Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/56e9d5-ff45-4464-b2bb-610b9e72a6be/1/PRKXkoZrFiE7VsW_pr66x8YYsVA.mft
File: PRKXkoZrFiE7VsW_pr66x8YYsVA.mft (raw, json)
Hash identifier: orG3jbVvxcUr6GhsJ3c+Qi9cm0T7GrTdf7tM4NUIlBQ=
Subject key identifier: D5:21:89:D6:C3:5A:64:54:24:A0:B4:1C:76:00:BF:11:4C:73:21:1F
Authority key identifier: 3D:12:97:92:86:6B:16:21:3B:56:C5:BF:A6:BE:BA:C7:C6:18:B1:50
Certificate issuer: /CN=3d129792866b16213b56c5bfa6bebac7c618b150
Certificate serial: 0199FBEAFD1C7F9D374DDB2F60F73FCF896B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRKXkoZrFiE7VsW_pr66x8YYsVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/56e9d5-ff45-4464-b2bb-610b9e72a6be/1/PRKXkoZrFiE7VsW_pr66x8YYsVA.mft
Manifest number: 1270
Signing time: Sun 19 Oct 2025 10:01:45 +0000
Manifest this update: Sun 19 Oct 2025 10:01:45 +0000
Manifest next update: Mon 20 Oct 2025 10:01:45 +0000
Files and hashes: 1: PRKXkoZrFiE7VsW_pr66x8YYsVA.crl (hash: a+1nPZWCC6zK5TAMS+kBb2SdC09Wo0oihIzHvEO4osQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/56e9d5-ff45-4464-b2bb-610b9e72a6be/1/PRKXkoZrFiE7VsW_pr66x8YYsVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/56e9d5-ff45-4464-b2bb-610b9e72a6be/1/PRKXkoZrFiE7VsW_pr66x8YYsVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/PRKXkoZrFiE7VsW_pr66x8YYsVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:fd:1c:7f:9d:37:4d:db:2f:60:f7:3f:cf:89:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d129792866b16213b56c5bfa6bebac7c618b150
Validity
Not Before: Oct 19 10:01:45 2025 GMT
Not After : Oct 20 10:01:45 2025 GMT
Subject: CN=d52189d6c35a645424a0b41c7600bf114c73211f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8c:31:6e:14:31:37:dd:20:e8:d7:b4:a9:fb:
1d:96:1b:12:c1:c2:38:5e:79:3d:07:16:a0:af:0c:
a1:b6:26:9b:84:86:c9:bd:8f:42:54:db:d5:d8:98:
6a:4f:38:8c:fb:94:c0:53:da:00:26:dd:d9:fb:3f:
4a:ff:ff:d9:9d:6e:8d:a4:45:2a:de:cf:43:15:95:
eb:1d:d7:d7:55:1e:15:02:91:0f:3a:64:54:eb:28:
fa:01:c1:41:92:3a:6d:47:14:9a:31:22:b3:d6:b0:
a6:ba:25:02:83:e9:e8:30:7c:c4:25:63:e0:a2:83:
85:6e:84:d1:da:3e:4f:74:09:eb:62:ac:0c:40:da:
c6:ab:a5:bd:d4:63:84:c8:32:42:5b:fb:7b:49:5f:
28:7b:0a:f3:63:6f:25:0e:9f:7f:db:5b:8a:40:d2:
c8:b7:e5:54:f4:4b:0f:5e:64:66:e2:41:80:5f:e7:
a3:0d:11:c4:bf:26:9e:15:5b:52:ae:4e:5b:a7:1c:
f0:d9:93:fd:af:a9:7e:1f:81:e2:9e:9e:19:4b:bd:
e2:1b:d0:a7:16:08:df:d5:ba:c7:e3:5c:2f:c0:21:
98:01:77:12:a0:d9:fe:dc:ee:2b:fd:52:b8:da:46:
6f:2b:22:fd:23:2f:09:6e:51:14:47:7b:2b:dd:73:
0b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:21:89:D6:C3:5A:64:54:24:A0:B4:1C:76:00:BF:11:4C:73:21:1F
X509v3 Authority Key Identifier:
keyid:3D:12:97:92:86:6B:16:21:3B:56:C5:BF:A6:BE:BA:C7:C6:18:B1:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRKXkoZrFiE7VsW_pr66x8YYsVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/56e9d5-ff45-4464-b2bb-610b9e72a6be/1/PRKXkoZrFiE7VsW_pr66x8YYsVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/56e9d5-ff45-4464-b2bb-610b9e72a6be/1/PRKXkoZrFiE7VsW_pr66x8YYsVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:4f:46:03:dd:f0:28:1d:6d:c1:e6:8b:14:28:54:59:31:cd:
d8:bc:39:cd:0b:25:37:e9:75:62:7e:8b:bb:43:7c:c8:1f:91:
fa:fd:1b:ce:0a:95:6d:05:e3:8f:d9:2e:98:35:46:e4:ac:1c:
64:93:fb:6d:08:f5:a9:28:8b:a2:49:55:3b:ef:f6:a7:c9:3f:
00:98:a2:77:35:51:e4:28:41:4f:b0:f9:ef:9a:ae:00:e5:0a:
05:90:d5:9d:24:0d:4d:a7:4f:e9:8d:92:b9:93:3e:91:bc:e0:
67:25:a4:16:15:1d:31:7b:d8:c1:26:7c:c9:1b:33:32:51:ae:
7f:62:d6:39:cf:46:1d:eb:01:cd:a9:64:d8:a9:87:8b:28:14:
e1:8c:e8:15:97:f1:94:4a:7a:de:0b:b1:62:e3:2a:48:60:2a:
d8:4a:08:2a:d3:bd:c8:1a:78:26:4b:b6:08:a4:2e:e0:2f:4b:
1c:b3:12:b0:d8:d6:71:d7:8c:00:e4:6a:d6:47:f9:f8:d0:11:
07:5f:61:3f:bc:fa:88:11:5b:95:e8:40:18:77:cc:9a:ae:15:
bc:83:9b:ef:28:b0:5e:92:26:76:17:39:6f:ac:bb:48:f6:78:
0c:84:4a:8b:a6:db:76:6a:c2:9f:67:2c:54:71:5c:34:79:8c:
a4:3c:48:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:33:51 2025 by rpki-client