
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/23de06-fc9a-43d3-ac95-37e64c07cc86/1/PRzEAjSeGROS0ex0acG8gkNjRDk.mft
File: PRzEAjSeGROS0ex0acG8gkNjRDk.mft (raw, json)
Hash identifier: 9jLtcoOuE7pLxvTM92cdTNuMMkyFf2uXGhtedTvN0o4=
Subject key identifier: 3A:D9:8E:AC:00:BB:11:14:AA:77:67:8B:75:AF:FA:57:C6:3A:C7:4E
Authority key identifier: 3D:1C:C4:02:34:9E:19:13:92:D1:EC:74:69:C1:BC:82:43:63:44:39
Certificate issuer: /CN=3d1cc402349e191392d1ec7469c1bc8243634439
Certificate serial: 0199FB45FCDFC97BF84AA4BC6A8304D9AB7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRzEAjSeGROS0ex0acG8gkNjRDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/23de06-fc9a-43d3-ac95-37e64c07cc86/1/PRzEAjSeGROS0ex0acG8gkNjRDk.mft
Manifest number: 0B24
Signing time: Sun 19 Oct 2025 07:01:31 +0000
Manifest this update: Sun 19 Oct 2025 07:01:31 +0000
Manifest next update: Mon 20 Oct 2025 07:01:31 +0000
Files and hashes: 1: PRzEAjSeGROS0ex0acG8gkNjRDk.crl (hash: qwz/8hI9/neZavu+jSNMtVZ9INKqIN85sqCYsvh22ZU=)
2: flDyEgY09JcTncHiiRnZ44dc3Jg.roa (hash: U/d1Btmo0ndLftNS6W3aEjJNMxknGgzWNSoSOFVtfm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/23de06-fc9a-43d3-ac95-37e64c07cc86/1/PRzEAjSeGROS0ex0acG8gkNjRDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/23de06-fc9a-43d3-ac95-37e64c07cc86/1/PRzEAjSeGROS0ex0acG8gkNjRDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/PRzEAjSeGROS0ex0acG8gkNjRDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:fc:df:c9:7b:f8:4a:a4:bc:6a:83:04:d9:ab:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d1cc402349e191392d1ec7469c1bc8243634439
Validity
Not Before: Oct 19 07:01:31 2025 GMT
Not After : Oct 20 07:01:31 2025 GMT
Subject: CN=3ad98eac00bb1114aa77678b75affa57c63ac74e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d6:c7:ff:c3:6e:98:1a:60:9d:7b:cf:3b:71:
d1:dd:05:e9:20:21:cb:34:3c:13:c3:56:33:fb:0a:
cc:59:7a:6e:4a:2a:4e:52:1e:33:f6:bd:cc:94:c2:
fa:d4:d8:e3:a8:3b:c5:14:44:e9:73:1c:13:d4:b8:
08:f8:6c:78:ce:4e:f0:0d:87:fa:b8:a0:9f:6a:71:
d5:60:9c:6b:ba:3a:0e:44:6c:6e:b9:86:cb:93:a4:
18:9a:82:54:de:99:b7:09:4e:cd:09:f6:12:d9:c2:
0b:83:fa:7b:2c:5b:e3:e3:27:b0:f3:6d:56:fb:3c:
46:54:05:1c:2c:3c:14:db:ee:41:fe:8a:25:9c:ba:
02:00:79:fb:c7:9b:01:0b:b5:2d:40:49:1a:c8:db:
ba:d4:67:3e:23:49:e8:fa:b6:a9:ca:1a:80:84:e1:
8e:83:1b:e2:d7:80:00:16:b5:ee:80:37:33:48:19:
7a:46:21:cd:b0:76:b0:73:f3:d8:96:62:66:fb:07:
83:c8:94:66:93:61:b5:df:8e:97:fc:fa:46:7d:64:
19:f9:7d:82:84:65:c2:a8:30:70:8a:86:f2:15:01:
4b:5e:92:b2:92:47:a6:06:56:34:c1:52:a5:a6:f0:
41:c5:f3:01:f5:16:3c:f7:44:53:88:4f:30:35:0e:
a2:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:D9:8E:AC:00:BB:11:14:AA:77:67:8B:75:AF:FA:57:C6:3A:C7:4E
X509v3 Authority Key Identifier:
keyid:3D:1C:C4:02:34:9E:19:13:92:D1:EC:74:69:C1:BC:82:43:63:44:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRzEAjSeGROS0ex0acG8gkNjRDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/23de06-fc9a-43d3-ac95-37e64c07cc86/1/PRzEAjSeGROS0ex0acG8gkNjRDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/23de06-fc9a-43d3-ac95-37e64c07cc86/1/PRzEAjSeGROS0ex0acG8gkNjRDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:49:89:8d:71:38:df:a8:92:9a:b2:50:5c:1d:7b:05:1e:3b:
e2:65:a7:11:3d:2c:9b:07:9c:f1:13:ff:bc:68:d7:47:f1:35:
00:a1:4a:a9:05:69:42:64:9e:fb:fe:37:6e:d4:91:3d:7c:b9:
5b:16:10:22:1b:d4:c0:c4:a6:92:14:fe:61:59:38:5f:f3:ae:
bf:64:3f:6a:72:d3:79:01:01:b9:f9:fd:ce:5c:fc:d4:f7:50:
0e:1d:4f:57:b0:4b:f6:58:4d:f8:b9:f7:be:43:87:6d:7b:25:
ee:ed:b8:19:f8:ac:b6:f4:bb:64:63:ee:1a:1e:b4:c6:9a:73:
8b:48:d9:d0:9c:97:b3:75:e9:07:e5:44:cb:e3:01:46:dc:c3:
56:d9:f3:47:ad:b8:07:92:5f:c3:78:f3:69:87:6a:f9:09:95:
ad:3e:fa:8d:7d:b7:f7:ca:f1:f6:8e:92:dd:c4:ea:db:11:47:
5f:5d:2e:6c:54:9c:87:60:90:f8:b7:db:58:77:b6:63:53:a8:
32:20:5f:7c:84:c8:c3:d6:1c:7c:78:65:32:38:70:7f:0c:fc:
93:29:30:1f:80:71:20:bc:c5:3d:4b:91:f4:17:6a:00:f4:72:
7e:79:2c:0e:f2:ae:8b:4e:cc:77:8a:6a:38:bf:eb:9a:2e:7d:
5f:c0:b4:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:02 2025 by rpki-client