Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.mft
File: PSOEt4Txl-oD2sL-2niV_Et0Byk.mft (raw, json)
Hash identifier: hmn7RFDDNiqr+uQJ978PbqedfCSqzlVDoUHvkk8WOhg=
Subject key identifier: 3B:37:F9:01:E0:6B:C9:8B:A4:81:86:D2:CB:D3:67:B0:50:67:C0:D4
Authority key identifier: 3D:23:84:B7:84:F1:97:EA:03:DA:C2:FE:DA:78:95:FC:4B:74:07:29
Certificate issuer: /CN=3d2384b784f197ea03dac2feda7895fc4b740729
Certificate serial: 019A714A08D4BCEDFDF4EB129238875DC6AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PSOEt4Txl-oD2sL-2niV_Et0Byk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.mft
Manifest number: 1723
Signing time: Tue 11 Nov 2025 05:01:08 +0000
Manifest this update: Tue 11 Nov 2025 05:01:08 +0000
Manifest next update: Wed 12 Nov 2025 05:01:08 +0000
Files and hashes: 1: Iu-aA6mIgmV7NRaHZwfWxVQwunE.roa (hash: o5Wzr2WPXf+6jJuX+5+5esP5UlB6RWICl6cgQsSyWJw=)
2: PSOEt4Txl-oD2sL-2niV_Et0Byk.crl (hash: whbHLb38zTRG5wmbtBYTDziv+GAQ8wCf+On1BTQqkjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.mft
rsync://rpki.ripe.net/repository/DEFAULT/PSOEt4Txl-oD2sL-2niV_Et0Byk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:08:d4:bc:ed:fd:f4:eb:12:92:38:87:5d:c6:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d2384b784f197ea03dac2feda7895fc4b740729
Validity
Not Before: Nov 11 05:01:08 2025 GMT
Not After : Nov 12 05:01:08 2025 GMT
Subject: CN=3b37f901e06bc98ba48186d2cbd367b05067c0d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:9f:5b:3c:70:45:3e:47:2d:38:a2:59:12:df:
c4:28:73:48:10:52:b3:6c:81:39:90:57:d3:07:1a:
b0:0e:9e:b0:79:97:31:b7:9b:06:14:6b:03:c9:e7:
cf:60:00:e1:93:59:f7:51:7b:2f:77:96:1b:83:63:
57:1e:a2:64:ea:c0:c7:fe:9d:d9:60:ca:ca:6a:f1:
de:e5:1a:3c:3c:2f:a4:3b:e7:5b:45:49:d1:4b:63:
b4:23:5e:24:cc:59:e2:4e:81:df:5e:0e:d6:a8:e3:
9e:f1:7e:6f:ae:29:11:60:0c:20:40:ac:25:3e:90:
5d:e9:42:f1:fe:05:59:73:7c:21:5a:d4:f7:02:d9:
77:ad:8e:5a:c5:49:8f:24:ba:e7:a3:c6:14:c3:6d:
67:ea:43:a4:39:43:f3:15:d5:73:9d:2f:73:a4:5d:
a3:d9:14:38:13:de:e4:5b:60:da:61:73:d3:89:9b:
c4:a3:84:0c:ad:c2:e4:6e:75:af:15:16:de:1f:26:
7c:f0:88:0e:7a:9d:8c:89:5d:3d:5a:6d:72:fa:38:
71:5c:9f:e5:f0:45:e5:99:50:1a:0d:8e:2e:69:03:
1d:9c:f5:25:1d:b5:da:d0:a8:28:79:6b:5c:76:64:
bf:50:c7:e4:a1:17:5e:2d:de:48:65:18:44:c3:a4:
e2:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:37:F9:01:E0:6B:C9:8B:A4:81:86:D2:CB:D3:67:B0:50:67:C0:D4
X509v3 Authority Key Identifier:
keyid:3D:23:84:B7:84:F1:97:EA:03:DA:C2:FE:DA:78:95:FC:4B:74:07:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PSOEt4Txl-oD2sL-2niV_Et0Byk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:3d:f5:ce:cd:5c:2d:d3:62:d1:5d:c6:ea:6c:ee:b7:44:74:
8f:4b:9d:e3:a9:eb:c1:b2:cd:d9:72:b5:a2:af:d2:07:0c:b4:
33:ce:0b:fe:1f:66:c0:de:58:b0:15:a9:3f:15:7a:07:6f:ec:
70:66:97:4f:b2:ae:00:e8:f6:36:15:ab:04:0b:43:3b:3b:c1:
5a:79:0a:79:54:d3:92:1d:e6:99:22:33:f5:cc:56:20:80:86:
00:81:e6:ce:fa:c3:ac:a1:e8:53:77:ac:1e:a8:1a:38:d6:30:
f4:c5:7a:4d:ee:d7:b2:5b:ea:1b:c0:76:8c:2b:be:fc:a1:9c:
be:c2:d1:99:3c:36:72:d8:c5:9c:ab:90:13:f4:50:27:e9:39:
00:42:c9:08:40:5e:86:36:6c:6a:bf:49:61:46:76:3c:7a:47:
9d:98:47:38:bb:76:38:38:78:6f:58:c7:2a:c1:b4:bd:f7:7f:
5a:0c:71:94:6c:db:fc:3b:fb:f2:7b:33:9f:da:36:75:1c:92:
9b:b5:33:88:6f:7e:e3:84:fb:84:c3:46:bb:64:c9:87:9f:2e:
2e:11:2f:e4:0b:64:7b:5e:ad:08:29:d3:3f:5f:a1:df:77:86:
73:e4:3e:cc:7d:78:6d:d8:a0:ec:ef:82:ee:60:ef:ff:9d:ff:
0b:82:b4:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:11 2025 by rpki-client