Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/pRZKRoFl6caTvYGEw8pWbKcP1WA.mft
File: pRZKRoFl6caTvYGEw8pWbKcP1WA.mft (raw, json)
Hash identifier: 8HVNxGXAbXlk2Khy43jPpT3PHv8O6DkmOfShplogTL4=
Subject key identifier: BC:C5:4D:31:46:37:3B:70:D5:21:5B:0D:C5:6A:20:09:57:41:22:95
Authority key identifier: A5:16:4A:46:81:65:E9:C6:93:BD:81:84:C3:CA:56:6C:A7:0F:D5:60
Certificate issuer: /CN=a5164a468165e9c693bd8184c3ca566ca70fd560
Certificate serial: 019A51BE767E9BC83AB16A0552C0F5938AD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pRZKRoFl6caTvYGEw8pWbKcP1WA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/pRZKRoFl6caTvYGEw8pWbKcP1WA.mft
Manifest number: 01D0
Signing time: Wed 05 Nov 2025 02:00:27 +0000
Manifest this update: Wed 05 Nov 2025 02:00:27 +0000
Manifest next update: Thu 06 Nov 2025 02:00:27 +0000
Files and hashes: 1: pRZKRoFl6caTvYGEw8pWbKcP1WA.crl (hash: oKPrhFXtgZP31fPaZvaJFhHdceIvdKLKWcboYQ3b9e0=)
2: rIL66Wr2JO0hUiDgtrzPfwsPCdg.roa (hash: IzHYSyi3wxidgryTdPg9C85nPJtyfKau5Hu7/N9OG4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/pRZKRoFl6caTvYGEw8pWbKcP1WA.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/pRZKRoFl6caTvYGEw8pWbKcP1WA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pRZKRoFl6caTvYGEw8pWbKcP1WA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 02:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:76:7e:9b:c8:3a:b1:6a:05:52:c0:f5:93:8a:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5164a468165e9c693bd8184c3ca566ca70fd560
Validity
Not Before: Nov 5 02:00:27 2025 GMT
Not After : Nov 6 02:00:27 2025 GMT
Subject: CN=bcc54d3146373b70d5215b0dc56a200957412295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d5:e9:c3:27:9d:22:11:e3:89:72:a4:00:31:
3d:52:ae:8b:bf:f6:3e:bb:a7:ce:80:fd:f2:93:cd:
c0:1b:75:9c:7f:ec:f1:27:c1:0c:01:82:2f:e7:2c:
9e:ed:13:fe:8f:f3:7e:f9:13:d5:27:dd:1a:12:75:
f3:df:25:02:01:bc:e0:64:ef:31:79:87:d4:70:74:
e1:fb:9f:67:91:15:4b:fa:27:c4:f5:27:e7:a6:ae:
2c:7e:49:16:15:d7:a7:5e:d9:80:3c:f2:0d:60:2c:
4f:7d:5a:87:47:f3:40:c3:ee:9e:85:39:f4:8c:d4:
da:76:f5:d6:76:9c:23:86:4a:62:c1:2c:b1:5a:4f:
8c:d9:bf:32:bb:f1:2b:db:0b:a8:1f:8b:54:16:17:
a4:ab:29:df:8c:a5:56:de:3a:30:63:7d:b5:be:bc:
5b:d3:b5:ba:af:d9:c8:f6:22:3e:11:6c:e0:22:ce:
ed:c1:f3:88:4e:78:69:c3:cc:7d:b5:09:33:35:2b:
f0:e8:82:75:56:34:f5:8d:d9:ff:3c:72:f0:17:87:
a4:73:53:47:3e:99:f9:f9:26:a6:cb:38:fa:5a:64:
e5:eb:2a:46:53:2b:36:9a:7e:fb:0b:72:69:d5:8b:
1a:f8:8a:eb:43:1e:51:6c:d4:3d:09:f1:e3:ff:f6:
9a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:C5:4D:31:46:37:3B:70:D5:21:5B:0D:C5:6A:20:09:57:41:22:95
X509v3 Authority Key Identifier:
keyid:A5:16:4A:46:81:65:E9:C6:93:BD:81:84:C3:CA:56:6C:A7:0F:D5:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pRZKRoFl6caTvYGEw8pWbKcP1WA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/pRZKRoFl6caTvYGEw8pWbKcP1WA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/pRZKRoFl6caTvYGEw8pWbKcP1WA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:61:ff:bc:7b:c1:da:ce:0c:59:67:ff:0c:ce:1d:28:c9:3d:
d4:e7:64:24:95:1e:e9:21:a0:42:49:9f:cf:d7:23:36:d0:14:
47:ac:93:a6:5c:ef:ea:6d:bc:61:1f:25:ed:e2:36:fb:fc:e8:
1d:07:da:f3:41:8b:e0:4f:66:b5:f6:ff:b4:c5:6b:94:45:07:
ed:e9:2e:ae:a2:60:b5:34:32:b0:92:79:7f:4c:42:2b:0b:63:
f4:6f:2a:4c:b8:9d:fd:c2:fb:d3:37:b3:8c:51:67:b9:cc:91:
35:8d:8d:63:72:e1:82:2b:71:de:96:59:c2:63:97:12:db:0a:
a7:ae:5d:89:81:f6:ca:01:f1:42:ed:1f:c6:f8:65:cc:83:48:
71:9b:07:2d:94:64:e8:9d:8c:51:0b:cc:d2:7d:b3:12:6b:5b:
ad:34:f6:c8:9a:75:4b:c9:92:aa:61:63:60:6d:7f:36:f4:4a:
64:2d:a7:71:c1:72:ec:97:35:74:f6:be:21:96:84:6a:8c:95:
f0:9a:2a:dc:ee:cf:af:8c:a9:5c:ce:7f:06:92:d0:ab:91:4e:
5e:e6:98:4e:98:d2:59:61:ed:a2:f2:fe:05:fd:ee:a2:21:f2:
87:09:ee:92:0e:a8:34:06:7a:59:f0:87:8c:c7:83:fa:e4:86:
90:0a:f3:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:54:55 2025 by rpki-client