Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/8fef7f-d011-4cdb-ac0a-31700f0e1a61/1/praJ3e9Y8KM4Pi71qjonxP5FMY4.mft
File: praJ3e9Y8KM4Pi71qjonxP5FMY4.mft (raw, json)
Hash identifier: H+i10jyUyM9sdrZivKpww5WVWuwVGu3ukZ3kWw4uS7w=
Subject key identifier: F0:A4:39:4F:00:29:AB:D4:73:E3:D9:E3:B5:33:BD:BF:5B:DB:6F:AB
Authority key identifier: A6:B6:89:DD:EF:58:F0:A3:38:3E:2E:F5:AA:3A:27:C4:FE:45:31:8E
Certificate issuer: /CN=a6b689ddef58f0a3383e2ef5aa3a27c4fe45318e
Certificate serial: 0198D40451ABD8CA2C7E93235724C633609B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/praJ3e9Y8KM4Pi71qjonxP5FMY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/8fef7f-d011-4cdb-ac0a-31700f0e1a61/1/praJ3e9Y8KM4Pi71qjonxP5FMY4.mft
Manifest number: 1649
Signing time: Fri 22 Aug 2025 23:01:49 +0000
Manifest this update: Fri 22 Aug 2025 23:01:49 +0000
Manifest next update: Sat 23 Aug 2025 23:01:49 +0000
Files and hashes: 1: 1-hqyEGwonCGY9K2L38Pw7_zJV_k.roa (hash: a3BoJ3dncPr176aD5ziB0Bh5202joOPjBl2mIqn/r/0=)
2: praJ3e9Y8KM4Pi71qjonxP5FMY4.crl (hash: OGy1omZZnubfXapBXTaKmPqrDcOeBQYZhNZyjwlicws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/8fef7f-d011-4cdb-ac0a-31700f0e1a61/1/praJ3e9Y8KM4Pi71qjonxP5FMY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/8fef7f-d011-4cdb-ac0a-31700f0e1a61/1/praJ3e9Y8KM4Pi71qjonxP5FMY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/praJ3e9Y8KM4Pi71qjonxP5FMY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:51:ab:d8:ca:2c:7e:93:23:57:24:c6:33:60:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6b689ddef58f0a3383e2ef5aa3a27c4fe45318e
Validity
Not Before: Aug 22 23:01:49 2025 GMT
Not After : Aug 23 23:01:49 2025 GMT
Subject: CN=f0a4394f0029abd473e3d9e3b533bdbf5bdb6fab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:76:ea:c6:7e:b9:17:7e:43:5c:86:56:e8:19:
4d:9b:2a:00:a2:b8:8b:4f:11:2e:4e:c0:0c:ba:fa:
22:1b:63:49:9b:eb:0d:ad:83:a2:c3:eb:66:07:55:
e8:d6:03:14:e3:31:eb:ac:be:28:79:16:50:51:8e:
ce:cd:65:8d:03:27:e8:2f:16:ce:f6:b7:16:9f:e3:
61:f3:13:dd:19:5f:f3:0a:58:15:8a:9b:58:a2:91:
9b:e8:5f:72:93:8f:0a:63:24:91:31:0b:34:1e:9e:
e9:94:77:a9:a6:fe:1b:09:e2:2d:d0:fe:ba:5f:f7:
58:ae:67:7c:d7:87:6c:a7:f3:12:2f:ae:95:43:cc:
f5:71:34:b9:0d:da:46:ec:c3:32:07:94:00:98:c1:
48:2c:dc:9c:b4:1a:78:69:24:07:01:15:25:64:c3:
71:28:02:2f:6c:28:f4:44:25:04:5e:88:c4:54:fa:
02:9f:94:9d:39:c8:fd:d5:6e:f9:e2:83:b1:30:f2:
0d:7b:dd:43:93:80:3a:bf:56:c7:70:53:34:81:8d:
3a:77:7b:b0:3a:9a:b5:59:90:2c:2d:59:07:10:f5:
38:75:64:c5:11:7c:5b:23:e1:14:39:99:5d:18:cd:
ae:f2:47:8d:5c:f4:87:eb:4c:2b:83:64:76:6a:d2:
60:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:A4:39:4F:00:29:AB:D4:73:E3:D9:E3:B5:33:BD:BF:5B:DB:6F:AB
X509v3 Authority Key Identifier:
keyid:A6:B6:89:DD:EF:58:F0:A3:38:3E:2E:F5:AA:3A:27:C4:FE:45:31:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/praJ3e9Y8KM4Pi71qjonxP5FMY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8fef7f-d011-4cdb-ac0a-31700f0e1a61/1/praJ3e9Y8KM4Pi71qjonxP5FMY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8fef7f-d011-4cdb-ac0a-31700f0e1a61/1/praJ3e9Y8KM4Pi71qjonxP5FMY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:c7:e6:97:e1:6a:c2:6b:2e:1a:30:22:b8:0a:f2:d0:a2:e6:
82:40:34:fd:d7:9e:49:00:5c:e8:52:05:d9:93:98:67:b6:23:
e6:7f:ea:1a:b8:3c:3e:e0:49:61:13:ee:e7:71:ba:f5:6b:22:
64:18:1c:54:0d:9d:66:10:d5:7a:07:6b:69:96:96:bc:07:00:
96:6b:99:68:70:79:4b:83:b7:99:8d:58:7c:fa:7f:f3:22:41:
dc:05:52:f1:03:e7:3b:b3:5f:68:19:d9:80:9f:21:41:48:e7:
04:f8:73:61:38:2f:97:ce:26:83:2d:fa:3e:81:36:cb:23:3c:
7d:09:66:b5:0d:1a:e4:5f:2b:d4:00:8c:e4:fe:5a:ca:6c:6b:
9d:da:aa:4e:5b:11:85:aa:d2:67:f3:84:37:46:9f:d1:8a:1d:
a1:71:f4:c5:0d:a4:8e:83:be:95:f1:12:fe:e7:1b:fd:5e:10:
9c:0e:67:f8:23:48:0e:16:d5:ee:e5:4b:fc:11:79:e4:9d:95:
c7:c4:33:db:4a:90:0b:00:da:32:0a:92:d1:e3:24:ca:76:aa:
77:52:39:cb:88:9b:71:4e:0c:c4:6b:5c:ac:32:66:d3:10:8e:
dd:f2:e8:4f:c8:45:35:a2:8d:a6:f5:56:d2:51:0e:38:84:18:
96:e7:e6:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:14:42 2025 by rpki-client