Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/PrkDKEodFdwVitcYLqC854bOsq0.mft
File: PrkDKEodFdwVitcYLqC854bOsq0.mft (raw, json)
Hash identifier: ztZk5BSpMJv3sdr4bdJzWVPrwdmza6HrFcW0egu7Ykc=
Subject key identifier: 32:79:89:68:B9:D6:20:68:F3:64:C8:92:9A:A5:82:E4:51:A6:7D:33
Authority key identifier: 3E:B9:03:28:4A:1D:15:DC:15:8A:D7:18:2E:A0:BC:E7:86:CE:B2:AD
Certificate issuer: /CN=3eb903284a1d15dc158ad7182ea0bce786ceb2ad
Certificate serial: 0198D54DBFEA7AECAA80D98D94EEEA2606A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PrkDKEodFdwVitcYLqC854bOsq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/PrkDKEodFdwVitcYLqC854bOsq0.mft
Manifest number: 02A4
Signing time: Sat 23 Aug 2025 05:01:39 +0000
Manifest this update: Sat 23 Aug 2025 05:01:39 +0000
Manifest next update: Sun 24 Aug 2025 05:01:39 +0000
Files and hashes: 1: 0zozhddFGxlaDU0eMcPGzCbmd6I.roa (hash: HhrjUsFCH402W4XdhuJKvzUEm96xMJ7A0tUrjiNFw6Y=)
2: 2z44fAwQyyEeWoKCF_G5EjvRE_Q.roa (hash: Z34LIfgBtYIlenX8BP2t8IUqfPpsJULSyBoNS38aJWk=)
3: 4kquCz-i6kJDkS1O2XQAUk_agCI.roa (hash: Pez2ubHTLSNld28U0wPkDbmTvFBCVvXm37XAiS5Y0fA=)
4: FukUNQ-1MuiT_YZ8AK4IiNn3ZEM.roa (hash: Q+TDgTJT6+GCL8Icb4N9FEYd+k8ybFyashs6L8F6jRA=)
5: Ih96IDuDaMSdBEjycgfBHMlpv1k.roa (hash: gzRNZYScETmPIIaSnlA3ny9nEyJmD80+p4ZodHIyvdw=)
6: PrkDKEodFdwVitcYLqC854bOsq0.crl (hash: s5n1m55whCU3sPCfsAu1dzP8y2YVdTWMYh0UQQhzDUA=)
7: fDTEunNvzlH5X-k5xdeAmWjVRig.roa (hash: kSsYzCwppDZTwjMBzSM9jNvsq5Yv3fwitPhSPp+j0to=)
8: s8x3Zl1NTIQSd2VaNW3r7mX9Qt0.roa (hash: 955pA2YQRo69WOfGT4zy28ccgCxBC3J2614wD9x3OY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/PrkDKEodFdwVitcYLqC854bOsq0.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/PrkDKEodFdwVitcYLqC854bOsq0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PrkDKEodFdwVitcYLqC854bOsq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:bf:ea:7a:ec:aa:80:d9:8d:94:ee:ea:26:06:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eb903284a1d15dc158ad7182ea0bce786ceb2ad
Validity
Not Before: Aug 23 05:01:39 2025 GMT
Not After : Aug 24 05:01:39 2025 GMT
Subject: CN=32798968b9d62068f364c8929aa582e451a67d33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:62:31:2a:15:6d:e9:96:1a:d0:a7:bf:40:4a:
08:49:ad:c3:2b:f0:46:46:3d:0b:f5:9f:85:04:50:
90:1e:a4:21:24:a5:fe:ed:e9:e9:2c:62:ad:d7:aa:
2e:eb:0c:f7:46:fb:70:17:75:04:58:06:69:ff:e1:
bc:fb:ba:a7:96:6c:e0:3a:88:7f:e2:5f:67:62:d1:
3b:86:68:cf:e6:ee:61:dc:eb:52:a2:ed:43:02:27:
6e:af:09:b0:50:0b:fc:f6:9a:73:2b:38:a0:a5:d0:
c1:8f:48:d4:e8:3c:7a:4c:ab:eb:b7:3c:31:89:5b:
08:85:82:89:26:94:12:3b:a3:96:c4:4d:31:4a:b1:
d3:31:6c:8d:9d:9c:f0:ca:77:d2:33:97:d8:60:5b:
a7:3a:30:df:32:d1:f5:d9:3f:12:e3:88:80:c1:3f:
67:f8:4e:08:83:06:7b:5d:2a:82:8c:07:3e:f1:65:
99:a6:8e:7a:5e:a0:0f:90:59:30:2d:fd:6b:0e:57:
da:98:bb:48:16:d5:fe:a5:c3:9f:42:e7:aa:26:c1:
29:ff:64:e2:a3:f2:61:df:24:6f:81:7d:70:eb:d3:
f0:c6:e1:43:66:0b:8d:ef:88:b0:1c:7d:23:b6:0e:
84:52:fe:4c:f6:01:b6:de:0b:99:75:bf:6b:8c:e9:
ec:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:79:89:68:B9:D6:20:68:F3:64:C8:92:9A:A5:82:E4:51:A6:7D:33
X509v3 Authority Key Identifier:
keyid:3E:B9:03:28:4A:1D:15:DC:15:8A:D7:18:2E:A0:BC:E7:86:CE:B2:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PrkDKEodFdwVitcYLqC854bOsq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/PrkDKEodFdwVitcYLqC854bOsq0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/PrkDKEodFdwVitcYLqC854bOsq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:96:ec:0d:e9:d3:d1:90:a8:41:b4:c5:40:8d:87:1d:cc:b9:
c1:dd:d2:a9:28:4c:75:f2:f0:0c:0c:24:05:67:1c:d5:9d:7c:
67:0f:b2:67:13:7a:f3:67:3b:85:45:09:8d:14:35:f5:67:73:
83:d5:15:ee:81:da:8e:32:b3:54:cb:f8:02:1c:51:18:13:4b:
57:de:89:00:04:2f:e5:cc:a6:43:96:7d:41:89:ce:54:b8:4b:
52:bd:b8:f0:39:7f:b0:41:d0:f1:33:ac:a7:f6:ed:d8:90:d6:
d5:af:2a:f4:16:2f:06:5c:f9:18:42:d6:06:2b:6b:64:30:eb:
c6:b2:26:d0:42:c8:36:6b:c7:25:7b:96:eb:99:ab:a3:29:59:
22:63:d3:ef:dd:78:5b:cd:2c:e0:4f:84:d0:84:b1:7e:c8:1a:
3c:34:29:c6:f9:3e:39:08:4f:69:d0:d2:df:f0:f6:03:cd:6a:
b5:8a:3f:a6:b2:2f:ac:4b:48:56:53:7d:74:91:c2:93:0f:86:
ec:70:b2:84:c6:cd:3c:d5:09:9e:ab:a0:ec:40:9b:7f:7d:49:
b9:f3:a5:67:90:50:16:4d:16:38:0d:28:00:68:d5:65:01:2b:
73:19:e5:27:9a:6c:e4:d4:3b:b5:b9:1b:38:95:c3:e3:04:33:
8f:c1:09:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:52:12 2025 by rpki-client