Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3e3324-6e60-45a5-9433-e057a8bdcf96/1/PrYnJBMoJOVJBuJAqIA2QZo2W4Q.mft
File: PrYnJBMoJOVJBuJAqIA2QZo2W4Q.mft (raw, json)
Hash identifier: tgzKM62ofmN1Oopa9zpwGOHBJJ7vtzRwqq4YSOrTTxo=
Subject key identifier: 7B:ED:AA:42:EF:F8:F8:B2:C5:72:30:FC:69:D7:52:A0:A9:5C:8E:05
Authority key identifier: 3E:B6:27:24:13:28:24:E5:49:06:E2:40:A8:80:36:41:9A:36:5B:84
Certificate issuer: /CN=3eb62724132824e54906e240a88036419a365b84
Certificate serial: 0199FBEA83050B5D69D56B36A16126D49904
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PrYnJBMoJOVJBuJAqIA2QZo2W4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3e3324-6e60-45a5-9433-e057a8bdcf96/1/PrYnJBMoJOVJBuJAqIA2QZo2W4Q.mft
Manifest number: 13
Signing time: Sun 19 Oct 2025 10:01:14 +0000
Manifest this update: Sun 19 Oct 2025 10:01:14 +0000
Manifest next update: Mon 20 Oct 2025 10:01:14 +0000
Files and hashes: 1: LKYEcHRv13hCEn2ITZ6Ji002NW4.roa (hash: XBnCCt2ig9Uvd5g1UVG/Ee+HEig1GAa0vstmiIJNytc=)
2: PrYnJBMoJOVJBuJAqIA2QZo2W4Q.crl (hash: mjPvQU6vNGeCkHqCk6xOu29QWQ74k4sw/PeL8ZUjFog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/3e3324-6e60-45a5-9433-e057a8bdcf96/1/PrYnJBMoJOVJBuJAqIA2QZo2W4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/3e3324-6e60-45a5-9433-e057a8bdcf96/1/PrYnJBMoJOVJBuJAqIA2QZo2W4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/PrYnJBMoJOVJBuJAqIA2QZo2W4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:83:05:0b:5d:69:d5:6b:36:a1:61:26:d4:99:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eb62724132824e54906e240a88036419a365b84
Validity
Not Before: Oct 19 10:01:14 2025 GMT
Not After : Oct 20 10:01:14 2025 GMT
Subject: CN=7bedaa42eff8f8b2c57230fc69d752a0a95c8e05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:70:d3:bd:a9:16:1d:8b:85:40:dd:86:5c:73:
55:5f:f9:f7:57:0c:70:f2:6b:44:da:c6:87:fc:78:
de:bd:3c:1e:a3:c3:18:60:ed:1c:03:de:27:46:33:
ad:f9:86:19:5e:4d:7c:ca:69:64:7b:00:c8:b8:41:
19:3c:51:02:64:da:a5:cf:db:95:de:78:36:5c:aa:
ac:e2:37:72:fc:97:ff:f0:27:1b:33:a5:b4:03:3d:
e5:a0:5f:a7:7c:3c:ab:fe:bf:40:16:27:b7:17:83:
51:6f:ad:97:4f:db:e5:de:27:58:4e:cf:3a:64:ec:
3f:3f:c9:8b:5d:e9:02:59:58:80:a6:ce:ce:68:ac:
84:91:f6:22:4b:c8:18:fb:82:40:ac:c7:27:00:44:
c5:b7:7d:d6:7c:e5:40:16:24:88:82:bb:5a:ea:10:
4b:77:dc:48:97:aa:b1:e5:f6:8f:93:e8:37:63:5c:
02:da:78:38:6d:2d:02:be:1f:f5:7c:4e:6d:99:69:
bc:b0:ec:cf:36:f3:24:c9:cb:f3:ce:4a:4f:b0:08:
cc:82:f4:b6:6d:9b:27:d1:cd:53:19:59:de:69:07:
89:32:7b:65:d8:36:b6:e6:17:c5:d5:ac:17:ef:ba:
74:99:79:7e:10:8a:d2:75:3c:57:90:f8:10:fa:3d:
26:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:ED:AA:42:EF:F8:F8:B2:C5:72:30:FC:69:D7:52:A0:A9:5C:8E:05
X509v3 Authority Key Identifier:
keyid:3E:B6:27:24:13:28:24:E5:49:06:E2:40:A8:80:36:41:9A:36:5B:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PrYnJBMoJOVJBuJAqIA2QZo2W4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3e3324-6e60-45a5-9433-e057a8bdcf96/1/PrYnJBMoJOVJBuJAqIA2QZo2W4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3e3324-6e60-45a5-9433-e057a8bdcf96/1/PrYnJBMoJOVJBuJAqIA2QZo2W4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:85:93:e4:54:bb:29:73:36:de:7c:05:b3:e5:61:62:20:74:
99:d7:b4:00:a8:6e:59:55:ba:8e:04:5d:3b:37:30:be:e9:79:
55:30:8f:1d:d3:d9:d6:80:8a:4d:15:4e:72:23:d5:a6:5e:eb:
b0:52:0e:3b:91:48:2e:08:d5:7c:0c:61:87:7a:0b:cf:09:ca:
7d:63:0f:98:b9:6c:93:08:1d:d1:b5:a3:37:20:97:cb:a4:6a:
af:24:ca:be:8a:38:a0:0b:7b:5a:df:b0:39:39:b3:07:ec:c5:
19:b1:38:a3:7c:27:42:4a:51:13:27:52:34:15:e0:48:d3:13:
a4:78:0e:f6:91:2d:9a:dd:6c:99:0b:b5:8b:f2:ae:a5:a4:7b:
94:0b:a1:83:1a:d5:d8:22:66:02:9a:58:92:0a:f0:c5:38:8e:
b1:72:b5:8c:36:c3:73:15:3b:bc:12:4d:07:09:f2:18:c1:38:
04:97:d0:42:af:db:d4:6f:89:fc:84:b9:1c:a8:2c:14:f5:ce:
55:4d:40:84:63:0b:e4:e7:51:be:eb:b9:f7:e9:62:11:ed:6e:
63:f7:8e:30:a7:45:7b:db:1a:9c:04:4b:c4:07:bf:a8:76:ac:
b7:73:6e:d3:d1:6e:9a:e1:16:84:db:67:b9:be:de:5e:ee:a9:
6e:40:fe:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:40 2025 by rpki-client