Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/54c1d1-363b-45ba-8927-9689fbf6f6ee/1/PryeUbqrPD5qtpn8tEPwB_VGw_s.mft
File: PryeUbqrPD5qtpn8tEPwB_VGw_s.mft (raw, json)
Hash identifier: P8+3+yHm21K2B3O687XablI7gEv316wWsCW2pgAVOzE=
Subject key identifier: E8:5A:BE:99:9C:28:43:5C:E4:C7:78:AF:58:D9:14:21:A9:A5:E9:0E
Authority key identifier: 3E:BC:9E:51:BA:AB:3C:3E:6A:B6:99:FC:B4:43:F0:07:F5:46:C3:FB
Certificate issuer: /CN=3ebc9e51baab3c3e6ab699fcb443f007f546c3fb
Certificate serial: 019A1C1992DD57F74A972DC54CA9BC61C7AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PryeUbqrPD5qtpn8tEPwB_VGw_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/54c1d1-363b-45ba-8927-9689fbf6f6ee/1/PryeUbqrPD5qtpn8tEPwB_VGw_s.mft
Manifest number: 16F5
Signing time: Sat 25 Oct 2025 16:00:29 +0000
Manifest this update: Sat 25 Oct 2025 16:00:29 +0000
Manifest next update: Sun 26 Oct 2025 16:00:29 +0000
Files and hashes: 1: PryeUbqrPD5qtpn8tEPwB_VGw_s.crl (hash: HqQJNnaAQ/uAvNymO3wB/90v1MGNZyAW9BqCepdJTvI=)
2: dNeuYEAQmOoidPn9sPTHpBf3kwM.roa (hash: XKk9IUkG18VeN9nDomy3arFXLgPu8Jw+AjyCy/j87MA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/54c1d1-363b-45ba-8927-9689fbf6f6ee/1/PryeUbqrPD5qtpn8tEPwB_VGw_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/54c1d1-363b-45ba-8927-9689fbf6f6ee/1/PryeUbqrPD5qtpn8tEPwB_VGw_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/PryeUbqrPD5qtpn8tEPwB_VGw_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 16:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1c:19:92:dd:57:f7:4a:97:2d:c5:4c:a9:bc:61:c7:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ebc9e51baab3c3e6ab699fcb443f007f546c3fb
Validity
Not Before: Oct 25 16:00:29 2025 GMT
Not After : Oct 26 16:00:29 2025 GMT
Subject: CN=e85abe999c28435ce4c778af58d91421a9a5e90e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d1:c6:2d:ad:8c:75:17:86:fc:10:13:a9:2c:
f7:62:3a:77:28:08:3e:6b:13:63:6f:32:2f:d9:73:
3b:5c:96:85:92:a8:fa:58:2e:1a:0a:58:3e:f6:82:
07:60:fe:18:6e:80:fe:a8:60:8f:35:01:62:a5:e1:
77:67:77:09:e8:e2:f6:2b:ca:7f:7d:d9:0e:26:b2:
18:dd:49:a7:b2:8a:ff:28:50:33:0b:c1:08:a0:a3:
52:9f:ac:13:22:d9:02:27:a5:64:cf:8e:6b:98:21:
43:82:59:45:7b:86:78:22:42:00:99:41:6e:3c:64:
85:5d:9c:95:36:e9:83:00:72:fe:8a:a4:8e:5c:4d:
d5:93:a1:b1:95:51:d1:34:22:6b:fd:87:7e:7c:70:
8c:aa:8f:0e:77:16:20:e0:9e:6f:d5:45:71:ed:c8:
e3:36:74:10:f3:25:6e:09:7b:98:04:40:5f:df:06:
a9:46:fb:60:79:25:95:b8:92:5e:4c:9f:f2:78:17:
2e:39:50:7c:68:5a:58:23:45:85:a1:ed:ab:d6:96:
aa:bb:d3:90:7b:bf:0d:29:af:9f:d1:dd:c8:c9:05:
8d:f5:c0:a1:80:f8:43:90:1f:cf:19:34:76:ef:a7:
d6:76:4b:4b:9f:16:47:6e:3f:f9:5f:e1:e0:db:27:
f1:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:5A:BE:99:9C:28:43:5C:E4:C7:78:AF:58:D9:14:21:A9:A5:E9:0E
X509v3 Authority Key Identifier:
keyid:3E:BC:9E:51:BA:AB:3C:3E:6A:B6:99:FC:B4:43:F0:07:F5:46:C3:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PryeUbqrPD5qtpn8tEPwB_VGw_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/54c1d1-363b-45ba-8927-9689fbf6f6ee/1/PryeUbqrPD5qtpn8tEPwB_VGw_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/54c1d1-363b-45ba-8927-9689fbf6f6ee/1/PryeUbqrPD5qtpn8tEPwB_VGw_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:6f:62:47:d8:35:e2:11:21:cb:9f:3c:c0:ee:e5:e8:02:88:
58:2c:45:43:e6:f4:8d:13:bd:ee:0d:12:ee:2a:2b:d7:b5:6b:
28:e4:85:aa:b8:f4:d5:9c:97:de:c9:fd:5f:71:47:19:a6:ed:
67:a4:4f:b8:04:26:4f:9a:00:4f:e0:90:7d:06:7f:64:08:72:
c8:db:8e:29:83:49:a8:38:76:db:bb:48:8e:29:c2:13:48:a3:
f5:00:f7:2d:37:8b:a0:ec:8a:3f:bc:5c:69:53:51:19:91:a7:
83:4f:4a:b2:98:36:1a:16:56:5b:c9:cd:5a:9f:a8:8e:08:e6:
a6:44:b4:de:a1:ce:c5:b8:4c:e9:24:e9:13:96:e5:59:21:b8:
b0:b2:67:cf:78:e0:fc:6d:59:34:4d:16:ce:a1:1a:5b:e7:a7:
f8:36:71:6b:bd:c9:f1:b9:54:91:7c:98:25:42:83:18:d5:0d:
af:be:e3:3f:29:92:86:1f:cd:36:0a:05:f5:92:61:cd:a2:14:
11:f8:ce:1f:61:c4:ae:2f:ba:05:3b:8f:46:1d:ea:c2:ae:0f:
b9:a1:8c:e4:49:7d:07:07:c3:5b:79:9b:a4:f9:cf:67:1a:a6:
12:49:a5:76:d1:b3:3c:2a:dd:c9:25:5f:26:f1:ef:f9:e1:69:
9c:22:23:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 22:10:09 2025 by rpki-client