Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/642897-530e-4613-af84-0da300c7c63d/1/S_PRgzZkK2qayK7f-_eu5uXmKfQ.mft
File: S_PRgzZkK2qayK7f-_eu5uXmKfQ.mft (raw, json)
Hash identifier: e9sqDPexgqKeH+EolrWdwGbP7qIYqqPyccotQCVtO1o=
Subject key identifier: 17:F6:10:48:B2:AA:BB:1A:8E:C9:CF:8F:9F:60:AF:CF:B1:0A:44:47
Authority key identifier: 4B:F3:D1:83:36:64:2B:6A:9A:C8:AE:DF:FB:F7:AE:E6:E5:E6:29:F4
Certificate issuer: /CN=4bf3d18336642b6a9ac8aedffbf7aee6e5e629f4
Certificate serial: 0199FC218C3C38283E9B7B6DCB05A0ACE422
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S_PRgzZkK2qayK7f-_eu5uXmKfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/642897-530e-4613-af84-0da300c7c63d/1/S_PRgzZkK2qayK7f-_eu5uXmKfQ.mft
Manifest number: 1698
Signing time: Sun 19 Oct 2025 11:01:20 +0000
Manifest this update: Sun 19 Oct 2025 11:01:20 +0000
Manifest next update: Mon 20 Oct 2025 11:01:20 +0000
Files and hashes: 1: S_PRgzZkK2qayK7f-_eu5uXmKfQ.crl (hash: UhH4UYTJmX7pLcBX/cDo0rzQif8mFHUSWl1Ig0yyVYc=)
2: zO3b4_gkop7bpRFmwUyQSnP3CuQ.roa (hash: KQ8uWDK74BxQd55e4CkD8HOGjkQGRjBDcA3U74QNwgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/642897-530e-4613-af84-0da300c7c63d/1/S_PRgzZkK2qayK7f-_eu5uXmKfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/642897-530e-4613-af84-0da300c7c63d/1/S_PRgzZkK2qayK7f-_eu5uXmKfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/S_PRgzZkK2qayK7f-_eu5uXmKfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:8c:3c:38:28:3e:9b:7b:6d:cb:05:a0:ac:e4:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bf3d18336642b6a9ac8aedffbf7aee6e5e629f4
Validity
Not Before: Oct 19 11:01:20 2025 GMT
Not After : Oct 20 11:01:20 2025 GMT
Subject: CN=17f61048b2aabb1a8ec9cf8f9f60afcfb10a4447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d4:e7:52:06:b5:16:5c:d8:24:50:11:3b:f7:
39:6a:be:fd:cb:f8:9d:70:f8:de:b8:c2:48:7a:26:
0b:27:cc:05:f3:22:fd:52:23:e7:3d:1e:21:97:04:
6b:b2:77:c7:7a:83:2e:77:2a:b1:e4:6f:e6:c2:83:
a2:85:b8:02:8f:7c:86:36:f6:22:0f:b9:38:bc:dd:
2c:ef:82:1a:4a:0a:4a:b4:80:5f:c2:18:73:60:cc:
27:5d:fa:c0:68:db:e1:f1:60:d8:54:22:d4:5a:c3:
ea:d4:cd:be:45:a1:5c:91:78:97:48:74:ed:7d:1b:
f2:84:c7:2c:9b:40:96:eb:19:f7:98:da:55:b8:b1:
55:32:6c:59:cc:2c:43:58:3b:68:0c:0f:d8:f0:99:
31:86:f2:45:c4:13:db:4f:03:c8:ac:6a:10:69:60:
a1:1f:36:08:19:47:15:01:6e:e0:aa:39:ec:f3:8d:
60:4b:d8:55:d5:95:08:d4:69:14:87:1e:36:6d:a9:
6c:18:4f:b7:cc:40:a4:d8:2b:58:59:83:21:37:78:
dc:4c:fa:72:8c:ab:54:6f:bc:87:67:3e:5f:a7:85:
ca:6a:b8:0b:c5:94:c0:c7:6c:27:a6:5f:bf:1a:33:
b4:3e:41:bd:f1:18:7e:e4:c6:b9:6c:45:57:31:85:
9f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:F6:10:48:B2:AA:BB:1A:8E:C9:CF:8F:9F:60:AF:CF:B1:0A:44:47
X509v3 Authority Key Identifier:
keyid:4B:F3:D1:83:36:64:2B:6A:9A:C8:AE:DF:FB:F7:AE:E6:E5:E6:29:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_PRgzZkK2qayK7f-_eu5uXmKfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/642897-530e-4613-af84-0da300c7c63d/1/S_PRgzZkK2qayK7f-_eu5uXmKfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/642897-530e-4613-af84-0da300c7c63d/1/S_PRgzZkK2qayK7f-_eu5uXmKfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:d2:bf:06:f9:a9:d3:5b:69:dc:42:b1:87:45:23:c9:a2:06:
07:a3:a3:43:86:75:b9:b1:ab:bf:a9:02:7f:fa:9b:05:3f:9b:
d3:87:ff:01:59:31:17:02:2e:b8:b8:5f:92:9b:48:d9:08:cb:
cc:bb:70:7d:27:5a:6a:d6:bd:c6:73:c7:e6:69:a8:dd:a9:34:
1a:9b:26:8a:2a:84:6e:a9:2f:9d:41:08:b5:15:44:54:8d:a7:
2a:e4:db:01:35:e2:00:40:55:0d:87:bb:43:f8:2d:9e:74:c2:
6c:55:05:ac:9a:7f:e2:5e:c2:c2:9b:8b:08:a2:d3:eb:58:ab:
ca:22:7e:19:26:0a:6f:07:51:0d:a6:96:db:05:31:49:6a:87:
68:1a:cd:1a:9b:a2:f8:ca:ac:f1:86:77:1b:58:38:fa:68:95:
f9:2b:04:e2:1c:30:75:fb:d0:2b:30:98:81:a1:03:87:9f:50:
47:c5:bd:6b:05:f1:90:a1:e5:17:53:06:f0:91:8f:32:98:d0:
bc:d8:96:76:f4:b6:a4:72:f8:1a:65:4c:5b:13:64:4e:29:ff:
14:05:0c:68:49:b5:c2:18:03:1c:29:79:b5:37:77:51:29:fb:
3c:b9:b4:07:dc:30:44:75:95:b4:95:5a:04:b2:1c:8e:d8:be:
7c:3d:98:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:37:44 2025 by rpki-client