Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/3c7c7c-4326-4184-8356-01182f840789/1/pRA1bcClIYlc5h-FSV4G2vehKzs.mft
File: pRA1bcClIYlc5h-FSV4G2vehKzs.mft (raw, json)
Hash identifier: RUqgZFonqgPhce3Ddk93GDzhoj0BLDi1LVUb65WeBwE=
Subject key identifier: FA:B7:21:D6:4C:F2:09:C0:9F:1F:4E:7F:16:4A:4F:4E:DD:C1:DF:22
Authority key identifier: A5:10:35:6D:C0:A5:21:89:5C:E6:1F:85:49:5E:06:DA:F7:A1:2B:3B
Certificate issuer: /CN=a510356dc0a521895ce61f85495e06daf7a12b3b
Certificate serial: 019874BDA0D8BD9F4D36C313BDE742F45FE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pRA1bcClIYlc5h-FSV4G2vehKzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/3c7c7c-4326-4184-8356-01182f840789/1/pRA1bcClIYlc5h-FSV4G2vehKzs.mft
Manifest number: 161A
Signing time: Mon 04 Aug 2025 11:00:41 +0000
Manifest this update: Mon 04 Aug 2025 11:00:41 +0000
Manifest next update: Tue 05 Aug 2025 11:00:41 +0000
Files and hashes: 1: DZzf4gixVG1v_XBOTEdiJTCnpgc.roa (hash: EKgVMjgzgQW/dE4uPulEkrnDhBOvFfmwxhJ1zs6dJk4=)
2: PyDzr8WmYcRo05FGb5UzcWZdKls.roa (hash: IYIt11a1r2unTfjZQuVOMhykI3XsxsOfurke5JUMHZc=)
3: pRA1bcClIYlc5h-FSV4G2vehKzs.crl (hash: ZwKafd3dcqttfqyKNXkEB+KraSMW9pH+hcIL+nkL/xU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/3c7c7c-4326-4184-8356-01182f840789/1/pRA1bcClIYlc5h-FSV4G2vehKzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/3c7c7c-4326-4184-8356-01182f840789/1/pRA1bcClIYlc5h-FSV4G2vehKzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pRA1bcClIYlc5h-FSV4G2vehKzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:bd:a0:d8:bd:9f:4d:36:c3:13:bd:e7:42:f4:5f:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a510356dc0a521895ce61f85495e06daf7a12b3b
Validity
Not Before: Aug 4 11:00:41 2025 GMT
Not After : Aug 5 11:00:41 2025 GMT
Subject: CN=fab721d64cf209c09f1f4e7f164a4f4eddc1df22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:49:e3:a7:ec:5c:d9:67:5f:80:c4:15:14:61:
5c:fc:06:5b:a0:5f:60:75:1b:06:bd:f4:a5:74:0e:
62:0b:74:01:dd:de:28:0b:8a:01:63:aa:89:95:ec:
5b:95:19:f6:11:6f:12:81:6f:62:a2:13:bd:d0:10:
3d:57:78:05:74:64:1a:72:2d:31:19:d2:0e:8c:c4:
bc:b4:33:c2:44:af:3a:a9:62:98:b8:5c:23:62:65:
2c:0e:76:56:f2:38:9a:6d:5e:85:17:07:37:7c:45:
42:0b:cf:e5:02:44:de:92:99:2c:29:c5:69:b6:f5:
bd:79:d4:6e:64:3f:34:7d:38:b3:93:d1:e9:3d:e0:
d2:62:73:84:4e:cd:08:10:89:cf:5c:e3:ec:23:3d:
71:af:97:76:75:0d:15:38:ce:7c:32:b8:7d:2c:fe:
04:2b:c2:08:98:27:eb:fb:61:4a:26:32:1f:84:c4:
e0:10:4f:52:5c:04:a9:ba:56:04:c5:7e:be:b1:a6:
c8:7a:4b:5d:c9:65:67:c9:2c:93:83:5b:25:bc:e7:
e4:bc:ee:3b:7b:9d:67:62:ae:90:02:a0:65:d7:e3:
e1:cc:cf:dd:19:65:93:3c:22:43:b2:8a:57:7c:c5:
d6:6c:7e:7d:da:6f:f1:0b:bd:e1:54:ef:8e:6f:51:
0c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:B7:21:D6:4C:F2:09:C0:9F:1F:4E:7F:16:4A:4F:4E:DD:C1:DF:22
X509v3 Authority Key Identifier:
keyid:A5:10:35:6D:C0:A5:21:89:5C:E6:1F:85:49:5E:06:DA:F7:A1:2B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pRA1bcClIYlc5h-FSV4G2vehKzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/3c7c7c-4326-4184-8356-01182f840789/1/pRA1bcClIYlc5h-FSV4G2vehKzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/3c7c7c-4326-4184-8356-01182f840789/1/pRA1bcClIYlc5h-FSV4G2vehKzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:38:87:b2:ae:b8:c4:e9:ee:3a:1d:3e:ec:79:3a:a9:7d:5a:
bc:78:50:57:ac:ec:7a:2c:77:e1:76:7a:f5:2a:06:74:4e:80:
88:57:39:42:57:24:41:ff:cd:53:89:8b:92:1a:df:07:76:da:
c9:c3:f9:ef:0d:da:c3:60:aa:d8:31:f3:8b:ad:fd:08:f2:91:
28:a2:d9:8c:00:a4:0e:06:e1:c6:30:6f:f1:bc:a2:6d:78:3a:
33:27:64:eb:01:53:0a:4e:fe:41:8d:90:5b:2f:02:66:af:5d:
94:d6:82:15:74:59:66:cc:7b:87:da:17:a4:19:1d:f4:58:73:
6c:4c:6c:e0:0d:3a:db:8c:0a:27:17:06:ef:ed:39:ef:03:96:
28:c9:db:10:67:a1:6c:31:d1:69:ac:7e:38:50:b7:5b:55:b3:
30:e0:d5:c3:01:29:66:6c:11:11:90:3a:3e:0a:bf:1a:05:bd:
50:dc:c6:15:35:db:57:0e:2c:ae:bb:d4:30:a1:2c:05:07:02:
3e:9a:aa:0e:90:75:2f:cd:7d:05:c8:84:fa:33:25:79:ee:62:
a7:69:e0:ee:41:6f:60:78:08:44:2a:dc:f5:e2:fa:59:d0:b3:
0a:ad:de:8d:70:a6:ca:59:49:62:88:d3:15:4a:5e:3f:07:aa:
5a:84:c3:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:07:03 2025 by rpki-client