:95:e7:40:30:42:f3:a0:4b:80:82:72:f8:
99:61:02:6d:70:c0:58:da:d6:2d:c4:9c:6d:a9:e0:
94:a9:33:7e:02:c8:6f:df:28:53:2f:b3:b8:03:d8:
70:63:c4:2a:36:2c:54:16:24:ab:04:9e:2c:37:a6:
0b:4d:bc:97:60:d5:cd:f2:e5:69:0b:0a:54:69:19:
f5:64:cd:50:b7:42:70:24:cb:80:10:70:44:a3:16:
ab:31:84:6e:45:c6:4f:4a:ec:8b:8a:5f:77:24:2b:
06:ac:df:d4:06:14:80:3b:9c:97:16:e3:66:1d:fa:
a8:14:2d:af:a8:1d:cc:6e:53:56:86:99:42:35:1e:
69:db:17:74:0a:13:4b:fa:4d:9c:94:39:47:c4:df:
a9:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:72:D1:0A:EB:7F:F5:02:CE:80:A5:A1:1D:ED:DE:D4:6B:30:4F:48
X509v3 Authority Key Identifier:
keyid:A5:23:41:85:39:73:5C:BD:9B:0B:A3:C2:79:EC:35:57:D7:26:26:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pSNBhTlzXL2bC6PCeew1V9cmJlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/58d14d-6d62-43e1-b6bb-7cb26bc1d4d0/1/pSNBhTlzXL2bC6PCeew1V9cmJlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/58d14d-6d62-43e1-b6bb-7cb26bc1d4d0/1/pSNBhTlzXL2bC6PCeew1V9cmJlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:e7:d4:97:c0:1d:48:62:18:99:dc:e7:82:30:ba:56:3a:c4:
b0:ed:c8:67:a2:da:89:28:7d:ab:47:65:b5:74:a7:ba:78:f7:
05:19:33:fe:a1:18:00:df:fd:ae:85:46:03:b0:bc:d7:6b:ff:
ed:ab:1a:76:26:22:f6:b8:ff:89:fe:ff:ab:50:82:14:b0:6d:
e0:39:7f:bb:b2:e8:32:7c:7d:a9:58:fe:02:e2:06:db:3b:22:
4c:86:da:76:fb:c8:a0:c8:ae:1a:7e:9a:25:dd:88:31:f3:be:
7d:e4:3c:af:96:73:35:84:5e:42:9e:be:5c:f0:99:4a:cf:c9:
74:7c:6a:72:3e:9d:f0:5b:2c:de:ae:62:8b:5e:b2:ce:43:f6:
f3:51:21:a0:bf:ce:c8:78:ff:d9:19:31:22:2a:f1:e5:9d:b6:
7f:85:e4:4f:18:26:b8:e1:66:fe:a2:35:17:bd:cc:14:06:15:
46:d5:90:c4:03:71:7f:4b:0b:ef:fd:c0:98:e1:c8:d0:e6:d0:
47:6e:40:fe:f3:21:7b:44:77:0a:42:bf:a7:5e:38:5c:31:02:
56:eb:eb:e1:bb:e7:1b:48:00:9e:d3:bf:af:17:4f:bf:05:b4:
c3:15:09:8e:91:4d:f6:5e:47:45:fd:ea:6b:04:5c:49:e5:3e:
5f:df:c7:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:37:02 2025 by rpki-client