Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/37514f-14e9-4dbe-b398-c87fab985af8/1/PRRSju_C35P_tOdPobZQO3btls4.mft
File: PRRSju_C35P_tOdPobZQO3btls4.mft (raw, json)
Hash identifier: bhTKjmJ3T/DQUnJRtnDqglkCcuGQBpNN/pid8uTBPLM=
Subject key identifier: 4A:50:E6:F3:56:AA:15:C2:86:25:DD:70:B5:FC:F5:24:53:E2:C1:09
Authority key identifier: 3D:14:52:8E:EF:C2:DF:93:FF:B4:E7:4F:A1:B6:50:3B:76:ED:96:CE
Certificate issuer: /CN=3d14528eefc2df93ffb4e74fa1b6503b76ed96ce
Certificate serial: 0198D5F12F529E69ECA93DDBD218C163D428
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRRSju_C35P_tOdPobZQO3btls4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/37514f-14e9-4dbe-b398-c87fab985af8/1/PRRSju_C35P_tOdPobZQO3btls4.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 08:00:09 +0000
Manifest this update: Sat 23 Aug 2025 08:00:09 +0000
Manifest next update: Sun 24 Aug 2025 08:00:09 +0000
Files and hashes: 1: 1-6KFFu76PFsOuJn8gJBndgCFOdU.roa (hash: 6vvOH7Ca5iY7AgmvELf2eSvGZtIS2tf6NCvrsrbSjcE=)
2: PRRSju_C35P_tOdPobZQO3btls4.crl (hash: SP9Sd3Y/czC7NixuNej+AhQvEFrrAbctgEudGOOo5nU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/37514f-14e9-4dbe-b398-c87fab985af8/1/PRRSju_C35P_tOdPobZQO3btls4.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/37514f-14e9-4dbe-b398-c87fab985af8/1/PRRSju_C35P_tOdPobZQO3btls4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PRRSju_C35P_tOdPobZQO3btls4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:2f:52:9e:69:ec:a9:3d:db:d2:18:c1:63:d4:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d14528eefc2df93ffb4e74fa1b6503b76ed96ce
Validity
Not Before: Aug 23 08:00:09 2025 GMT
Not After : Aug 24 08:00:09 2025 GMT
Subject: CN=4a50e6f356aa15c28625dd70b5fcf52453e2c109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:94:82:a7:40:f1:54:fc:e0:90:82:d6:83:e9:
fe:22:fe:fd:c5:f3:5e:10:89:55:c0:9d:91:79:24:
fa:bc:3b:35:af:f4:42:8f:68:e0:e1:76:32:81:b1:
fb:1b:35:98:02:c0:2f:80:78:18:8a:ad:3f:55:23:
c4:88:20:a4:1f:ad:63:ac:ef:17:d0:20:d8:6a:01:
91:ac:f4:46:ba:4c:d6:38:57:ba:c3:cb:48:fb:1d:
56:eb:51:d0:20:9a:34:b7:16:26:58:ce:aa:9d:86:
67:cf:3b:79:ee:c0:ee:cb:06:71:78:61:51:f2:61:
7b:84:3c:ec:19:63:2d:1b:5b:a8:1f:28:8f:46:43:
f5:ad:39:f2:64:8b:32:fa:37:d7:66:d5:ec:23:90:
4c:a1:fb:c3:61:40:df:57:a5:9d:0d:e5:77:7f:36:
c8:c6:bd:12:57:27:a1:9f:38:07:64:f9:0b:62:ba:
91:dd:83:25:ca:2a:8d:0a:3e:c5:04:00:12:30:eb:
97:5c:6d:6c:89:78:88:e9:da:c1:65:86:0c:ff:f0:
ad:d2:d6:6c:ac:9a:e6:a9:f0:b1:98:b5:47:ba:9a:
ba:af:97:e4:bc:82:ba:f3:9a:b0:f1:1a:36:29:31:
b9:04:16:cb:11:29:5b:91:67:5c:38:6b:bf:bc:40:
5d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:50:E6:F3:56:AA:15:C2:86:25:DD:70:B5:FC:F5:24:53:E2:C1:09
X509v3 Authority Key Identifier:
keyid:3D:14:52:8E:EF:C2:DF:93:FF:B4:E7:4F:A1:B6:50:3B:76:ED:96:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRRSju_C35P_tOdPobZQO3btls4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/37514f-14e9-4dbe-b398-c87fab985af8/1/PRRSju_C35P_tOdPobZQO3btls4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/37514f-14e9-4dbe-b398-c87fab985af8/1/PRRSju_C35P_tOdPobZQO3btls4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:61:a9:2e:dd:f3:b4:c2:90:61:89:2b:37:7f:1a:56:01:a1:
17:4c:0d:b9:c9:d0:b7:c2:9f:47:64:33:32:1e:c0:3d:63:25:
c5:99:95:d7:4b:09:19:f6:ad:1b:60:1a:16:ae:23:a4:5d:0a:
58:64:46:83:ec:56:95:d9:f7:f8:a6:7e:eb:af:7a:9e:b1:f7:
83:ba:f8:ab:a7:80:fa:9f:ff:df:6d:3e:be:a3:36:7f:c9:15:
1b:cc:81:40:bb:85:54:07:14:e9:ed:76:84:4d:cb:e2:b0:30:
54:90:d5:49:11:18:80:19:35:d6:7e:01:57:fc:5c:50:86:6c:
8c:a8:34:7d:ee:d4:68:96:3a:3e:6b:43:87:c8:2f:5e:8a:3f:
41:8a:21:80:ce:a6:31:f6:8d:20:34:3e:ec:e0:b5:ff:f1:af:
5c:ea:5c:0c:f5:6d:bf:31:b9:8f:78:db:80:33:7e:13:04:b4:
2a:db:cb:97:c9:3e:8a:31:5d:2b:16:fa:a5:e2:c5:3f:69:b3:
29:16:a2:01:d5:e6:a2:30:4c:91:9f:be:a1:32:71:4e:6f:f1:
04:6a:26:b0:6f:8b:8e:b4:61:43:57:8f:e8:c8:a6:53:86:d3:
56:45:7c:f9:eb:e5:f8:a8:d0:e1:f0:8e:26:5b:90:a2:bb:91:
a1:1b:b7:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8S9SnmnsqT3b0hjBY9QoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkMTQ1MjhlZWZjMmRmOTNmZmI0ZTc0ZmExYjY1MDNiNzZl
ZDk2Y2UwHhcNMjUwODIzMDgwMDA5WhcNMjUwODI0MDgwMDA5WjAzMTEwLwYDVQQD
Eyg0YTUwZTZmMzU2YWExNWMyODYyNWRkNzBiNWZjZjUyNDUzZTJjMTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ZSCp0DxVPzgkILWg+n+Iv79xfNe
EIlVwJ2ReST6vDs1r/RCj2jg4XYygbH7GzWYAsAvgHgYiq0/VSPEiCCkH61jrO8X
0CDYagGRrPRGukzWOFe6w8tI+x1W61HQIJo0txYmWM6qnYZnzzt57sDuywZxeGFR
8mF7hDzsGWMtG1uoHyiPRkP1rTnyZIsy+jfXZtXsI5BMofvDYUDfV6WdDeV3fzbI
xr0SVyehnzgHZPkLYrqR3YMlyiqNCj7FBAASMOuXXG1siXiI6drBZYYM//Ct0tZs
rJrmqfCxmLVHupq6r5fkvIK685qw8Ro2KTG5BBbLESlbkWdcOGu/vEBdrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEpQ5vNWqhXChiXdcLX89SRT4sEJMB8GA1UdIwQY
MBaAFD0UUo7vwt+T/7TnT6G2UDt27ZbOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFJSU2p1X0MzNVBfdE9kUG9iWlFPM2J0bHM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8zNzUxNGYtMTRlOS00ZGJlLWIzOTgt
Yzg3ZmFiOTg1YWY4LzEvUFJSU2p1X0MzNVBfdE9kUG9iWlFPM2J0bHM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC8zNzUxNGYtMTRlOS00ZGJlLWIzOTgtYzg3ZmFiOTg1YWY4
LzEvUFJSU2p1X0MzNVBfdE9kUG9iWlFPM2J0bHM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY2GpLt3z
tMKQYYkrN38aVgGhF0wNucnQt8KfR2QzMh7APWMlxZmV10sJGfatG2AaFq4jpF0K
WGRGg+xWldn3+KZ+6696nrH3g7r4q6eA+p//320+vqM2f8kVG8yBQLuFVAcU6e12
hE3L4rAwVJDVSREYgBk11n4BV/xcUIZsjKg0fe7UaJY6PmtDh8gvXoo/QYohgM6m
MfaNIDQ+7OC1//GvXOpcDPVtvzG5j3jbgDN+EwS0KtvLl8k+ijFdKxb6peLFP2mz
KRaiAdXmojBMkZ++oTJxTm/xBGomsG+LjrRhQ1eP6MimU4bTVkV8+evl+KjQ4fCO
JluQoruRoRu3Mw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:32 2025 by rpki-client