Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.mft
File: PRH7pD9XqwRF5UL87suHaBZXzPM.mft (raw, json)
Hash identifier: jwlJ9ARz6DpZFZkFefL7z3M5l7l0w9zmrB0EccrSBKU=
Subject key identifier: A3:F7:2F:F8:F2:43:B1:72:48:58:8A:C1:38:F3:BF:A2:89:22:01:3B
Authority key identifier: 3D:11:FB:A4:3F:57:AB:04:45:E5:42:FC:EE:CB:87:68:16:57:CC:F3
Certificate issuer: /CN=3d11fba43f57ab0445e542fceecb87681657ccf3
Certificate serial: 0197B6A1322115D5B27E122EBFAA8DCF9826
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRH7pD9XqwRF5UL87suHaBZXzPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.mft
Manifest number: 023E
Signing time: Sat 28 Jun 2025 13:01:46 +0000
Manifest this update: Sat 28 Jun 2025 13:01:46 +0000
Manifest next update: Sun 29 Jun 2025 13:01:46 +0000
Files and hashes: 1: 2DxOeFRwGr0ZkLmLFLoh-xJZObE.roa (hash: aeAg8fL5FqA68LiiZmemChuMc/666QpvAefI6BAnFLU=)
2: PRH7pD9XqwRF5UL87suHaBZXzPM.crl (hash: DVF7CwyN4LW+vI13VVwDDRQ4yk4jxEs1Qki1RrHvJ0I=)
3: QubVM_6N5lx1EgDJtxcjPI_RV3o.roa (hash: 0U5OEeLVzA3Fo3jdio9FkyyDkZiO1CmcUt6CGyuWF74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PRH7pD9XqwRF5UL87suHaBZXzPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:32:21:15:d5:b2:7e:12:2e:bf:aa:8d:cf:98:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d11fba43f57ab0445e542fceecb87681657ccf3
Validity
Not Before: Jun 28 13:01:46 2025 GMT
Not After : Jun 29 13:01:46 2025 GMT
Subject: CN=a3f72ff8f243b17248588ac138f3bfa28922013b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:0e:35:eb:30:ec:ba:1a:f4:fc:2d:55:ca:c2:
98:72:46:d3:1e:ce:0a:2e:45:31:15:7c:55:22:b8:
02:6a:b1:70:08:c5:a4:41:47:ca:ec:b8:60:07:89:
6a:c5:8d:47:79:76:22:3a:90:26:6c:c7:fc:57:c1:
88:78:dc:ac:b1:55:30:51:14:48:5d:51:d0:13:87:
36:d8:99:c9:78:cd:32:59:d2:ee:f6:e9:9c:f1:f7:
c1:ac:6f:f7:5b:b4:e5:ad:b6:01:02:95:d8:23:bc:
43:17:96:7f:91:fb:1c:ba:00:08:01:da:70:0d:37:
eb:3b:13:78:41:46:a4:5f:7d:ea:4a:98:2b:38:59:
58:92:ed:d1:fa:a0:46:ff:2e:72:93:43:9d:c2:39:
81:b4:81:a5:4c:94:00:50:49:5c:fa:2d:88:82:68:
a3:e0:58:0e:9d:64:60:c0:0d:72:cf:3f:2b:1f:63:
fc:5a:4a:48:54:de:2d:00:2f:39:54:22:46:0d:8d:
18:12:a9:ac:e1:c2:ed:b4:f9:d2:ff:43:53:ab:49:
76:ce:76:8d:09:3a:11:99:9b:8b:aa:c4:19:7c:15:
a2:83:aa:36:84:20:ee:77:3a:35:07:c6:23:10:73:
1c:e8:ad:da:fe:a8:c8:be:5c:24:15:dd:dc:80:10:
e0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:F7:2F:F8:F2:43:B1:72:48:58:8A:C1:38:F3:BF:A2:89:22:01:3B
X509v3 Authority Key Identifier:
keyid:3D:11:FB:A4:3F:57:AB:04:45:E5:42:FC:EE:CB:87:68:16:57:CC:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRH7pD9XqwRF5UL87suHaBZXzPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:b8:22:b0:7e:b8:0d:58:f6:fd:be:4e:44:19:e0:0c:ca:05:
65:95:4f:d7:ae:41:ac:2c:bc:5f:b7:b9:dd:b5:c4:28:05:f6:
55:21:3b:b0:7f:5f:da:db:65:6c:fa:39:17:bb:b4:9d:99:2a:
66:22:a9:19:c2:54:aa:d5:45:97:1c:35:bc:50:0d:28:62:95:
62:fe:ad:f7:31:ed:8f:6d:08:42:db:9e:61:73:bb:47:b2:c6:
6e:85:9a:29:08:38:aa:a3:fc:bd:56:55:79:af:cc:ad:53:11:
17:d3:14:b9:88:8f:d3:c9:fc:b0:8f:46:40:22:eb:29:e5:9f:
b2:aa:2d:f7:3d:06:8f:6e:e0:28:93:51:a9:58:59:52:ca:93:
bb:84:83:33:66:4d:b0:57:d7:d3:ed:95:94:71:c2:e3:66:be:
7a:c9:bd:70:b5:ee:e2:a9:3b:12:f2:9c:45:f1:49:96:54:1b:
36:cb:b1:b1:a1:df:33:68:a2:20:a8:a3:74:b4:ef:1e:9a:38:
de:ca:b0:99:dc:62:4b:5d:88:e7:61:e8:30:64:03:55:48:cb:
20:de:1b:4e:d4:7a:37:07:76:18:0a:a5:cd:45:08:49:c7:0c:
a7:1a:42:6d:8c:7b:20:42:fb:b9:ca:4a:55:0b:d4:06:e2:73:
46:c9:69:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:22:44 2025 by rpki-client