Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.mft
File: PRH7pD9XqwRF5UL87suHaBZXzPM.mft (raw, json)
Hash identifier: YL/hqlrHvdRj/vyd6MSKGwPDwmPw5MUlfhHjidn8UoA=
Subject key identifier: 69:B2:EE:70:51:F0:CB:1E:32:FB:6B:B8:57:AA:56:7B:C0:DE:57:91
Authority key identifier: 3D:11:FB:A4:3F:57:AB:04:45:E5:42:FC:EE:CB:87:68:16:57:CC:F3
Certificate issuer: /CN=3d11fba43f57ab0445e542fceecb87681657ccf3
Certificate serial: 0198D660BCE4EC2673C8EA24C53396526210
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRH7pD9XqwRF5UL87suHaBZXzPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.mft
Manifest number: 02D3
Signing time: Sat 23 Aug 2025 10:02:00 +0000
Manifest this update: Sat 23 Aug 2025 10:02:00 +0000
Manifest next update: Sun 24 Aug 2025 10:02:00 +0000
Files and hashes: 1: 2DxOeFRwGr0ZkLmLFLoh-xJZObE.roa (hash: aeAg8fL5FqA68LiiZmemChuMc/666QpvAefI6BAnFLU=)
2: PRH7pD9XqwRF5UL87suHaBZXzPM.crl (hash: Xo4GDSHTAQMTkOUhoEcyJ9qQpgj1HaIL9X7jFu6iE/g=)
3: QubVM_6N5lx1EgDJtxcjPI_RV3o.roa (hash: 0U5OEeLVzA3Fo3jdio9FkyyDkZiO1CmcUt6CGyuWF74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PRH7pD9XqwRF5UL87suHaBZXzPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:bc:e4:ec:26:73:c8:ea:24:c5:33:96:52:62:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d11fba43f57ab0445e542fceecb87681657ccf3
Validity
Not Before: Aug 23 10:02:00 2025 GMT
Not After : Aug 24 10:02:00 2025 GMT
Subject: CN=69b2ee7051f0cb1e32fb6bb857aa567bc0de5791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:e2:12:a1:8a:e7:87:07:05:a6:26:4c:97:01:
5f:0a:00:59:1d:02:ff:96:07:5b:54:80:8e:e1:2e:
37:09:a4:0d:8f:9d:60:3d:2a:72:55:06:42:06:f9:
51:74:8a:f3:0f:22:31:f2:09:27:f9:64:0e:1e:c1:
8f:5e:13:e5:3b:50:9b:5b:f7:f6:1a:e4:fb:43:b1:
6a:3c:57:8a:45:ba:ab:ff:0e:fd:42:5f:af:02:51:
3f:7f:4b:10:ff:ee:7e:28:d3:f5:93:06:90:67:e3:
82:a4:f1:fa:f7:65:af:df:bf:a3:89:97:c0:ce:5e:
66:f7:b9:b6:59:0d:7f:b7:2f:40:c6:0d:d1:41:10:
e2:0d:0b:2c:57:51:01:74:3e:60:90:39:96:c5:a8:
57:73:2e:d7:45:7d:31:04:04:5b:76:67:18:bb:86:
b2:5b:3a:68:1b:23:d8:4c:53:2a:1e:ba:0a:d7:3d:
c2:39:83:7e:d8:f3:c7:f2:7d:96:ae:7e:0e:c1:95:
20:b4:be:04:f5:6c:12:ec:e6:ab:8d:04:80:09:06:
c3:73:52:79:87:8c:fc:a4:2c:75:41:fc:ce:61:bc:
07:d1:8f:32:47:88:96:68:fe:29:b3:1b:ca:27:54:
c4:b5:5a:23:13:49:12:ca:52:fa:48:a1:95:c8:c9:
9f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:B2:EE:70:51:F0:CB:1E:32:FB:6B:B8:57:AA:56:7B:C0:DE:57:91
X509v3 Authority Key Identifier:
keyid:3D:11:FB:A4:3F:57:AB:04:45:E5:42:FC:EE:CB:87:68:16:57:CC:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRH7pD9XqwRF5UL87suHaBZXzPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:e1:51:8e:09:2b:63:46:5b:32:56:d3:45:25:94:23:3e:cf:
13:17:6e:c6:8b:9a:84:3f:73:da:bf:90:b8:80:72:8d:44:e4:
f9:e0:b3:7f:cd:71:c9:67:b1:e2:27:e6:57:85:bd:27:40:c8:
23:ac:d6:97:0f:a1:b4:66:1d:50:2b:8e:c4:aa:cd:5c:d0:45:
07:56:93:3c:7d:d5:4d:94:3e:1f:bb:d2:df:7e:85:3f:57:9a:
9b:22:c6:e8:a9:c2:a4:8f:30:a5:3b:a9:4d:62:fc:38:6b:d0:
65:3d:df:6c:7f:4d:c1:b6:c2:0b:88:66:ff:fd:7a:fd:22:72:
d2:68:a1:ea:5e:04:9a:32:bb:c1:98:b2:cb:95:58:26:e2:66:
cc:76:93:7b:63:a6:59:38:63:65:53:6a:0d:48:5d:99:06:23:
98:82:27:07:a7:ba:6e:26:02:c0:eb:99:8a:4e:fd:3f:dc:c4:
73:ef:d8:db:b0:50:25:8e:24:91:2f:0f:2c:81:85:5d:1f:f6:
b4:d5:17:7f:43:5d:5c:c7:6e:bb:76:e4:a3:5a:90:ea:1c:51:
da:46:49:51:0f:c0:e7:82:b8:e3:16:fe:7b:32:0e:3a:a0:c2:
f3:97:9c:43:69:5e:ee:92:22:e2:e0:2d:da:17:c0:b9:06:0e:
57:e1:32:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:38:08 2025 by rpki-client