Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/37514f-14e9-4dbe-b398-c87fab985af8/1/PRRSju_C35P_tOdPobZQO3btls4.mft
File: PRRSju_C35P_tOdPobZQO3btls4.mft (raw, json)
Hash identifier: 5O/UtAA841XIkEtqaUO1nm5k6bo4+/I1T6PXqV0Jxek=
Subject key identifier: A1:CD:CA:DF:CD:74:14:4B:B1:36:97:07:C3:94:C0:14:78:6E:D3:79
Authority key identifier: 3D:14:52:8E:EF:C2:DF:93:FF:B4:E7:4F:A1:B6:50:3B:76:ED:96:CE
Certificate issuer: /CN=3d14528eefc2df93ffb4e74fa1b6503b76ed96ce
Certificate serial: 0199FD6AE6FA5DF434A8CBFE0CB42841B25E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRRSju_C35P_tOdPobZQO3btls4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/37514f-14e9-4dbe-b398-c87fab985af8/1/PRRSju_C35P_tOdPobZQO3btls4.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 17:01:05 +0000
Manifest this update: Sun 19 Oct 2025 17:01:05 +0000
Manifest next update: Mon 20 Oct 2025 17:01:05 +0000
Files and hashes: 1: 1-6KFFu76PFsOuJn8gJBndgCFOdU.roa (hash: 6vvOH7Ca5iY7AgmvELf2eSvGZtIS2tf6NCvrsrbSjcE=)
2: PRRSju_C35P_tOdPobZQO3btls4.crl (hash: W+AD1s/NbfI69pLU+FWXvSe4Y6JJBfPIYnyGF3gxHOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/37514f-14e9-4dbe-b398-c87fab985af8/1/PRRSju_C35P_tOdPobZQO3btls4.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/37514f-14e9-4dbe-b398-c87fab985af8/1/PRRSju_C35P_tOdPobZQO3btls4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PRRSju_C35P_tOdPobZQO3btls4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6a:e6:fa:5d:f4:34:a8:cb:fe:0c:b4:28:41:b2:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d14528eefc2df93ffb4e74fa1b6503b76ed96ce
Validity
Not Before: Oct 19 17:01:05 2025 GMT
Not After : Oct 20 17:01:05 2025 GMT
Subject: CN=a1cdcadfcd74144bb1369707c394c014786ed379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e0:b7:6a:04:63:13:69:99:3d:6e:ea:13:3a:
ba:d5:fd:81:9c:f8:16:d0:35:3f:d9:72:9a:17:dd:
f2:ca:df:f0:d5:15:8d:77:ee:91:3f:72:7c:a9:42:
13:58:e1:ee:c4:c3:bc:02:78:18:fe:a2:a6:61:48:
f4:81:f8:4e:89:4a:dc:e5:37:2c:5f:45:cf:7a:32:
3d:43:1c:19:04:aa:3e:fa:4a:aa:cb:bf:bf:3e:83:
32:e3:37:9e:4c:b5:58:2c:8f:54:90:2e:6c:cf:1a:
90:fa:a9:b3:21:6f:c3:ea:76:56:86:c8:d9:ed:ba:
48:1e:65:12:2b:eb:a1:b1:44:e7:1c:a7:fd:c7:fd:
d5:5f:a2:54:f0:60:1b:2c:56:04:3a:f1:0d:68:18:
cb:e4:6f:b1:d0:be:6c:c1:a2:15:db:0a:44:f4:b5:
8c:da:68:8b:29:44:a5:32:c4:ab:97:e9:df:54:d9:
3b:10:67:67:af:b7:be:1f:dd:ab:47:82:02:28:f9:
e7:56:58:31:0e:72:38:d6:22:11:37:7b:71:77:6b:
71:08:4f:ac:fb:a8:e6:74:a6:38:f7:d6:ee:20:64:
d6:b5:b2:9b:f3:b8:b2:6f:80:f4:71:8d:1f:99:dd:
1d:68:3c:d0:34:d5:be:1b:81:72:60:ed:e5:ae:1f:
10:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:CD:CA:DF:CD:74:14:4B:B1:36:97:07:C3:94:C0:14:78:6E:D3:79
X509v3 Authority Key Identifier:
keyid:3D:14:52:8E:EF:C2:DF:93:FF:B4:E7:4F:A1:B6:50:3B:76:ED:96:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRRSju_C35P_tOdPobZQO3btls4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/37514f-14e9-4dbe-b398-c87fab985af8/1/PRRSju_C35P_tOdPobZQO3btls4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/37514f-14e9-4dbe-b398-c87fab985af8/1/PRRSju_C35P_tOdPobZQO3btls4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:1a:a6:32:0a:34:62:e7:fa:1c:cd:75:8e:48:b0:3f:e8:bb:
82:e7:25:13:9a:de:a3:46:1e:2d:1f:d8:ff:1b:77:1f:7a:fb:
13:8e:99:a1:a1:b2:ae:a3:a7:f7:3e:4a:c6:5f:23:14:bf:05:
e7:f7:c5:ca:9b:38:ca:55:db:1a:b3:f1:b7:e7:bc:45:31:10:
c1:fa:31:19:e7:de:3b:92:a6:90:c8:fa:3f:69:42:a1:20:04:
a9:c7:92:85:07:d7:66:70:04:c9:fd:16:3e:97:ac:a7:61:d9:
34:93:33:54:51:32:97:d3:33:5b:16:4e:15:86:58:ca:b9:2e:
fe:5b:2d:d7:8e:6f:53:89:cc:6e:d4:d1:76:7f:44:f2:ee:ee:
03:b9:db:00:f2:5d:74:25:6b:6e:28:ee:3f:ce:3a:19:74:94:
fb:08:8c:1f:78:e1:f4:e3:d1:51:b4:54:27:61:d0:38:18:1a:
24:54:f7:66:5e:9a:2c:97:ce:aa:c1:a4:98:7d:34:4d:cb:62:
5f:59:b7:69:f5:34:b3:ed:a9:21:97:23:c3:75:b3:04:5e:3d:
c8:0a:24:9a:0f:c0:fc:22:a7:8e:ad:12:bf:23:d1:7f:11:28:
5d:6e:ee:b0:c2:37:4d:28:be:41:e6:d1:02:d9:24:8f:7c:d2:
b3:58:a4:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:57 2025 by rpki-client