Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/fb9093-407f-4620-b964-6e739f02d512/1/PrEhzwYygZ7s6r64qVVpxnUpiCE.mft
File: PrEhzwYygZ7s6r64qVVpxnUpiCE.mft (raw, json)
Hash identifier: uB+xJAnNLG2isqbOEDo33M0DGHBMIL6Ze1TSx6QI5Es=
Subject key identifier: 7B:ED:07:2E:D3:09:F5:50:9B:3A:CC:D6:A2:7A:1A:7F:8F:E2:E0:65
Authority key identifier: 3E:B1:21:CF:06:32:81:9E:EC:EA:BE:B8:A9:55:69:C6:75:29:88:21
Certificate issuer: /CN=3eb121cf0632819eeceabeb8a95569c675298821
Certificate serial: 0199FC58BBB56ABEF64F4CEDE18250995BA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PrEhzwYygZ7s6r64qVVpxnUpiCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/fb9093-407f-4620-b964-6e739f02d512/1/PrEhzwYygZ7s6r64qVVpxnUpiCE.mft
Manifest number: 1266
Signing time: Sun 19 Oct 2025 12:01:37 +0000
Manifest this update: Sun 19 Oct 2025 12:01:37 +0000
Manifest next update: Mon 20 Oct 2025 12:01:37 +0000
Files and hashes: 1: PrEhzwYygZ7s6r64qVVpxnUpiCE.crl (hash: HkzDaNLMYidp/icvrZTKB+mpkUFyl+t+CRP8C6LC4A0=)
2: _k-LVkRidjyVBxM5JDfBSAF4xXQ.roa (hash: sWdlQ6il1efqRiBOryvgVXuddGRGIEg9GvemLG8GNq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/fb9093-407f-4620-b964-6e739f02d512/1/PrEhzwYygZ7s6r64qVVpxnUpiCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/fb9093-407f-4620-b964-6e739f02d512/1/PrEhzwYygZ7s6r64qVVpxnUpiCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PrEhzwYygZ7s6r64qVVpxnUpiCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:bb:b5:6a:be:f6:4f:4c:ed:e1:82:50:99:5b:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eb121cf0632819eeceabeb8a95569c675298821
Validity
Not Before: Oct 19 12:01:37 2025 GMT
Not After : Oct 20 12:01:37 2025 GMT
Subject: CN=7bed072ed309f5509b3accd6a27a1a7f8fe2e065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:71:d0:90:bc:ff:49:41:c7:f8:94:9a:6c:12:
18:8d:a4:b4:a8:a4:8d:8a:5b:cf:c3:3b:37:4f:d2:
d6:a4:29:73:b2:8a:ef:4e:c2:61:6a:0f:32:e3:27:
cd:bf:e7:a3:ec:44:19:e0:ef:3a:76:a9:ef:84:a2:
b1:b2:c8:8f:7c:4c:64:22:ea:b5:1a:04:d4:8b:03:
c5:3e:92:d5:ed:91:ec:8b:f0:de:14:56:e9:1d:ab:
26:cc:72:4a:fb:df:59:35:e1:78:ae:a4:a4:c3:78:
a3:80:f1:f7:36:9b:af:e4:d5:13:01:1c:5e:1e:c1:
c6:00:14:92:08:88:32:ab:08:aa:dc:a6:e8:53:37:
01:79:67:f3:12:8b:7c:db:14:8e:88:ac:bf:4d:c5:
65:3c:c4:1f:e4:e5:85:e8:ab:02:61:7c:cd:e7:95:
2e:fa:11:e4:fa:f5:f5:d6:62:2e:5b:41:33:1d:95:
bd:57:fe:74:c0:2a:5e:75:21:6d:c1:fa:ae:db:90:
8e:9b:6e:b7:0d:7f:54:cd:3b:88:4c:a8:cb:fa:b3:
6a:77:0c:37:02:a7:07:ca:17:e0:9d:8f:5e:b8:ba:
7a:5c:30:8e:a0:c4:39:e5:91:55:62:ce:2b:71:12:
92:27:c1:88:6e:f8:3a:12:36:82:67:9e:fb:f6:74:
2d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:ED:07:2E:D3:09:F5:50:9B:3A:CC:D6:A2:7A:1A:7F:8F:E2:E0:65
X509v3 Authority Key Identifier:
keyid:3E:B1:21:CF:06:32:81:9E:EC:EA:BE:B8:A9:55:69:C6:75:29:88:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PrEhzwYygZ7s6r64qVVpxnUpiCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/fb9093-407f-4620-b964-6e739f02d512/1/PrEhzwYygZ7s6r64qVVpxnUpiCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/fb9093-407f-4620-b964-6e739f02d512/1/PrEhzwYygZ7s6r64qVVpxnUpiCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:f9:06:51:9a:be:b9:73:46:e3:62:2c:d0:6d:33:70:3c:25:
ca:21:f6:51:06:57:30:13:87:c9:5d:8e:0a:e7:22:09:ac:6e:
14:7c:fd:57:a8:da:50:0e:2b:33:4d:33:e9:08:09:96:0e:fe:
12:95:49:73:9a:e1:60:9e:9e:62:79:d6:6e:86:7a:e4:25:b1:
a1:59:e3:52:29:c5:20:80:fc:76:3e:c3:94:b8:c7:40:44:75:
ee:36:e1:01:52:36:80:10:d1:91:91:6f:62:8c:d9:5e:91:0c:
69:e6:11:68:1f:18:bc:7f:f5:1a:19:9f:53:23:eb:b8:1a:bc:
ad:97:76:be:a7:92:a5:65:d4:8c:7d:31:46:86:9c:00:a9:d8:
67:a6:91:87:9a:49:9e:ec:00:49:1c:c5:db:1c:84:4c:9f:ab:
5a:bc:2d:8e:ce:bd:7b:34:bc:c8:3c:30:90:0c:69:7d:cb:08:
8e:d1:a5:a9:47:77:72:c1:00:49:43:e3:fd:48:43:9b:02:23:
e4:47:a7:c8:8a:18:61:79:f9:2c:1b:9a:e4:ec:d3:65:93:6f:
7e:c4:54:06:db:64:ce:2d:e6:21:00:01:8e:38:b4:8a:5b:dc:
d5:89:fa:cf:bc:ef:21:0c:46:57:7b:35:ca:44:a7:44:53:3c:
3c:72:c7:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WLu1ar72T0zt4YJQmVuhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlYjEyMWNmMDYzMjgxOWVlY2VhYmViOGE5NTU2OWM2NzUy
OTg4MjEwHhcNMjUxMDE5MTIwMTM3WhcNMjUxMDIwMTIwMTM3WjAzMTEwLwYDVQQD
Eyg3YmVkMDcyZWQzMDlmNTUwOWIzYWNjZDZhMjdhMWE3ZjhmZTJlMDY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnHQkLz/SUHH+JSabBIYjaS0qKSN
ilvPwzs3T9LWpClzsorvTsJhag8y4yfNv+ej7EQZ4O86dqnvhKKxssiPfExkIuq1
GgTUiwPFPpLV7ZHsi/DeFFbpHasmzHJK+99ZNeF4rqSkw3ijgPH3Npuv5NUTARxe
HsHGABSSCIgyqwiq3KboUzcBeWfzEot82xSOiKy/TcVlPMQf5OWF6KsCYXzN55Uu
+hHk+vX11mIuW0EzHZW9V/50wCpedSFtwfqu25COm263DX9UzTuITKjL+rNqdww3
AqcHyhfgnY9euLp6XDCOoMQ55ZFVYs4rcRKSJ8GIbvg6EjaCZ5779nQtrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHvtBy7TCfVQmzrM1qJ6Gn+P4uBlMB8GA1UdIwQY
MBaAFD6xIc8GMoGe7Oq+uKlVacZ1KYghMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHJFaHp3WXlnWjdzNnI2NHFWVnB4blVwaUNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9mYjkwOTMtNDA3Zi00NjIwLWI5NjQt
NmU3MzlmMDJkNTEyLzEvUHJFaHp3WXlnWjdzNnI2NHFWVnB4blVwaUNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi9mYjkwOTMtNDA3Zi00NjIwLWI5NjQtNmU3MzlmMDJkNTEy
LzEvUHJFaHp3WXlnWjdzNnI2NHFWVnB4blVwaUNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJfkGUZq+
uXNG42Is0G0zcDwlyiH2UQZXMBOHyV2OCuciCaxuFHz9V6jaUA4rM00z6QgJlg7+
EpVJc5rhYJ6eYnnWboZ65CWxoVnjUinFIID8dj7DlLjHQER17jbhAVI2gBDRkZFv
YozZXpEMaeYRaB8YvH/1GhmfUyPruBq8rZd2vqeSpWXUjH0xRoacAKnYZ6aRh5pJ
nuwASRzF2xyETJ+rWrwtjs69ezS8yDwwkAxpfcsIjtGlqUd3csEASUPj/UhDmwIj
5EenyIoYYXn5LBua5OzTZZNvfsRUBttkzi3mIQABjji0ilvc1Yn6z7zvIQxGV3s1
ykSnRFM8PHLHsA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:24:21 2025 by rpki-client