Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/pRZKRoFl6caTvYGEw8pWbKcP1WA.mft
File: pRZKRoFl6caTvYGEw8pWbKcP1WA.mft (raw, json)
Hash identifier: c7sg+VpP3IKceR7xTLOVokE5Z13onGnzB5yrqoaHRYk=
Subject key identifier: EC:98:07:E1:D4:16:A6:79:F5:03:4B:63:B3:26:AA:B6:91:5C:61:AF
Authority key identifier: A5:16:4A:46:81:65:E9:C6:93:BD:81:84:C3:CA:56:6C:A7:0F:D5:60
Certificate issuer: /CN=a5164a468165e9c693bd8184c3ca566ca70fd560
Certificate serial: 019A7293FAA6290EDC6CFA1DEA10BAFF03BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pRZKRoFl6caTvYGEw8pWbKcP1WA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/pRZKRoFl6caTvYGEw8pWbKcP1WA.mft
Manifest number: 01E1
Signing time: Tue 11 Nov 2025 11:01:31 +0000
Manifest this update: Tue 11 Nov 2025 11:01:31 +0000
Manifest next update: Wed 12 Nov 2025 11:01:31 +0000
Files and hashes: 1: pRZKRoFl6caTvYGEw8pWbKcP1WA.crl (hash: JiqKcZ4ofVEzN2vMWoh81N9kFd2Nj7S6SZ2JNyv6JUE=)
2: rIL66Wr2JO0hUiDgtrzPfwsPCdg.roa (hash: IzHYSyi3wxidgryTdPg9C85nPJtyfKau5Hu7/N9OG4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/pRZKRoFl6caTvYGEw8pWbKcP1WA.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/pRZKRoFl6caTvYGEw8pWbKcP1WA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pRZKRoFl6caTvYGEw8pWbKcP1WA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:fa:a6:29:0e:dc:6c:fa:1d:ea:10:ba:ff:03:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5164a468165e9c693bd8184c3ca566ca70fd560
Validity
Not Before: Nov 11 11:01:31 2025 GMT
Not After : Nov 12 11:01:31 2025 GMT
Subject: CN=ec9807e1d416a679f5034b63b326aab6915c61af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:52:63:bd:f2:cf:fb:20:e8:60:0a:ec:a3:f9:
e2:b5:d4:1e:2f:3c:eb:f2:fc:0e:80:b9:f4:09:15:
68:b0:4a:7e:b3:9e:12:60:e2:2a:df:1a:0b:43:6f:
a9:53:b0:69:e2:6b:7d:4a:bd:b6:00:75:6e:80:02:
b5:b9:11:5e:04:2a:37:4b:18:88:7e:53:1b:a1:5a:
53:7d:07:24:02:71:bf:11:30:d1:92:2f:5f:f0:9a:
29:e4:75:8a:84:d0:c8:77:bd:ef:59:4b:af:c3:f8:
5c:c2:1b:31:22:95:26:f9:dd:2f:f7:76:8d:b1:80:
b3:b4:45:ac:23:db:75:99:db:b6:6c:1e:55:e4:da:
c6:39:88:00:79:12:3f:1f:2d:eb:1d:d4:0a:bd:54:
7e:59:e6:9f:c2:e2:90:79:62:5c:00:6a:6a:8b:d1:
04:6b:8d:fe:c2:ae:16:04:99:3c:df:2e:f5:db:78:
7a:01:e2:cd:17:e4:6f:1b:29:20:a2:1c:68:1a:2a:
36:bc:87:a5:03:c7:9a:39:46:2a:87:41:e7:21:87:
bd:ac:b5:49:41:d4:2b:19:88:34:a5:53:63:8b:25:
ab:86:68:cb:cc:72:5b:a9:a1:61:2c:42:8b:48:1d:
6e:19:b7:d8:04:6f:0a:8a:91:49:34:99:b5:b4:95:
68:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:98:07:E1:D4:16:A6:79:F5:03:4B:63:B3:26:AA:B6:91:5C:61:AF
X509v3 Authority Key Identifier:
keyid:A5:16:4A:46:81:65:E9:C6:93:BD:81:84:C3:CA:56:6C:A7:0F:D5:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pRZKRoFl6caTvYGEw8pWbKcP1WA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/pRZKRoFl6caTvYGEw8pWbKcP1WA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/pRZKRoFl6caTvYGEw8pWbKcP1WA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:f8:62:3b:d0:7e:6f:71:e1:60:6f:c9:e0:e9:3a:81:7c:3d:
5e:56:34:b7:fc:9b:57:86:71:61:19:be:c4:4e:e6:3d:9a:70:
89:b3:45:30:ea:f5:6d:70:05:f2:25:83:1b:2b:e3:15:90:6c:
75:4e:07:19:43:e6:65:4a:c2:4f:ce:39:68:ee:2e:5e:8e:a7:
7f:d1:c5:82:07:59:39:07:9a:d6:32:4f:20:eb:4c:33:35:7f:
aa:49:ab:19:8f:76:8f:e3:7b:f0:f2:38:b6:3e:95:7b:29:e2:
32:c4:c7:ea:dc:62:6c:d7:8d:e3:da:40:ed:dd:30:c1:f6:58:
a3:4d:70:46:af:9b:0c:de:e4:40:4e:9d:69:d3:b6:78:35:d8:
84:4b:b9:13:89:80:c1:c6:f8:d3:df:07:4d:e3:b9:34:41:2d:
2f:43:37:b2:38:00:2f:54:f4:67:62:56:c6:be:0e:ef:9c:a4:
2d:31:80:c2:f0:4d:a3:82:af:9e:1d:f1:9f:fd:0a:8d:a7:25:
7f:64:d0:0d:ab:38:ac:f7:ae:18:ee:d4:34:7d:e9:64:db:0d:
aa:40:76:89:c7:89:09:f9:a9:99:e6:4d:e9:72:b9:dd:30:8f:
cb:03:22:d8:8f:3f:c2:f0:d8:2f:41:51:09:00:be:8a:d2:39:
60:87:cb:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:52:56 2025 by rpki-client