Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3e3324-6e60-45a5-9433-e057a8bdcf96/1/PrYnJBMoJOVJBuJAqIA2QZo2W4Q.mft
File: PrYnJBMoJOVJBuJAqIA2QZo2W4Q.mft (raw, json)
Hash identifier: +a7bvbRrTWIGd3U+pHLdagdFZk/F+Rc3ijQifWnodXk=
Subject key identifier: 7E:0F:6D:E3:26:1F:64:DD:F6:F9:6D:0E:7C:93:AF:E1:42:7A:B3:28
Authority key identifier: 3E:B6:27:24:13:28:24:E5:49:06:E2:40:A8:80:36:41:9A:36:5B:84
Certificate issuer: /CN=3eb62724132824e54906e240a88036419a365b84
Certificate serial: 019A71B811575998870C315E153D4FAE7897
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PrYnJBMoJOVJBuJAqIA2QZo2W4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3e3324-6e60-45a5-9433-e057a8bdcf96/1/PrYnJBMoJOVJBuJAqIA2QZo2W4Q.mft
Manifest number: 50
Signing time: Tue 11 Nov 2025 07:01:19 +0000
Manifest this update: Tue 11 Nov 2025 07:01:19 +0000
Manifest next update: Wed 12 Nov 2025 07:01:19 +0000
Files and hashes: 1: LKYEcHRv13hCEn2ITZ6Ji002NW4.roa (hash: XBnCCt2ig9Uvd5g1UVG/Ee+HEig1GAa0vstmiIJNytc=)
2: PrYnJBMoJOVJBuJAqIA2QZo2W4Q.crl (hash: 93gvxSsKTiiY1b4XeYT1zeLHGhyhQZmDJPQGhanHhyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/3e3324-6e60-45a5-9433-e057a8bdcf96/1/PrYnJBMoJOVJBuJAqIA2QZo2W4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/3e3324-6e60-45a5-9433-e057a8bdcf96/1/PrYnJBMoJOVJBuJAqIA2QZo2W4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/PrYnJBMoJOVJBuJAqIA2QZo2W4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:11:57:59:98:87:0c:31:5e:15:3d:4f:ae:78:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eb62724132824e54906e240a88036419a365b84
Validity
Not Before: Nov 11 07:01:19 2025 GMT
Not After : Nov 12 07:01:19 2025 GMT
Subject: CN=7e0f6de3261f64ddf6f96d0e7c93afe1427ab328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:15:20:02:1c:b4:91:91:af:62:b4:44:d9:e4:
c2:a4:18:85:fc:be:67:7c:3d:2e:a2:93:63:dd:64:
58:b4:bd:74:8c:e6:84:6f:92:f8:e7:fd:90:4e:96:
cc:24:3c:f2:24:b8:0b:d6:b0:8f:f9:fd:f5:ec:de:
83:c2:0e:e5:0c:dc:a6:09:61:57:21:a0:7b:ad:6c:
67:23:e1:4b:4d:08:d9:90:67:ba:37:3c:2f:c7:9f:
bf:f8:9e:69:a4:7c:c5:73:cf:df:20:d8:67:65:68:
80:84:c6:f2:53:c3:b5:31:45:b4:ad:95:e1:42:53:
87:8d:f2:cc:bc:85:26:e2:fd:3b:23:fa:3e:10:b7:
76:18:3e:c3:51:13:4a:bb:ea:be:95:73:36:89:5b:
50:07:d0:4f:4a:63:83:6f:d2:82:f6:29:72:64:cf:
b6:60:a7:a8:e7:a1:e6:6b:a5:03:1f:82:3a:83:d6:
19:d2:44:da:71:b4:f1:c2:8e:b9:65:70:9d:cd:83:
3c:64:48:ad:0a:54:fc:e3:88:8a:0a:05:7c:ae:0f:
9a:92:43:75:16:35:2b:cb:29:ff:e2:d8:d0:aa:11:
66:6b:19:75:08:7d:4e:33:35:3f:50:b1:1e:fd:7b:
4c:05:cd:55:74:cd:8a:49:6d:89:b8:b3:e4:9c:d6:
8b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:0F:6D:E3:26:1F:64:DD:F6:F9:6D:0E:7C:93:AF:E1:42:7A:B3:28
X509v3 Authority Key Identifier:
keyid:3E:B6:27:24:13:28:24:E5:49:06:E2:40:A8:80:36:41:9A:36:5B:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PrYnJBMoJOVJBuJAqIA2QZo2W4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3e3324-6e60-45a5-9433-e057a8bdcf96/1/PrYnJBMoJOVJBuJAqIA2QZo2W4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3e3324-6e60-45a5-9433-e057a8bdcf96/1/PrYnJBMoJOVJBuJAqIA2QZo2W4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:8d:3a:a1:58:99:6e:e5:6a:37:78:0d:a1:b0:b5:55:52:e3:
e8:9e:27:b8:2f:38:02:5f:bf:13:56:68:53:cc:f6:3e:0d:15:
e4:af:83:ea:8b:a5:66:66:3a:e2:66:0a:35:50:6f:27:d5:fc:
5a:69:3f:be:bd:54:cb:77:0e:76:b1:77:a6:5c:39:3d:fa:d5:
b8:90:f3:fb:19:ea:db:a9:60:2a:e7:84:cd:dd:1a:b1:60:e1:
a6:46:a2:67:38:b2:9a:1c:de:bf:15:fd:f9:88:84:13:04:40:
7e:b0:c5:6f:1a:13:7d:77:f4:40:d8:20:ac:e9:c3:42:57:25:
aa:a0:6c:51:63:e9:34:1a:f5:84:0f:a2:7a:90:f1:46:de:5f:
ff:57:2d:c6:ad:58:27:97:8d:4f:63:45:f5:20:fa:e0:4f:62:
57:49:66:c0:24:a4:42:d4:c3:44:09:01:49:af:c9:79:76:60:
66:1a:fe:dd:0a:1b:b0:14:c9:82:64:11:f1:2a:4d:05:18:b7:
e0:12:99:c1:b8:18:cb:a4:8a:e1:e3:80:0c:cd:8a:2f:0a:33:
72:c1:58:ba:90:ea:86:c3:99:f2:85:b4:ab:d9:a4:9c:c9:87:
d0:f0:56:ec:37:81:f4:72:16:59:4c:52:52:22:04:b5:95:92:
b9:4c:3e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:16 2025 by rpki-client