Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PrRw_U1nQhL_yCqZNvP-JUvszmY.mft
File: PrRw_U1nQhL_yCqZNvP-JUvszmY.mft (raw, json)
Hash identifier: Nyv9NZCTtL+uM1/pQntFzN5hIdWkZ42mJUpU4nKdc8Y=
Subject key identifier: F2:1B:82:6C:B8:0A:6D:4C:C0:5F:CC:9E:2C:BE:2D:EF:3E:3F:F8:40
Authority key identifier: 3E:B4:70:FD:4D:67:42:12:FF:C8:2A:99:36:F3:FE:25:4B:EC:CE:66
Certificate issuer: /CN=3eb470fd4d674212ffc82a9936f3fe254becce66
Certificate serial: 019A73385034A52FA7F68E4220975F1D7185
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PrRw_U1nQhL_yCqZNvP-JUvszmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PrRw_U1nQhL_yCqZNvP-JUvszmY.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 14:01:01 +0000
Manifest this update: Tue 11 Nov 2025 14:01:01 +0000
Manifest next update: Wed 12 Nov 2025 14:01:01 +0000
Files and hashes: 1: PrRw_U1nQhL_yCqZNvP-JUvszmY.crl (hash: uEkXDO7Am1OxQwwh8sngBdcMUO/zlxWAW3vLb5k32jw=)
2: aATeS7_Zg3KdAOaKx-n1ZvynPH4.roa (hash: BiTKK6ZatcQ+uoSfiABBAw2jPEjkMuOpjqegStTZ06Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PrRw_U1nQhL_yCqZNvP-JUvszmY.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PrRw_U1nQhL_yCqZNvP-JUvszmY.mft
rsync://rpki.ripe.net/repository/DEFAULT/PrRw_U1nQhL_yCqZNvP-JUvszmY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:50:34:a5:2f:a7:f6:8e:42:20:97:5f:1d:71:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eb470fd4d674212ffc82a9936f3fe254becce66
Validity
Not Before: Nov 11 14:01:01 2025 GMT
Not After : Nov 12 14:01:01 2025 GMT
Subject: CN=f21b826cb80a6d4cc05fcc9e2cbe2def3e3ff840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:69:5f:b6:95:7c:64:95:65:4b:46:b3:0f:cb:
12:42:b2:df:6d:0b:29:41:ff:1c:7f:07:d9:a1:6a:
36:30:f9:d8:43:ed:4c:87:78:11:5a:e7:bb:e5:8a:
cf:df:4c:f8:3c:b6:73:ec:7a:b9:c2:2a:e1:2b:cc:
57:bb:0f:06:e7:68:a0:ce:be:5f:34:51:a3:87:0c:
72:ec:f5:db:ad:65:50:77:bb:1e:7d:82:fb:c9:47:
bb:0d:11:cd:26:a7:57:f5:64:c6:10:43:cb:cd:31:
d4:fd:7f:84:01:03:df:60:c1:6e:30:03:ec:6c:c8:
1c:b4:4b:ab:03:25:71:fe:b1:97:03:fa:06:78:e1:
b2:ec:1d:32:07:72:71:2f:fc:fd:0f:79:95:1c:45:
f4:58:a7:cb:b6:8c:65:80:e5:0c:7f:f5:56:93:dc:
b9:57:fa:ad:80:64:e2:b5:7f:73:ad:82:5b:bf:32:
e5:2d:92:e9:a0:84:28:fc:07:4a:32:4a:54:12:bb:
b7:28:97:12:a3:61:5a:50:f7:a8:36:de:94:ad:11:
a2:d8:50:3a:e2:6b:d1:46:17:35:8c:30:c7:00:db:
8d:b0:05:17:a2:6d:5a:2c:44:93:fe:38:d4:c0:5a:
df:ec:23:c7:e8:e2:75:8f:2c:51:fd:0a:db:5b:77:
eb:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:1B:82:6C:B8:0A:6D:4C:C0:5F:CC:9E:2C:BE:2D:EF:3E:3F:F8:40
X509v3 Authority Key Identifier:
keyid:3E:B4:70:FD:4D:67:42:12:FF:C8:2A:99:36:F3:FE:25:4B:EC:CE:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PrRw_U1nQhL_yCqZNvP-JUvszmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PrRw_U1nQhL_yCqZNvP-JUvszmY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PrRw_U1nQhL_yCqZNvP-JUvszmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:35:de:58:19:b9:23:97:3b:80:62:cc:a5:d8:b6:a3:be:f3:
97:5a:d3:ce:b2:2d:7a:e4:c5:b5:21:e0:4a:83:0c:20:98:f6:
66:7c:d1:a4:bd:c8:76:71:ec:57:a8:0b:fb:68:2e:c8:53:e8:
8e:9b:d4:cc:1f:24:35:d3:4e:37:71:f1:09:ca:45:8c:62:73:
6b:04:c5:f2:cb:3f:d2:58:96:b4:d9:c6:4d:42:8b:07:06:93:
ee:47:32:0e:8b:a9:24:48:3a:1e:47:14:3e:c9:24:16:9d:ef:
fd:f4:2a:c8:b3:09:04:ff:ad:80:9f:5a:41:24:c6:40:6a:30:
1a:9c:64:71:00:e0:68:81:e2:0e:31:48:92:76:aa:3b:3c:f2:
3e:fc:2d:05:1c:4e:82:1f:ae:2b:72:4a:de:74:7f:3f:1f:18:
40:14:70:ef:19:b5:8f:24:20:36:6c:61:42:98:fb:82:f9:00:
0f:ad:70:79:20:76:59:25:71:43:46:ec:c0:d1:31:2c:54:f2:
70:88:bc:bb:aa:4a:06:d7:17:0b:f8:7b:a1:d7:68:4e:e5:81:
dd:8f:33:47:7c:07:49:b8:f2:aa:34:ee:92:45:c5:3d:ae:d8:
60:18:99:ab:f8:71:e9:99:e7:06:36:ae:3e:db:21:57:0b:d0:
b6:e4:ce:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:16:53 2025 by rpki-client