Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.mft
File: PSOEt4Txl-oD2sL-2niV_Et0Byk.mft (raw, json)
Hash identifier: U85nJ54+KlXNT/S+rApV0tYUTFYMzLC+AzxIU6wHU4c=
Subject key identifier: 2B:BC:E8:4C:ED:AA:B9:00:49:F4:F5:99:42:EE:B6:14:61:F2:50:DC
Authority key identifier: 3D:23:84:B7:84:F1:97:EA:03:DA:C2:FE:DA:78:95:FC:4B:74:07:29
Certificate issuer: /CN=3d2384b784f197ea03dac2feda7895fc4b740729
Certificate serial: 0199179B2BE7A1B38EE7762B60FFB9341231
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PSOEt4Txl-oD2sL-2niV_Et0Byk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.mft
Manifest number: 1670
Signing time: Fri 05 Sep 2025 02:01:09 +0000
Manifest this update: Fri 05 Sep 2025 02:01:09 +0000
Manifest next update: Sat 06 Sep 2025 02:01:09 +0000
Files and hashes: 1: Iu-aA6mIgmV7NRaHZwfWxVQwunE.roa (hash: o5Wzr2WPXf+6jJuX+5+5esP5UlB6RWICl6cgQsSyWJw=)
2: PSOEt4Txl-oD2sL-2niV_Et0Byk.crl (hash: y6gkvu6Mvw68UYYiPsBMKs8RFHLXYAnh/mNqrsSAnUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.mft
rsync://rpki.ripe.net/repository/DEFAULT/PSOEt4Txl-oD2sL-2niV_Et0Byk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:17:9b:2b:e7:a1:b3:8e:e7:76:2b:60:ff:b9:34:12:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d2384b784f197ea03dac2feda7895fc4b740729
Validity
Not Before: Sep 5 02:01:09 2025 GMT
Not After : Sep 6 02:01:09 2025 GMT
Subject: CN=2bbce84cedaab90049f4f59942eeb61461f250dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9a:bb:a2:13:9c:a6:18:20:ce:50:c4:57:74:
3f:00:b6:60:ad:8c:7f:6b:99:cb:11:87:91:ab:4b:
c1:cb:b9:88:c5:e5:58:a7:23:8e:c1:1c:73:cf:12:
86:2a:72:fb:d9:3f:77:94:50:72:bd:5f:78:eb:fc:
3f:c9:86:2b:f7:31:ee:8d:05:da:e0:37:2b:47:b6:
61:62:09:5f:3b:d2:12:7c:03:a3:c2:8f:75:44:8b:
96:24:ca:78:52:6c:87:f7:23:0d:cc:e1:2f:9f:12:
c5:e1:bc:1b:1e:0b:d7:7e:05:a4:57:3b:e4:0f:7d:
a6:f5:74:c4:51:57:4a:5c:ec:e8:cf:44:50:c2:e3:
93:6f:70:a5:c6:d0:d8:78:c0:ad:20:50:c8:cf:0e:
c8:79:42:5c:ad:03:5b:7d:a5:95:f1:be:d9:6b:20:
af:e4:8e:96:c4:0c:4b:1a:0d:fe:15:75:a2:92:44:
d4:07:0c:8e:4a:f6:f9:8e:25:0d:67:1c:c3:74:52:
8e:49:ee:bd:d8:4a:98:86:93:e9:2c:c0:25:b6:4e:
30:c7:db:e9:20:30:81:fb:94:3c:44:01:ef:ed:f0:
3e:0f:21:0e:e6:9f:5d:d7:83:3f:93:e5:93:e9:ea:
59:d6:a1:18:dc:c8:7f:eb:36:6c:b0:21:8f:54:39:
04:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:BC:E8:4C:ED:AA:B9:00:49:F4:F5:99:42:EE:B6:14:61:F2:50:DC
X509v3 Authority Key Identifier:
keyid:3D:23:84:B7:84:F1:97:EA:03:DA:C2:FE:DA:78:95:FC:4B:74:07:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PSOEt4Txl-oD2sL-2niV_Et0Byk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:58:b8:26:31:f6:7e:1c:cc:97:49:30:66:aa:23:1c:40:2a:
47:c0:cc:ac:40:ef:a2:e3:a6:10:95:38:51:6c:92:3d:90:ca:
b9:79:e0:d2:65:99:1f:03:f8:86:5c:6f:01:6d:9a:dd:11:52:
7a:ee:d0:1a:e0:66:97:79:38:78:ee:44:78:75:4d:f9:ff:45:
f6:1e:d5:72:84:4d:b2:a2:c9:c2:ab:48:25:1e:3e:42:c8:64:
9b:a2:db:6c:82:f0:77:4f:50:3c:a2:01:8f:81:3b:91:ea:85:
67:69:51:ce:54:54:b0:a9:d1:69:a3:40:c0:dc:2a:bd:b5:10:
ff:51:0e:21:16:35:0c:be:8b:d7:dd:dc:9a:f5:93:ee:d7:46:
f7:7f:a8:ad:98:56:dc:99:35:97:a3:07:fd:2f:94:15:b9:7e:
18:2b:25:9e:a7:9c:5a:36:41:3a:f7:fc:fd:b1:56:b4:a3:67:
ca:ee:7e:4a:f8:26:f6:6e:e0:4a:31:83:2e:76:59:d7:df:fe:
fc:71:79:69:e8:37:d8:b8:19:a2:50:42:5b:85:aa:25:27:fe:
a9:61:4c:08:22:69:ba:d2:5a:66:ad:64:8d:dd:53:87:2e:f9:
22:6f:03:e4:e7:59:dd:69:44:91:d1:86:79:af:a7:98:cb:8c:
5f:ad:1d:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:05:39 2025 by rpki-client