Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/fb9093-407f-4620-b964-6e739f02d512/1/PrEhzwYygZ7s6r64qVVpxnUpiCE.mft
File: PrEhzwYygZ7s6r64qVVpxnUpiCE.mft (raw, json)
Hash identifier: hMcZyFFQlDxzWua/91W8iVeRIkQ5AKInEfa82IDOiwk=
Subject key identifier: FE:68:C5:51:E0:E3:05:7A:45:86:03:D1:5D:6A:10:FB:97:8F:4B:61
Authority key identifier: 3E:B1:21:CF:06:32:81:9E:EC:EA:BE:B8:A9:55:69:C6:75:29:88:21
Certificate issuer: /CN=3eb121cf0632819eeceabeb8a95569c675298821
Certificate serial: 0199221F2DB807565A769F4D894AB9D02605
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PrEhzwYygZ7s6r64qVVpxnUpiCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/fb9093-407f-4620-b964-6e739f02d512/1/PrEhzwYygZ7s6r64qVVpxnUpiCE.mft
Manifest number: 11F5
Signing time: Sun 07 Sep 2025 03:01:32 +0000
Manifest this update: Sun 07 Sep 2025 03:01:32 +0000
Manifest next update: Mon 08 Sep 2025 03:01:32 +0000
Files and hashes: 1: PrEhzwYygZ7s6r64qVVpxnUpiCE.crl (hash: Q2cFVuQ3m8Vg+frq/Wzh04SvqU5lij8GP7/tekV2KAU=)
2: _k-LVkRidjyVBxM5JDfBSAF4xXQ.roa (hash: sWdlQ6il1efqRiBOryvgVXuddGRGIEg9GvemLG8GNq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/fb9093-407f-4620-b964-6e739f02d512/1/PrEhzwYygZ7s6r64qVVpxnUpiCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/fb9093-407f-4620-b964-6e739f02d512/1/PrEhzwYygZ7s6r64qVVpxnUpiCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PrEhzwYygZ7s6r64qVVpxnUpiCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1f:2d:b8:07:56:5a:76:9f:4d:89:4a:b9:d0:26:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eb121cf0632819eeceabeb8a95569c675298821
Validity
Not Before: Sep 7 03:01:32 2025 GMT
Not After : Sep 8 03:01:32 2025 GMT
Subject: CN=fe68c551e0e3057a458603d15d6a10fb978f4b61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6b:2e:83:44:a5:42:76:a7:ef:22:40:46:da:
86:b3:5a:81:be:8a:12:69:28:fa:3b:17:41:ac:95:
93:f8:0b:a8:b4:d0:d8:86:64:b3:f2:5d:6d:1c:0d:
b4:be:8c:ec:6e:eb:5b:5b:45:83:a7:f3:20:78:23:
bf:36:8d:1c:c7:e3:fc:16:06:b4:c2:3e:90:fc:c2:
19:3a:40:5b:f5:c7:1e:cf:54:82:11:14:1f:ce:c5:
84:e1:5e:e2:a2:3c:39:92:53:45:fc:ae:18:80:64:
b6:49:24:3f:b6:dc:6e:ef:ac:5c:0c:3b:0a:20:6d:
d8:1c:26:ba:0f:79:31:12:95:f2:5d:79:b6:20:47:
60:42:c8:ee:04:8d:55:b3:35:81:b9:c7:de:7e:2d:
f1:6c:1d:31:78:d8:26:eb:a1:da:24:a6:2b:0d:50:
9b:96:90:b4:6d:0a:23:b0:c7:39:1d:9c:7b:4c:4b:
ee:d5:58:79:17:8b:cd:60:54:41:85:c0:d6:fc:6c:
9f:ba:7f:af:3f:8b:c7:1d:9e:2b:15:e3:c9:e0:fd:
57:7f:4e:34:1a:ac:f1:72:1c:de:c9:d1:db:68:e9:
90:71:46:02:c5:24:ca:dc:e3:38:13:35:99:20:47:
b1:9b:11:25:00:d7:0d:c1:4c:c6:42:80:8c:e3:16:
ff:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:68:C5:51:E0:E3:05:7A:45:86:03:D1:5D:6A:10:FB:97:8F:4B:61
X509v3 Authority Key Identifier:
keyid:3E:B1:21:CF:06:32:81:9E:EC:EA:BE:B8:A9:55:69:C6:75:29:88:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PrEhzwYygZ7s6r64qVVpxnUpiCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/fb9093-407f-4620-b964-6e739f02d512/1/PrEhzwYygZ7s6r64qVVpxnUpiCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/fb9093-407f-4620-b964-6e739f02d512/1/PrEhzwYygZ7s6r64qVVpxnUpiCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:3f:b7:79:5f:cd:7a:49:3b:c0:8b:68:e2:9b:d4:a1:fc:6f:
5f:b0:3f:38:6a:bd:f6:7c:46:63:8b:b5:66:8a:9f:e3:a2:92:
e8:3b:32:bd:22:68:59:ae:6c:87:ed:4c:73:63:64:22:a4:3f:
ba:10:b0:04:9d:c5:e8:96:a1:cc:25:93:df:6d:68:dc:9e:bd:
bd:50:02:a4:6d:df:1d:3c:b7:68:00:75:c1:c4:95:71:6f:bb:
21:e6:a3:f0:be:10:d5:7b:06:0b:ed:64:9e:32:a5:58:79:e7:
7f:70:d9:03:23:47:7d:1a:23:2c:1e:98:58:93:4c:48:d1:5d:
60:c9:95:9a:09:e2:22:ce:ca:2a:34:3a:47:6c:ab:88:c4:d9:
c7:47:a1:7e:26:d7:4c:2d:5c:88:ec:ae:cf:61:ce:01:4a:35:
79:13:dd:e0:e1:42:5b:e4:45:40:33:d6:15:bc:e6:a2:5a:b1:
6a:d7:09:80:91:dd:08:ce:58:1a:16:2f:9e:a4:e9:d6:fb:e4:
21:ea:a0:4b:ac:3d:1f:ad:74:83:a3:be:8a:d6:ff:3d:5d:d6:
2b:32:e4:99:31:34:70:89:89:28:54:3f:be:a3:83:07:4b:93:
92:ab:9a:23:49:4a:19:46:94:79:f2:ff:e7:ab:5f:99:34:bf:
11:e6:62:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:49:48 2025 by rpki-client