Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PrRw_U1nQhL_yCqZNvP-JUvszmY.mft
File: PrRw_U1nQhL_yCqZNvP-JUvszmY.mft (raw, json)
Hash identifier: pNQMwNmofHS6yspceIHCDctxneUVjj6l3Xhlb/CoeSI=
Subject key identifier: F7:A5:59:3B:3C:23:09:37:52:13:CB:19:04:17:DE:A1:6D:7B:39:FD
Authority key identifier: 3E:B4:70:FD:4D:67:42:12:FF:C8:2A:99:36:F3:FE:25:4B:EC:CE:66
Certificate issuer: /CN=3eb470fd4d674212ffc82a9936f3fe254becce66
Certificate serial: 019A4E86BC66A58ACEADBB0930419450A4B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PrRw_U1nQhL_yCqZNvP-JUvszmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PrRw_U1nQhL_yCqZNvP-JUvszmY.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 11:00:44 +0000
Manifest this update: Tue 04 Nov 2025 11:00:44 +0000
Manifest next update: Wed 05 Nov 2025 11:00:44 +0000
Files and hashes: 1: PrRw_U1nQhL_yCqZNvP-JUvszmY.crl (hash: Mc5Ixf5VHuPaEMX8vXw6r7mMNmhqepJEBbUF/qNRDZ4=)
2: aATeS7_Zg3KdAOaKx-n1ZvynPH4.roa (hash: BiTKK6ZatcQ+uoSfiABBAw2jPEjkMuOpjqegStTZ06Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PrRw_U1nQhL_yCqZNvP-JUvszmY.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PrRw_U1nQhL_yCqZNvP-JUvszmY.mft
rsync://rpki.ripe.net/repository/DEFAULT/PrRw_U1nQhL_yCqZNvP-JUvszmY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:bc:66:a5:8a:ce:ad:bb:09:30:41:94:50:a4:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eb470fd4d674212ffc82a9936f3fe254becce66
Validity
Not Before: Nov 4 11:00:44 2025 GMT
Not After : Nov 5 11:00:44 2025 GMT
Subject: CN=f7a5593b3c2309375213cb190417dea16d7b39fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5e:42:3f:63:7a:2a:81:1e:61:26:10:ec:5e:
f6:59:20:c4:e4:bb:a0:b7:54:df:48:36:d2:c9:c4:
00:83:48:97:78:a6:64:26:04:b1:f0:c7:dc:cc:51:
93:f9:61:01:d1:b5:5e:2b:ce:65:82:f5:94:02:7f:
81:4a:ff:ee:81:59:71:2e:75:9d:c4:7e:66:30:82:
28:6d:90:55:3e:8d:ba:00:e7:fa:fb:03:20:59:e2:
bb:e4:c9:47:7e:81:c5:6a:88:83:25:1c:ff:02:b5:
d5:6b:69:96:90:ce:15:66:a3:66:73:9b:8f:55:7f:
33:8e:7e:39:2d:db:4e:70:9c:38:03:70:46:6a:2a:
f5:79:68:15:83:b4:51:f1:11:c4:15:4c:b4:10:22:
34:6c:93:30:10:a2:b4:18:81:1f:7c:88:1e:ef:0f:
f7:9f:53:45:48:06:0a:50:79:d2:fe:fc:62:c3:d3:
9b:82:30:91:74:d8:71:25:e8:3b:03:0d:7d:fe:88:
4a:d7:d9:ba:86:46:e9:69:a9:f6:4b:96:61:29:23:
88:41:f8:df:e1:eb:07:5a:55:47:2b:3d:29:8c:32:
f7:76:0a:6c:47:49:cd:ff:64:7d:e4:1a:03:3d:60:
be:5d:f7:f9:8b:5e:95:b8:5a:d6:53:e8:1c:b3:a1:
db:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:A5:59:3B:3C:23:09:37:52:13:CB:19:04:17:DE:A1:6D:7B:39:FD
X509v3 Authority Key Identifier:
keyid:3E:B4:70:FD:4D:67:42:12:FF:C8:2A:99:36:F3:FE:25:4B:EC:CE:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PrRw_U1nQhL_yCqZNvP-JUvszmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PrRw_U1nQhL_yCqZNvP-JUvszmY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PrRw_U1nQhL_yCqZNvP-JUvszmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:9a:cc:fb:c2:dd:c7:96:e7:7b:e2:66:24:c4:6f:b1:1c:82:
2f:a5:2e:70:cd:6b:15:cc:67:37:3e:e5:ee:79:8d:46:1a:7f:
02:c9:9a:a1:8c:e1:60:16:da:a1:7b:d2:4a:88:4f:d8:31:24:
16:18:ee:3f:fd:c4:20:cd:d3:84:5a:e9:36:b1:85:85:6f:c7:
46:66:db:22:92:3e:0e:77:a1:88:f1:06:ab:15:2c:b3:07:97:
06:65:9c:7f:1b:1c:11:ef:9d:8e:d8:65:21:f3:f2:71:99:56:
ef:89:d7:d9:74:f7:9a:3b:9f:6c:fc:6c:a3:9d:9f:9b:90:90:
c4:f0:3c:ef:32:22:c8:89:c8:d4:9b:9e:83:1b:7f:31:16:45:
68:93:4f:03:76:57:70:b1:42:d9:e5:ff:52:56:bb:7e:22:50:
f5:09:83:1e:d4:98:da:ce:1f:43:2c:fe:c9:13:da:28:47:5f:
a8:6b:23:ee:98:3a:30:71:38:7c:05:82:84:43:f3:09:17:86:
47:41:98:e5:36:91:0e:02:b2:16:be:7a:34:e1:f6:92:0e:f0:
5b:36:9b:1c:c5:8d:1f:f8:c1:f9:19:bb:0a:e2:0a:d0:bb:cf:
c8:5a:b9:27:b1:8c:12:c0:62:a1:f7:24:14:79:76:dd:18:47:
d4:94:f6:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:55:30 2025 by rpki-client