Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/56e9d5-ff45-4464-b2bb-610b9e72a6be/1/PRKXkoZrFiE7VsW_pr66x8YYsVA.mft
File: PRKXkoZrFiE7VsW_pr66x8YYsVA.mft (raw, json)
Hash identifier: vr+Ey87276lSDimJWe+voyst/FXFJvxUQdeDqQ58GyU=
Subject key identifier: 24:A0:86:D7:2B:8F:50:5F:BB:3E:77:1A:C3:BB:B6:32:18:41:70:D2
Authority key identifier: 3D:12:97:92:86:6B:16:21:3B:56:C5:BF:A6:BE:BA:C7:C6:18:B1:50
Certificate issuer: /CN=3d129792866b16213b56c5bfa6bebac7c618b150
Certificate serial: 019921B092E6B7DE5E7B8692015B20489ECF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRKXkoZrFiE7VsW_pr66x8YYsVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/56e9d5-ff45-4464-b2bb-610b9e72a6be/1/PRKXkoZrFiE7VsW_pr66x8YYsVA.mft
Manifest number: 11FF
Signing time: Sun 07 Sep 2025 01:00:44 +0000
Manifest this update: Sun 07 Sep 2025 01:00:44 +0000
Manifest next update: Mon 08 Sep 2025 01:00:44 +0000
Files and hashes: 1: PRKXkoZrFiE7VsW_pr66x8YYsVA.crl (hash: NGyFGYEj2vC4l6P4fnxMvoZ/K6xzE1BWJG8k43gRfCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/56e9d5-ff45-4464-b2bb-610b9e72a6be/1/PRKXkoZrFiE7VsW_pr66x8YYsVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/56e9d5-ff45-4464-b2bb-610b9e72a6be/1/PRKXkoZrFiE7VsW_pr66x8YYsVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/PRKXkoZrFiE7VsW_pr66x8YYsVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b0:92:e6:b7:de:5e:7b:86:92:01:5b:20:48:9e:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d129792866b16213b56c5bfa6bebac7c618b150
Validity
Not Before: Sep 7 01:00:44 2025 GMT
Not After : Sep 8 01:00:44 2025 GMT
Subject: CN=24a086d72b8f505fbb3e771ac3bbb632184170d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:83:44:3b:d7:ed:16:cc:d4:29:6e:76:45:b2:
c1:73:ad:d7:ff:8a:00:ec:28:2b:b7:42:bd:57:bd:
ca:1c:ba:98:79:e4:b4:21:87:41:ae:df:6f:ea:20:
2d:67:0f:7f:37:8e:c6:b9:9c:6f:cc:be:0b:ee:42:
9a:b2:4e:8d:38:16:9a:0c:68:44:fb:ae:a1:f8:ef:
6d:db:53:2c:3e:ee:e0:15:df:aa:5c:b4:f9:49:c0:
fd:9a:d1:68:75:89:cb:c9:79:69:ac:9d:97:f6:e9:
20:48:24:78:82:f6:2c:07:86:93:cd:ea:aa:ca:2c:
55:f5:82:ef:a6:22:b9:19:33:34:a6:c2:4f:7f:fb:
bc:c6:01:70:ad:7c:93:9a:c9:91:68:ee:c8:74:0a:
09:7e:1c:0a:7b:7f:b3:a9:57:9b:20:1c:4d:55:67:
05:83:95:48:86:08:ad:90:58:cf:3f:b0:b3:39:e1:
f7:92:2c:5d:3f:a4:81:7f:cf:6c:e7:df:69:88:da:
55:8d:f8:e6:87:97:9d:75:f2:49:b2:6b:d9:0a:82:
45:e7:b9:12:61:4f:0f:25:df:7e:74:cc:19:e7:bc:
31:de:77:33:ca:6a:85:bb:ee:df:a4:b1:fd:5f:26:
e7:ab:f6:56:30:d2:bd:ef:82:ff:32:52:07:02:95:
f3:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:A0:86:D7:2B:8F:50:5F:BB:3E:77:1A:C3:BB:B6:32:18:41:70:D2
X509v3 Authority Key Identifier:
keyid:3D:12:97:92:86:6B:16:21:3B:56:C5:BF:A6:BE:BA:C7:C6:18:B1:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRKXkoZrFiE7VsW_pr66x8YYsVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/56e9d5-ff45-4464-b2bb-610b9e72a6be/1/PRKXkoZrFiE7VsW_pr66x8YYsVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/56e9d5-ff45-4464-b2bb-610b9e72a6be/1/PRKXkoZrFiE7VsW_pr66x8YYsVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:8c:d0:12:c3:9c:11:6d:b3:11:e9:e5:b6:84:06:13:2f:6d:
e5:e0:70:d9:ef:42:f0:63:db:12:2f:25:b0:a7:a3:61:9d:ae:
a9:99:a4:e3:9d:97:ae:78:95:94:61:cd:9b:1b:de:2b:4e:e2:
21:19:b5:66:18:46:64:93:cd:90:7a:63:d5:df:41:4b:00:4f:
2f:18:ee:72:b3:98:2a:47:b7:da:bd:c8:b5:58:95:8a:e5:2f:
82:f9:af:db:9e:a4:60:4c:9b:a7:99:0c:b4:d5:d5:5c:da:44:
6f:ff:60:5e:44:0c:c4:70:f6:8f:64:3d:0f:e1:d0:b2:6a:58:
b3:05:64:d7:a8:e1:a7:e3:d8:c7:2f:50:1f:77:3b:53:0a:f8:
c0:a8:17:66:69:4a:0e:16:a5:e6:70:50:a3:fa:4c:94:11:e8:
d8:18:01:c8:3b:7b:02:3d:cf:e3:86:15:41:8c:19:8c:4d:49:
6d:7c:6e:5a:ea:61:2c:36:de:38:ba:71:7d:98:39:84:a6:43:
ea:da:08:49:5d:31:34:61:f3:ab:32:ea:82:87:d6:ab:7d:fa:
f5:79:d5:1f:40:0e:aa:70:ec:09:5b:f1:00:da:86:38:f4:8c:
35:3b:56:a1:4b:24:1c:b8:24:54:9f:9e:d3:7f:48:15:fd:25:
04:db:b6:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:42:50 2025 by rpki-client