Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/3a0368-570c-4847-8d4a-ff4ad1e3daf5/1/Pr6uqg8H3D1UvBFcziAq2pggsdU.mft
File: Pr6uqg8H3D1UvBFcziAq2pggsdU.mft (raw, json)
Hash identifier: JZ1H43lNQTDJii8Ksg+moFuPm/UpJBsqIuBJV/AdrcI=
Subject key identifier: BD:91:6D:06:A4:EA:87:D9:95:C6:60:0E:2C:9E:95:AE:42:19:63:27
Authority key identifier: 3E:BE:AE:AA:0F:07:DC:3D:54:BC:11:5C:CE:20:2A:DA:98:20:B1:D5
Certificate issuer: /CN=3ebeaeaa0f07dc3d54bc115cce202ada9820b1d5
Certificate serial: 0199FB7C933B6F6948ED4AEF6A27FDE1F6A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pr6uqg8H3D1UvBFcziAq2pggsdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/3a0368-570c-4847-8d4a-ff4ad1e3daf5/1/Pr6uqg8H3D1UvBFcziAq2pggsdU.mft
Manifest number: 0874
Signing time: Sun 19 Oct 2025 08:01:09 +0000
Manifest this update: Sun 19 Oct 2025 08:01:09 +0000
Manifest next update: Mon 20 Oct 2025 08:01:09 +0000
Files and hashes: 1: Pr6uqg8H3D1UvBFcziAq2pggsdU.crl (hash: VudOIz6kqXG3fFblzHr1y3QiP0qzZK/oR69Sd844vEk=)
2: nV3wzH_1I5VE4qLJ5nCrt9MPHjQ.roa (hash: db3hfBEW1jL4gbyVu0D2s50T0rgPqR4B0mvJEYFg7lA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/3a0368-570c-4847-8d4a-ff4ad1e3daf5/1/Pr6uqg8H3D1UvBFcziAq2pggsdU.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/3a0368-570c-4847-8d4a-ff4ad1e3daf5/1/Pr6uqg8H3D1UvBFcziAq2pggsdU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pr6uqg8H3D1UvBFcziAq2pggsdU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:93:3b:6f:69:48:ed:4a:ef:6a:27:fd:e1:f6:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ebeaeaa0f07dc3d54bc115cce202ada9820b1d5
Validity
Not Before: Oct 19 08:01:09 2025 GMT
Not After : Oct 20 08:01:09 2025 GMT
Subject: CN=bd916d06a4ea87d995c6600e2c9e95ae42196327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:40:f6:71:3b:c6:ef:67:c8:84:35:b8:34:84:
50:50:2f:fa:88:f7:45:cb:e2:bb:bf:a1:07:fd:c6:
9d:c9:88:8a:71:33:75:21:4d:e1:c0:3b:a7:96:e0:
b6:1a:7b:4b:fa:3b:69:86:3f:37:4e:5b:1d:5f:bc:
57:9b:37:36:ec:b5:08:6a:d1:e1:f2:b6:fe:49:80:
aa:d0:15:69:5e:0a:d7:cc:b7:41:96:5f:ef:2d:b3:
a0:7f:68:9f:47:8f:9d:07:42:b5:4a:b2:db:fc:ed:
d2:aa:58:43:dc:0a:69:ea:ce:ea:3e:6b:d5:34:dc:
5e:30:88:20:c6:ef:a2:4e:65:2f:72:cc:94:d6:99:
e1:fe:5f:e7:c0:74:34:50:18:11:3c:c1:fa:0c:90:
38:1f:11:08:af:ee:b4:d4:43:61:6e:b3:f9:fc:d1:
ef:2b:2d:0d:16:84:3e:2f:44:1c:1a:31:3c:5c:48:
1a:36:4c:f2:41:c8:ff:65:97:f9:9e:6b:42:93:f2:
d1:64:9c:29:eb:d0:1c:da:00:2e:18:c9:1b:4e:df:
29:06:64:17:82:d4:fd:92:08:a4:4b:6e:22:71:88:
e3:c6:02:df:e1:f2:e4:84:b0:17:8a:eb:a4:b5:85:
3a:54:e7:d9:75:40:b7:eb:c5:30:7a:67:51:63:d7:
fb:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:91:6D:06:A4:EA:87:D9:95:C6:60:0E:2C:9E:95:AE:42:19:63:27
X509v3 Authority Key Identifier:
keyid:3E:BE:AE:AA:0F:07:DC:3D:54:BC:11:5C:CE:20:2A:DA:98:20:B1:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pr6uqg8H3D1UvBFcziAq2pggsdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3a0368-570c-4847-8d4a-ff4ad1e3daf5/1/Pr6uqg8H3D1UvBFcziAq2pggsdU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3a0368-570c-4847-8d4a-ff4ad1e3daf5/1/Pr6uqg8H3D1UvBFcziAq2pggsdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:b7:f7:b8:56:08:ab:44:5a:f4:48:c0:79:83:b5:a9:5a:2e:
dc:2e:22:e7:a2:91:d0:de:fa:05:f3:bb:8b:f2:76:8b:39:ad:
37:37:ce:cc:4a:67:bd:34:7a:20:29:47:16:67:0c:10:48:69:
e2:e4:c2:b1:97:38:1a:33:d8:84:e7:76:50:80:9e:24:ed:60:
09:a8:49:bb:ef:40:24:6f:2d:29:38:58:75:e4:51:a7:bb:54:
96:64:f9:ba:b0:5c:a9:49:28:8c:65:f5:58:0f:f3:b9:e7:a4:
35:ee:20:cf:51:f7:85:eb:d4:1e:4a:68:ca:d6:b0:cf:5a:de:
29:d4:c2:3a:61:e8:56:8c:79:81:9c:5d:a4:71:20:97:7f:e3:
21:cb:a1:c6:14:2b:0b:b7:46:3f:fd:36:82:74:31:0e:cf:9a:
4b:8a:0b:49:2d:2c:a4:35:3d:a7:b6:b1:f5:fd:23:6b:b8:c5:
f9:10:5e:bd:ee:98:33:79:10:43:c2:4b:7c:20:b9:16:b3:e5:
44:7f:ee:87:9e:b7:ce:aa:b8:04:e8:49:6d:1a:89:a6:cc:44:
23:48:9f:bd:59:f3:90:4e:d2:c5:ff:4c:68:e1:94:23:c1:23:
97:21:8f:a8:69:74:ba:26:e0:21:fd:54:0c:1b:63:2a:2e:0e:
19:a0:95:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:42 2025 by rpki-client