Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PrRw_U1nQhL_yCqZNvP-JUvszmY.mft
File: PrRw_U1nQhL_yCqZNvP-JUvszmY.mft (raw, json)
Hash identifier: vtdjiTetLr7ft8P4edx6gIniUnxWWTbNfaTCckIJL2Y=
Subject key identifier: 87:BD:50:BB:9B:30:A2:A4:AF:24:47:14:7A:D4:51:A6:A2:64:B5:DA
Authority key identifier: 3E:B4:70:FD:4D:67:42:12:FF:C8:2A:99:36:F3:FE:25:4B:EC:CE:66
Certificate issuer: /CN=3eb470fd4d674212ffc82a9936f3fe254becce66
Certificate serial: 019A014802C113EF0132CDDAA29221300052
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PrRw_U1nQhL_yCqZNvP-JUvszmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PrRw_U1nQhL_yCqZNvP-JUvszmY.mft
Manifest number: 16E5
Signing time: Mon 20 Oct 2025 11:01:27 +0000
Manifest this update: Mon 20 Oct 2025 11:01:27 +0000
Manifest next update: Tue 21 Oct 2025 11:01:27 +0000
Files and hashes: 1: PrRw_U1nQhL_yCqZNvP-JUvszmY.crl (hash: NZ8IYLsHVZkVb/g6fQzEi4sNtUpUm+FEnIG+hz7CiPU=)
2: aATeS7_Zg3KdAOaKx-n1ZvynPH4.roa (hash: BiTKK6ZatcQ+uoSfiABBAw2jPEjkMuOpjqegStTZ06Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PrRw_U1nQhL_yCqZNvP-JUvszmY.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PrRw_U1nQhL_yCqZNvP-JUvszmY.mft
rsync://rpki.ripe.net/repository/DEFAULT/PrRw_U1nQhL_yCqZNvP-JUvszmY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 11:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:48:02:c1:13:ef:01:32:cd:da:a2:92:21:30:00:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eb470fd4d674212ffc82a9936f3fe254becce66
Validity
Not Before: Oct 20 11:01:27 2025 GMT
Not After : Oct 21 11:01:27 2025 GMT
Subject: CN=87bd50bb9b30a2a4af2447147ad451a6a264b5da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1e:6d:f3:95:7a:33:a6:2f:5d:2d:ca:c8:a6:
d8:65:26:d5:8c:2e:be:73:56:0b:00:9f:7e:fd:58:
cf:e9:3b:7a:e2:70:f0:e6:ca:d3:68:c5:0a:df:56:
d5:a2:ef:f2:4b:e4:b3:f5:5f:b9:e6:cd:3c:09:e7:
08:d6:3e:fb:94:74:cf:df:33:a6:c1:ce:13:4e:cf:
33:37:99:ea:51:ff:ba:a8:b3:99:45:a8:86:9c:ce:
d7:78:b5:f1:cd:7b:91:63:20:48:fc:63:5d:3c:66:
4c:cb:a6:46:4a:be:37:93:fe:21:e7:71:ef:15:19:
d5:7b:1a:e9:3b:a4:e9:57:3b:90:bf:2a:19:04:4e:
ba:ba:91:a7:85:2f:20:62:dc:e0:f9:2a:b9:01:71:
44:69:60:c2:d8:ea:39:e8:f8:df:9e:0d:b6:2b:ba:
07:ad:25:e8:5e:8e:49:4b:6c:02:98:49:3b:da:ae:
7f:d1:44:35:8d:1a:4c:09:84:d5:4e:ec:29:6e:09:
55:ee:aa:cf:5a:07:19:ed:e0:6a:ba:c8:de:71:b2:
da:7c:6e:76:a1:7a:0c:bd:c2:2a:0d:9a:c2:82:16:
bb:52:43:5c:2f:40:27:46:bb:fa:6e:e6:b2:34:12:
7a:5e:ee:01:ac:7a:2d:74:a2:66:ec:9a:b4:fb:cc:
a6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:BD:50:BB:9B:30:A2:A4:AF:24:47:14:7A:D4:51:A6:A2:64:B5:DA
X509v3 Authority Key Identifier:
keyid:3E:B4:70:FD:4D:67:42:12:FF:C8:2A:99:36:F3:FE:25:4B:EC:CE:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PrRw_U1nQhL_yCqZNvP-JUvszmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PrRw_U1nQhL_yCqZNvP-JUvszmY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PrRw_U1nQhL_yCqZNvP-JUvszmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:be:13:e1:67:1c:3d:ef:c3:22:81:3a:0b:37:ee:fc:75:b5:
a0:ff:8a:a7:c1:c7:d2:25:86:89:0e:1b:94:62:3d:47:3d:1d:
a0:c5:c8:fd:cf:22:e0:bc:44:7f:a2:d1:5a:59:6b:7f:0f:ef:
cd:43:6f:cb:68:b6:55:43:7e:c7:a8:90:ef:e3:35:5b:ff:c0:
85:67:dc:01:40:92:cc:be:a6:b7:9f:8a:4f:46:3a:7b:f6:1f:
9e:3d:1e:8a:12:44:74:d9:1b:02:6c:7a:59:c3:26:dc:70:43:
69:e3:bd:33:32:7b:70:96:15:c8:d5:8c:9f:53:f1:1f:7f:e3:
2f:f0:0e:1d:df:3a:b8:0c:e9:af:c6:85:f0:ec:de:54:48:b1:
78:bb:7c:29:fd:45:62:bb:40:81:e8:b6:8e:78:13:74:4f:40:
44:d8:60:29:db:07:54:7c:32:94:0a:71:c5:5b:4e:f3:b8:ca:
5d:7d:c8:c1:fd:ac:82:86:27:f2:06:92:d6:e0:3d:ae:bc:67:
9d:44:3d:83:4c:80:d0:77:81:6f:1a:5f:06:9b:94:c0:c4:de:
15:8f:65:d1:77:b8:58:bd:74:88:44:06:c7:2e:5e:69:98:4d:
db:f9:2f:38:ed:53:f4:cf:26:aa:bf:43:e8:64:d1:74:14:dd:
40:58:3e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:31:47 2025 by rpki-client