
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/aa6565-5d97-4a80-9a5d-424c23f50ff3/1/PrkfNs_-gO_g3_JhI_j5fBXZdjw.mft
File: PrkfNs_-gO_g3_JhI_j5fBXZdjw.mft (raw, json)
Hash identifier: 6T6N0J+0kk06p2Fc6LjfupOwuOOl8Z6xnir5zZPfIYc=
Subject key identifier: 10:98:B0:73:43:C0:7C:C2:3A:20:79:A6:B2:21:8C:2A:1F:A7:5D:25
Authority key identifier: 3E:B9:1F:36:CF:FE:80:EF:E0:DF:F2:61:23:F8:F9:7C:15:D9:76:3C
Certificate issuer: /CN=3eb91f36cffe80efe0dff26123f8f97c15d9763c
Certificate serial: 0198D65FCED645ED27B4FFB4E1D0B3136288
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PrkfNs_-gO_g3_JhI_j5fBXZdjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/aa6565-5d97-4a80-9a5d-424c23f50ff3/1/PrkfNs_-gO_g3_JhI_j5fBXZdjw.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 10:00:59 +0000
Manifest this update: Sat 23 Aug 2025 10:00:59 +0000
Manifest next update: Sun 24 Aug 2025 10:00:59 +0000
Files and hashes: 1: PrkfNs_-gO_g3_JhI_j5fBXZdjw.crl (hash: F4pIqD2xb4ccmsBwYV/PABHmHGt0K2dsDqadLOgVMbA=)
2: nuDK-TC5cc4Dv5m-g_HwBrvB2yM.roa (hash: HAIc8rXtzi2UFMvUxwUOqrhRhKG5mpUAWpR1IBhhhmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/aa6565-5d97-4a80-9a5d-424c23f50ff3/1/PrkfNs_-gO_g3_JhI_j5fBXZdjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/aa6565-5d97-4a80-9a5d-424c23f50ff3/1/PrkfNs_-gO_g3_JhI_j5fBXZdjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PrkfNs_-gO_g3_JhI_j5fBXZdjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:ce:d6:45:ed:27:b4:ff:b4:e1:d0:b3:13:62:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eb91f36cffe80efe0dff26123f8f97c15d9763c
Validity
Not Before: Aug 23 10:00:59 2025 GMT
Not After : Aug 24 10:00:59 2025 GMT
Subject: CN=1098b07343c07cc23a2079a6b2218c2a1fa75d25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9a:5e:52:1d:58:a3:7f:e7:6f:b9:73:ea:51:
c9:9b:44:60:73:16:58:f2:ba:3b:18:11:5e:fd:d8:
86:de:fa:7d:87:70:5b:b0:ef:0b:44:d5:3e:54:3c:
52:e3:fd:7a:6e:5b:23:66:db:b0:38:b3:d2:ef:c8:
17:67:47:24:b8:93:6e:a4:8b:be:65:e4:6f:d2:0f:
7f:8c:08:47:93:6b:c8:7f:0b:99:57:a9:42:44:ea:
a4:7e:fd:d1:f8:79:c2:89:1c:d1:86:25:22:94:61:
ef:b4:c3:63:34:d1:d4:14:f7:60:53:14:86:7b:41:
4f:a9:be:38:81:a7:a8:ad:e7:52:3c:6c:6d:ce:d0:
e1:4b:a5:72:62:7d:04:0c:fc:e9:15:ba:56:37:16:
f3:71:9c:b9:29:8b:f6:f3:63:28:ed:c6:b4:40:aa:
81:30:3c:a7:93:81:fe:e9:60:83:f9:02:74:61:89:
f3:ce:e6:18:76:1e:fb:c0:33:d0:a3:38:32:97:29:
0f:7f:b1:fe:88:b3:af:d0:05:56:bf:b3:ca:2c:81:
45:d8:98:e2:b2:b2:ea:8f:2b:92:f6:a3:8d:8c:1e:
4a:7f:1b:1a:83:a5:dc:cc:40:1f:cc:fc:0a:9b:85:
36:37:63:f9:36:87:b9:84:13:3c:f3:b8:bf:12:37:
de:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:98:B0:73:43:C0:7C:C2:3A:20:79:A6:B2:21:8C:2A:1F:A7:5D:25
X509v3 Authority Key Identifier:
keyid:3E:B9:1F:36:CF:FE:80:EF:E0:DF:F2:61:23:F8:F9:7C:15:D9:76:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PrkfNs_-gO_g3_JhI_j5fBXZdjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/aa6565-5d97-4a80-9a5d-424c23f50ff3/1/PrkfNs_-gO_g3_JhI_j5fBXZdjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/aa6565-5d97-4a80-9a5d-424c23f50ff3/1/PrkfNs_-gO_g3_JhI_j5fBXZdjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:c9:2d:5e:85:e3:79:0e:66:2f:d1:86:b8:9d:3d:79:87:3d:
a7:56:a7:c5:c0:73:2a:f2:15:b6:8e:d6:6a:9b:4c:8c:ef:c5:
33:5e:e3:c4:6a:74:66:9e:b2:9e:fb:e0:cd:ad:19:bf:11:d9:
46:61:39:b6:ae:90:4b:9e:94:45:2a:c0:0e:25:4f:14:7b:85:
70:a1:a6:13:a8:c9:85:66:de:a0:77:4b:fd:52:e5:4e:af:31:
f9:5c:69:3e:15:d3:b4:71:40:0e:fb:e7:df:d0:c1:1f:df:97:
68:5c:ce:9d:12:99:ff:5b:75:79:dd:b0:46:30:fe:a0:ce:a0:
2e:06:0f:9a:b8:7a:57:74:b1:cc:eb:34:4f:b9:21:de:4e:1c:
45:a5:54:88:5f:55:a3:20:ad:70:8a:49:ec:29:9d:5c:f3:50:
50:f9:f5:80:ef:23:0d:af:ae:67:1c:c2:be:73:ee:f8:2c:05:
f7:fa:ec:8b:91:9a:7e:ab:f7:69:31:64:0f:42:a2:3c:2f:b4:
91:fd:58:48:c5:f5:1d:ec:16:46:a7:5e:4f:7b:f4:74:ce:58:
0d:be:6e:83:ed:8a:ce:aa:e6:8f:ff:a2:70:07:6b:56:10:ea:
e4:2e:6b:ea:0a:fd:fe:cb:e0:e3:d4:8f:a0:06:37:a7:57:63:
bf:d9:0e:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:22:28 2025 by rpki-client