Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.mft
File: prswRa6njo-nZIEpcU-3NgaNw3s.mft (raw, json)
Hash identifier: rs7zJvpo3FFYDE4R3NSJIt6+2FHnHdNkhTNyuJ0kq3s=
Subject key identifier: 85:2F:F3:98:FF:C0:09:7C:9F:08:8F:EB:FC:7A:15:A6:2C:D9:A7:31
Authority key identifier: A6:BB:30:45:AE:A7:8E:8F:A7:64:81:29:71:4F:B7:36:06:8D:C3:7B
Certificate issuer: /CN=a6bb3045aea78e8fa7648129714fb736068dc37b
Certificate serial: 0198733D9499888F14B692AEEB967038362F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prswRa6njo-nZIEpcU-3NgaNw3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.mft
Manifest number: 0971
Signing time: Mon 04 Aug 2025 04:01:12 +0000
Manifest this update: Mon 04 Aug 2025 04:01:12 +0000
Manifest next update: Tue 05 Aug 2025 04:01:12 +0000
Files and hashes: 1: SY81gJpFL3O5UNAf48JLyqIodXE.roa (hash: jLBfqqRL2Al9+uGkQb3qfdiObpqqeOZguvx4px0RKv8=)
2: prswRa6njo-nZIEpcU-3NgaNw3s.crl (hash: FQY11TlhWPo64eRyEuZ4Pakv0ToLylP/eFCo7Z0dMhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/prswRa6njo-nZIEpcU-3NgaNw3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:94:99:88:8f:14:b6:92:ae:eb:96:70:38:36:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6bb3045aea78e8fa7648129714fb736068dc37b
Validity
Not Before: Aug 4 04:01:12 2025 GMT
Not After : Aug 5 04:01:12 2025 GMT
Subject: CN=852ff398ffc0097c9f088febfc7a15a62cd9a731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:51:58:4b:1a:4f:2c:6d:72:02:b3:e1:c0:3b:
fb:7e:c3:49:fa:22:45:06:70:a3:21:79:11:0b:7d:
1a:14:23:7d:d3:d4:94:8a:ab:dd:4f:25:ba:3c:00:
82:a3:c6:52:fb:73:dd:5d:99:af:ba:af:ae:86:80:
0b:bc:25:21:33:e3:4d:47:ea:21:92:b5:50:ac:1b:
38:9f:87:ff:63:f4:25:90:65:97:06:76:a3:2b:1c:
ac:80:18:9f:44:80:a2:0a:62:ba:0b:b9:c7:45:51:
f2:15:a1:01:94:fb:dc:5e:b6:88:e9:8e:2a:57:fe:
0e:6f:cf:97:6e:ea:e0:fe:6f:63:fa:e9:22:42:54:
81:da:03:52:60:90:ab:df:57:a9:7f:21:c5:c4:c5:
b9:1d:59:bf:97:20:87:a4:40:0a:77:d0:71:f5:98:
45:a8:cf:a1:20:c9:b4:ed:eb:01:e5:bc:ef:08:52:
f4:b8:6e:86:25:02:b2:26:d0:31:48:5a:9c:1f:e4:
02:3d:a4:5d:e3:1b:30:8b:89:80:6e:0b:71:5a:e6:
55:c5:cc:b6:46:97:69:c9:e0:cf:18:9a:40:02:59:
b9:69:85:5d:07:bd:65:cf:5f:4a:ae:92:13:1c:29:
7f:a6:a2:79:28:7e:51:30:84:3a:bb:41:31:05:5c:
92:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:2F:F3:98:FF:C0:09:7C:9F:08:8F:EB:FC:7A:15:A6:2C:D9:A7:31
X509v3 Authority Key Identifier:
keyid:A6:BB:30:45:AE:A7:8E:8F:A7:64:81:29:71:4F:B7:36:06:8D:C3:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prswRa6njo-nZIEpcU-3NgaNw3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:b3:69:2b:4a:10:4c:66:96:54:aa:8c:9e:b6:ed:63:35:7c:
e0:24:46:b2:1f:1b:11:2e:ac:06:2a:76:54:20:f2:76:59:04:
ab:3e:56:31:dc:30:3b:69:f3:1d:5e:1b:c4:e8:d7:dd:37:0e:
ff:ae:52:6e:07:39:58:56:a4:7f:a2:9c:17:69:4b:af:c8:01:
60:f7:89:d5:fd:7f:2d:c5:d2:1b:bf:24:c1:5e:95:e7:cb:1b:
3b:c6:ac:0a:47:37:65:60:1f:5f:53:14:ea:1a:1a:1f:aa:ff:
68:a6:b4:44:f6:af:3f:53:21:20:49:fe:21:24:f6:b2:63:de:
fa:9b:06:0d:4f:c7:bd:d4:e1:4b:b1:51:36:81:48:2c:3e:5e:
60:73:f3:34:02:63:1e:3a:07:ee:97:41:83:d2:dd:59:e7:56:
8f:04:a8:53:ac:7b:f7:16:f5:d3:6d:b5:6f:1a:e6:57:34:82:
1d:3f:2a:9b:e3:30:64:fe:2b:6c:dc:4c:cf:3d:9d:de:8e:7f:
42:cc:30:c0:95:0d:c8:97:25:4f:65:54:1e:84:a8:35:a6:1b:
fd:ce:1e:7a:cb:c4:7f:9a:cd:6f:58:6d:ac:f9:ef:b5:2e:0a:
e5:34:07:55:fa:d8:80:1a:bf:f3:89:90:51:60:7d:50:c0:e0:
b8:f4:8b:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzPZSZiI8UtpKu65ZwODYvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2YmIzMDQ1YWVhNzhlOGZhNzY0ODEyOTcxNGZiNzM2MDY4
ZGMzN2IwHhcNMjUwODA0MDQwMTEyWhcNMjUwODA1MDQwMTEyWjAzMTEwLwYDVQQD
Eyg4NTJmZjM5OGZmYzAwOTdjOWYwODhmZWJmYzdhMTVhNjJjZDlhNzMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3lFYSxpPLG1yArPhwDv7fsNJ+iJF
BnCjIXkRC30aFCN909SUiqvdTyW6PACCo8ZS+3PdXZmvuq+uhoALvCUhM+NNR+oh
krVQrBs4n4f/Y/QlkGWXBnajKxysgBifRICiCmK6C7nHRVHyFaEBlPvcXraI6Y4q
V/4Ob8+Xburg/m9j+ukiQlSB2gNSYJCr31epfyHFxMW5HVm/lyCHpEAKd9Bx9ZhF
qM+hIMm07esB5bzvCFL0uG6GJQKyJtAxSFqcH+QCPaRd4xswi4mAbgtxWuZVxcy2
RpdpyeDPGJpAAlm5aYVdB71lz19KrpITHCl/pqJ5KH5RMIQ6u0ExBVyScwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIUv85j/wAl8nwiP6/x6FaYs2acxMB8GA1UdIwQY
MBaAFKa7MEWup46Pp2SBKXFPtzYGjcN7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHJzd1JhNm5qby1uWklFcGNVLTNOZ2FOdzNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi80MWVhZjktNjU2ZC00MGQ5LTlmN2Et
MzM0ZGUzZDc2ZmU1LzEvcHJzd1JhNm5qby1uWklFcGNVLTNOZ2FOdzNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi80MWVhZjktNjU2ZC00MGQ5LTlmN2EtMzM0ZGUzZDc2ZmU1
LzEvcHJzd1JhNm5qby1uWklFcGNVLTNOZ2FOdzNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ7NpK0oQ
TGaWVKqMnrbtYzV84CRGsh8bES6sBip2VCDydlkEqz5WMdwwO2nzHV4bxOjX3TcO
/65Sbgc5WFakf6KcF2lLr8gBYPeJ1f1/LcXSG78kwV6V58sbO8asCkc3ZWAfX1MU
6hoaH6r/aKa0RPavP1MhIEn+IST2smPe+psGDU/HvdThS7FRNoFILD5eYHPzNAJj
HjoH7pdBg9LdWedWjwSoU6x79xb10221bxrmVzSCHT8qm+MwZP4rbNxMzz2d3o5/
QswwwJUNyJclT2VUHoSoNaYb/c4eesvEf5rNb1htrPnvtS4K5TQHVfrYgBq/84mQ
UWB9UMDguPSLJQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:27:45 2025 by rpki-client