Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/56e9d5-ff45-4464-b2bb-610b9e72a6be/1/PRKXkoZrFiE7VsW_pr66x8YYsVA.mft
File: PRKXkoZrFiE7VsW_pr66x8YYsVA.mft (raw, json)
Hash identifier: 67t1NAjS0t/y4XLKXiiqsqfSJrYMhXdsUmEf770cMok=
Subject key identifier: 03:77:EA:A3:01:A4:9D:3C:C5:D3:38:72:1F:6B:00:81:F0:C2:72:DF
Authority key identifier: 3D:12:97:92:86:6B:16:21:3B:56:C5:BF:A6:BE:BA:C7:C6:18:B1:50
Certificate issuer: /CN=3d129792866b16213b56c5bfa6bebac7c618b150
Certificate serial: 0197B89082A3B7559B72E5801B1A13B41F81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRKXkoZrFiE7VsW_pr66x8YYsVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/56e9d5-ff45-4464-b2bb-610b9e72a6be/1/PRKXkoZrFiE7VsW_pr66x8YYsVA.mft
Manifest number: 1144
Signing time: Sat 28 Jun 2025 22:02:47 +0000
Manifest this update: Sat 28 Jun 2025 22:02:47 +0000
Manifest next update: Sun 29 Jun 2025 22:02:47 +0000
Files and hashes: 1: PRKXkoZrFiE7VsW_pr66x8YYsVA.crl (hash: 63CD/oLwoSyR8guJw2Mo+C0yNh68Eg8smobF0z1115w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/56e9d5-ff45-4464-b2bb-610b9e72a6be/1/PRKXkoZrFiE7VsW_pr66x8YYsVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/56e9d5-ff45-4464-b2bb-610b9e72a6be/1/PRKXkoZrFiE7VsW_pr66x8YYsVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/PRKXkoZrFiE7VsW_pr66x8YYsVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 22:02:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:82:a3:b7:55:9b:72:e5:80:1b:1a:13:b4:1f:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d129792866b16213b56c5bfa6bebac7c618b150
Validity
Not Before: Jun 28 22:02:47 2025 GMT
Not After : Jun 29 22:02:47 2025 GMT
Subject: CN=0377eaa301a49d3cc5d338721f6b0081f0c272df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:1f:1e:97:f4:68:f2:a7:d0:18:48:19:18:00:
51:ed:2e:03:b7:b8:0a:59:1e:d1:ec:99:e5:fe:e8:
7f:a0:c2:80:59:93:c1:96:b9:fd:16:2c:c5:bd:93:
59:49:6b:f4:d2:c2:66:d0:9f:d7:1d:4b:66:80:f7:
2b:b6:37:10:01:54:d8:0d:ce:fb:3e:da:18:8f:05:
f0:f0:27:3d:a1:7e:20:ca:4b:25:fe:7b:33:0e:9a:
ca:c7:24:7b:e0:47:d5:3e:f0:ba:69:5c:2a:ad:29:
2f:19:9e:de:5e:74:e1:8d:42:4a:d0:29:05:63:27:
f4:db:37:d3:8c:e6:d7:c1:a4:35:c3:e4:ca:65:15:
e4:31:46:5c:70:39:ca:aa:79:db:5f:5a:4a:e4:d4:
a7:bc:db:7a:a7:9d:51:14:41:9f:44:2a:97:75:1d:
02:d7:8d:15:c9:91:84:00:0d:54:87:36:c5:60:c3:
2a:26:8c:be:61:0e:a5:e2:af:79:32:82:a5:fe:f0:
58:d8:7d:79:e2:36:59:ec:e4:32:81:9d:55:c4:c2:
81:30:39:91:eb:0e:89:c2:15:39:a1:cb:66:f4:c2:
1d:f4:92:3e:39:e5:a6:80:3f:81:47:b7:b4:cd:c6:
2b:5f:2c:89:83:26:cf:a0:ac:3d:31:4d:69:1c:1c:
e7:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:77:EA:A3:01:A4:9D:3C:C5:D3:38:72:1F:6B:00:81:F0:C2:72:DF
X509v3 Authority Key Identifier:
keyid:3D:12:97:92:86:6B:16:21:3B:56:C5:BF:A6:BE:BA:C7:C6:18:B1:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRKXkoZrFiE7VsW_pr66x8YYsVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/56e9d5-ff45-4464-b2bb-610b9e72a6be/1/PRKXkoZrFiE7VsW_pr66x8YYsVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/56e9d5-ff45-4464-b2bb-610b9e72a6be/1/PRKXkoZrFiE7VsW_pr66x8YYsVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:1b:64:6f:36:08:e4:58:87:30:6f:cb:f3:d7:43:99:da:43:
38:84:76:e0:53:14:74:9c:c0:8b:18:ee:77:4e:2e:a5:b7:45:
bd:e2:9b:98:00:66:8c:b5:c6:8a:e8:f7:15:80:c7:91:8e:13:
49:41:7a:de:b8:d9:26:22:aa:2e:02:ef:28:3d:ba:14:73:6c:
8d:8f:ef:f9:55:85:c2:85:90:e5:92:a8:ea:0a:13:68:08:51:
6b:59:60:d3:70:b0:c8:22:ac:3c:84:f8:91:b9:7c:72:69:bb:
96:2d:47:df:cb:2b:5a:aa:c6:d5:c5:77:94:57:58:33:2b:4e:
80:45:96:23:f8:57:86:33:93:23:53:ac:06:b2:4d:fe:10:5a:
8f:c9:14:78:6c:30:c8:0a:f9:8b:9c:3f:4c:05:27:3a:18:16:
48:14:77:33:f4:6b:5e:01:26:a8:2a:4f:71:8d:c7:a1:ae:18:
e0:ab:35:49:d4:e9:4a:63:8e:eb:ca:e8:14:72:82:82:31:81:
75:fd:8a:2c:b4:70:2c:72:f0:c5:ef:61:be:6b:6e:82:79:79:
71:a8:3e:a8:4d:57:da:0b:22:46:16:4f:4b:0d:9c:96:ba:e9:
bb:4b:d7:00:19:20:68:af:2a:10:1a:93:36:d6:19:f0:8d:b1:
d2:65:0a:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4kIKjt1WbcuWAGxoTtB+BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkMTI5NzkyODY2YjE2MjEzYjU2YzViZmE2YmViYWM3YzYx
OGIxNTAwHhcNMjUwNjI4MjIwMjQ3WhcNMjUwNjI5MjIwMjQ3WjAzMTEwLwYDVQQD
EygwMzc3ZWFhMzAxYTQ5ZDNjYzVkMzM4NzIxZjZiMDA4MWYwYzI3MmRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5B8el/Ro8qfQGEgZGABR7S4Dt7gK
WR7R7Jnl/uh/oMKAWZPBlrn9FizFvZNZSWv00sJm0J/XHUtmgPcrtjcQAVTYDc77
PtoYjwXw8Cc9oX4gyksl/nszDprKxyR74EfVPvC6aVwqrSkvGZ7eXnThjUJK0CkF
Yyf02zfTjObXwaQ1w+TKZRXkMUZccDnKqnnbX1pK5NSnvNt6p51RFEGfRCqXdR0C
140VyZGEAA1UhzbFYMMqJoy+YQ6l4q95MoKl/vBY2H154jZZ7OQygZ1VxMKBMDmR
6w6JwhU5octm9MId9JI+OeWmgD+BR7e0zcYrXyyJgybPoKw9MU1pHBzn6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAN36qMBpJ08xdM4ch9rAIHwwnLfMB8GA1UdIwQY
MBaAFD0Sl5KGaxYhO1bFv6a+usfGGLFQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFJLWGtvWnJGaUU3VnNXX3ByNjZ4OFlZc1ZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC81NmU5ZDUtZmY0NS00NDY0LWIyYmIt
NjEwYjllNzJhNmJlLzEvUFJLWGtvWnJGaUU3VnNXX3ByNjZ4OFlZc1ZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC81NmU5ZDUtZmY0NS00NDY0LWIyYmItNjEwYjllNzJhNmJl
LzEvUFJLWGtvWnJGaUU3VnNXX3ByNjZ4OFlZc1ZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfxtkbzYI
5FiHMG/L89dDmdpDOIR24FMUdJzAixjud04upbdFveKbmABmjLXGiuj3FYDHkY4T
SUF63rjZJiKqLgLvKD26FHNsjY/v+VWFwoWQ5ZKo6goTaAhRa1lg03CwyCKsPIT4
kbl8cmm7li1H38srWqrG1cV3lFdYMytOgEWWI/hXhjOTI1OsBrJN/hBaj8kUeGww
yAr5i5w/TAUnOhgWSBR3M/RrXgEmqCpPcY3Hoa4Y4Ks1SdTpSmOO68roFHKCgjGB
df2KLLRwLHLwxe9hvmtugnl5cag+qE1X2gsiRhZPSw2clrrpu0vXABkgaK8qEBqT
NtYZ8I2x0mUKJA==
-----END CERTIFICATE-----
Generated at Sun Jun 29 08:30:58 2025 by rpki-client