Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.mft
File: PRYHLKAlL6tQZY1zb_LGDBYp3HY.mft (raw, json)
Hash identifier: WK+Xr4jKVHmx7Pr1LP0PNaYuu0mB3sCFrADJD3Vj5ZU=
Subject key identifier: 81:49:9F:20:AA:40:23:32:65:05:11:67:B0:F9:B0:A9:9A:5C:7E:88
Authority key identifier: 3D:16:07:2C:A0:25:2F:AB:50:65:8D:73:6F:F2:C6:0C:16:29:DC:76
Certificate issuer: /CN=3d16072ca0252fab50658d736ff2c60c1629dc76
Certificate serial: 019769979F4E2A5D7E5A3B492A6748F4858B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRYHLKAlL6tQZY1zb_LGDBYp3HY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.mft
Manifest number: 0E53
Signing time: Fri 13 Jun 2025 14:00:33 +0000
Manifest this update: Fri 13 Jun 2025 14:00:33 +0000
Manifest next update: Sat 14 Jun 2025 14:00:33 +0000
Files and hashes: 1: 8e7eehP1l-DLf5STdKJWnoHYbKQ.roa (hash: K8SacJP+Z6piM83BegnBqW6J1m/glPf8EgTcnUYrotM=)
2: PRYHLKAlL6tQZY1zb_LGDBYp3HY.crl (hash: dtfYFPjwfDXxk7p+tizBeS65KnmPgptxJ6cOLofiF1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.mft
rsync://rpki.ripe.net/repository/DEFAULT/PRYHLKAlL6tQZY1zb_LGDBYp3HY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:97:9f:4e:2a:5d:7e:5a:3b:49:2a:67:48:f4:85:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d16072ca0252fab50658d736ff2c60c1629dc76
Validity
Not Before: Jun 13 14:00:33 2025 GMT
Not After : Jun 14 14:00:33 2025 GMT
Subject: CN=81499f20aa40233265051167b0f9b0a99a5c7e88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:14:40:a0:51:84:05:7e:ee:59:5f:57:b5:ad:
cf:5f:ec:2a:64:7a:31:fb:5e:59:d2:3a:95:06:80:
de:a1:8d:50:19:b7:2e:29:6f:84:ba:92:eb:be:82:
f2:55:c5:0c:6a:64:e1:84:c9:71:9c:93:61:30:a4:
fb:cd:c0:ae:6b:c5:dc:e2:d0:3b:f7:01:b8:84:14:
94:55:e3:1b:f6:8e:02:bc:34:ef:94:f3:72:f3:ea:
04:44:e6:b1:7a:0b:b6:fd:21:2f:12:ba:fd:60:1f:
cc:15:06:13:81:21:d3:00:c8:28:c0:30:d0:37:3e:
7b:e0:be:ea:79:56:ac:cf:77:83:74:e5:1b:eb:24:
e3:63:39:a5:7a:51:ca:1c:ad:54:9b:b1:4a:f8:a5:
a9:b6:ed:f3:3e:ff:ae:3a:a8:16:b9:dd:20:c9:08:
32:b8:52:30:81:c4:2e:a9:a6:52:fc:34:42:ad:d0:
25:80:25:28:8a:19:14:e2:c8:15:40:ac:4a:f4:37:
f7:27:ae:61:d1:d3:9e:4a:da:6a:6e:ab:97:ad:0d:
54:93:70:31:31:7a:9c:6e:f9:25:eb:b4:c4:65:7f:
15:41:7c:8f:97:29:cd:e1:80:80:86:09:bf:ca:56:
66:3b:32:83:6f:40:0b:e1:6d:17:1d:7c:96:71:5d:
51:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:49:9F:20:AA:40:23:32:65:05:11:67:B0:F9:B0:A9:9A:5C:7E:88
X509v3 Authority Key Identifier:
keyid:3D:16:07:2C:A0:25:2F:AB:50:65:8D:73:6F:F2:C6:0C:16:29:DC:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRYHLKAlL6tQZY1zb_LGDBYp3HY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:5f:60:52:ef:4d:2e:8c:6f:6b:9d:3c:c4:af:d3:79:da:e0:
46:de:32:fe:03:f9:47:f5:24:09:64:5e:3a:de:b0:5d:ee:42:
02:75:69:95:6f:c4:27:a9:31:25:b7:2e:45:32:88:f2:95:9f:
85:c4:d4:cb:f0:4d:5c:12:d7:66:5b:b6:87:5e:dc:69:4a:de:
d3:2d:9b:c5:8a:a9:e7:be:b2:34:27:97:82:00:96:6d:e3:e2:
32:ca:e6:e9:a7:02:43:7e:6c:02:f3:40:ab:53:84:f1:b5:7e:
09:57:1e:39:59:de:9b:06:15:9d:16:d4:40:80:98:fe:fd:54:
6c:57:94:55:da:35:93:1f:54:31:85:c2:92:82:47:50:29:85:
d2:87:85:c0:db:c3:98:46:41:51:aa:b4:df:3f:23:67:9d:76:
66:4d:2a:49:a8:81:fd:f6:79:d4:24:6a:ff:f0:14:75:12:5d:
3d:fa:9a:ff:0d:55:01:ab:5d:26:97:43:7d:ed:84:7b:86:80:
ab:5c:b5:37:d6:d2:0e:b8:14:e7:8e:ac:36:85:42:96:45:d1:
20:e7:2f:79:2c:ec:27:60:3d:67:f9:80:9a:87:84:38:c9:65:
bb:1b:1e:02:bd:a1:d0:5b:da:b4:5f:08:02:5a:3d:d5:17:fe:
11:9d:f3:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:58:21 2025 by rpki-client