Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.mft
File: PRYHLKAlL6tQZY1zb_LGDBYp3HY.mft (raw, json)
Hash identifier: y8SLrjb7Mdqxtuat4S5pgP2XE/B0mmSbbWJg+MIys4s=
Subject key identifier: 88:B4:2E:D7:37:B3:B1:7B:CB:6B:3D:0B:C6:DC:12:B5:4B:63:AD:60
Authority key identifier: 3D:16:07:2C:A0:25:2F:AB:50:65:8D:73:6F:F2:C6:0C:16:29:DC:76
Certificate issuer: /CN=3d16072ca0252fab50658d736ff2c60c1629dc76
Certificate serial: 019874194039D122E4B5D4096C0B2AF74651
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRYHLKAlL6tQZY1zb_LGDBYp3HY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.mft
Manifest number: 0EDD
Signing time: Mon 04 Aug 2025 08:01:08 +0000
Manifest this update: Mon 04 Aug 2025 08:01:08 +0000
Manifest next update: Tue 05 Aug 2025 08:01:08 +0000
Files and hashes: 1: 8e7eehP1l-DLf5STdKJWnoHYbKQ.roa (hash: K8SacJP+Z6piM83BegnBqW6J1m/glPf8EgTcnUYrotM=)
2: PRYHLKAlL6tQZY1zb_LGDBYp3HY.crl (hash: 2aYKwepdDMjhBJkt82im4NVEyg1QIYMBL7thUdnbWNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.mft
rsync://rpki.ripe.net/repository/DEFAULT/PRYHLKAlL6tQZY1zb_LGDBYp3HY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:19:40:39:d1:22:e4:b5:d4:09:6c:0b:2a:f7:46:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d16072ca0252fab50658d736ff2c60c1629dc76
Validity
Not Before: Aug 4 08:01:08 2025 GMT
Not After : Aug 5 08:01:08 2025 GMT
Subject: CN=88b42ed737b3b17bcb6b3d0bc6dc12b54b63ad60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:08:c1:94:7c:db:20:e2:4d:56:1e:2a:0e:a2:
4a:ce:b4:25:bc:a0:71:dd:0e:ed:2c:f2:ab:6f:bd:
f2:34:8e:46:bc:08:f1:49:87:ad:1c:e1:9d:4f:e4:
5d:c0:0f:4e:c5:c2:bc:99:4e:f5:8d:a0:fb:cc:e5:
c2:e0:86:e3:c9:98:2a:63:52:bd:c3:33:86:63:2d:
e3:c0:3c:d9:33:82:62:60:35:39:59:61:20:96:98:
be:ff:00:e1:cc:b9:ea:ae:65:58:a3:32:3d:d2:20:
a2:6c:7b:20:ab:7d:b1:46:16:a7:45:83:bf:70:db:
dd:d6:b5:19:c3:68:a4:65:ee:05:65:f2:04:a1:4b:
96:2f:05:be:a7:75:d3:9b:ee:32:35:5e:23:06:da:
3d:23:84:3c:fa:cc:9b:36:59:29:87:b5:08:20:e3:
e3:7c:64:86:be:d4:de:3d:00:d9:da:c5:6f:5b:e5:
c8:52:34:16:db:45:4f:58:bf:82:e1:f5:ed:4b:dc:
87:c0:f4:9c:1c:47:15:9d:4d:cd:cc:22:29:cd:6e:
f8:79:11:db:f2:ba:ce:3c:ab:90:9b:a9:e6:84:35:
79:d4:f7:c0:c7:b4:57:ec:84:d3:b4:ef:d8:85:13:
4b:9a:0b:e8:d5:a1:c3:7e:02:57:f6:1b:34:e1:39:
aa:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:B4:2E:D7:37:B3:B1:7B:CB:6B:3D:0B:C6:DC:12:B5:4B:63:AD:60
X509v3 Authority Key Identifier:
keyid:3D:16:07:2C:A0:25:2F:AB:50:65:8D:73:6F:F2:C6:0C:16:29:DC:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRYHLKAlL6tQZY1zb_LGDBYp3HY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:c7:de:d7:ed:2f:19:9d:b9:19:c5:37:85:01:fa:93:57:b4:
24:2f:e8:7d:f1:e3:75:49:55:1e:e8:65:2d:53:5c:7e:a9:00:
14:da:ef:c7:4d:5b:f4:1f:f0:ef:72:ce:93:53:87:5e:e7:e8:
2c:5d:90:27:15:b3:5c:43:23:c1:08:82:dc:7c:c4:44:71:d0:
e4:65:87:f2:de:05:d7:89:1b:7e:cc:91:0a:ca:c5:ba:aa:0c:
f4:ed:93:9a:53:c0:0f:db:d7:5e:f7:6b:f1:ea:2c:74:26:b0:
65:bb:34:26:ea:9b:d8:7e:b8:83:72:29:eb:54:cc:a2:40:a2:
11:59:e5:02:e4:c8:64:6c:68:ee:31:38:bc:e2:98:b4:ab:71:
8a:b5:63:0c:8d:c5:ce:56:1f:bb:ef:4c:71:e8:da:a0:a3:99:
5f:8d:0b:b9:76:44:99:2d:1e:c0:96:72:b5:26:4b:df:00:1e:
ce:cc:9e:7e:cb:6a:4e:6b:2e:14:73:25:96:c0:f0:bb:c9:94:
00:3f:8f:cd:03:d6:02:13:06:4e:55:54:e8:ea:74:30:67:fb:
44:1d:8c:d1:b2:ed:82:75:5b:c5:5e:4d:36:d0:4b:0e:29:cf:
23:00:40:e2:ac:a2:4a:39:93:c5:d9:6d:23:d1:55:60:b5:9a:
00:49:62:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:02:55 2025 by rpki-client