Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/aae017-5afd-4bfd-8fdd-d6e7dcc52799/1/PRgTEVbDK1enN4cYxgiq46mWXCs.mft
File: PRgTEVbDK1enN4cYxgiq46mWXCs.mft (raw, json)
Hash identifier: /pNdWrRSD0rjlKaUsel1vcIiX12TM2cTNl/R+9cosnk=
Subject key identifier: 60:96:3A:A7:4E:44:46:DD:B5:96:A6:48:1D:56:ED:73:88:74:B3:61
Authority key identifier: 3D:18:13:11:56:C3:2B:57:A7:37:87:18:C6:08:AA:E3:A9:96:5C:2B
Certificate issuer: /CN=3d18131156c32b57a7378718c608aae3a9965c2b
Certificate serial: 0198D660DA05352E04F51B3B2F7DBD25D496
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRgTEVbDK1enN4cYxgiq46mWXCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/aae017-5afd-4bfd-8fdd-d6e7dcc52799/1/PRgTEVbDK1enN4cYxgiq46mWXCs.mft
Manifest number: 1645
Signing time: Sat 23 Aug 2025 10:02:08 +0000
Manifest this update: Sat 23 Aug 2025 10:02:08 +0000
Manifest next update: Sun 24 Aug 2025 10:02:08 +0000
Files and hashes: 1: PRgTEVbDK1enN4cYxgiq46mWXCs.crl (hash: 8nAPsVc6soYfATbGqcobAjTedvny8fWI2IXJ52zvfuY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/aae017-5afd-4bfd-8fdd-d6e7dcc52799/1/PRgTEVbDK1enN4cYxgiq46mWXCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/aae017-5afd-4bfd-8fdd-d6e7dcc52799/1/PRgTEVbDK1enN4cYxgiq46mWXCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/PRgTEVbDK1enN4cYxgiq46mWXCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:da:05:35:2e:04:f5:1b:3b:2f:7d:bd:25:d4:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d18131156c32b57a7378718c608aae3a9965c2b
Validity
Not Before: Aug 23 10:02:08 2025 GMT
Not After : Aug 24 10:02:08 2025 GMT
Subject: CN=60963aa74e4446ddb596a6481d56ed738874b361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:8a:26:85:cf:77:b3:45:29:92:a9:09:37:e5:
e7:bb:e7:72:99:bf:bd:2f:46:de:1f:5c:bb:dc:1d:
f0:f4:f5:f2:5f:a8:09:7f:ef:42:a6:5a:14:ed:62:
69:91:73:bc:7f:fe:49:22:97:44:20:d0:9c:ed:4e:
c5:00:32:1e:5d:20:ad:78:0d:29:f1:c7:ae:34:31:
5d:26:57:c2:7d:1d:75:76:5a:8a:12:f8:e4:19:14:
ef:f4:35:4b:21:bc:d9:ac:cc:4f:e1:38:38:e2:b2:
5d:cb:94:d8:28:13:5c:30:f2:74:b2:78:2a:11:3f:
b7:ad:e9:7a:42:eb:d6:0a:e6:7f:fa:9a:67:50:b2:
4a:9a:5a:dc:ae:45:f7:1d:a3:e1:55:51:c9:f1:24:
1d:dc:12:49:e2:a5:ae:46:c7:8e:b5:55:83:ea:9f:
b9:7e:3b:2f:94:a3:fa:6f:cf:f3:29:7a:f8:b8:48:
a8:67:b0:d2:e8:fc:71:6c:3a:c4:a2:43:b6:4e:dc:
8d:1a:6f:65:be:3d:77:b1:27:76:ae:05:ce:5f:dd:
09:13:7f:b6:9a:86:ab:50:db:53:5b:43:20:ae:66:
dd:0e:03:97:5a:75:be:31:9e:0b:2f:33:e1:64:0a:
f8:93:18:bd:a7:eb:bb:ee:92:ce:76:52:76:00:13:
84:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:96:3A:A7:4E:44:46:DD:B5:96:A6:48:1D:56:ED:73:88:74:B3:61
X509v3 Authority Key Identifier:
keyid:3D:18:13:11:56:C3:2B:57:A7:37:87:18:C6:08:AA:E3:A9:96:5C:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRgTEVbDK1enN4cYxgiq46mWXCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/aae017-5afd-4bfd-8fdd-d6e7dcc52799/1/PRgTEVbDK1enN4cYxgiq46mWXCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/aae017-5afd-4bfd-8fdd-d6e7dcc52799/1/PRgTEVbDK1enN4cYxgiq46mWXCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:09:af:9e:f5:5c:2c:96:c8:9a:90:d5:fd:c9:ea:ed:ec:43:
d8:9c:67:54:e1:fb:ea:d7:5c:8b:b7:e6:02:be:03:73:c6:f0:
2b:9f:23:0c:5a:ad:bb:1e:91:ff:2d:c9:57:6a:61:6d:27:a5:
16:af:d8:3a:c7:e2:8c:6a:5b:5a:c7:d5:c1:69:53:a7:33:4b:
bd:8d:1a:21:ce:5e:1c:9a:ae:37:3a:d0:e2:82:e2:a5:52:3d:
5f:86:e8:36:52:bf:b2:d6:8e:a9:47:9c:e9:bd:17:b9:49:71:
24:2e:ba:0b:d6:87:4c:e3:e3:79:3d:26:37:c4:a8:67:4f:f2:
dc:fc:34:b0:c3:26:d6:33:a0:f6:de:7d:4a:cb:f9:c9:0f:89:
a0:8b:ca:1c:8e:bb:34:ac:f9:fe:8a:b4:13:e6:a5:46:2e:41:
85:0f:ef:2a:63:fd:d9:9d:70:82:ff:2c:7d:bb:08:a3:23:d3:
d4:55:5d:a3:ab:1f:d4:d5:26:a2:0d:be:b6:95:e8:19:b6:50:
f8:fc:10:2b:e6:d4:fc:94:c0:95:2e:ca:5e:ad:d5:c4:5d:c0:
46:ce:f0:ba:4c:a5:3a:ae:5b:08:94:32:75:18:b1:b9:41:8f:
10:70:1f:5c:03:b9:96:ad:fb:43:a6:fe:73:04:81:d4:db:fe:
48:ce:e9:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:26:44 2025 by rpki-client