Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.mft
File: PRYHLKAlL6tQZY1zb_LGDBYp3HY.mft (raw, json)
Hash identifier: L0GGRc+zMAoSwCGCQwkBfqG47ZxZkl73P+NDHLKlCG0=
Subject key identifier: D2:18:DB:A2:18:28:96:D6:5B:12:3D:98:EB:4D:97:9A:80:3A:45:4E
Authority key identifier: 3D:16:07:2C:A0:25:2F:AB:50:65:8D:73:6F:F2:C6:0C:16:29:DC:76
Certificate issuer: /CN=3d16072ca0252fab50658d736ff2c60c1629dc76
Certificate serial: 019A71EE8349D33BD086D3754371079AB51C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRYHLKAlL6tQZY1zb_LGDBYp3HY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.mft
Manifest number: 0FE5
Signing time: Tue 11 Nov 2025 08:00:47 +0000
Manifest this update: Tue 11 Nov 2025 08:00:47 +0000
Manifest next update: Wed 12 Nov 2025 08:00:47 +0000
Files and hashes: 1: 8e7eehP1l-DLf5STdKJWnoHYbKQ.roa (hash: K8SacJP+Z6piM83BegnBqW6J1m/glPf8EgTcnUYrotM=)
2: PRYHLKAlL6tQZY1zb_LGDBYp3HY.crl (hash: 6mSvAIRzLlqo6Hme62ZBn4zCJ3jHrfz9MF8eoRfRj4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.mft
rsync://rpki.ripe.net/repository/DEFAULT/PRYHLKAlL6tQZY1zb_LGDBYp3HY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:83:49:d3:3b:d0:86:d3:75:43:71:07:9a:b5:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d16072ca0252fab50658d736ff2c60c1629dc76
Validity
Not Before: Nov 11 08:00:47 2025 GMT
Not After : Nov 12 08:00:47 2025 GMT
Subject: CN=d218dba2182896d65b123d98eb4d979a803a454e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:22:a3:f6:5c:71:ab:89:52:97:cb:a0:e0:1b:
e2:34:52:fe:0a:7a:f5:cc:2c:5b:40:be:17:f5:b0:
23:84:88:cb:e3:8d:f0:ac:b0:ae:79:4a:d9:b4:92:
ed:57:96:4b:58:ee:79:77:f9:8d:ca:f7:07:ff:2c:
c5:ff:9c:92:75:2c:25:c8:10:fa:db:0b:03:e8:f4:
84:68:87:bb:c5:bd:5f:9e:bd:26:1a:33:86:3d:11:
b2:db:c8:e8:ff:1e:5e:97:ac:53:ef:ed:35:90:07:
03:84:99:ad:e8:c7:1c:8c:ef:34:20:91:5e:8d:d4:
bc:fb:91:22:85:9c:2d:76:f9:8a:ac:b1:c7:67:62:
f5:be:3e:1d:d2:9b:34:4b:45:16:7f:d5:4c:98:09:
b9:4c:0c:ff:a6:9d:a5:8a:f7:7c:0d:75:29:64:ef:
9a:51:a2:d8:a3:f9:b7:1e:1d:74:72:21:ce:d8:ad:
4a:c0:05:d9:83:52:56:df:6f:37:32:23:0c:8d:bc:
a1:0b:ce:89:b6:13:83:b0:08:7e:08:da:57:6f:54:
12:c3:b9:3d:e1:a8:59:49:0a:63:cb:e3:1c:63:7a:
17:b1:fa:34:5f:18:26:79:51:7f:f8:d5:75:8d:5c:
0c:01:74:e4:8c:7a:f6:9c:55:e1:bd:ff:f8:60:81:
7c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:18:DB:A2:18:28:96:D6:5B:12:3D:98:EB:4D:97:9A:80:3A:45:4E
X509v3 Authority Key Identifier:
keyid:3D:16:07:2C:A0:25:2F:AB:50:65:8D:73:6F:F2:C6:0C:16:29:DC:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRYHLKAlL6tQZY1zb_LGDBYp3HY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:ea:e0:00:bd:95:a4:d8:d1:31:56:6c:c3:31:7e:bc:20:5c:
27:ac:a8:99:1b:96:f4:44:cc:c6:c6:75:df:8e:1c:90:15:8e:
85:7f:ba:1b:dc:d7:97:f8:09:d4:8f:12:39:86:bb:75:c3:2a:
60:26:22:f4:78:a8:cc:bf:44:6c:ca:1d:94:de:e4:8b:e1:da:
71:bf:a1:fb:df:ee:4d:87:ea:af:0e:3f:66:95:22:60:7e:82:
2d:93:f5:76:fc:8f:31:6e:88:8a:49:f7:1d:65:81:8d:a5:f9:
5c:6c:42:56:41:29:51:44:87:da:38:74:47:1f:1c:21:67:5e:
14:81:29:62:35:54:15:ba:00:e6:f3:4b:ef:e5:57:b4:47:2e:
c2:fa:bd:d8:e1:f6:1f:a2:ca:fd:ff:28:ce:cc:96:ea:c5:77:
69:7a:87:84:20:e7:36:01:d0:7a:3c:22:e6:2f:8b:b3:8b:d6:
0f:69:1a:89:4c:93:ea:86:ff:4b:0d:c8:34:b2:9f:8c:34:2d:
9a:5a:49:1c:0e:4b:b8:61:a5:8e:e9:0b:bd:33:e2:84:f8:47:
e4:49:9d:c0:9c:14:c7:96:96:00:91:44:96:37:f1:c2:80:e6:
55:b1:72:11:19:a7:c0:f9:8e:a2:9f:1b:90:f8:c1:1c:7b:d5:
67:eb:1f:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:00 2025 by rpki-client