Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/PrkDKEodFdwVitcYLqC854bOsq0.mft
File: PrkDKEodFdwVitcYLqC854bOsq0.mft (raw, json)
Hash identifier: FrkwfZwGpVMziCGofe2bDBTMfodJbuYnD7/iiIK2ob4=
Subject key identifier: ED:11:82:64:5F:9E:0C:25:42:A7:5B:87:36:B3:3B:20:DB:7E:79:EF
Authority key identifier: 3E:B9:03:28:4A:1D:15:DC:15:8A:D7:18:2E:A0:BC:E7:86:CE:B2:AD
Certificate issuer: /CN=3eb903284a1d15dc158ad7182ea0bce786ceb2ad
Certificate serial: 019A7293866DA76D9751E250794979D57C3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PrkDKEodFdwVitcYLqC854bOsq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/PrkDKEodFdwVitcYLqC854bOsq0.mft
Manifest number: 037A
Signing time: Tue 11 Nov 2025 11:01:01 +0000
Manifest this update: Tue 11 Nov 2025 11:01:01 +0000
Manifest next update: Wed 12 Nov 2025 11:01:01 +0000
Files and hashes: 1: 0zozhddFGxlaDU0eMcPGzCbmd6I.roa (hash: HhrjUsFCH402W4XdhuJKvzUEm96xMJ7A0tUrjiNFw6Y=)
2: 2z44fAwQyyEeWoKCF_G5EjvRE_Q.roa (hash: Z34LIfgBtYIlenX8BP2t8IUqfPpsJULSyBoNS38aJWk=)
3: 4kquCz-i6kJDkS1O2XQAUk_agCI.roa (hash: Pez2ubHTLSNld28U0wPkDbmTvFBCVvXm37XAiS5Y0fA=)
4: FukUNQ-1MuiT_YZ8AK4IiNn3ZEM.roa (hash: Q+TDgTJT6+GCL8Icb4N9FEYd+k8ybFyashs6L8F6jRA=)
5: Ih96IDuDaMSdBEjycgfBHMlpv1k.roa (hash: gzRNZYScETmPIIaSnlA3ny9nEyJmD80+p4ZodHIyvdw=)
6: PrkDKEodFdwVitcYLqC854bOsq0.crl (hash: AE8vyhOLrcKlib0glICk5Qt6cSz0391sH5rqC5aWkH4=)
7: fDTEunNvzlH5X-k5xdeAmWjVRig.roa (hash: kSsYzCwppDZTwjMBzSM9jNvsq5Yv3fwitPhSPp+j0to=)
8: s8x3Zl1NTIQSd2VaNW3r7mX9Qt0.roa (hash: 955pA2YQRo69WOfGT4zy28ccgCxBC3J2614wD9x3OY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/PrkDKEodFdwVitcYLqC854bOsq0.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/PrkDKEodFdwVitcYLqC854bOsq0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PrkDKEodFdwVitcYLqC854bOsq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:86:6d:a7:6d:97:51:e2:50:79:49:79:d5:7c:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eb903284a1d15dc158ad7182ea0bce786ceb2ad
Validity
Not Before: Nov 11 11:01:01 2025 GMT
Not After : Nov 12 11:01:01 2025 GMT
Subject: CN=ed1182645f9e0c2542a75b8736b33b20db7e79ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1d:cc:5b:06:2c:c4:41:d6:82:dc:57:41:2e:
15:d4:97:1b:a5:da:0d:77:4e:e1:52:8c:f9:65:ea:
36:3c:88:0f:14:6c:ea:ae:8d:72:8b:d0:bb:48:4c:
88:03:a2:62:f8:cf:d0:8a:36:b8:b4:fb:06:db:11:
43:3f:57:aa:4f:0f:ea:ae:52:1b:4b:7e:6b:7e:13:
aa:27:29:27:59:d9:61:b8:82:27:e8:65:ec:f6:11:
56:9e:7e:f8:cd:5d:6c:d2:79:13:7d:80:21:cc:c0:
37:4d:b1:43:89:56:32:f4:02:44:a6:34:cd:60:05:
f3:b1:07:cd:93:07:2c:ce:6b:6a:e6:45:36:8e:44:
2c:60:be:42:1a:96:19:db:e7:1b:36:82:b9:17:8e:
13:6f:5a:d8:da:ab:e4:7b:f2:21:a2:2e:2f:5e:d3:
34:8c:72:d5:11:f9:f5:7d:2a:71:83:f1:69:b8:6f:
a3:1a:d4:5e:2d:f3:39:dc:1d:8e:39:b2:56:d3:45:
3b:04:cc:d3:e4:e7:7a:1d:48:cb:c9:07:10:f4:2e:
80:5a:fd:a1:5a:11:4f:0b:93:eb:da:e0:62:9d:ce:
4a:cb:41:df:30:46:f6:82:e2:17:ad:58:a7:44:73:
86:ab:fb:c5:5c:23:c9:00:97:88:23:4d:c2:e5:d7:
29:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:11:82:64:5F:9E:0C:25:42:A7:5B:87:36:B3:3B:20:DB:7E:79:EF
X509v3 Authority Key Identifier:
keyid:3E:B9:03:28:4A:1D:15:DC:15:8A:D7:18:2E:A0:BC:E7:86:CE:B2:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PrkDKEodFdwVitcYLqC854bOsq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/PrkDKEodFdwVitcYLqC854bOsq0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/PrkDKEodFdwVitcYLqC854bOsq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:09:d5:d0:77:50:5b:9e:ba:cb:ee:1b:de:ea:54:64:c5:0c:
99:61:d4:8d:af:16:e5:60:c3:f8:de:9e:b2:22:c6:01:e0:c4:
6a:3f:4b:56:4d:ff:86:f6:9a:dc:9e:72:05:a9:90:13:3a:b4:
0d:2e:b7:1d:db:c5:fa:e3:b0:e3:e7:66:04:88:f3:3f:ad:56:
52:41:90:51:c4:ff:dd:24:8a:12:fb:9d:3d:13:f0:93:69:92:
68:03:0a:28:b8:28:34:e8:ef:83:03:72:d5:5b:dc:cf:10:ba:
6b:1d:4d:c6:f3:71:02:47:84:dc:53:3f:3a:db:44:83:d1:56:
75:d2:c0:51:f2:e3:ad:6a:0e:8f:1b:95:a3:42:a6:f5:7e:44:
ec:5f:05:1a:8e:02:ac:6e:50:6c:2d:9e:eb:4b:c9:62:db:be:
99:cb:23:24:7d:58:fb:bc:f2:34:30:1f:98:20:73:e0:83:8f:
67:dc:cf:c4:67:0f:e8:2b:8b:db:ab:83:76:da:27:f3:24:a1:
1c:7e:64:6e:d0:52:9e:fd:12:ad:f7:e5:54:a8:9a:8b:8a:50:
35:53:f7:aa:42:fd:88:d0:a3:7a:2a:62:ac:fd:42:49:89:40:
2e:ba:49:02:f4:96:9c:8b:23:b7:52:7d:33:de:a3:44:ed:23:
69:e5:76:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:19:20 2025 by rpki-client