Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/aae017-5afd-4bfd-8fdd-d6e7dcc52799/1/PRgTEVbDK1enN4cYxgiq46mWXCs.mft
File: PRgTEVbDK1enN4cYxgiq46mWXCs.mft (raw, json)
Hash identifier: 14WCvw+vqzVVgivYgbrUmZybIkk3/Sud5VULNCn/zyc=
Subject key identifier: BC:A3:3A:E6:04:1B:DD:10:45:EC:8E:05:23:9B:63:8C:77:95:6A:4F
Authority key identifier: 3D:18:13:11:56:C3:2B:57:A7:37:87:18:C6:08:AA:E3:A9:96:5C:2B
Certificate issuer: /CN=3d18131156c32b57a7378718c608aae3a9965c2b
Certificate serial: 0199FFC884A88861C5470F6388E2495EF49B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRgTEVbDK1enN4cYxgiq46mWXCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/aae017-5afd-4bfd-8fdd-d6e7dcc52799/1/PRgTEVbDK1enN4cYxgiq46mWXCs.mft
Manifest number: 16DF
Signing time: Mon 20 Oct 2025 04:02:35 +0000
Manifest this update: Mon 20 Oct 2025 04:02:35 +0000
Manifest next update: Tue 21 Oct 2025 04:02:35 +0000
Files and hashes: 1: PRgTEVbDK1enN4cYxgiq46mWXCs.crl (hash: TryvWOSxqO/5CNzMoIAzQiHmjttuVEFWZU4VYmr1zec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/aae017-5afd-4bfd-8fdd-d6e7dcc52799/1/PRgTEVbDK1enN4cYxgiq46mWXCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/aae017-5afd-4bfd-8fdd-d6e7dcc52799/1/PRgTEVbDK1enN4cYxgiq46mWXCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/PRgTEVbDK1enN4cYxgiq46mWXCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:84:a8:88:61:c5:47:0f:63:88:e2:49:5e:f4:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d18131156c32b57a7378718c608aae3a9965c2b
Validity
Not Before: Oct 20 04:02:35 2025 GMT
Not After : Oct 21 04:02:35 2025 GMT
Subject: CN=bca33ae6041bdd1045ec8e05239b638c77956a4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ae:6e:7e:d8:be:82:7e:bd:55:45:e9:a2:91:
35:46:f7:59:5e:e8:96:0a:03:54:56:c0:97:dc:09:
83:cc:31:ac:41:32:99:f5:8b:44:c9:2e:63:f0:1a:
1d:8c:bb:98:20:40:3c:d7:99:4a:4d:44:f1:87:e9:
76:a8:79:7d:56:97:1c:ad:af:5e:c5:f2:b9:27:00:
83:b1:a7:c4:dc:04:be:2b:2c:64:24:ff:c8:26:76:
f8:9b:7b:c6:ad:e5:fa:65:d8:7e:f4:0f:1c:c1:b9:
51:7e:82:7e:ec:b8:9a:28:67:f4:cf:fd:40:d5:e0:
04:46:f0:4b:65:aa:40:92:95:50:bd:15:a0:7a:31:
cf:6f:58:24:b6:22:4a:10:37:3e:a4:a8:1b:3c:d5:
44:87:9b:d1:48:08:6f:b1:94:1b:61:21:79:de:a2:
01:a8:53:55:8b:5b:3e:6f:bf:ca:4c:08:68:26:c4:
cf:ca:bd:7c:77:08:0c:2e:95:fe:32:92:b8:e6:65:
d9:e6:cf:64:fa:22:08:b8:25:c6:1b:2e:c5:0b:2a:
33:b8:0b:a0:9b:06:4c:fe:ee:3a:c7:12:64:b1:c3:
37:1a:fc:01:b2:a3:d8:01:03:5d:69:af:15:50:76:
fd:ea:86:a5:cf:60:ba:3a:73:9b:64:dc:9e:d4:ce:
7c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:A3:3A:E6:04:1B:DD:10:45:EC:8E:05:23:9B:63:8C:77:95:6A:4F
X509v3 Authority Key Identifier:
keyid:3D:18:13:11:56:C3:2B:57:A7:37:87:18:C6:08:AA:E3:A9:96:5C:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRgTEVbDK1enN4cYxgiq46mWXCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/aae017-5afd-4bfd-8fdd-d6e7dcc52799/1/PRgTEVbDK1enN4cYxgiq46mWXCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/aae017-5afd-4bfd-8fdd-d6e7dcc52799/1/PRgTEVbDK1enN4cYxgiq46mWXCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:d0:2a:43:81:db:5f:e1:31:e2:e7:25:5e:ad:e9:2e:6a:4e:
ce:72:80:48:fc:22:97:fd:69:74:d4:6f:c9:b1:db:49:a8:33:
a3:75:c3:7b:b7:87:63:3c:d4:13:b0:38:f3:c4:4a:83:a2:41:
93:7c:b6:c3:d8:92:5b:0b:32:b1:b5:3c:16:44:15:a8:2b:30:
31:09:ca:16:7b:c7:61:16:74:4a:c1:5c:de:83:df:f1:78:29:
b0:c1:b2:e7:81:ac:97:77:cf:3d:68:97:45:44:3e:a3:34:78:
7b:0a:79:be:01:b0:8c:f0:ce:a4:b8:e1:34:86:5b:bf:5b:51:
2e:c0:32:98:88:91:a0:57:a7:4b:2f:f8:58:b1:54:44:87:3b:
d9:fa:15:99:b7:03:83:ab:68:a3:2a:e6:1f:4c:84:6c:a7:39:
f1:9c:17:14:16:05:00:36:67:d7:07:28:55:cf:59:9e:ec:eb:
2d:20:42:49:3f:62:90:7f:01:79:68:59:cb:ee:35:91:0f:e6:
a4:6b:0b:7c:cf:0a:30:4d:ca:e9:89:84:d3:40:ae:53:1e:cb:
db:84:cd:ba:ef:49:1b:2f:84:e4:02:d0:d2:40:e7:96:b8:74:
29:cc:91:0b:c7:12:68:6c:5c:8a:7e:05:20:51:5b:f8:78:c7:
45:20:3d:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:03:50 2025 by rpki-client