Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.mft
File: PRYHLKAlL6tQZY1zb_LGDBYp3HY.mft (raw, json)
Hash identifier: 9PJE7edsv++JIQUlFkOiPYETKAqzv2DhRfex+u4G2K0=
Subject key identifier: 3C:3A:6A:39:8E:1C:20:8E:BA:50:B4:96:40:E9:4C:90:AB:CE:B2:DB
Authority key identifier: 3D:16:07:2C:A0:25:2F:AB:50:65:8D:73:6F:F2:C6:0C:16:29:DC:76
Certificate issuer: /CN=3d16072ca0252fab50658d736ff2c60c1629dc76
Certificate serial: 019746D4A4328DB544A78F2EF85FFC319435
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRYHLKAlL6tQZY1zb_LGDBYp3HY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.mft
Manifest number: 0E41
Signing time: Fri 06 Jun 2025 20:00:30 +0000
Manifest this update: Fri 06 Jun 2025 20:00:30 +0000
Manifest next update: Sat 07 Jun 2025 20:00:30 +0000
Files and hashes: 1: 8e7eehP1l-DLf5STdKJWnoHYbKQ.roa (hash: K8SacJP+Z6piM83BegnBqW6J1m/glPf8EgTcnUYrotM=)
2: PRYHLKAlL6tQZY1zb_LGDBYp3HY.crl (hash: mghjMYLdHVFLc2G3HiIwkr6MDcLtLzlZRaf8zKNkPpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.mft
rsync://rpki.ripe.net/repository/DEFAULT/PRYHLKAlL6tQZY1zb_LGDBYp3HY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 20:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:d4:a4:32:8d:b5:44:a7:8f:2e:f8:5f:fc:31:94:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d16072ca0252fab50658d736ff2c60c1629dc76
Validity
Not Before: Jun 6 20:00:30 2025 GMT
Not After : Jun 7 20:00:30 2025 GMT
Subject: CN=3c3a6a398e1c208eba50b49640e94c90abceb2db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8b:21:a2:ce:3a:1e:38:91:66:6e:8f:1e:c1:
a9:a3:9b:52:c4:62:ff:53:b1:d4:2c:e2:48:f8:ee:
12:d4:ff:f5:c0:51:e0:66:dd:ee:11:da:34:26:8d:
53:16:29:37:a0:fc:b7:60:fe:93:56:07:f8:46:23:
b3:f3:59:94:2b:a7:cf:11:76:a9:b5:c1:22:a0:d4:
89:3b:46:c3:b2:2c:82:0e:ad:f2:f9:2f:99:db:19:
27:7a:61:a3:3c:97:9a:f4:6f:fa:8d:f6:a9:83:3a:
4d:1f:9c:61:ad:7b:9c:71:7d:1f:5d:fb:7a:c5:aa:
b3:04:c1:b2:07:bb:61:a9:b9:55:d8:61:34:37:6b:
30:7f:fc:ab:2d:fe:a6:b7:7a:e6:59:4b:35:61:55:
8a:10:d7:0b:22:53:e9:85:6b:f1:36:ba:4f:51:73:
a8:9c:03:19:4f:5d:38:c7:21:ce:4c:1c:67:0d:bf:
4f:91:90:0b:24:bd:77:39:6e:d9:1b:ae:58:18:71:
85:fd:03:7b:93:f2:e5:71:d5:ad:28:4d:49:55:23:
b0:41:b6:70:f6:46:b8:4b:42:7b:47:47:46:14:cf:
1f:2f:38:7a:6b:3c:6b:bd:d3:b4:c5:5b:2b:95:a5:
e1:93:64:7c:37:71:36:4e:00:2a:c2:54:33:de:75:
00:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:3A:6A:39:8E:1C:20:8E:BA:50:B4:96:40:E9:4C:90:AB:CE:B2:DB
X509v3 Authority Key Identifier:
keyid:3D:16:07:2C:A0:25:2F:AB:50:65:8D:73:6F:F2:C6:0C:16:29:DC:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRYHLKAlL6tQZY1zb_LGDBYp3HY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:06:2c:40:b2:b6:45:c0:4b:07:6b:70:54:1d:b3:ec:9b:a6:
7c:81:28:e4:c1:02:6a:bb:bd:44:74:fc:f7:ac:80:ce:ba:28:
b4:ea:ca:73:8e:a8:13:60:61:08:73:f4:a9:8b:d6:db:53:42:
80:82:0c:c4:80:cb:d8:8b:71:59:48:5c:2b:b2:58:a8:2d:35:
38:12:51:04:4f:67:44:dd:36:f0:9e:ad:a6:8d:a7:ad:ef:0b:
cb:92:ea:7a:32:ba:a7:61:ee:1a:3a:f1:a0:ef:77:03:97:4f:
15:92:72:62:4c:b8:c8:64:4a:d4:df:53:45:4f:18:67:2a:73:
eb:53:d9:0d:3d:db:39:f1:68:48:92:91:b0:17:06:a1:63:d6:
57:f5:a8:87:3d:59:b9:01:07:4c:51:73:e5:d4:59:7e:f0:47:
54:e6:a9:bb:76:99:ec:11:47:f5:71:79:33:e7:e4:e6:23:ad:
38:59:78:cf:ba:ab:37:47:ec:65:82:d9:2c:ad:51:ef:42:cb:
0d:a4:04:72:49:dc:cb:2f:65:b5:18:ba:7c:66:a9:0a:dc:fc:
8a:56:2d:f7:0e:58:2d:64:af:04:1e:19:cf:55:5e:cd:04:a3:
c6:5d:a1:87:8a:91:26:62:c1:3e:2b:bd:8b:a2:50:da:46:24:
86:dc:3f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:13:17 2025 by rpki-client