Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/37514f-14e9-4dbe-b398-c87fab985af8/1/PRRSju_C35P_tOdPobZQO3btls4.mft
File: PRRSju_C35P_tOdPobZQO3btls4.mft (raw, json)
Hash identifier: CGQCBFka7y3hdEVrEyHuW+ojRTG2Ljnt/ETtuogO0ow=
Subject key identifier: 63:56:39:E1:C4:D1:65:2C:12:DC:25:88:BD:1F:BF:8B:01:89:8D:5B
Authority key identifier: 3D:14:52:8E:EF:C2:DF:93:FF:B4:E7:4F:A1:B6:50:3B:76:ED:96:CE
Certificate issuer: /CN=3d14528eefc2df93ffb4e74fa1b6503b76ed96ce
Certificate serial: 019A5263686D521F8A028CB64BEC318D97A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRRSju_C35P_tOdPobZQO3btls4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/37514f-14e9-4dbe-b398-c87fab985af8/1/PRRSju_C35P_tOdPobZQO3btls4.mft
Manifest number: 170F
Signing time: Wed 05 Nov 2025 05:00:37 +0000
Manifest this update: Wed 05 Nov 2025 05:00:37 +0000
Manifest next update: Thu 06 Nov 2025 05:00:37 +0000
Files and hashes: 1: 1-6KFFu76PFsOuJn8gJBndgCFOdU.roa (hash: 6vvOH7Ca5iY7AgmvELf2eSvGZtIS2tf6NCvrsrbSjcE=)
2: PRRSju_C35P_tOdPobZQO3btls4.crl (hash: yrPVQQEAWZeIapLl+F3Y6DimMzjMQsgufcDAFMMZdi8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/37514f-14e9-4dbe-b398-c87fab985af8/1/PRRSju_C35P_tOdPobZQO3btls4.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/37514f-14e9-4dbe-b398-c87fab985af8/1/PRRSju_C35P_tOdPobZQO3btls4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PRRSju_C35P_tOdPobZQO3btls4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:68:6d:52:1f:8a:02:8c:b6:4b:ec:31:8d:97:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d14528eefc2df93ffb4e74fa1b6503b76ed96ce
Validity
Not Before: Nov 5 05:00:37 2025 GMT
Not After : Nov 6 05:00:37 2025 GMT
Subject: CN=635639e1c4d1652c12dc2588bd1fbf8b01898d5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d0:5d:94:ef:ba:54:f5:78:ba:3c:c6:26:23:
19:da:d9:a3:af:a4:74:33:f6:9e:be:0a:33:c5:68:
44:ca:a0:f1:95:4b:03:5d:0c:8a:a8:f7:49:14:39:
a3:cb:fa:98:a8:17:ca:97:51:b2:01:09:3a:04:86:
e2:61:e8:2a:ac:c2:43:d8:1c:f4:8a:0f:ed:e6:c0:
83:ee:49:89:7c:ee:e6:89:22:46:56:37:4b:4c:05:
85:f7:6d:0f:cf:19:64:ca:1d:e3:fc:2e:8c:ff:2b:
62:6d:be:97:05:8e:72:d7:fc:ac:1d:41:53:ac:8c:
54:08:f9:56:1a:15:cb:4a:c3:cc:3d:b5:b0:18:9f:
84:3d:eb:ff:16:10:19:c0:41:16:b1:ae:7e:e5:f8:
83:83:a5:9a:10:14:5b:3b:47:3f:27:ab:30:9a:60:
33:7d:00:ec:03:83:96:f9:c8:d2:79:60:69:50:88:
f0:e7:d6:50:68:f0:61:e3:f6:32:cf:e7:b9:94:e3:
c7:1e:5f:0c:3b:bc:d9:32:eb:52:1d:8c:8b:5f:23:
c1:e4:e1:25:f3:18:ee:10:7e:ef:f0:63:cc:d1:e6:
d2:cc:f7:24:22:48:89:cd:7c:b0:2d:11:73:dd:09:
1e:e0:01:af:0d:e4:d0:bc:35:b8:20:35:af:aa:db:
d7:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:56:39:E1:C4:D1:65:2C:12:DC:25:88:BD:1F:BF:8B:01:89:8D:5B
X509v3 Authority Key Identifier:
keyid:3D:14:52:8E:EF:C2:DF:93:FF:B4:E7:4F:A1:B6:50:3B:76:ED:96:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRRSju_C35P_tOdPobZQO3btls4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/37514f-14e9-4dbe-b398-c87fab985af8/1/PRRSju_C35P_tOdPobZQO3btls4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/37514f-14e9-4dbe-b398-c87fab985af8/1/PRRSju_C35P_tOdPobZQO3btls4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:ac:be:cf:d0:54:93:ab:2a:50:aa:27:c9:1c:93:1e:e9:72:
57:c8:02:a3:13:30:b5:64:2c:32:cd:bb:74:0c:52:9c:37:20:
dc:b7:5c:18:86:92:5f:15:b6:ca:78:99:cb:49:26:6b:10:e5:
fe:1d:bf:5f:ad:01:58:85:a7:b3:40:4b:28:3d:71:cf:82:f1:
d2:49:b1:f0:2c:82:7c:f5:c6:3b:86:f3:eb:5b:58:f0:00:df:
97:d9:81:d0:00:ba:7f:aa:3d:79:96:78:bf:01:20:52:6a:da:
5b:37:7c:fb:7e:fc:83:20:71:3a:90:32:4f:06:99:c8:f8:34:
6e:c1:9b:b8:75:a8:de:4c:1b:4d:e5:84:38:a2:22:89:e7:a6:
d8:2d:cc:35:c6:87:2d:75:d7:bf:67:40:cb:8b:a7:a3:d6:57:
21:29:79:22:ce:f9:23:9d:2a:31:0b:2a:99:92:5a:3c:df:08:
55:2d:8c:59:26:68:a9:78:0c:a2:60:a3:43:a7:d1:e1:fe:da:
ca:01:8d:85:02:f9:30:2b:b3:52:8a:48:a4:9a:3b:3c:4a:db:
15:76:63:1d:67:45:20:ab:62:64:78:14:bc:b5:72:54:3a:a3:
4d:28:6b:13:2e:37:da:f8:49:07:19:74:a1:26:57:92:83:14:
7d:f4:2f:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:18:13 2025 by rpki-client