Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/b281c7-cd9a-4375-b84a-851ed529f222/1/PRf0av89iyHwD-6PY16uNKf0pNc.mft
File: PRf0av89iyHwD-6PY16uNKf0pNc.mft (raw, json)
Hash identifier: B6ev1Cb+iD9kgwIeaoDHk2MKXkaX4p4geJmR1Ccpwak=
Subject key identifier: 73:4E:D3:A8:FC:A6:E5:F9:15:BC:02:2D:58:A7:B9:69:51:CA:1A:70
Authority key identifier: 3D:17:F4:6A:FF:3D:8B:21:F0:0F:EE:8F:63:5E:AE:34:A7:F4:A4:D7
Certificate issuer: /CN=3d17f46aff3d8b21f00fee8f635eae34a7f4a4d7
Certificate serial: 0198D6614892FD354DFB0C769163DDCF3E13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRf0av89iyHwD-6PY16uNKf0pNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/b281c7-cd9a-4375-b84a-851ed529f222/1/PRf0av89iyHwD-6PY16uNKf0pNc.mft
Manifest number: 0B38
Signing time: Sat 23 Aug 2025 10:02:36 +0000
Manifest this update: Sat 23 Aug 2025 10:02:36 +0000
Manifest next update: Sun 24 Aug 2025 10:02:36 +0000
Files and hashes: 1: PRf0av89iyHwD-6PY16uNKf0pNc.crl (hash: qNixNzR6sDJ8gf4O7gvw+Fhelz4dT8VwRrY7npANg6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/b281c7-cd9a-4375-b84a-851ed529f222/1/PRf0av89iyHwD-6PY16uNKf0pNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/b281c7-cd9a-4375-b84a-851ed529f222/1/PRf0av89iyHwD-6PY16uNKf0pNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PRf0av89iyHwD-6PY16uNKf0pNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:48:92:fd:35:4d:fb:0c:76:91:63:dd:cf:3e:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d17f46aff3d8b21f00fee8f635eae34a7f4a4d7
Validity
Not Before: Aug 23 10:02:36 2025 GMT
Not After : Aug 24 10:02:36 2025 GMT
Subject: CN=734ed3a8fca6e5f915bc022d58a7b96951ca1a70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:79:80:b4:bd:2a:e8:f9:60:81:2b:41:b1:0f:
60:81:b1:70:41:6e:9c:df:21:d6:f3:af:b0:ef:dc:
af:1a:11:e4:18:11:f1:d9:a2:15:3c:57:7b:c6:c7:
5b:a5:87:8a:58:a0:9a:74:18:5a:e2:d0:26:f6:d3:
bb:d6:f2:de:99:0b:d1:1c:c7:27:57:f3:82:93:0b:
1e:25:4e:06:61:e6:31:6b:77:eb:81:3f:ed:47:ba:
55:bf:e6:7c:57:18:c4:bc:ee:1f:75:72:ae:a7:27:
2f:dc:7b:86:c3:09:33:65:79:fc:be:20:bf:cc:0b:
67:90:c2:14:c8:16:e6:41:bd:02:39:59:90:8a:4f:
6b:39:a5:3a:21:9d:ba:61:d1:cb:54:ea:22:78:ca:
44:56:f9:a7:50:44:22:27:4b:55:2d:7a:55:db:d0:
72:db:38:2a:8a:6d:66:4f:7b:bc:eb:aa:85:fc:90:
bc:51:d2:b5:c6:2a:50:b0:5f:d3:68:d3:be:00:d9:
94:40:b2:07:7c:84:d4:90:b3:ae:98:c0:f1:2c:e3:
31:73:2d:cb:c6:fb:fd:b7:d9:d1:89:bc:76:6c:e5:
74:1b:25:69:a9:d8:de:bb:a4:9b:ea:2a:00:7b:ff:
45:f0:6f:44:f0:5e:a4:6e:85:13:c2:c8:68:a4:91:
35:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:4E:D3:A8:FC:A6:E5:F9:15:BC:02:2D:58:A7:B9:69:51:CA:1A:70
X509v3 Authority Key Identifier:
keyid:3D:17:F4:6A:FF:3D:8B:21:F0:0F:EE:8F:63:5E:AE:34:A7:F4:A4:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRf0av89iyHwD-6PY16uNKf0pNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b281c7-cd9a-4375-b84a-851ed529f222/1/PRf0av89iyHwD-6PY16uNKf0pNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b281c7-cd9a-4375-b84a-851ed529f222/1/PRf0av89iyHwD-6PY16uNKf0pNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:68:88:2b:a5:fc:de:c9:ab:e3:94:ee:95:da:80:53:a0:f5:
4a:2d:db:7c:89:2e:bb:28:7f:57:ca:c6:5a:b7:e3:e4:1f:75:
03:b1:10:fc:00:b5:76:67:a5:ab:d3:d6:94:8f:1a:7c:90:fb:
c2:0e:92:68:67:29:fd:7c:74:3a:be:a2:a0:af:c3:4a:53:c0:
4d:d4:3a:f7:bc:25:da:6d:8a:11:fe:7a:4c:e7:d7:21:ed:13:
26:89:57:1b:47:20:71:d8:7e:40:3e:7c:d8:43:2d:71:3e:9d:
ba:85:d1:63:93:de:47:21:2d:10:f5:ef:6e:e9:8a:eb:bb:95:
ec:ad:c7:c3:94:88:e2:e1:22:d5:0a:ab:bd:cf:93:6a:67:06:
5c:28:00:15:52:54:de:cd:1c:9c:37:7a:62:fd:aa:15:4d:28:
d8:32:2a:74:ab:43:f4:aa:6d:e8:1c:64:31:10:0b:de:66:d8:
0e:dc:36:69:a3:0c:ee:c9:90:5a:b3:88:a7:db:24:1f:55:5e:
3f:b3:8c:b5:69:f7:7b:b7:3d:ce:97:86:60:06:a8:57:85:f4:
49:ac:17:00:7a:89:7e:ad:67:b7:05:d9:a2:f5:1e:9a:8f:0c:
b4:48:2f:74:e1:81:fc:1b:e4:6e:80:d0:00:f8:65:ae:00:66:
5a:cf:7c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:33:02 2025 by rpki-client