Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/b281c7-cd9a-4375-b84a-851ed529f222/1/PRf0av89iyHwD-6PY16uNKf0pNc.mft
File: PRf0av89iyHwD-6PY16uNKf0pNc.mft (raw, json)
Hash identifier: sAe9f/UHxHG9ffCq44V356M4x0rkofluRZHHXLbqLP4=
Subject key identifier: 53:C5:51:26:8D:4D:C6:09:BA:C2:42:35:10:63:A9:0B:A0:FE:1B:00
Authority key identifier: 3D:17:F4:6A:FF:3D:8B:21:F0:0F:EE:8F:63:5E:AE:34:A7:F4:A4:D7
Certificate issuer: /CN=3d17f46aff3d8b21f00fee8f635eae34a7f4a4d7
Certificate serial: 0199FDD9A5A0915A180678453A3090538483
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRf0av89iyHwD-6PY16uNKf0pNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/b281c7-cd9a-4375-b84a-851ed529f222/1/PRf0av89iyHwD-6PY16uNKf0pNc.mft
Manifest number: 0BD1
Signing time: Sun 19 Oct 2025 19:02:03 +0000
Manifest this update: Sun 19 Oct 2025 19:02:03 +0000
Manifest next update: Mon 20 Oct 2025 19:02:03 +0000
Files and hashes: 1: PRf0av89iyHwD-6PY16uNKf0pNc.crl (hash: lgRIa6nclfKC81SiKuA9btXNulpzTHspkhZ4aIza42U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/b281c7-cd9a-4375-b84a-851ed529f222/1/PRf0av89iyHwD-6PY16uNKf0pNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/b281c7-cd9a-4375-b84a-851ed529f222/1/PRf0av89iyHwD-6PY16uNKf0pNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PRf0av89iyHwD-6PY16uNKf0pNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:a5:a0:91:5a:18:06:78:45:3a:30:90:53:84:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d17f46aff3d8b21f00fee8f635eae34a7f4a4d7
Validity
Not Before: Oct 19 19:02:03 2025 GMT
Not After : Oct 20 19:02:03 2025 GMT
Subject: CN=53c551268d4dc609bac242351063a90ba0fe1b00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e9:1c:4a:87:44:2a:3c:4d:c0:6e:08:6d:51:
0b:ee:b7:ef:43:93:80:67:9d:7d:e0:d6:9d:8a:e4:
4d:62:6e:97:45:c0:cc:f2:b4:64:7b:7c:7f:0c:79:
e1:c7:c6:6d:62:fb:0d:a5:e5:c2:1b:13:35:1f:c4:
88:0e:69:7d:1e:91:b6:5b:2c:62:7c:a6:c7:b5:3b:
ca:b9:f8:2d:57:f4:aa:4b:53:7f:ab:6f:64:8e:9f:
23:44:26:6a:0d:88:3c:d4:bd:c4:88:96:94:10:8b:
1c:ad:59:4a:7b:be:04:91:a4:3c:86:9c:3c:1c:68:
f9:3f:77:66:ec:7c:1c:6b:40:d3:95:b5:46:8f:0d:
28:05:4d:ca:eb:26:cc:88:5f:98:92:6f:0e:3e:a5:
ed:7b:61:8b:fe:b2:77:1a:49:c2:17:f9:31:10:ee:
7f:54:10:a3:87:7e:da:0c:e4:81:46:ba:de:f2:39:
5f:8b:79:02:d5:36:b4:2c:47:43:7c:13:36:46:79:
a8:07:4f:18:e6:84:a2:b2:b7:82:0d:00:66:ad:77:
25:6e:1a:aa:e4:9f:5e:99:c0:84:92:fa:8b:64:0b:
cc:0c:70:19:9d:ef:64:a2:3d:5d:dd:f0:ae:bc:61:
80:af:6e:8e:85:3f:39:4f:d0:22:c3:14:71:59:c0:
2b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:C5:51:26:8D:4D:C6:09:BA:C2:42:35:10:63:A9:0B:A0:FE:1B:00
X509v3 Authority Key Identifier:
keyid:3D:17:F4:6A:FF:3D:8B:21:F0:0F:EE:8F:63:5E:AE:34:A7:F4:A4:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRf0av89iyHwD-6PY16uNKf0pNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b281c7-cd9a-4375-b84a-851ed529f222/1/PRf0av89iyHwD-6PY16uNKf0pNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b281c7-cd9a-4375-b84a-851ed529f222/1/PRf0av89iyHwD-6PY16uNKf0pNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:04:86:90:8d:cc:b6:97:98:fe:14:1b:f2:8e:8b:d9:73:76:
46:18:c6:b0:a2:a3:ae:60:c9:60:fe:19:d7:c3:e0:2d:82:92:
24:be:c6:22:6f:8e:45:39:3b:74:90:5b:3d:13:81:45:36:7a:
2b:61:96:fe:e0:1b:82:db:27:b9:d3:7e:e6:11:82:f1:9e:9f:
97:c7:d4:d3:00:06:ae:8d:21:22:3c:8d:44:db:55:6b:ec:bf:
3f:f4:c2:7c:a4:b8:60:ce:6f:df:61:98:7d:82:e0:90:e7:d5:
14:69:0b:de:5a:31:ba:44:e2:68:cc:a6:39:ac:ee:bb:fd:2e:
92:5c:81:41:0d:d2:f2:82:f6:c9:33:3d:16:88:4c:3a:5a:a3:
19:07:02:e6:62:7e:f3:96:61:41:5a:22:92:d2:11:07:fc:b5:
d4:07:7c:d8:33:f0:ea:b9:af:28:69:f3:94:2c:13:29:5a:a5:
59:32:77:bc:fd:07:03:51:9e:67:a5:45:eb:f2:6a:0d:be:29:
0f:91:db:df:b0:56:e3:7b:da:24:98:c4:2e:5d:74:36:f0:35:
07:ed:f3:25:93:7d:b9:07:55:12:4f:99:64:4f:0e:b4:ac:e2:
76:de:07:f2:b0:1c:8d:38:2d:68:bc:90:f6:56:98:94:c1:49:
bb:ea:cc:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:55:53 2025 by rpki-client