Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/PRLRHJogPV58gmPt9URH47c1i38.mft
File: PRLRHJogPV58gmPt9URH47c1i38.mft (raw, json)
Hash identifier: hMJENftUbfZYZ3DYE55NHpPKikC7MnNzon7PiK6x5p8=
Subject key identifier: D8:D4:AA:B1:BB:6F:F1:D8:7B:5D:21:A9:60:B7:9A:22:53:66:D1:A8
Authority key identifier: 3D:12:D1:1C:9A:20:3D:5E:7C:82:63:ED:F5:44:47:E3:B7:35:8B:7F
Certificate issuer: /CN=3d12d11c9a203d5e7c8263edf54447e3b7358b7f
Certificate serial: 0199FC8F38D7C0B275E8B665958F7B10C987
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRLRHJogPV58gmPt9URH47c1i38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/PRLRHJogPV58gmPt9URH47c1i38.mft
Manifest number: 1209
Signing time: Sun 19 Oct 2025 13:01:08 +0000
Manifest this update: Sun 19 Oct 2025 13:01:08 +0000
Manifest next update: Mon 20 Oct 2025 13:01:08 +0000
Files and hashes: 1: IFYqWjpdJxRaG3uyQLqw79JLTGo.roa (hash: alQatZzeYH3fzwBxC+QNB+5aLjO5V+OfKBsHgM/Tlv8=)
2: PRLRHJogPV58gmPt9URH47c1i38.crl (hash: uIWqX4+w5YzND3BRJZL0iOH96EUqnk1MHJn2HaIomRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/PRLRHJogPV58gmPt9URH47c1i38.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/PRLRHJogPV58gmPt9URH47c1i38.mft
rsync://rpki.ripe.net/repository/DEFAULT/PRLRHJogPV58gmPt9URH47c1i38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:38:d7:c0:b2:75:e8:b6:65:95:8f:7b:10:c9:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d12d11c9a203d5e7c8263edf54447e3b7358b7f
Validity
Not Before: Oct 19 13:01:08 2025 GMT
Not After : Oct 20 13:01:08 2025 GMT
Subject: CN=d8d4aab1bb6ff1d87b5d21a960b79a225366d1a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:79:2d:22:64:1a:e8:25:b1:d9:ac:85:2d:6e:
db:83:9d:8f:10:5c:18:b0:08:9c:5f:99:a1:e3:b7:
ef:a6:ab:95:32:a4:5c:0d:0f:ff:49:04:a2:08:42:
ae:d7:16:73:dd:5c:95:06:c8:aa:51:97:b3:63:80:
4b:dd:41:0a:52:b0:69:dd:7e:33:88:92:96:fc:e9:
5a:a3:d1:07:b5:8c:11:8d:b1:7c:d1:09:27:f6:67:
a6:54:df:5e:31:61:12:e0:ca:da:09:c6:16:f0:f4:
90:33:b3:94:a3:9d:65:e1:4f:0c:63:b9:78:45:6a:
13:e5:e2:2f:96:38:a0:b4:be:61:0a:38:5b:50:4a:
d3:94:7c:ab:8e:0b:4f:5f:82:e4:74:fc:af:ad:30:
c8:6a:63:bc:a7:90:e6:3e:c1:fe:e3:f5:3c:16:e6:
53:dd:ce:96:6c:d6:0e:c5:10:48:c4:55:cf:e5:11:
5c:27:8f:a5:f8:b7:8e:4d:20:f4:e1:03:8f:4e:23:
83:22:fe:49:24:52:f9:56:cd:a0:32:c8:79:8b:0c:
1a:33:bb:7c:82:3d:26:00:44:96:4c:45:d1:ad:17:
4e:01:26:92:1e:6f:79:8f:d3:83:6b:64:3e:2c:bf:
d9:5b:1f:16:94:c9:9e:3e:78:1f:84:45:17:a4:64:
7b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:D4:AA:B1:BB:6F:F1:D8:7B:5D:21:A9:60:B7:9A:22:53:66:D1:A8
X509v3 Authority Key Identifier:
keyid:3D:12:D1:1C:9A:20:3D:5E:7C:82:63:ED:F5:44:47:E3:B7:35:8B:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRLRHJogPV58gmPt9URH47c1i38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/PRLRHJogPV58gmPt9URH47c1i38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/PRLRHJogPV58gmPt9URH47c1i38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:39:54:c7:6c:15:54:9b:a2:fb:9d:85:24:1b:c4:b2:69:95:
2b:2c:e8:10:c5:54:82:56:eb:d6:65:14:ad:5d:7b:92:5d:33:
96:18:cb:a1:54:57:36:03:8d:79:d7:9a:08:77:58:b4:11:57:
09:3e:b5:3d:ac:7d:96:d6:59:36:67:c4:3b:ff:65:c9:05:7f:
5f:f9:9f:7d:c2:be:1a:00:e3:51:0a:d6:79:02:16:27:1f:8e:
7d:28:9c:f9:ec:92:ca:30:a4:15:35:25:a7:b4:6a:f1:32:ce:
9a:90:a3:44:4d:88:45:74:c5:fb:8b:1c:b9:df:a3:88:90:b6:
59:da:18:ca:55:e8:6c:90:1a:a7:4e:20:82:b6:8e:de:c9:ff:
23:3d:d4:f0:1c:3d:bf:65:e5:76:af:e8:04:e7:6a:3f:0c:f1:
95:38:f1:24:12:28:a2:9a:b6:e7:17:47:dd:59:d4:9a:93:30:
fb:48:c8:1c:a0:bc:14:b4:9e:cf:29:d5:bd:54:63:7f:fd:e1:
01:fb:f3:4f:17:6d:cd:43:66:3e:e5:13:a3:4a:94:ca:09:d2:
ce:3b:37:dd:46:3e:02:8d:67:d7:00:b8:50:da:50:6d:43:13:
de:bd:0b:6c:4e:5f:2c:e7:0d:da:29:d7:73:fb:4c:fc:b0:bf:
a1:a2:81:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:06 2025 by rpki-client