Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/23de06-fc9a-43d3-ac95-37e64c07cc86/1/PRzEAjSeGROS0ex0acG8gkNjRDk.mft
File: PRzEAjSeGROS0ex0acG8gkNjRDk.mft (raw, json)
Hash identifier: 6sx6YbknneQd4CQiSR2zynixFbrJBZB8v7PcCRnFrOE=
Subject key identifier: 03:02:B6:6E:33:97:08:1A:5E:30:6D:7A:78:0E:4D:6E:CB:13:30:15
Authority key identifier: 3D:1C:C4:02:34:9E:19:13:92:D1:EC:74:69:C1:BC:82:43:63:44:39
Certificate issuer: /CN=3d1cc402349e191392d1ec7469c1bc8243634439
Certificate serial: 019922FA7E23CE22B5FCB49A535F7300346E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRzEAjSeGROS0ex0acG8gkNjRDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/23de06-fc9a-43d3-ac95-37e64c07cc86/1/PRzEAjSeGROS0ex0acG8gkNjRDk.mft
Manifest number: 0AB4
Signing time: Sun 07 Sep 2025 07:01:05 +0000
Manifest this update: Sun 07 Sep 2025 07:01:05 +0000
Manifest next update: Mon 08 Sep 2025 07:01:05 +0000
Files and hashes: 1: PRzEAjSeGROS0ex0acG8gkNjRDk.crl (hash: f6UOVHRv8jNOB0w05rqtY+CvSww731609W7efj52+rM=)
2: flDyEgY09JcTncHiiRnZ44dc3Jg.roa (hash: U/d1Btmo0ndLftNS6W3aEjJNMxknGgzWNSoSOFVtfm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/23de06-fc9a-43d3-ac95-37e64c07cc86/1/PRzEAjSeGROS0ex0acG8gkNjRDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/23de06-fc9a-43d3-ac95-37e64c07cc86/1/PRzEAjSeGROS0ex0acG8gkNjRDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/PRzEAjSeGROS0ex0acG8gkNjRDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:7e:23:ce:22:b5:fc:b4:9a:53:5f:73:00:34:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d1cc402349e191392d1ec7469c1bc8243634439
Validity
Not Before: Sep 7 07:01:05 2025 GMT
Not After : Sep 8 07:01:05 2025 GMT
Subject: CN=0302b66e3397081a5e306d7a780e4d6ecb133015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8e:fd:f5:89:44:5f:61:5e:8d:10:44:49:e0:
84:04:ed:fa:4d:7c:90:5c:2c:51:83:5a:0b:5b:b7:
e4:d3:d3:df:5e:12:ea:1a:05:9a:e8:d3:5c:3e:80:
eb:61:5d:6d:98:f9:70:8c:6f:c7:b9:95:8a:f4:6c:
bc:b8:57:ca:bc:9f:38:4d:9b:33:3a:92:a5:60:bb:
5c:99:04:4a:0c:3b:30:51:bb:1e:e4:08:80:8d:1f:
7f:3a:e8:60:83:71:cf:8b:16:51:4e:f0:98:6f:e9:
5f:c1:e9:1f:2b:c8:6e:e2:6d:2b:27:bc:ce:65:a9:
5b:9b:7c:97:a5:84:ca:28:82:d4:5f:5d:59:2b:a5:
50:8b:45:c0:64:21:af:4a:33:2e:33:f8:fe:89:5f:
84:c0:dd:82:1f:22:fb:5b:95:07:22:9b:74:33:61:
a7:9e:17:86:a0:c5:df:e8:5e:ed:9c:d0:99:4f:bf:
6b:85:81:32:49:b2:86:3a:6c:1b:69:1a:c8:46:ee:
f0:8a:3e:f3:55:70:2c:ae:47:d3:4a:e6:37:01:38:
bf:78:a6:74:0f:28:82:d3:be:73:6f:97:89:01:bf:
bd:e0:30:48:e2:da:5f:e0:b3:13:b0:df:b4:7f:8b:
fc:50:12:dc:ac:e2:4c:a6:da:1a:16:0f:43:9f:b1:
04:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:02:B6:6E:33:97:08:1A:5E:30:6D:7A:78:0E:4D:6E:CB:13:30:15
X509v3 Authority Key Identifier:
keyid:3D:1C:C4:02:34:9E:19:13:92:D1:EC:74:69:C1:BC:82:43:63:44:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRzEAjSeGROS0ex0acG8gkNjRDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/23de06-fc9a-43d3-ac95-37e64c07cc86/1/PRzEAjSeGROS0ex0acG8gkNjRDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/23de06-fc9a-43d3-ac95-37e64c07cc86/1/PRzEAjSeGROS0ex0acG8gkNjRDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:d4:31:d0:48:68:d2:0b:8f:dd:f5:e7:30:a9:fe:95:f6:bc:
f6:c5:9b:0a:f6:18:9d:ca:38:78:93:e3:1b:6b:7e:87:f9:47:
6c:26:a5:c6:4a:c4:d2:db:d5:ad:7c:21:ce:c5:ec:72:26:0f:
e5:24:5f:99:49:59:26:a4:e7:47:e0:5e:fc:75:c9:86:2d:66:
fa:66:bb:9c:6a:c3:e2:9c:f5:ac:1d:ab:42:e1:ee:a0:d1:4d:
22:77:62:04:86:71:6a:21:c9:fb:9c:53:f6:e2:88:2e:35:f4:
67:5c:62:fa:76:f0:42:e2:94:98:ab:58:a7:4f:bf:68:c7:98:
74:20:64:fb:4d:b0:92:9f:88:83:20:0e:8b:fa:6c:75:e6:e4:
86:45:c4:34:8b:fc:9f:98:cd:f1:72:98:3a:a2:ba:83:91:32:
b0:4e:6c:6c:7e:ad:e0:d8:30:3d:f0:c6:1b:df:0e:24:64:3f:
07:e2:cb:12:6a:a4:ec:2b:17:c8:3b:21:14:ca:95:c6:a3:55:
b3:6a:d5:a9:43:60:72:ce:91:61:46:49:b2:da:80:ee:1e:70:
2c:f2:a4:9e:c8:de:c2:3f:e6:b2:42:30:77:37:c9:85:6c:3e:
99:d2:73:bc:f3:29:5f:21:18:ef:db:a9:d7:cb:eb:0d:c0:a3:
9b:ee:91:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:11 2025 by rpki-client