Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/8fef7f-d011-4cdb-ac0a-31700f0e1a61/1/praJ3e9Y8KM4Pi71qjonxP5FMY4.mft
File: praJ3e9Y8KM4Pi71qjonxP5FMY4.mft (raw, json)
Hash identifier: q59cf6QIua/xO5nBBq762+4TVBC9cGRjr9ixqynYgFA=
Subject key identifier: D1:74:8C:FA:E4:F4:E0:9A:6B:B9:29:36:90:E4:70:3B:33:08:BD:17
Authority key identifier: A6:B6:89:DD:EF:58:F0:A3:38:3E:2E:F5:AA:3A:27:C4:FE:45:31:8E
Certificate issuer: /CN=a6b689ddef58f0a3383e2ef5aa3a27c4fe45318e
Certificate serial: 0199FB459A6146837BD5DDB5942DD9C343B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/praJ3e9Y8KM4Pi71qjonxP5FMY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/8fef7f-d011-4cdb-ac0a-31700f0e1a61/1/praJ3e9Y8KM4Pi71qjonxP5FMY4.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 07:01:06 +0000
Manifest this update: Sun 19 Oct 2025 07:01:06 +0000
Manifest next update: Mon 20 Oct 2025 07:01:06 +0000
Files and hashes: 1: 1-hqyEGwonCGY9K2L38Pw7_zJV_k.roa (hash: a3BoJ3dncPr176aD5ziB0Bh5202joOPjBl2mIqn/r/0=)
2: praJ3e9Y8KM4Pi71qjonxP5FMY4.crl (hash: JNCg2vCP5AyPSqigxA02cbp1bydEisbuB0whV4WvEkQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/8fef7f-d011-4cdb-ac0a-31700f0e1a61/1/praJ3e9Y8KM4Pi71qjonxP5FMY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/8fef7f-d011-4cdb-ac0a-31700f0e1a61/1/praJ3e9Y8KM4Pi71qjonxP5FMY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/praJ3e9Y8KM4Pi71qjonxP5FMY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:9a:61:46:83:7b:d5:dd:b5:94:2d:d9:c3:43:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6b689ddef58f0a3383e2ef5aa3a27c4fe45318e
Validity
Not Before: Oct 19 07:01:06 2025 GMT
Not After : Oct 20 07:01:06 2025 GMT
Subject: CN=d1748cfae4f4e09a6bb9293690e4703b3308bd17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:76:8e:ee:4b:16:ed:33:ba:b6:56:ef:58:ba:
5f:a6:23:c1:e9:a9:cf:fe:cf:b8:19:18:9f:3a:5a:
c2:03:36:d0:57:69:03:19:63:3e:13:a7:85:3b:73:
2d:4f:fe:9f:ce:c6:3d:29:f7:18:cc:0b:f4:c2:44:
1c:5d:a4:93:42:bf:18:97:38:b3:70:b7:e4:4f:44:
7c:a6:15:94:f6:9d:07:5c:75:06:7d:fe:25:78:9c:
a1:44:51:96:36:82:55:39:64:95:9c:cb:2b:5e:10:
8f:80:8b:5d:8f:63:73:8d:cc:ab:f7:90:3e:2e:26:
d3:8d:1f:6b:9d:c0:72:54:18:e0:69:08:dd:3f:b8:
e9:fa:e7:4b:3a:07:5b:e6:16:3f:2b:6c:a0:67:f9:
a4:01:93:f3:a2:e8:7d:72:3c:4b:b5:15:a3:1e:9d:
c7:0d:4d:7c:7b:b6:39:0f:54:d6:67:17:fc:8d:3d:
57:11:f1:13:6c:bc:c9:f8:87:0d:67:38:40:a9:91:
4f:a8:26:a0:26:71:03:2b:92:0f:bd:49:6f:24:19:
76:d9:7b:c8:e1:df:9e:e7:ec:9a:7b:6d:72:f9:eb:
91:8a:da:d4:1a:5b:35:92:0b:3e:22:69:28:b3:b2:
b4:19:ec:28:b6:75:0a:64:ae:a8:d9:b2:9d:6c:0d:
d0:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:74:8C:FA:E4:F4:E0:9A:6B:B9:29:36:90:E4:70:3B:33:08:BD:17
X509v3 Authority Key Identifier:
keyid:A6:B6:89:DD:EF:58:F0:A3:38:3E:2E:F5:AA:3A:27:C4:FE:45:31:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/praJ3e9Y8KM4Pi71qjonxP5FMY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8fef7f-d011-4cdb-ac0a-31700f0e1a61/1/praJ3e9Y8KM4Pi71qjonxP5FMY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8fef7f-d011-4cdb-ac0a-31700f0e1a61/1/praJ3e9Y8KM4Pi71qjonxP5FMY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:f7:c3:20:fa:dd:64:e7:5e:82:05:03:ec:94:01:d5:81:9f:
b8:ab:10:49:b7:e2:b6:a6:53:78:6b:98:59:ac:5b:5e:82:0a:
e9:de:d1:98:d8:49:13:71:dc:f9:c7:20:85:f8:b3:2f:5e:81:
fa:a3:5e:fb:24:df:51:2f:7d:dd:fe:ee:99:b2:ce:65:b1:30:
b0:f9:78:5c:e9:06:d8:76:66:e6:3c:da:1b:16:42:4d:cc:28:
d1:81:24:90:7f:a8:5e:1c:a5:9e:81:e3:bf:b8:a0:97:e9:0a:
ed:d4:b5:fa:ff:eb:4f:d0:8a:ff:c9:25:4a:b5:3a:7a:3a:c9:
37:d3:fd:41:f7:45:93:3f:0a:c0:4a:85:61:27:67:7b:92:d1:
9e:43:a8:1b:9f:00:6a:92:b2:7b:bb:3a:e3:4c:53:9e:5e:2a:
84:3d:02:fb:48:b5:4b:d3:f9:e2:75:84:ed:f1:2e:ad:b8:9d:
c4:7e:dc:c8:3c:9e:01:a7:d7:bb:b4:92:1f:8c:d1:3d:d5:ee:
a7:15:e0:4d:c8:05:b9:9b:a3:d3:9b:c8:a1:26:a6:d3:18:17:
a1:3b:c3:26:31:ef:53:cc:1f:0d:89:5b:23:f4:67:54:6a:2b:
d1:91:4c:1d:7b:f6:b7:4b:ed:5e:eb:b4:eb:52:d5:5f:1e:96:
81:24:a0:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:29:02 2025 by rpki-client