Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/pRZKRoFl6caTvYGEw8pWbKcP1WA.mft
File: pRZKRoFl6caTvYGEw8pWbKcP1WA.mft (raw, json)
Hash identifier: OQVWuSZ78yYyWyLBZgO7K3BK+4OJb5PwU1BMJVy/3Cc=
Subject key identifier: BE:38:D2:72:F7:2E:E5:07:FB:9A:70:57:DE:83:35:1F:82:87:C9:A6
Authority key identifier: A5:16:4A:46:81:65:E9:C6:93:BD:81:84:C3:CA:56:6C:A7:0F:D5:60
Certificate issuer: /CN=a5164a468165e9c693bd8184c3ca566ca70fd560
Certificate serial: 0199FEB4A7FA21955EBDF532876608F98829
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pRZKRoFl6caTvYGEw8pWbKcP1WA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/pRZKRoFl6caTvYGEw8pWbKcP1WA.mft
Manifest number: 01A5
Signing time: Sun 19 Oct 2025 23:01:16 +0000
Manifest this update: Sun 19 Oct 2025 23:01:16 +0000
Manifest next update: Mon 20 Oct 2025 23:01:16 +0000
Files and hashes: 1: pRZKRoFl6caTvYGEw8pWbKcP1WA.crl (hash: xQi2ygTcxg+2+gALhrlOmckKmaQX2yWAUr7CqawsD8I=)
2: rIL66Wr2JO0hUiDgtrzPfwsPCdg.roa (hash: IzHYSyi3wxidgryTdPg9C85nPJtyfKau5Hu7/N9OG4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/pRZKRoFl6caTvYGEw8pWbKcP1WA.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/pRZKRoFl6caTvYGEw8pWbKcP1WA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pRZKRoFl6caTvYGEw8pWbKcP1WA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:a7:fa:21:95:5e:bd:f5:32:87:66:08:f9:88:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5164a468165e9c693bd8184c3ca566ca70fd560
Validity
Not Before: Oct 19 23:01:16 2025 GMT
Not After : Oct 20 23:01:16 2025 GMT
Subject: CN=be38d272f72ee507fb9a7057de83351f8287c9a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:dc:fb:7d:10:59:79:08:75:c5:34:bb:ce:49:
37:10:a5:4c:a6:70:3a:9a:cf:ce:94:67:25:2c:49:
de:1f:3e:3d:5f:ce:7f:f0:5a:20:8f:02:e5:87:47:
21:3c:c8:2a:0e:ba:ba:3e:41:70:ee:25:94:fc:bc:
29:58:0f:83:0c:8c:14:7c:44:64:9b:b4:b0:e4:ee:
95:8b:f2:ce:d3:96:20:0c:96:14:fa:28:51:48:97:
62:b5:cf:8b:2e:8b:d4:13:04:68:08:a0:36:39:99:
f0:ec:09:66:bb:9a:60:65:3e:94:c8:22:99:97:0c:
fe:9f:86:b7:ee:e1:10:c9:9c:da:41:62:08:0c:10:
cd:46:54:94:26:03:35:f1:24:77:cf:3f:55:c7:3c:
9d:8e:2f:15:e9:98:33:12:91:89:78:14:bd:8f:94:
6d:fd:ca:5c:37:b0:9e:6d:c7:a1:c0:40:cd:6e:4b:
5f:36:ab:dc:20:31:af:7b:2e:cf:31:de:24:1b:97:
a0:c8:d3:a8:9e:fa:1b:d4:2d:bd:84:01:f6:91:09:
2c:0f:e6:ba:b0:ff:6d:98:b9:81:af:6d:e8:e5:f9:
a2:be:73:60:64:61:31:b6:e4:38:bb:81:d6:23:78:
fe:a0:08:08:b4:ca:af:40:8e:d3:20:be:49:bf:3d:
7b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:38:D2:72:F7:2E:E5:07:FB:9A:70:57:DE:83:35:1F:82:87:C9:A6
X509v3 Authority Key Identifier:
keyid:A5:16:4A:46:81:65:E9:C6:93:BD:81:84:C3:CA:56:6C:A7:0F:D5:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pRZKRoFl6caTvYGEw8pWbKcP1WA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/pRZKRoFl6caTvYGEw8pWbKcP1WA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/pRZKRoFl6caTvYGEw8pWbKcP1WA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:fb:06:36:dc:56:45:fe:62:5f:2e:e0:91:a7:8c:71:f3:31:
2b:c2:86:55:56:d4:50:5b:29:0c:2f:9f:51:c4:fa:60:46:4c:
fc:13:6c:bc:b7:31:98:f5:ab:25:9b:39:31:0b:f1:bc:0c:72:
a6:df:88:be:4d:c1:b4:57:29:91:97:6a:00:5d:86:8a:b8:8f:
28:5f:34:b5:25:7e:5b:80:a0:53:0d:85:a7:84:ff:9e:24:3e:
f8:f9:09:d2:8f:49:b8:b0:c6:1f:95:86:02:9e:36:20:96:7a:
16:95:42:e7:c6:22:a2:6c:95:28:2e:f3:ba:a3:10:ce:75:9e:
6c:de:d6:1a:68:e7:2a:0b:33:9d:81:b5:f1:67:fc:53:64:19:
91:7c:71:56:c4:d6:55:4b:f1:1b:88:7b:25:2f:66:c2:15:b3:
ae:49:93:dd:ec:80:81:1a:77:42:ce:46:1c:3f:b2:35:3f:1e:
d6:74:99:82:30:ab:19:79:3f:b2:ab:93:fd:c3:be:32:55:73:
69:b8:22:d6:ca:4a:09:6c:92:e7:ab:94:24:05:36:b4:6c:3a:
82:97:b9:ad:3b:e1:60:1c:38:c3:a8:59:98:b3:98:47:cd:e1:
4b:f5:3c:ae:3e:04:67:70:6d:a4:a2:d9:df:4f:e0:ba:16:e6:
75:d2:f7:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:19:39 2025 by rpki-client