Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/pRZKRoFl6caTvYGEw8pWbKcP1WA.mft
File: pRZKRoFl6caTvYGEw8pWbKcP1WA.mft (raw, json)
Hash identifier: kg1xE88bozNvPVgV663vhxIOtyRxe5oxLzfZnMnWUw0=
Subject key identifier: 69:09:85:31:BD:E1:F9:7B:C1:5A:1B:C1:FD:FC:67:43:3F:ED:35:9B
Authority key identifier: A5:16:4A:46:81:65:E9:C6:93:BD:81:84:C3:CA:56:6C:A7:0F:D5:60
Certificate issuer: /CN=a5164a468165e9c693bd8184c3ca566ca70fd560
Certificate serial: 01984A40CEDC935FFFE17F9B756BE8D2AAE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pRZKRoFl6caTvYGEw8pWbKcP1WA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/pRZKRoFl6caTvYGEw8pWbKcP1WA.mft
Manifest number: C3
Signing time: Sun 27 Jul 2025 05:00:17 +0000
Manifest this update: Sun 27 Jul 2025 05:00:17 +0000
Manifest next update: Mon 28 Jul 2025 05:00:17 +0000
Files and hashes: 1: pRZKRoFl6caTvYGEw8pWbKcP1WA.crl (hash: v8lXne++gHp5CXtRl2URUHT39ujHi6BiFO6dO3E/c3g=)
2: rIL66Wr2JO0hUiDgtrzPfwsPCdg.roa (hash: IzHYSyi3wxidgryTdPg9C85nPJtyfKau5Hu7/N9OG4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/pRZKRoFl6caTvYGEw8pWbKcP1WA.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/pRZKRoFl6caTvYGEw8pWbKcP1WA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pRZKRoFl6caTvYGEw8pWbKcP1WA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:40:ce:dc:93:5f:ff:e1:7f:9b:75:6b:e8:d2:aa:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5164a468165e9c693bd8184c3ca566ca70fd560
Validity
Not Before: Jul 27 05:00:17 2025 GMT
Not After : Jul 28 05:00:17 2025 GMT
Subject: CN=69098531bde1f97bc15a1bc1fdfc67433fed359b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6d:9e:16:a8:0e:25:bc:f5:1b:d7:a6:e2:f6:
fb:0c:67:ba:7b:26:99:7d:05:f2:e5:04:97:c7:e8:
7e:2b:48:2d:ab:c1:df:ae:7e:57:98:98:55:74:7e:
8b:38:e4:04:ec:c4:82:b6:3a:51:cc:cb:03:50:db:
8c:8f:51:39:87:b0:d7:f1:00:fa:ef:b7:fc:83:b7:
ae:0c:c7:e5:90:a3:9b:7b:f4:5f:6c:95:cc:81:c7:
50:67:05:1e:4a:31:e3:9f:e3:15:ef:c4:65:ba:50:
33:95:a3:1e:65:50:c0:32:8c:9d:6f:ed:ea:5e:48:
67:66:cb:2b:77:97:2c:5c:e6:d6:61:d0:87:31:25:
e5:74:4d:0f:26:dc:3b:e2:cd:77:03:96:8d:7f:53:
87:7c:bd:8f:93:ed:b0:6f:d8:f5:3f:31:c4:34:a5:
cd:9b:78:b4:32:44:01:d0:68:ab:b6:f9:35:6b:35:
ae:75:3a:bf:41:d2:22:cc:0e:da:b5:39:0d:f0:eb:
7a:f7:c6:da:17:60:ab:1c:e1:7b:fb:02:88:20:5a:
3a:2e:ac:8a:1d:ff:6d:f2:b0:0b:34:2b:36:72:a1:
22:2b:80:d0:d7:a3:5c:7b:f2:d4:78:8d:bc:1b:a3:
a1:f8:b5:54:2b:d5:a9:08:0a:49:bb:a8:6c:45:2e:
02:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:09:85:31:BD:E1:F9:7B:C1:5A:1B:C1:FD:FC:67:43:3F:ED:35:9B
X509v3 Authority Key Identifier:
keyid:A5:16:4A:46:81:65:E9:C6:93:BD:81:84:C3:CA:56:6C:A7:0F:D5:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pRZKRoFl6caTvYGEw8pWbKcP1WA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/pRZKRoFl6caTvYGEw8pWbKcP1WA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/pRZKRoFl6caTvYGEw8pWbKcP1WA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:07:0c:18:21:3e:e6:0f:ab:50:f3:97:53:4d:a1:40:f9:3c:
1b:0e:dd:86:5a:c1:5f:91:37:7e:b4:8d:91:92:c1:22:4e:b9:
f4:3d:a7:b7:a0:da:e3:23:56:6c:d0:31:f3:fa:3c:28:6a:7a:
be:65:1b:90:dc:a3:9b:67:64:70:62:6a:ba:30:f2:76:01:98:
6f:c0:57:33:f2:c6:be:a4:47:15:53:a4:94:95:5d:7b:da:6d:
f6:59:c2:58:df:34:10:62:8d:08:53:5d:b3:bc:77:e7:69:8d:
ab:e9:7d:2c:19:1a:4c:49:e7:29:1a:e5:2e:96:18:99:ac:78:
73:e7:93:e8:3b:99:5c:8e:da:71:2b:f2:ae:ff:e6:83:68:dd:
a4:17:18:f1:ea:c7:3c:76:6f:38:54:a0:e6:6c:52:4c:ce:1d:
97:b5:7e:65:69:f4:ca:c6:83:a0:33:37:27:fa:4f:1b:1f:a0:
67:97:08:62:36:b1:0a:59:a5:1f:12:41:3e:67:5d:a1:29:d1:
c3:38:6b:ce:15:40:66:52:37:39:e9:fd:13:9a:e5:5a:71:41:
de:32:92:2b:7f:21:76:ce:2d:e7:23:54:4a:2d:8f:ee:d9:7f:
a6:00:86:9e:2a:7e:b7:f7:36:0f:83:26:d6:fc:65:c6:77:29:
5b:e0:13:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKQM7ck1//4X+bdWvo0qriMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1MTY0YTQ2ODE2NWU5YzY5M2JkODE4NGMzY2E1NjZjYTcw
ZmQ1NjAwHhcNMjUwNzI3MDUwMDE3WhcNMjUwNzI4MDUwMDE3WjAzMTEwLwYDVQQD
Eyg2OTA5ODUzMWJkZTFmOTdiYzE1YTFiYzFmZGZjNjc0MzNmZWQzNTliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsG2eFqgOJbz1G9em4vb7DGe6eyaZ
fQXy5QSXx+h+K0gtq8Hfrn5XmJhVdH6LOOQE7MSCtjpRzMsDUNuMj1E5h7DX8QD6
77f8g7euDMflkKObe/RfbJXMgcdQZwUeSjHjn+MV78RlulAzlaMeZVDAMoydb+3q
XkhnZssrd5csXObWYdCHMSXldE0PJtw74s13A5aNf1OHfL2Pk+2wb9j1PzHENKXN
m3i0MkQB0Girtvk1azWudTq/QdIizA7atTkN8Ot698baF2CrHOF7+wKIIFo6LqyK
Hf9t8rALNCs2cqEiK4DQ16Nce/LUeI28G6Oh+LVUK9WpCApJu6hsRS4C9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGkJhTG94fl7wVobwf38Z0M/7TWbMB8GA1UdIwQY
MBaAFKUWSkaBZenGk72BhMPKVmynD9VgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFJaS1JvRmw2Y2FUdllHRXc4cFdiS2NQMVdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8xZmNmYmEtY2RhMC00YWQzLTk4OTMt
OTQ1ODdkODMzMWY5LzEvcFJaS1JvRmw2Y2FUdllHRXc4cFdiS2NQMVdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8xZmNmYmEtY2RhMC00YWQzLTk4OTMtOTQ1ODdkODMzMWY5
LzEvcFJaS1JvRmw2Y2FUdllHRXc4cFdiS2NQMVdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATwcMGCE+
5g+rUPOXU02hQPk8Gw7dhlrBX5E3frSNkZLBIk659D2nt6Da4yNWbNAx8/o8KGp6
vmUbkNyjm2dkcGJqujDydgGYb8BXM/LGvqRHFVOklJVde9pt9lnCWN80EGKNCFNd
s7x352mNq+l9LBkaTEnnKRrlLpYYmax4c+eT6DuZXI7acSvyrv/mg2jdpBcY8erH
PHZvOFSg5mxSTM4dl7V+ZWn0ysaDoDM3J/pPGx+gZ5cIYjaxClmlHxJBPmddoSnR
wzhrzhVAZlI3Oen9E5rlWnFB3jKSK38hds4t5yNUSi2P7tl/pgCGnip+t/c2D4Mm
1vxlxncpW+AT9A==
-----END CERTIFICATE-----
Generated at Sun Jul 27 14:18:14 2025 by rpki-client