Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/c077d5-b791-41ac-b7a2-566d1a637eef/1/PrqPh8ox3rbBfcfN4Iw3p3XnMCQ.mft
File: PrqPh8ox3rbBfcfN4Iw3p3XnMCQ.mft (raw, json)
Hash identifier: Vw+4bmK9inUq9eBB9whbgE4HCLFtuHC+wV/WSE+1/Vo=
Subject key identifier: 32:52:5D:A6:D9:A4:FA:E7:1E:0C:3F:7D:D7:43:4D:BD:8A:CF:87:2D
Authority key identifier: 3E:BA:8F:87:CA:31:DE:B6:C1:7D:C7:CD:E0:8C:37:A7:75:E7:30:24
Certificate issuer: /CN=3eba8f87ca31deb6c17dc7cde08c37a775e73024
Certificate serial: 019A7112DD5A9F6B8ABF029F7677A9EC2A5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PrqPh8ox3rbBfcfN4Iw3p3XnMCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/c077d5-b791-41ac-b7a2-566d1a637eef/1/PrqPh8ox3rbBfcfN4Iw3p3XnMCQ.mft
Manifest number: 88
Signing time: Tue 11 Nov 2025 04:00:52 +0000
Manifest this update: Tue 11 Nov 2025 04:00:52 +0000
Manifest next update: Wed 12 Nov 2025 04:00:52 +0000
Files and hashes: 1: PrqPh8ox3rbBfcfN4Iw3p3XnMCQ.crl (hash: w8/rxI3uEwdROMCbDlIWYl6JVldoHVJ2fDNyPzMn5CQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/c077d5-b791-41ac-b7a2-566d1a637eef/1/PrqPh8ox3rbBfcfN4Iw3p3XnMCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/c077d5-b791-41ac-b7a2-566d1a637eef/1/PrqPh8ox3rbBfcfN4Iw3p3XnMCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PrqPh8ox3rbBfcfN4Iw3p3XnMCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:dd:5a:9f:6b:8a:bf:02:9f:76:77:a9:ec:2a:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eba8f87ca31deb6c17dc7cde08c37a775e73024
Validity
Not Before: Nov 11 04:00:52 2025 GMT
Not After : Nov 12 04:00:52 2025 GMT
Subject: CN=32525da6d9a4fae71e0c3f7dd7434dbd8acf872d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:32:20:ae:98:c1:7d:5a:a2:73:72:b8:94:88:
27:4c:a9:83:ae:a9:ec:cb:2a:4c:94:ef:31:3c:1d:
00:ec:94:31:73:5e:e5:fe:06:d0:29:77:35:43:95:
62:86:04:da:01:2b:9f:47:99:66:20:2f:29:51:c9:
f2:7c:00:4a:fc:f8:6c:ed:36:93:88:a5:b5:dc:92:
f2:dd:ae:5d:d6:1f:5c:37:79:84:e3:27:3e:25:4a:
77:29:a3:6f:80:8e:03:19:7b:c5:9b:a6:6f:29:b8:
98:2e:83:d6:ba:c0:fe:2a:a4:10:5b:ef:19:52:d0:
5e:38:65:8a:2a:e2:63:7d:11:0a:d1:e5:38:a2:95:
37:fd:15:44:53:c9:53:30:31:5d:f3:d4:e8:96:de:
8d:cc:e2:89:78:d1:b4:e8:7a:62:53:36:87:4c:35:
35:1e:f8:45:77:e7:3f:40:7d:2f:8a:2d:17:cc:43:
80:51:38:c4:a7:d4:81:f4:e1:4a:0e:f2:a6:76:26:
0f:29:99:b4:fc:c7:ab:47:08:fa:0d:c3:d1:56:66:
f6:ca:c9:80:57:bc:94:d2:00:d5:fc:0e:4c:a4:ac:
b9:39:76:3c:51:62:58:f9:82:cc:ff:0b:45:44:aa:
98:b1:bf:00:e2:c1:c9:14:cc:c7:ca:8c:c1:ed:2e:
e9:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:52:5D:A6:D9:A4:FA:E7:1E:0C:3F:7D:D7:43:4D:BD:8A:CF:87:2D
X509v3 Authority Key Identifier:
keyid:3E:BA:8F:87:CA:31:DE:B6:C1:7D:C7:CD:E0:8C:37:A7:75:E7:30:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PrqPh8ox3rbBfcfN4Iw3p3XnMCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/c077d5-b791-41ac-b7a2-566d1a637eef/1/PrqPh8ox3rbBfcfN4Iw3p3XnMCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/c077d5-b791-41ac-b7a2-566d1a637eef/1/PrqPh8ox3rbBfcfN4Iw3p3XnMCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:9a:11:67:6b:97:da:b2:2f:17:3a:2c:ad:cb:f2:77:c6:5a:
d4:44:6f:09:d6:4c:4b:d9:bf:e6:3a:46:73:86:48:08:75:72:
96:f8:f0:7f:bf:59:20:aa:8a:56:4a:14:a4:9a:48:83:c2:62:
b8:77:3d:cc:2e:bf:c6:16:c9:7f:a9:0f:bb:94:5d:f6:f5:48:
26:cb:6f:64:1a:27:5e:53:61:78:b4:31:98:1f:17:ae:06:c9:
6b:d0:d4:cd:5e:cf:c9:e7:6d:02:80:4d:8f:5a:53:7a:d1:a6:
fd:5f:89:ac:53:08:96:0d:a8:54:34:0c:cc:08:82:fd:f9:be:
8c:f6:68:8a:f1:69:41:40:67:e3:d5:59:54:59:e8:d6:4b:70:
75:b2:b3:70:aa:41:32:eb:0a:09:81:8e:b8:de:f0:b6:b7:8b:
84:d1:0f:3e:e1:25:a0:91:9a:5a:f6:55:f5:b2:ce:e0:7d:24:
02:65:1c:66:18:d4:bc:19:e3:e4:49:51:d1:de:3f:da:00:8b:
16:4d:3f:3e:5b:7a:d0:be:3c:de:26:04:3c:6b:fd:ec:2c:ed:
3c:91:35:0f:e3:dd:ae:aa:38:61:89:ea:68:c2:ea:ca:81:c8:
90:f2:ad:8d:2f:80:97:e8:ef:83:2e:b4:c5:f7:1b:cc:91:03:
47:69:5a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:29 2025 by rpki-client