Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PrRw_U1nQhL_yCqZNvP-JUvszmY.mft
File: PrRw_U1nQhL_yCqZNvP-JUvszmY.mft (raw, json)
Hash identifier: GdPd7i25nQZ+1BKvQHXE7OayUlVHarit6t7emJWW9qo=
Subject key identifier: F8:85:D9:10:DA:16:BA:3F:53:A8:DC:A6:47:EA:CE:45:40:19:C1:73
Authority key identifier: 3E:B4:70:FD:4D:67:42:12:FF:C8:2A:99:36:F3:FE:25:4B:EC:CE:66
Certificate issuer: /CN=3eb470fd4d674212ffc82a9936f3fe254becce66
Certificate serial: 019923316AA500CDA87C8E22FD5250AE4C17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PrRw_U1nQhL_yCqZNvP-JUvszmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PrRw_U1nQhL_yCqZNvP-JUvszmY.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 08:01:05 +0000
Manifest this update: Sun 07 Sep 2025 08:01:05 +0000
Manifest next update: Mon 08 Sep 2025 08:01:05 +0000
Files and hashes: 1: PrRw_U1nQhL_yCqZNvP-JUvszmY.crl (hash: KNCbnmwl+vmy7kScITiR3u4d3X9QZemLGTKLsWnJj1I=)
2: aATeS7_Zg3KdAOaKx-n1ZvynPH4.roa (hash: BiTKK6ZatcQ+uoSfiABBAw2jPEjkMuOpjqegStTZ06Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PrRw_U1nQhL_yCqZNvP-JUvszmY.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PrRw_U1nQhL_yCqZNvP-JUvszmY.mft
rsync://rpki.ripe.net/repository/DEFAULT/PrRw_U1nQhL_yCqZNvP-JUvszmY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:6a:a5:00:cd:a8:7c:8e:22:fd:52:50:ae:4c:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eb470fd4d674212ffc82a9936f3fe254becce66
Validity
Not Before: Sep 7 08:01:05 2025 GMT
Not After : Sep 8 08:01:05 2025 GMT
Subject: CN=f885d910da16ba3f53a8dca647eace454019c173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2b:c7:29:a7:84:6d:9b:3c:ad:25:6d:05:41:
33:29:0e:6c:96:07:d8:b0:1c:9b:16:7f:50:2b:b5:
42:54:52:03:9a:22:01:9f:4c:4c:8d:f4:50:d1:99:
01:7b:10:c4:a1:f3:29:71:4f:8e:3f:96:e6:a9:6b:
e5:37:82:4f:64:5a:93:4d:89:ed:b6:81:a8:37:22:
40:d2:a0:ac:64:24:61:4e:8c:a7:9a:29:62:a4:41:
b7:37:df:ec:90:0d:e2:91:f1:4c:e0:a4:2f:3a:6f:
81:c3:79:d9:a1:da:95:24:40:fa:fd:aa:4e:7b:80:
23:48:ac:4a:db:3a:bc:05:17:43:bf:08:84:c2:e7:
94:fc:2e:cf:34:d2:c8:3e:de:86:2a:cb:45:63:fe:
e4:7e:b9:b1:17:af:a5:7e:8c:cd:bf:2c:02:df:8e:
18:52:5f:7b:0a:d7:6c:72:28:e8:60:72:c6:b4:36:
2c:0f:29:84:c8:4d:92:9e:4c:18:fc:37:b3:3b:5a:
04:cc:c3:58:3a:9c:82:ed:7a:8b:bd:41:a3:36:a0:
32:0a:fb:c8:94:cd:df:6c:59:74:e9:ea:70:d0:62:
c6:8e:23:24:fc:61:69:69:fe:84:d4:47:2c:02:6f:
4d:10:bf:e3:d8:18:8d:b1:8e:1b:76:e2:1d:3c:84:
f7:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:85:D9:10:DA:16:BA:3F:53:A8:DC:A6:47:EA:CE:45:40:19:C1:73
X509v3 Authority Key Identifier:
keyid:3E:B4:70:FD:4D:67:42:12:FF:C8:2A:99:36:F3:FE:25:4B:EC:CE:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PrRw_U1nQhL_yCqZNvP-JUvszmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PrRw_U1nQhL_yCqZNvP-JUvszmY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PrRw_U1nQhL_yCqZNvP-JUvszmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:c7:ef:ca:02:bf:9e:f8:06:68:29:80:a4:43:c4:b1:10:9a:
b4:4c:ca:1e:fc:03:8f:d5:e2:9b:a4:9f:6a:d4:cf:45:51:1a:
bb:e4:c7:4d:24:ea:a8:b2:d9:d3:67:e9:9f:28:27:a0:fd:8d:
1b:e1:d9:da:39:3d:63:0d:62:cc:9d:ae:6b:2d:99:68:a6:6b:
a7:d2:05:c4:f5:97:1e:7d:f7:97:27:7c:42:e3:95:42:05:f5:
fa:0c:4e:15:c3:f4:de:32:2c:51:42:9a:c0:83:cf:f2:8b:8d:
7a:13:15:55:d2:30:0d:86:51:85:69:5a:7a:61:4b:54:f1:6e:
c7:7e:8b:d8:1c:07:36:d5:ea:c8:f6:ab:80:22:b6:45:27:c3:
ae:35:5d:3a:24:61:32:66:4d:be:42:a6:30:eb:9b:d3:97:d4:
70:e6:f8:18:94:e2:f5:c3:20:09:bd:f0:44:22:85:71:b2:1f:
6c:69:5d:fc:c5:5a:03:ff:5a:0e:68:b0:61:0d:8a:61:ca:c6:
db:d3:27:7a:3c:59:e7:d7:33:dc:0b:c5:65:b0:fb:d3:f8:d2:
a5:dc:b7:1e:e2:05:5e:f4:eb:e4:6c:8e:54:8c:66:3c:ea:31:
b9:b1:9f:d4:47:07:d3:b9:a1:1d:08:77:f8:00:d9:41:fb:4f:
79:23:28:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:57:06 2025 by rpki-client