Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/37514f-14e9-4dbe-b398-c87fab985af8/1/PRRSju_C35P_tOdPobZQO3btls4.mft
File: PRRSju_C35P_tOdPobZQO3btls4.mft (raw, json)
Hash identifier: Gtj9HGL3VjvY/KWpVm7w6FVhVPZO55UHODbQLPwNbgg=
Subject key identifier: 56:D5:6A:6E:73:60:BC:B0:90:FE:6C:3A:C1:98:C4:0F:CE:77:39:21
Authority key identifier: 3D:14:52:8E:EF:C2:DF:93:FF:B4:E7:4F:A1:B6:50:3B:76:ED:96:CE
Certificate issuer: /CN=3d14528eefc2df93ffb4e74fa1b6503b76ed96ce
Certificate serial: 0197B632D516A91C4FC12D2DB99FCA06E48B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRRSju_C35P_tOdPobZQO3btls4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/37514f-14e9-4dbe-b398-c87fab985af8/1/PRRSju_C35P_tOdPobZQO3btls4.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 11:01:13 +0000
Manifest this update: Sat 28 Jun 2025 11:01:13 +0000
Manifest next update: Sun 29 Jun 2025 11:01:13 +0000
Files and hashes: 1: 1-6KFFu76PFsOuJn8gJBndgCFOdU.roa (hash: 6vvOH7Ca5iY7AgmvELf2eSvGZtIS2tf6NCvrsrbSjcE=)
2: PRRSju_C35P_tOdPobZQO3btls4.crl (hash: AO6ECzWH4atk2wDNSgBVPxBzcfaHbReTNDVjk65C/2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/37514f-14e9-4dbe-b398-c87fab985af8/1/PRRSju_C35P_tOdPobZQO3btls4.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/37514f-14e9-4dbe-b398-c87fab985af8/1/PRRSju_C35P_tOdPobZQO3btls4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PRRSju_C35P_tOdPobZQO3btls4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 11:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:d5:16:a9:1c:4f:c1:2d:2d:b9:9f:ca:06:e4:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d14528eefc2df93ffb4e74fa1b6503b76ed96ce
Validity
Not Before: Jun 28 11:01:13 2025 GMT
Not After : Jun 29 11:01:13 2025 GMT
Subject: CN=56d56a6e7360bcb090fe6c3ac198c40fce773921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ed:08:7a:30:35:f7:a7:da:f4:df:a9:ce:31:
a3:11:85:d3:6b:d4:f7:79:ee:1d:cc:c5:a7:ec:2e:
1b:ea:56:49:72:f0:da:97:63:82:34:63:07:df:62:
02:3f:63:3b:1a:49:d7:a4:83:5e:27:a7:f1:ce:36:
84:de:c4:f4:96:ed:58:ec:df:cf:8c:af:02:77:6f:
96:84:ca:ae:72:cb:d9:05:25:8f:ae:9a:d4:b4:74:
69:42:ad:3d:f5:cd:94:fa:05:d5:23:88:06:f0:95:
87:b5:f7:47:4b:b4:20:56:25:25:d1:53:4a:3e:6a:
8f:93:77:a7:62:f4:02:9a:0d:46:82:9c:1c:01:ae:
3b:c5:6e:db:34:a5:53:1f:11:56:8b:b6:90:66:10:
a6:0f:fd:82:f4:8e:90:97:3b:83:aa:11:7e:4a:ca:
c2:6c:42:b6:1c:e7:e4:81:01:26:1c:f6:d3:7e:be:
46:a1:7e:84:d0:6a:31:50:cc:78:36:70:d0:55:f8:
b1:2d:01:9f:8c:19:6f:f7:dd:94:19:c8:2c:ee:64:
fa:63:e0:1f:c5:28:4e:c6:4d:b6:84:50:ac:ba:2d:
ee:76:d2:28:2e:9c:04:5c:b2:70:07:16:66:64:b4:
65:81:cb:6b:2d:f9:48:52:bd:74:e6:a8:a3:19:48:
6c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:D5:6A:6E:73:60:BC:B0:90:FE:6C:3A:C1:98:C4:0F:CE:77:39:21
X509v3 Authority Key Identifier:
keyid:3D:14:52:8E:EF:C2:DF:93:FF:B4:E7:4F:A1:B6:50:3B:76:ED:96:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRRSju_C35P_tOdPobZQO3btls4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/37514f-14e9-4dbe-b398-c87fab985af8/1/PRRSju_C35P_tOdPobZQO3btls4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/37514f-14e9-4dbe-b398-c87fab985af8/1/PRRSju_C35P_tOdPobZQO3btls4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:98:a0:81:88:94:5d:32:e2:9b:4d:b2:94:45:22:25:79:2e:
b3:ae:da:58:15:66:1e:55:4a:7f:b7:fd:bc:29:1c:8c:e4:ed:
6e:fa:23:3d:ee:a2:d5:c4:65:76:2b:4e:ba:eb:ff:3e:f4:40:
27:48:18:8a:6c:59:40:0b:8a:9d:b7:a0:5a:2a:3b:de:5b:e3:
a8:a0:c3:0a:6d:6f:2b:47:07:89:0f:7d:6e:05:b2:46:f2:9f:
c5:33:a9:ec:68:d5:05:49:b0:7e:48:62:4b:a6:91:50:7a:67:
f7:86:b1:42:a4:41:7c:2c:14:cc:72:1c:8f:64:9d:a9:a9:0f:
ca:77:6d:e4:b0:d5:1a:d1:4d:59:47:5d:f2:88:00:0c:3c:37:
e0:f7:f5:82:20:e0:39:ce:e0:14:73:88:91:0d:f4:99:73:09:
37:d1:87:5f:ef:99:44:8c:6b:a2:a0:f7:a0:f4:6e:9b:f9:c0:
61:75:7d:fd:2b:8d:06:94:ec:78:99:58:dc:d0:64:db:84:64:
ac:f8:f9:61:7f:65:66:cb:09:0b:f0:b7:34:75:8a:1f:dd:de:
89:dd:f7:f5:f7:8a:6b:83:c6:92:33:9f:98:19:52:98:c1:23:
68:f2:b6:9f:1f:84:c0:74:02:42:f3:ef:7b:b7:c2:34:88:11:
75:bb:a6:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:35:53 2025 by rpki-client