Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/23de06-fc9a-43d3-ac95-37e64c07cc86/1/PRzEAjSeGROS0ex0acG8gkNjRDk.mft
File: PRzEAjSeGROS0ex0acG8gkNjRDk.mft (raw, json)
Hash identifier: Na5EwkpXBhQiBlM3mDi9N3t5bK2yUpgaJp0K1sb0hLE=
Subject key identifier: B1:73:13:BA:D1:AD:50:28:EB:7B:4C:D2:BA:84:87:0B:92:B8:79:CF
Authority key identifier: 3D:1C:C4:02:34:9E:19:13:92:D1:EC:74:69:C1:BC:82:43:63:44:39
Certificate issuer: /CN=3d1cc402349e191392d1ec7469c1bc8243634439
Certificate serial: 0197B9D8C6DED1E0604E28799498277AEFA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRzEAjSeGROS0ex0acG8gkNjRDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/23de06-fc9a-43d3-ac95-37e64c07cc86/1/PRzEAjSeGROS0ex0acG8gkNjRDk.mft
Manifest number: 09F9
Signing time: Sun 29 Jun 2025 04:01:20 +0000
Manifest this update: Sun 29 Jun 2025 04:01:20 +0000
Manifest next update: Mon 30 Jun 2025 04:01:20 +0000
Files and hashes: 1: PRzEAjSeGROS0ex0acG8gkNjRDk.crl (hash: KZsoF/7C+BiHxFeJhiQR0nrlosRR3+Sa7P26WmeHJaY=)
2: flDyEgY09JcTncHiiRnZ44dc3Jg.roa (hash: U/d1Btmo0ndLftNS6W3aEjJNMxknGgzWNSoSOFVtfm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/23de06-fc9a-43d3-ac95-37e64c07cc86/1/PRzEAjSeGROS0ex0acG8gkNjRDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/23de06-fc9a-43d3-ac95-37e64c07cc86/1/PRzEAjSeGROS0ex0acG8gkNjRDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/PRzEAjSeGROS0ex0acG8gkNjRDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:d8:c6:de:d1:e0:60:4e:28:79:94:98:27:7a:ef:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d1cc402349e191392d1ec7469c1bc8243634439
Validity
Not Before: Jun 29 04:01:20 2025 GMT
Not After : Jun 30 04:01:20 2025 GMT
Subject: CN=b17313bad1ad5028eb7b4cd2ba84870b92b879cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:94:35:a3:45:3a:2b:76:59:a1:1f:3f:a1:c0:
63:b5:ef:51:81:8c:b4:6b:51:72:b9:16:9e:f0:4d:
52:62:dd:63:05:08:db:03:44:32:7a:67:fc:e9:7a:
51:8b:d3:15:74:de:1e:2d:8f:b0:2f:46:b6:9c:9a:
75:a1:77:f4:23:ba:c5:06:f0:e0:eb:96:12:b5:9f:
f1:09:d2:c3:9a:a1:57:fd:85:29:cf:3d:69:70:d8:
32:8b:78:26:49:c4:52:33:fe:81:57:31:e7:a8:e0:
c6:21:ac:f7:23:10:2d:a2:f0:6d:54:de:0b:96:60:
57:b0:0d:ee:c7:19:4e:13:b8:df:4b:b6:5e:a0:1a:
99:51:e0:31:1c:6e:ae:64:81:9d:7e:89:a0:56:54:
f1:86:c3:c4:13:05:64:5f:c2:c3:03:5a:ec:9f:7f:
a2:99:17:75:1f:71:a4:31:fe:ef:47:0d:bd:ab:7c:
ec:78:0f:e5:9a:cc:18:05:ea:2b:dd:98:17:b7:90:
0a:38:3c:c0:97:34:92:af:7c:73:d8:8c:bb:2a:a1:
57:3d:f5:7e:c3:6d:32:b5:1b:b9:b5:a1:7b:18:ec:
53:75:1f:76:5b:7e:0a:43:61:b8:81:70:42:f3:b9:
76:e4:ee:d6:d2:9e:70:d9:66:4b:01:4b:6c:f0:be:
29:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:73:13:BA:D1:AD:50:28:EB:7B:4C:D2:BA:84:87:0B:92:B8:79:CF
X509v3 Authority Key Identifier:
keyid:3D:1C:C4:02:34:9E:19:13:92:D1:EC:74:69:C1:BC:82:43:63:44:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRzEAjSeGROS0ex0acG8gkNjRDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/23de06-fc9a-43d3-ac95-37e64c07cc86/1/PRzEAjSeGROS0ex0acG8gkNjRDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/23de06-fc9a-43d3-ac95-37e64c07cc86/1/PRzEAjSeGROS0ex0acG8gkNjRDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:2f:94:b6:17:11:b5:78:f2:03:87:7d:8f:19:e2:ce:47:4e:
93:2e:dd:ad:23:56:11:db:0e:cb:fc:2a:d4:e3:14:f9:60:02:
e7:0c:60:20:77:38:53:47:c1:fa:40:15:9a:76:24:e2:06:40:
d9:2e:99:51:01:86:98:5a:36:b2:27:f2:34:1d:0b:45:99:fb:
4a:36:06:7b:4f:fd:79:76:68:e6:5b:37:9c:79:96:e8:a7:f2:
b9:c7:0b:56:d4:5b:2b:79:52:71:83:c8:50:ba:23:cc:ed:5f:
78:a3:da:24:06:ba:74:aa:28:aa:3b:94:8d:d7:67:19:26:90:
eb:4b:6d:d0:99:db:a6:05:d6:ea:6d:a9:dc:4a:3f:e0:73:0c:
25:19:61:3d:91:1e:8e:c1:64:c1:e8:73:a9:93:ce:eb:b0:f0:
19:9b:52:44:a5:a3:75:40:00:7e:15:b7:9e:4b:64:ae:74:9a:
e5:0d:35:84:9b:f6:6e:f2:42:a5:0c:8b:b5:03:d2:c2:57:84:
bb:0a:0a:66:aa:96:d6:a0:5a:80:53:a0:28:96:36:63:00:50:
7d:fa:b7:79:7c:57:c7:89:c9:e9:15:f6:c6:a2:a6:ad:d2:ca:
6e:ae:09:a1:27:66:ab:3b:09:2b:ec:4f:96:72:60:92:8f:a9:
b9:93:ca:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe52Mbe0eBgTih5lJgneu+pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkMWNjNDAyMzQ5ZTE5MTM5MmQxZWM3NDY5YzFiYzgyNDM2
MzQ0MzkwHhcNMjUwNjI5MDQwMTIwWhcNMjUwNjMwMDQwMTIwWjAzMTEwLwYDVQQD
EyhiMTczMTNiYWQxYWQ1MDI4ZWI3YjRjZDJiYTg0ODcwYjkyYjg3OWNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpQ1o0U6K3ZZoR8/ocBjte9RgYy0
a1FyuRae8E1SYt1jBQjbA0Qyemf86XpRi9MVdN4eLY+wL0a2nJp1oXf0I7rFBvDg
65YStZ/xCdLDmqFX/YUpzz1pcNgyi3gmScRSM/6BVzHnqODGIaz3IxAtovBtVN4L
lmBXsA3uxxlOE7jfS7ZeoBqZUeAxHG6uZIGdfomgVlTxhsPEEwVkX8LDA1rsn3+i
mRd1H3GkMf7vRw29q3zseA/lmswYBeor3ZgXt5AKODzAlzSSr3xz2Iy7KqFXPfV+
w20ytRu5taF7GOxTdR92W34KQ2G4gXBC87l25O7W0p5w2WZLAUts8L4p8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLFzE7rRrVAo63tM0rqEhwuSuHnPMB8GA1UdIwQY
MBaAFD0cxAI0nhkTktHsdGnBvIJDY0Q5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFJ6RUFqU2VHUk9TMGV4MGFjRzhna05qUkRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8yM2RlMDYtZmM5YS00M2QzLWFjOTUt
MzdlNjRjMDdjYzg2LzEvUFJ6RUFqU2VHUk9TMGV4MGFjRzhna05qUkRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS8yM2RlMDYtZmM5YS00M2QzLWFjOTUtMzdlNjRjMDdjYzg2
LzEvUFJ6RUFqU2VHUk9TMGV4MGFjRzhna05qUkRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArS+UthcR
tXjyA4d9jxnizkdOky7drSNWEdsOy/wq1OMU+WAC5wxgIHc4U0fB+kAVmnYk4gZA
2S6ZUQGGmFo2sifyNB0LRZn7SjYGe0/9eXZo5ls3nHmW6KfyuccLVtRbK3lScYPI
ULojzO1feKPaJAa6dKooqjuUjddnGSaQ60tt0JnbpgXW6m2p3Eo/4HMMJRlhPZEe
jsFkwehzqZPO67DwGZtSRKWjdUAAfhW3nktkrnSa5Q01hJv2bvJCpQyLtQPSwleE
uwoKZqqW1qBagFOgKJY2YwBQffq3eXxXx4nJ6RX2xqKmrdLKbq4JoSdmqzsJK+xP
lnJgko+puZPKXw==
-----END CERTIFICATE-----
Generated at Sun Jun 29 08:02:56 2025 by rpki-client