Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/PrkDKEodFdwVitcYLqC854bOsq0.mft
File: PrkDKEodFdwVitcYLqC854bOsq0.mft (raw, json)
Hash identifier: T56bExJvCz7Av8xegoy+l6uZKc5025GRd7RLtnkwCx0=
Subject key identifier: CA:B2:09:DC:BE:EE:70:E4:2E:4A:F4:75:67:A5:3C:C9:C1:B1:31:E2
Authority key identifier: 3E:B9:03:28:4A:1D:15:DC:15:8A:D7:18:2E:A0:BC:E7:86:CE:B2:AD
Certificate issuer: /CN=3eb903284a1d15dc158ad7182ea0bce786ceb2ad
Certificate serial: 0199FCC6133EC027D8F44C763797B53CEAF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PrkDKEodFdwVitcYLqC854bOsq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/PrkDKEodFdwVitcYLqC854bOsq0.mft
Manifest number: 033D
Signing time: Sun 19 Oct 2025 14:01:03 +0000
Manifest this update: Sun 19 Oct 2025 14:01:03 +0000
Manifest next update: Mon 20 Oct 2025 14:01:03 +0000
Files and hashes: 1: 0zozhddFGxlaDU0eMcPGzCbmd6I.roa (hash: HhrjUsFCH402W4XdhuJKvzUEm96xMJ7A0tUrjiNFw6Y=)
2: 2z44fAwQyyEeWoKCF_G5EjvRE_Q.roa (hash: Z34LIfgBtYIlenX8BP2t8IUqfPpsJULSyBoNS38aJWk=)
3: 4kquCz-i6kJDkS1O2XQAUk_agCI.roa (hash: Pez2ubHTLSNld28U0wPkDbmTvFBCVvXm37XAiS5Y0fA=)
4: FukUNQ-1MuiT_YZ8AK4IiNn3ZEM.roa (hash: Q+TDgTJT6+GCL8Icb4N9FEYd+k8ybFyashs6L8F6jRA=)
5: Ih96IDuDaMSdBEjycgfBHMlpv1k.roa (hash: gzRNZYScETmPIIaSnlA3ny9nEyJmD80+p4ZodHIyvdw=)
6: PrkDKEodFdwVitcYLqC854bOsq0.crl (hash: KvRgwc5CLumcfoeu7f3Wbyxl/+uDzfSDUYFDZXpVbNo=)
7: fDTEunNvzlH5X-k5xdeAmWjVRig.roa (hash: kSsYzCwppDZTwjMBzSM9jNvsq5Yv3fwitPhSPp+j0to=)
8: s8x3Zl1NTIQSd2VaNW3r7mX9Qt0.roa (hash: 955pA2YQRo69WOfGT4zy28ccgCxBC3J2614wD9x3OY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/PrkDKEodFdwVitcYLqC854bOsq0.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/PrkDKEodFdwVitcYLqC854bOsq0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PrkDKEodFdwVitcYLqC854bOsq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:13:3e:c0:27:d8:f4:4c:76:37:97:b5:3c:ea:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eb903284a1d15dc158ad7182ea0bce786ceb2ad
Validity
Not Before: Oct 19 14:01:03 2025 GMT
Not After : Oct 20 14:01:03 2025 GMT
Subject: CN=cab209dcbeee70e42e4af47567a53cc9c1b131e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e4:c3:96:f8:df:aa:dd:e0:01:cd:c4:6d:ee:
d2:cd:f4:a2:c4:8f:59:a5:20:8c:e2:3f:d2:ff:10:
69:84:c8:ba:6f:53:68:d8:3f:be:bf:01:0e:85:9f:
4c:c8:69:0f:03:78:09:c7:47:bb:95:bf:3b:86:cc:
87:40:05:4a:09:8d:b0:d6:57:b5:ec:5d:b7:92:d6:
57:a7:b9:e9:1c:cf:77:70:aa:f7:c9:47:1c:5d:83:
ce:ae:2a:64:50:e6:9a:2f:85:d0:1c:52:72:11:d6:
1a:c6:79:74:37:2f:f2:7f:ea:d2:25:ef:f5:21:7f:
47:91:e7:74:b6:c8:60:8c:57:24:42:5c:71:0d:2f:
ab:96:45:e0:31:42:b3:69:a3:5a:0e:d8:87:7c:48:
b6:18:bb:2e:d2:c5:cd:7b:b5:4e:fe:e1:42:62:e9:
58:1c:31:ea:97:c0:73:7c:bf:bd:ef:f8:e4:e9:58:
44:95:bd:de:67:a0:19:1c:28:9f:92:89:87:e1:21:
d3:cf:f0:fe:89:a3:52:9f:12:2f:17:58:b9:3f:3b:
95:2d:47:11:f2:97:31:89:d3:c2:14:b6:f4:33:b7:
eb:3e:19:b0:18:fe:45:29:ab:13:25:0f:86:a9:46:
a0:bb:68:ff:14:2d:b9:b4:88:97:c0:1b:2d:80:62:
fd:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:B2:09:DC:BE:EE:70:E4:2E:4A:F4:75:67:A5:3C:C9:C1:B1:31:E2
X509v3 Authority Key Identifier:
keyid:3E:B9:03:28:4A:1D:15:DC:15:8A:D7:18:2E:A0:BC:E7:86:CE:B2:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PrkDKEodFdwVitcYLqC854bOsq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/PrkDKEodFdwVitcYLqC854bOsq0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/PrkDKEodFdwVitcYLqC854bOsq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:08:95:98:8d:74:2d:70:ce:24:17:81:2d:a7:c4:c9:0e:f9:
9d:e7:f4:61:95:32:2b:db:ff:b9:df:16:80:5a:94:4b:88:cf:
bc:16:ae:2f:ea:36:11:1a:43:a7:4a:95:4d:a1:99:8e:c6:4c:
bc:67:ff:d1:70:b0:66:6f:7e:8a:e1:df:a6:d0:2b:cd:ec:35:
07:08:d9:58:44:38:f2:2d:5a:41:80:43:01:f8:60:5b:c3:1d:
77:9e:33:7c:f1:d8:ec:e0:e0:a3:b3:13:48:7b:38:24:00:c9:
5d:b1:7a:4e:97:eb:65:d6:6e:24:ae:bb:a5:2a:f9:2f:cb:19:
04:0a:dd:9b:05:97:c2:73:f3:1a:ae:8d:60:99:36:14:0d:6c:
a3:be:c5:a5:89:b6:7a:8b:b3:bf:86:6c:80:89:8d:52:64:a7:
8b:8d:22:e9:ba:16:03:b1:24:ab:11:4c:dd:d6:22:26:97:86:
78:c7:ab:ff:83:7b:a3:8e:bb:e8:c5:e9:35:bc:8d:5f:4d:9a:
df:c5:98:c1:27:20:5d:e0:42:98:f3:d3:74:e7:17:d5:65:93:
1a:8a:d2:f2:45:6d:c2:64:76:69:7b:85:6f:03:f7:ce:dd:3c:
81:fb:72:9a:7b:b1:72:ae:a0:81:4d:27:1e:aa:52:6c:9b:fb:
4a:92:82:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:26:07 2025 by rpki-client