Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/c077d5-b791-41ac-b7a2-566d1a637eef/1/PrqPh8ox3rbBfcfN4Iw3p3XnMCQ.mft
File: PrqPh8ox3rbBfcfN4Iw3p3XnMCQ.mft (raw, json)
Hash identifier: 5ftmLXYUn/b4HLxL26AZsScJuPHRe6EGi1JaN90bGzM=
Subject key identifier: 30:E7:9C:5A:15:85:05:9C:57:1C:C6:56:10:D5:BE:36:F7:70:0C:65
Authority key identifier: 3E:BA:8F:87:CA:31:DE:B6:C1:7D:C7:CD:E0:8C:37:A7:75:E7:30:24
Certificate issuer: /CN=3eba8f87ca31deb6c17dc7cde08c37a775e73024
Certificate serial: 0199FB45C152B48FC6D365C215C1F299F6DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PrqPh8ox3rbBfcfN4Iw3p3XnMCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/c077d5-b791-41ac-b7a2-566d1a637eef/1/PrqPh8ox3rbBfcfN4Iw3p3XnMCQ.mft
Manifest number: 4B
Signing time: Sun 19 Oct 2025 07:01:16 +0000
Manifest this update: Sun 19 Oct 2025 07:01:16 +0000
Manifest next update: Mon 20 Oct 2025 07:01:16 +0000
Files and hashes: 1: PrqPh8ox3rbBfcfN4Iw3p3XnMCQ.crl (hash: UI9BZuRFWULD4fiQnV+1ZZpYFMrn2qODp/TPGv1iVdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/c077d5-b791-41ac-b7a2-566d1a637eef/1/PrqPh8ox3rbBfcfN4Iw3p3XnMCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/c077d5-b791-41ac-b7a2-566d1a637eef/1/PrqPh8ox3rbBfcfN4Iw3p3XnMCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PrqPh8ox3rbBfcfN4Iw3p3XnMCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:c1:52:b4:8f:c6:d3:65:c2:15:c1:f2:99:f6:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eba8f87ca31deb6c17dc7cde08c37a775e73024
Validity
Not Before: Oct 19 07:01:16 2025 GMT
Not After : Oct 20 07:01:16 2025 GMT
Subject: CN=30e79c5a1585059c571cc65610d5be36f7700c65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a8:f0:fc:a2:af:3e:10:8c:b9:22:e4:88:73:
09:d2:fd:1e:4b:f1:b6:1a:56:a3:48:fd:9c:05:9d:
38:d8:76:1e:d5:25:05:01:d3:3d:c6:42:80:bb:29:
30:28:f2:d6:2f:13:55:17:a5:74:e8:80:d2:1d:69:
cf:5b:59:98:79:ca:f7:ad:42:12:0e:7f:9f:e9:4c:
36:2b:8c:15:18:39:e7:0e:f0:87:ed:64:32:43:db:
66:35:ce:a9:a6:09:09:47:1d:65:c3:ff:3f:52:8e:
db:f7:87:5c:ee:4e:64:1d:1f:13:d0:ec:2c:57:64:
67:95:de:99:96:43:d8:17:2f:10:a6:1d:4f:b0:86:
18:d9:e6:55:b8:e6:b5:b8:4e:b0:c7:22:94:f1:4c:
3e:fb:50:8a:6c:b5:77:5c:3a:32:81:33:ea:3a:6d:
9a:92:78:f1:44:5b:fc:62:e6:9d:fb:10:83:0b:4f:
35:bc:de:81:3c:98:f3:27:71:db:ce:0a:ca:96:27:
a9:e3:f3:e0:b2:2c:47:bd:f6:4c:8b:f2:01:d2:49:
d2:45:d6:0b:51:16:50:73:28:df:1b:d7:a4:27:71:
5e:e4:29:cd:f0:54:47:48:87:45:92:a8:e8:4d:6e:
e9:17:2f:1a:1e:97:2b:88:6d:42:95:f6:af:7b:d3:
4b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:E7:9C:5A:15:85:05:9C:57:1C:C6:56:10:D5:BE:36:F7:70:0C:65
X509v3 Authority Key Identifier:
keyid:3E:BA:8F:87:CA:31:DE:B6:C1:7D:C7:CD:E0:8C:37:A7:75:E7:30:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PrqPh8ox3rbBfcfN4Iw3p3XnMCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/c077d5-b791-41ac-b7a2-566d1a637eef/1/PrqPh8ox3rbBfcfN4Iw3p3XnMCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/c077d5-b791-41ac-b7a2-566d1a637eef/1/PrqPh8ox3rbBfcfN4Iw3p3XnMCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:ff:69:18:b6:f6:c8:1c:b8:d1:a6:81:39:ea:21:c1:f1:41:
dd:da:6b:40:8c:83:21:d4:db:5a:d1:66:57:6b:3f:5d:d8:2b:
ba:27:6e:87:f0:0c:45:1c:b9:ce:82:16:6e:cf:d6:63:ab:f6:
68:c0:9b:6c:15:e6:3c:23:06:de:9d:64:aa:2c:cf:e5:8d:d6:
4c:7c:91:ec:b6:89:82:a7:88:b5:7c:90:87:4b:56:25:20:40:
9d:1a:33:c7:a6:df:ad:05:31:5b:da:d3:2a:74:52:ab:7b:09:
6b:b3:46:ec:03:47:01:56:cf:c8:42:9d:6e:ca:bc:d0:f6:43:
40:f6:9b:22:a5:fa:67:6e:10:f4:d9:f7:c3:2e:3e:09:1f:29:
73:6b:6b:c7:59:88:ef:40:18:05:46:c9:77:71:2c:0e:03:08:
64:5d:8e:de:22:5c:5a:a7:ed:91:31:36:97:e2:bb:52:b9:09:
60:80:48:4c:da:92:50:97:f5:37:42:f5:62:8d:bc:1d:62:25:
13:81:bb:7c:08:b4:dc:08:ee:4b:c1:36:4d:b1:7d:54:ec:5f:
6f:b1:e7:1e:50:49:e7:8d:db:7d:eb:30:09:ff:4f:2a:cf:ff:
20:5c:7b:4c:c8:e9:00:00:d6:75:bb:48:21:9a:7d:cd:9d:d9:
e3:42:d3:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:05:00 2025 by rpki-client