Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/56e9d5-ff45-4464-b2bb-610b9e72a6be/1/PRKXkoZrFiE7VsW_pr66x8YYsVA.mft
File: PRKXkoZrFiE7VsW_pr66x8YYsVA.mft (raw, json)
Hash identifier: k/nAHwUTytGJ7dkjpx1Rrzg4c7lYQzmRyJvHMHGnecg=
Subject key identifier: AA:26:AF:D9:D2:97:24:7F:DB:FA:DC:7B:88:7D:B7:4F:91:F6:55:44
Authority key identifier: 3D:12:97:92:86:6B:16:21:3B:56:C5:BF:A6:BE:BA:C7:C6:18:B1:50
Certificate issuer: /CN=3d129792866b16213b56c5bfa6bebac7c618b150
Certificate serial: 019A71B9459458E34D2D8B4F95B829EC079D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRKXkoZrFiE7VsW_pr66x8YYsVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/56e9d5-ff45-4464-b2bb-610b9e72a6be/1/PRKXkoZrFiE7VsW_pr66x8YYsVA.mft
Manifest number: 12AD
Signing time: Tue 11 Nov 2025 07:02:38 +0000
Manifest this update: Tue 11 Nov 2025 07:02:38 +0000
Manifest next update: Wed 12 Nov 2025 07:02:38 +0000
Files and hashes: 1: PRKXkoZrFiE7VsW_pr66x8YYsVA.crl (hash: LegD6qOu3frYzff4AjemY4nufzY4GgzrjnlYwOMcl7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/56e9d5-ff45-4464-b2bb-610b9e72a6be/1/PRKXkoZrFiE7VsW_pr66x8YYsVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/56e9d5-ff45-4464-b2bb-610b9e72a6be/1/PRKXkoZrFiE7VsW_pr66x8YYsVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/PRKXkoZrFiE7VsW_pr66x8YYsVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:45:94:58:e3:4d:2d:8b:4f:95:b8:29:ec:07:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d129792866b16213b56c5bfa6bebac7c618b150
Validity
Not Before: Nov 11 07:02:38 2025 GMT
Not After : Nov 12 07:02:38 2025 GMT
Subject: CN=aa26afd9d297247fdbfadc7b887db74f91f65544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2c:b5:f7:06:a9:80:ca:ec:51:b0:1f:65:09:
4a:b2:bf:79:5a:37:23:b0:86:9f:17:1e:f4:3a:dd:
e9:d6:d8:a1:88:68:94:45:20:e8:ae:6c:89:38:4d:
c3:ab:15:2c:44:e4:77:24:3f:79:7f:de:60:09:50:
19:ce:6f:ce:bb:c0:42:30:24:ff:ba:82:d7:49:79:
57:21:99:78:cf:cc:35:9e:4a:dd:25:5e:00:fd:3e:
6f:f8:32:47:43:46:ff:7e:4b:84:51:c5:a0:e3:e2:
ba:4b:d8:bc:cd:bc:eb:61:9b:d9:dc:a2:d5:9e:af:
47:3e:cc:2b:be:44:95:40:c7:78:d5:b5:b3:a6:b7:
d3:51:5b:40:cd:41:40:5d:47:0a:1a:32:33:8c:4d:
09:28:f6:16:91:08:b8:2d:59:57:e9:cb:1d:33:43:
53:bb:fd:5b:1c:6b:c1:d7:cc:65:30:f8:f0:75:3d:
3f:2e:e7:2c:48:69:2a:7f:96:6d:8d:bc:76:41:11:
8b:c3:ed:78:e5:7f:53:4c:b5:f1:39:71:2d:4f:ef:
b4:77:0f:73:f3:b1:39:a9:74:8d:2a:d3:8c:d9:8a:
73:08:c6:47:0b:9c:a8:c8:63:21:c9:58:51:78:46:
ab:d8:f0:e7:22:13:d4:be:c1:7d:50:df:30:f6:51:
c9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:26:AF:D9:D2:97:24:7F:DB:FA:DC:7B:88:7D:B7:4F:91:F6:55:44
X509v3 Authority Key Identifier:
keyid:3D:12:97:92:86:6B:16:21:3B:56:C5:BF:A6:BE:BA:C7:C6:18:B1:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRKXkoZrFiE7VsW_pr66x8YYsVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/56e9d5-ff45-4464-b2bb-610b9e72a6be/1/PRKXkoZrFiE7VsW_pr66x8YYsVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/56e9d5-ff45-4464-b2bb-610b9e72a6be/1/PRKXkoZrFiE7VsW_pr66x8YYsVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:5e:ac:42:af:ec:f4:a5:ab:53:5f:60:0a:3e:aa:3e:27:6a:
fd:b9:ca:c4:31:e1:7e:25:f2:38:8c:95:13:2d:34:c0:98:13:
71:ba:93:b9:a6:2c:f6:89:d6:ac:4b:67:86:93:d9:23:4b:37:
83:1f:63:9c:13:47:b4:28:e8:33:d2:10:87:ad:f2:47:2a:ee:
ae:c9:e7:6b:6c:f7:21:de:b7:5f:7a:6c:c7:aa:c4:82:d4:0d:
f5:98:b7:54:88:80:f8:cf:8b:0d:b8:77:8c:55:e1:92:15:35:
0c:d4:0b:ed:b9:58:53:08:f0:e1:5a:d5:91:55:53:45:7a:20:
95:96:f3:00:d8:f3:75:3b:db:98:5d:8b:a9:e8:6d:5d:cf:84:
bb:9a:87:3e:13:5e:a1:4e:32:49:69:ad:58:3e:e5:c0:45:6c:
5e:27:ce:34:d8:16:1f:a3:e0:22:ef:0f:08:4b:77:ba:13:28:
78:b6:54:1e:c9:dc:1f:a1:5c:87:d4:bf:c9:e5:bc:9b:5d:3c:
00:aa:93:3c:21:88:ec:f9:b4:cf:67:c8:65:04:e7:83:71:4e:
26:73:16:59:e8:dc:14:68:47:3b:3e:b1:3d:b5:83:0f:35:69:
f5:e2:e8:92:c3:e8:9b:63:7a:3e:a3:8d:d2:d4:95:10:42:4e:
62:34:c2:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:15 2025 by rpki-client