Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/37514f-14e9-4dbe-b398-c87fab985af8/1/PRRSju_C35P_tOdPobZQO3btls4.mft
File: PRRSju_C35P_tOdPobZQO3btls4.mft (raw, json)
Hash identifier: XWLRfX/zsvm+GKRgunvFsxwi8yZnzi5y3PzpU9BvLW0=
Subject key identifier: 2A:D7:B9:05:82:A0:19:0C:3A:40:A5:4C:28:1A:C1:CD:CD:99:75:69
Authority key identifier: 3D:14:52:8E:EF:C2:DF:93:FF:B4:E7:4F:A1:B6:50:3B:76:ED:96:CE
Certificate issuer: /CN=3d14528eefc2df93ffb4e74fa1b6503b76ed96ce
Certificate serial: 019880F939984B0E91EC3EFA4E40ACC38B8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRRSju_C35P_tOdPobZQO3btls4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/37514f-14e9-4dbe-b398-c87fab985af8/1/PRRSju_C35P_tOdPobZQO3btls4.mft
Manifest number: 161E
Signing time: Wed 06 Aug 2025 20:01:13 +0000
Manifest this update: Wed 06 Aug 2025 20:01:13 +0000
Manifest next update: Thu 07 Aug 2025 20:01:13 +0000
Files and hashes: 1: 1-6KFFu76PFsOuJn8gJBndgCFOdU.roa (hash: 6vvOH7Ca5iY7AgmvELf2eSvGZtIS2tf6NCvrsrbSjcE=)
2: PRRSju_C35P_tOdPobZQO3btls4.crl (hash: 4XQ4cr7lB5i2H+KcSr6G9whNgP5zUYe8WCIqhTKwLAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/37514f-14e9-4dbe-b398-c87fab985af8/1/PRRSju_C35P_tOdPobZQO3btls4.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/37514f-14e9-4dbe-b398-c87fab985af8/1/PRRSju_C35P_tOdPobZQO3btls4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PRRSju_C35P_tOdPobZQO3btls4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:f9:39:98:4b:0e:91:ec:3e:fa:4e:40:ac:c3:8b:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d14528eefc2df93ffb4e74fa1b6503b76ed96ce
Validity
Not Before: Aug 6 20:01:13 2025 GMT
Not After : Aug 7 20:01:13 2025 GMT
Subject: CN=2ad7b90582a0190c3a40a54c281ac1cdcd997569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f2:9a:23:e2:f2:d8:0b:f5:77:79:aa:2b:51:
7f:bc:59:77:7f:1a:ba:8a:8f:04:76:94:a0:46:da:
56:be:a1:ce:04:05:bf:bf:fc:83:ab:d2:b5:04:10:
35:25:c2:d8:dd:c9:53:11:c4:32:4d:c0:05:5a:1e:
7c:a5:75:d6:30:e5:93:cb:9f:eb:ef:aa:48:24:3f:
1b:8b:56:3d:0d:48:5e:6e:11:22:cf:cd:42:25:83:
20:79:fb:1a:1c:1e:54:9e:21:61:09:d0:91:50:b5:
da:3f:2b:63:78:56:bf:c3:28:11:85:44:dd:c3:9b:
09:02:bf:32:3c:dc:88:fe:e2:f9:d7:05:a5:0e:fc:
b2:9a:78:54:f8:7b:31:7d:92:3d:d3:18:9c:49:07:
bc:fa:96:4c:6f:b6:d1:83:7a:51:28:79:26:62:b0:
ee:86:41:5d:3d:66:64:ca:01:e4:76:00:56:83:5c:
a5:39:c1:b0:b4:6f:25:19:f6:70:59:c1:fb:44:3f:
ed:d4:32:55:04:f7:48:15:a5:9a:55:33:9f:ff:6d:
02:65:ee:88:6a:00:6e:d5:c8:5a:bf:ef:e1:25:32:
be:91:1e:6e:94:6a:b1:94:98:13:60:e2:3c:3a:b8:
b0:1d:10:61:6d:2d:ad:00:88:60:63:a7:12:54:a2:
6f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:D7:B9:05:82:A0:19:0C:3A:40:A5:4C:28:1A:C1:CD:CD:99:75:69
X509v3 Authority Key Identifier:
keyid:3D:14:52:8E:EF:C2:DF:93:FF:B4:E7:4F:A1:B6:50:3B:76:ED:96:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRRSju_C35P_tOdPobZQO3btls4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/37514f-14e9-4dbe-b398-c87fab985af8/1/PRRSju_C35P_tOdPobZQO3btls4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/37514f-14e9-4dbe-b398-c87fab985af8/1/PRRSju_C35P_tOdPobZQO3btls4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:2f:c5:3f:d3:82:dc:27:a0:e1:8b:8f:ac:98:6b:66:1a:6d:
45:b3:8f:e4:b8:de:6e:86:dd:f8:e6:af:92:66:4d:4b:6f:43:
77:23:8b:24:64:96:9b:07:eb:79:8b:88:84:3c:2b:c5:08:bf:
5e:4d:c6:88:ef:3e:b0:7e:a2:8c:82:29:4d:eb:c8:d7:c3:69:
b2:e5:97:87:f1:51:5c:e2:d9:ac:c6:67:1b:6a:2b:4e:f0:11:
9e:8e:bc:8c:c0:9a:d9:3b:ac:6f:ff:cc:87:5b:ae:7d:b8:4a:
13:7c:ad:fd:f5:6e:c5:b7:68:29:a2:d6:d4:1f:56:b7:64:7d:
11:b5:39:f0:9c:48:c4:cf:75:91:60:da:c9:7c:49:9f:af:64:
91:f1:2a:93:97:b2:c5:04:dd:a8:50:e2:44:81:56:ff:46:dc:
e7:07:e2:e9:84:7d:91:5b:49:45:12:93:92:33:37:88:bc:97:
e2:af:8c:0f:b4:d8:a4:30:9a:b9:9f:f4:93:fe:e2:73:e8:b3:
7d:9e:2f:a4:4c:6d:b3:0a:0b:53:91:c1:ac:44:63:53:8c:8a:
b6:31:9b:4f:28:b8:78:55:b5:95:a6:3e:83:4a:7c:9e:f0:82:
10:81:19:9f:b8:47:9c:b9:0d:c2:03:1c:db:29:a3:c8:d9:27:
f4:10:0a:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiA+TmYSw6R7D76TkCsw4uNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkMTQ1MjhlZWZjMmRmOTNmZmI0ZTc0ZmExYjY1MDNiNzZl
ZDk2Y2UwHhcNMjUwODA2MjAwMTEzWhcNMjUwODA3MjAwMTEzWjAzMTEwLwYDVQQD
EygyYWQ3YjkwNTgyYTAxOTBjM2E0MGE1NGMyODFhYzFjZGNkOTk3NTY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPKaI+Ly2Av1d3mqK1F/vFl3fxq6
io8EdpSgRtpWvqHOBAW/v/yDq9K1BBA1JcLY3clTEcQyTcAFWh58pXXWMOWTy5/r
76pIJD8bi1Y9DUhebhEiz81CJYMgefsaHB5UniFhCdCRULXaPytjeFa/wygRhUTd
w5sJAr8yPNyI/uL51wWlDvyymnhU+HsxfZI90xicSQe8+pZMb7bRg3pRKHkmYrDu
hkFdPWZkygHkdgBWg1ylOcGwtG8lGfZwWcH7RD/t1DJVBPdIFaWaVTOf/20CZe6I
agBu1chav+/hJTK+kR5ulGqxlJgTYOI8OriwHRBhbS2tAIhgY6cSVKJv7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCrXuQWCoBkMOkClTCgawc3NmXVpMB8GA1UdIwQY
MBaAFD0UUo7vwt+T/7TnT6G2UDt27ZbOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFJSU2p1X0MzNVBfdE9kUG9iWlFPM2J0bHM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8zNzUxNGYtMTRlOS00ZGJlLWIzOTgt
Yzg3ZmFiOTg1YWY4LzEvUFJSU2p1X0MzNVBfdE9kUG9iWlFPM2J0bHM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC8zNzUxNGYtMTRlOS00ZGJlLWIzOTgtYzg3ZmFiOTg1YWY4
LzEvUFJSU2p1X0MzNVBfdE9kUG9iWlFPM2J0bHM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApS/FP9OC
3Ceg4YuPrJhrZhptRbOP5Ljebobd+OavkmZNS29DdyOLJGSWmwfreYuIhDwrxQi/
Xk3GiO8+sH6ijIIpTevI18NpsuWXh/FRXOLZrMZnG2orTvARno68jMCa2Tusb//M
h1uufbhKE3yt/fVuxbdoKaLW1B9Wt2R9EbU58JxIxM91kWDayXxJn69kkfEqk5ey
xQTdqFDiRIFW/0bc5wfi6YR9kVtJRRKTkjM3iLyX4q+MD7TYpDCauZ/0k/7ic+iz
fZ4vpExtswoLU5HBrERjU4yKtjGbTyi4eFW1laY+g0p8nvCCEIEZn7hHnLkNwgMc
2ymjyNkn9BAKpg==
-----END CERTIFICATE-----
Generated at Thu Aug 7 04:26:55 2025 by rpki-client