Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.mft
File: PrF4j-Ig5GQ0aS0cxDcHLXkteIg.mft (raw, json)
Hash identifier: l7SMW+F4+HgUAfcOLYKNv4M+b+4AP/IlfB4gyZNIlZI=
Subject key identifier: 71:3D:04:D2:BC:77:01:E5:72:EB:10:E2:4A:22:EC:30:48:B2:0B:05
Authority key identifier: 3E:B1:78:8F:E2:20:E4:64:34:69:2D:1C:C4:37:07:2D:79:2D:78:88
Certificate issuer: /CN=3eb1788fe220e46434692d1cc437072d792d7888
Certificate serial: 0199C26875B3B31793E649584086F628B506
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.mft
Manifest number: 16C7
Signing time: Wed 08 Oct 2025 06:00:49 +0000
Manifest this update: Wed 08 Oct 2025 06:00:49 +0000
Manifest next update: Thu 09 Oct 2025 06:00:49 +0000
Files and hashes: 1: 2YadcCcrthTPeDDHEpW__8Qd9bs.roa (hash: OdnpX4OxWP0430jIZ65+bJ7XNUvVVpsmfscwz1Ws1zM=)
2: 5NVHCfMQ6W48yxlWBv3uWNtbJDs.roa (hash: xWoUftWDtv357JcFYDaq4ko62SbPA3ugAxMWTRo1aWY=)
3: CVexCZZcrh9ZcPNoGlGj6g2cPNY.roa (hash: oCKOi7GJALUFPXeLK9MWcGccq1tZ9vcEgFN5xNZTkgo=)
4: PrF4j-Ig5GQ0aS0cxDcHLXkteIg.crl (hash: ocqW5luNsSmm8NhjO+/DfzFvfUrtfE+mfiAwTUZt7nE=)
5: UmpHN1dTZ2hpLcnnZpWS2Jt3BIg.roa (hash: PTvkuklKNLY3Mh0Z7gawtcDt9dMpbGsMOP+ydZCmFBk=)
6: puQ4Sk8pHIWfFKAYZzp1IAYEd0Q.roa (hash: tM5HP1N7Kc8KkaIaBlmp8d2jgH4OgbCHpaIgKSubYgE=)
7: zijtuBvUTHoACL0vLKqZfOgzwrA.roa (hash: /MUioQ1kaDrTgFZ5Z1TeKDrxhjrVzyNRI36qm2VszV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 06:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c2:68:75:b3:b3:17:93:e6:49:58:40:86:f6:28:b5:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eb1788fe220e46434692d1cc437072d792d7888
Validity
Not Before: Oct 8 06:00:49 2025 GMT
Not After : Oct 9 06:00:49 2025 GMT
Subject: CN=713d04d2bc7701e572eb10e24a22ec3048b20b05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:86:68:11:9b:09:ba:7a:e0:5b:83:cb:c2:89:
ff:84:72:f4:cd:18:98:1e:50:e0:be:0d:13:5f:15:
4b:cf:21:b7:bc:fc:78:19:d4:20:a4:87:3f:6a:6d:
06:b1:2f:4a:ac:67:ef:4c:53:90:ba:c2:bb:b5:03:
35:d1:30:70:af:d1:a1:86:54:dd:eb:37:09:d0:c0:
d3:23:ee:8a:e8:35:4d:fb:24:f8:71:82:69:6a:15:
c2:4b:19:f2:a6:56:6c:41:27:5a:d1:b8:02:4f:f8:
13:fb:19:d2:5f:0a:e6:88:8c:49:e6:43:70:5f:2f:
6e:f3:a5:b3:d3:29:2b:c8:2e:5b:28:d6:d9:34:6d:
26:b6:66:dc:e3:71:c3:07:84:ce:7a:27:7a:56:de:
01:8e:48:5b:8b:2b:fd:e9:61:83:7b:0a:a3:97:43:
70:5d:e5:4e:d2:a0:b4:1a:41:f8:99:5d:a2:b4:4b:
30:21:18:3f:46:dc:51:e8:65:0e:c3:15:9a:72:cf:
30:e0:f8:79:77:1d:57:4c:e1:f3:8d:8f:fb:8f:b0:
6f:af:55:d7:f7:90:3e:3c:10:f0:c4:1e:37:c3:14:
7f:5e:00:12:8a:1a:95:a6:67:6a:ec:ce:3c:4d:96:
2b:18:d4:5f:96:5a:b7:ca:cd:4c:70:7c:6d:10:f5:
c5:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:3D:04:D2:BC:77:01:E5:72:EB:10:E2:4A:22:EC:30:48:B2:0B:05
X509v3 Authority Key Identifier:
keyid:3E:B1:78:8F:E2:20:E4:64:34:69:2D:1C:C4:37:07:2D:79:2D:78:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:f7:22:2c:f4:10:b6:a1:11:2f:a6:e0:51:fa:e5:28:1f:0a:
e9:33:1b:bc:ff:db:f2:ee:a4:a2:14:04:d9:02:8c:da:46:f3:
d3:8b:7e:a6:d4:42:e3:65:bf:fd:59:05:57:e5:76:ba:dc:6b:
6c:31:1a:70:09:e2:65:99:b4:68:bd:e8:f9:6a:69:42:9f:a9:
59:1a:70:27:fb:cc:c4:9b:62:01:ab:6d:42:fc:6a:23:b5:0c:
9c:a4:ab:81:90:4a:42:d6:e9:cc:a2:98:78:8e:db:41:a3:ea:
3c:00:8d:42:0f:0c:06:c2:c7:81:2d:16:21:81:0d:cf:92:a5:
9e:3b:a0:24:81:39:a0:40:58:cf:88:57:32:bf:6e:28:c4:94:
ff:d7:74:39:83:36:1c:3e:71:a7:22:08:28:40:9c:e7:ae:c6:
17:59:07:3b:fc:d2:cc:a1:96:01:38:02:94:36:12:f2:76:16:
77:cf:b4:e1:ef:8a:e4:ea:81:7a:9e:b1:9d:7d:84:08:2d:80:
bc:96:c3:bf:3c:9a:0b:62:39:65:e5:96:63:86:64:ac:bf:03:
17:29:ef:9b:ac:5c:6a:4d:39:83:f0:56:b3:1a:53:61:6a:9e:
34:0d:fc:d7:21:ae:de:26:b4:6f:dd:90:f5:b2:a1:e6:ca:b3:
d9:96:f5:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 15:48:27 2025 by rpki-client