Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/pRZKRoFl6caTvYGEw8pWbKcP1WA.mft
File: pRZKRoFl6caTvYGEw8pWbKcP1WA.mft (raw, json)
Hash identifier: 2EJsEbbof5b6zC7m6+voqDl2KKCqvk+rqrE8LLilVa4=
Subject key identifier: C7:62:D4:11:AD:52:30:2B:8F:80:D7:95:9A:C3:1D:34:02:4A:40:2C
Authority key identifier: A5:16:4A:46:81:65:E9:C6:93:BD:81:84:C3:CA:56:6C:A7:0F:D5:60
Certificate issuer: /CN=a5164a468165e9c693bd8184c3ca566ca70fd560
Certificate serial: 0198D54DD9430FC04F578C6F6DF87D46DB49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pRZKRoFl6caTvYGEw8pWbKcP1WA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/pRZKRoFl6caTvYGEw8pWbKcP1WA.mft
Manifest number: 010B
Signing time: Sat 23 Aug 2025 05:01:45 +0000
Manifest this update: Sat 23 Aug 2025 05:01:45 +0000
Manifest next update: Sun 24 Aug 2025 05:01:45 +0000
Files and hashes: 1: pRZKRoFl6caTvYGEw8pWbKcP1WA.crl (hash: Aj6CwFvJCRW70jCOUjz4lRdGSFX8i91GOZZw2H21sF8=)
2: rIL66Wr2JO0hUiDgtrzPfwsPCdg.roa (hash: IzHYSyi3wxidgryTdPg9C85nPJtyfKau5Hu7/N9OG4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/pRZKRoFl6caTvYGEw8pWbKcP1WA.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/pRZKRoFl6caTvYGEw8pWbKcP1WA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pRZKRoFl6caTvYGEw8pWbKcP1WA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:d9:43:0f:c0:4f:57:8c:6f:6d:f8:7d:46:db:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5164a468165e9c693bd8184c3ca566ca70fd560
Validity
Not Before: Aug 23 05:01:45 2025 GMT
Not After : Aug 24 05:01:45 2025 GMT
Subject: CN=c762d411ad52302b8f80d7959ac31d34024a402c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:df:a0:7b:26:62:da:fd:ef:80:03:39:62:42:
c6:b0:3c:17:26:1b:21:31:e6:10:00:b6:63:79:70:
9e:32:c8:6f:c8:53:46:04:ca:be:cf:14:39:41:bb:
43:42:e7:7f:a9:09:99:22:87:40:3c:46:ae:90:20:
2c:72:71:8a:92:bc:6d:a1:85:f4:29:41:54:76:e8:
9c:0b:f6:17:96:a6:0a:a3:08:23:45:38:c2:f0:ab:
17:c8:13:44:3c:b7:98:f8:4d:89:c0:89:4c:bd:9f:
5d:70:79:68:b0:98:b6:c1:9c:6b:1f:44:d2:8f:4b:
38:53:81:72:d1:cd:a7:d8:62:d0:2c:d2:26:07:2f:
51:4e:2a:13:3f:a0:09:75:16:97:a9:d1:f4:dd:85:
0f:28:8f:45:83:6b:3f:07:69:dc:af:fd:25:73:11:
bb:ec:12:73:5a:85:d9:90:2a:f8:2f:12:77:3a:77:
40:6a:91:0a:52:98:16:e9:91:0f:fb:55:27:bf:82:
3d:70:d9:9f:c6:53:96:d1:17:a9:62:69:ac:9f:8c:
2e:68:99:cd:dd:d1:5e:b1:1a:28:11:0d:b2:32:2b:
2d:8e:9d:43:7f:35:c6:53:04:cf:b0:f4:25:8a:24:
b2:46:57:02:31:99:56:96:5a:e4:0c:6f:ea:f0:a4:
fb:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:62:D4:11:AD:52:30:2B:8F:80:D7:95:9A:C3:1D:34:02:4A:40:2C
X509v3 Authority Key Identifier:
keyid:A5:16:4A:46:81:65:E9:C6:93:BD:81:84:C3:CA:56:6C:A7:0F:D5:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pRZKRoFl6caTvYGEw8pWbKcP1WA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/pRZKRoFl6caTvYGEw8pWbKcP1WA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/pRZKRoFl6caTvYGEw8pWbKcP1WA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:92:3f:06:25:82:cf:16:85:f6:50:08:b4:d6:6d:42:61:97:
a9:64:43:57:c3:e0:d0:18:46:a1:41:16:f5:0c:97:29:c7:d3:
93:24:66:a3:ca:0e:e5:e8:71:49:c3:c9:15:f3:33:55:5c:a7:
b5:ec:f0:be:bb:24:bd:9a:6e:7d:a8:e9:28:a2:dc:68:e5:bc:
fa:ff:bd:82:fe:78:0b:99:66:da:f2:69:71:8a:7f:88:bf:52:
4d:af:2e:df:d6:f4:c1:69:29:cd:95:09:79:79:8f:aa:e3:e2:
e7:38:9e:92:63:be:46:04:4b:7f:86:ed:6e:bc:e0:3e:69:21:
a9:77:8d:34:85:f9:2a:93:21:f3:09:00:94:fe:b3:38:9c:ce:
a2:7c:51:79:6b:d2:74:c0:b3:70:52:51:50:7d:a3:94:d8:3e:
fa:92:d2:05:fa:30:cd:13:a4:4c:e2:3e:ac:9d:59:dd:47:14:
54:99:f0:ea:f8:35:37:8e:45:77:06:79:b4:44:58:20:50:c7:
19:2a:a1:b7:88:a8:8d:12:8a:09:eb:8c:33:da:35:3c:a0:c7:
23:0e:66:5c:9b:d2:a4:e5:cc:14:31:49:c1:0e:c8:98:d6:1f:
56:85:38:74:30:60:ca:ed:38:0f:8a:91:f3:d9:e9:21:25:b4:
42:85:c3:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:04:42 2025 by rpki-client