Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/pRZKRoFl6caTvYGEw8pWbKcP1WA.mft
File: pRZKRoFl6caTvYGEw8pWbKcP1WA.mft (raw, json)
Hash identifier: ntKPjvIds4vt1jCXKH8E3nHXG4PFrpC0zndRHmjqGwE=
Subject key identifier: D7:CA:AE:DD:FF:CC:D9:2F:E8:BE:58:1B:2E:18:97:36:52:4D:BC:C0
Authority key identifier: A5:16:4A:46:81:65:E9:C6:93:BD:81:84:C3:CA:56:6C:A7:0F:D5:60
Certificate issuer: /CN=a5164a468165e9c693bd8184c3ca566ca70fd560
Certificate serial: 01988BEA2CAB76451CBA4B32026AEA30721E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pRZKRoFl6caTvYGEw8pWbKcP1WA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/pRZKRoFl6caTvYGEw8pWbKcP1WA.mft
Manifest number: E5
Signing time: Fri 08 Aug 2025 23:00:36 +0000
Manifest this update: Fri 08 Aug 2025 23:00:36 +0000
Manifest next update: Sat 09 Aug 2025 23:00:36 +0000
Files and hashes: 1: pRZKRoFl6caTvYGEw8pWbKcP1WA.crl (hash: 8QyBYDfT+zhE547K0GjEoW8xw08WAbPTwcn2BEzBRNI=)
2: rIL66Wr2JO0hUiDgtrzPfwsPCdg.roa (hash: IzHYSyi3wxidgryTdPg9C85nPJtyfKau5Hu7/N9OG4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/pRZKRoFl6caTvYGEw8pWbKcP1WA.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/pRZKRoFl6caTvYGEw8pWbKcP1WA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pRZKRoFl6caTvYGEw8pWbKcP1WA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:ea:2c:ab:76:45:1c:ba:4b:32:02:6a:ea:30:72:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5164a468165e9c693bd8184c3ca566ca70fd560
Validity
Not Before: Aug 8 23:00:36 2025 GMT
Not After : Aug 9 23:00:36 2025 GMT
Subject: CN=d7caaeddffccd92fe8be581b2e189736524dbcc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:99:ba:0c:7f:3c:50:b3:4a:b6:82:f6:c1:fa:
87:3b:7c:43:da:c2:dd:6b:7b:85:50:61:43:35:a8:
0c:10:b7:b5:30:bc:a6:d3:15:69:54:b6:68:5c:64:
70:46:eb:02:35:35:04:5d:98:c9:0a:73:4b:71:8f:
89:4c:de:71:dc:b3:dd:e5:06:05:17:99:f6:35:8e:
25:58:d2:ac:fb:ed:bb:89:a4:65:55:38:d9:41:45:
89:9b:5e:a6:d2:03:c0:f7:9e:c1:3d:d3:22:38:72:
80:54:89:a6:d9:9a:81:a5:07:a8:00:1a:e4:23:01:
6d:71:7c:18:d5:cb:ad:14:44:54:09:40:54:bc:b3:
6b:97:f8:90:fd:0a:71:41:3e:78:b3:a4:d8:90:40:
91:8f:f8:2a:ac:1a:23:f4:e2:74:18:42:49:9b:bc:
1b:2c:58:b2:e4:45:6a:f2:3a:6f:e4:c4:cf:9b:5d:
06:4a:45:64:e5:42:db:6b:c6:91:a7:3f:b7:a7:fc:
1d:28:9e:7b:4f:41:ca:3c:27:66:aa:2c:a6:1d:21:
a4:97:be:33:27:1e:c5:b1:c2:9e:ff:1e:52:d6:ba:
27:b8:05:10:d1:be:dc:1c:11:06:fb:03:63:fe:a8:
af:f3:3b:ca:0b:d3:58:d3:5e:f6:1b:e6:75:5c:2d:
d8:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:CA:AE:DD:FF:CC:D9:2F:E8:BE:58:1B:2E:18:97:36:52:4D:BC:C0
X509v3 Authority Key Identifier:
keyid:A5:16:4A:46:81:65:E9:C6:93:BD:81:84:C3:CA:56:6C:A7:0F:D5:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pRZKRoFl6caTvYGEw8pWbKcP1WA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/pRZKRoFl6caTvYGEw8pWbKcP1WA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/pRZKRoFl6caTvYGEw8pWbKcP1WA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:ea:ee:4e:8a:99:56:5f:9f:49:2a:7f:19:94:7f:03:a1:ec:
d2:d6:41:29:d9:3f:41:66:4b:78:52:0e:11:49:dd:8e:84:22:
8e:ef:62:8c:55:85:ea:f7:2d:27:07:d4:66:15:4c:fc:6e:ed:
18:c5:5e:2c:73:0f:d2:37:7b:d1:28:97:db:49:2f:c2:b8:dc:
80:95:b3:66:d1:27:3e:e4:2d:78:f3:de:86:1c:de:74:59:d2:
cb:ac:13:16:63:86:74:41:f9:64:da:27:a5:44:a3:52:a0:a8:
a6:a9:e7:12:ae:b3:02:50:d7:24:42:05:60:64:7c:82:78:b8:
9a:51:23:0c:e4:a6:4c:77:93:18:9e:7f:60:80:bb:00:fa:ba:
c8:fb:40:4c:8f:da:ab:e5:bd:2d:1d:0a:20:a1:1e:84:ce:7a:
7d:67:0d:b4:bb:29:b7:57:e1:a7:46:15:d6:11:4f:0f:a8:3e:
84:87:0d:03:96:50:75:0b:f6:99:db:5c:dc:d4:ac:8e:a7:fc:
58:c2:ef:cf:cc:8d:87:64:83:f4:1f:31:b6:59:cb:7b:ed:c4:
4b:fc:b3:89:29:a2:9b:ba:65:45:f0:53:57:4c:65:76:e3:34:
3f:79:b1:52:be:7d:ca:cc:cc:bb:bd:f2:1b:04:b2:02:63:0a:
5c:95:c7:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiL6iyrdkUcuksyAmrqMHIeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1MTY0YTQ2ODE2NWU5YzY5M2JkODE4NGMzY2E1NjZjYTcw
ZmQ1NjAwHhcNMjUwODA4MjMwMDM2WhcNMjUwODA5MjMwMDM2WjAzMTEwLwYDVQQD
EyhkN2NhYWVkZGZmY2NkOTJmZThiZTU4MWIyZTE4OTczNjUyNGRiY2MwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+pm6DH88ULNKtoL2wfqHO3xD2sLd
a3uFUGFDNagMELe1MLym0xVpVLZoXGRwRusCNTUEXZjJCnNLcY+JTN5x3LPd5QYF
F5n2NY4lWNKs++27iaRlVTjZQUWJm16m0gPA957BPdMiOHKAVImm2ZqBpQeoABrk
IwFtcXwY1cutFERUCUBUvLNrl/iQ/QpxQT54s6TYkECRj/gqrBoj9OJ0GEJJm7wb
LFiy5EVq8jpv5MTPm10GSkVk5ULba8aRpz+3p/wdKJ57T0HKPCdmqiymHSGkl74z
Jx7FscKe/x5S1ronuAUQ0b7cHBEG+wNj/qiv8zvKC9NY0172G+Z1XC3YFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNfKrt3/zNkv6L5YGy4YlzZSTbzAMB8GA1UdIwQY
MBaAFKUWSkaBZenGk72BhMPKVmynD9VgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFJaS1JvRmw2Y2FUdllHRXc4cFdiS2NQMVdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8xZmNmYmEtY2RhMC00YWQzLTk4OTMt
OTQ1ODdkODMzMWY5LzEvcFJaS1JvRmw2Y2FUdllHRXc4cFdiS2NQMVdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8xZmNmYmEtY2RhMC00YWQzLTk4OTMtOTQ1ODdkODMzMWY5
LzEvcFJaS1JvRmw2Y2FUdllHRXc4cFdiS2NQMVdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEOruToqZ
Vl+fSSp/GZR/A6Hs0tZBKdk/QWZLeFIOEUndjoQiju9ijFWF6vctJwfUZhVM/G7t
GMVeLHMP0jd70SiX20kvwrjcgJWzZtEnPuQtePPehhzedFnSy6wTFmOGdEH5ZNon
pUSjUqCopqnnEq6zAlDXJEIFYGR8gni4mlEjDOSmTHeTGJ5/YIC7APq6yPtATI/a
q+W9LR0KIKEehM56fWcNtLspt1fhp0YV1hFPD6g+hIcNA5ZQdQv2mdtc3NSsjqf8
WMLvz8yNh2SD9B8xtlnLe+3ES/yziSmim7plRfBTV0xlduM0P3mxUr59yszMu73y
GwSyAmMKXJXHeQ==
-----END CERTIFICATE-----
Generated at Sat Aug 9 00:59:54 2025 by rpki-client