Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.mft
File: prswRa6njo-nZIEpcU-3NgaNw3s.mft (raw, json)
Hash identifier: spZ+DoU47azDk1tUtmbKsHlOm5r/C/EPbbH3r9VOn4g=
Subject key identifier: F5:A2:D4:B0:81:25:16:AE:EB:61:F7:EC:F2:5D:71:29:38:F5:61:3C
Authority key identifier: A6:BB:30:45:AE:A7:8E:8F:A7:64:81:29:71:4F:B7:36:06:8D:C3:7B
Certificate issuer: /CN=a6bb3045aea78e8fa7648129714fb736068dc37b
Certificate serial: 019A4C612A32BF3865ED2D443BB2FE641A44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prswRa6njo-nZIEpcU-3NgaNw3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.mft
Manifest number: 0A66
Signing time: Tue 04 Nov 2025 01:00:27 +0000
Manifest this update: Tue 04 Nov 2025 01:00:27 +0000
Manifest next update: Wed 05 Nov 2025 01:00:27 +0000
Files and hashes: 1: SY81gJpFL3O5UNAf48JLyqIodXE.roa (hash: jLBfqqRL2Al9+uGkQb3qfdiObpqqeOZguvx4px0RKv8=)
2: prswRa6njo-nZIEpcU-3NgaNw3s.crl (hash: BeWhj6TwDtBCtHiqYF5Gg362Dh4fCwZquhi2t8apjB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/prswRa6njo-nZIEpcU-3NgaNw3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:61:2a:32:bf:38:65:ed:2d:44:3b:b2:fe:64:1a:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6bb3045aea78e8fa7648129714fb736068dc37b
Validity
Not Before: Nov 4 01:00:27 2025 GMT
Not After : Nov 5 01:00:27 2025 GMT
Subject: CN=f5a2d4b0812516aeeb61f7ecf25d712938f5613c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:4f:ec:62:5c:e8:08:98:c7:9d:cc:f0:35:0c:
5b:dd:5c:24:cd:1c:7f:97:e0:71:22:d9:02:ce:80:
10:02:2c:67:db:49:25:e4:44:89:3b:bc:91:84:96:
e8:cd:59:75:1e:5c:ba:f8:58:2c:13:eb:8a:72:84:
c6:c8:11:7e:c5:8e:fb:09:d6:eb:0c:a1:07:a8:a5:
a6:2f:bc:5b:0d:ca:f2:95:bc:12:be:c8:02:09:d2:
5e:69:87:60:8b:ab:df:c7:b3:53:28:76:58:e5:e9:
b0:ad:9f:cf:29:5a:23:51:a4:7c:2b:64:ff:f1:2b:
37:e9:8f:0b:9a:0b:b8:2a:44:54:04:75:de:34:98:
fb:5c:29:88:6d:9b:6b:33:9a:0e:43:36:05:aa:17:
a7:fd:72:0a:80:7b:b1:e1:a0:ff:c1:6d:d8:59:20:
30:6c:49:a6:0f:1a:7c:49:32:3a:7b:f7:66:48:29:
c4:51:14:39:bc:64:92:38:6f:b2:bd:6f:72:e6:8b:
6c:cc:0f:34:6a:bf:79:e7:3d:02:69:12:eb:99:8d:
d6:91:a8:b5:2f:4b:4a:36:6f:92:4d:75:50:4f:8b:
81:b6:cf:30:6a:97:50:4e:18:ea:28:ab:7f:6e:27:
53:53:2c:43:ae:eb:3f:83:7d:6a:4c:46:78:c4:63:
7a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:A2:D4:B0:81:25:16:AE:EB:61:F7:EC:F2:5D:71:29:38:F5:61:3C
X509v3 Authority Key Identifier:
keyid:A6:BB:30:45:AE:A7:8E:8F:A7:64:81:29:71:4F:B7:36:06:8D:C3:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prswRa6njo-nZIEpcU-3NgaNw3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:b2:f3:8f:8d:dd:85:0b:c0:ed:ef:aa:49:4e:b9:ae:0f:e4:
e3:17:ae:f0:74:de:7a:83:f5:6b:d4:85:d4:f1:09:0e:e1:3e:
dc:12:90:67:54:82:46:06:41:15:ac:ea:e0:2b:c8:dd:8e:5c:
7f:5f:32:fb:62:cd:d8:bd:de:ca:a5:50:a5:18:7b:1f:57:a1:
b8:94:c0:4b:24:05:a8:56:38:a8:25:55:b3:dc:bc:78:a3:b7:
a8:31:46:97:21:ae:9c:a3:e0:27:b8:d4:4d:2c:45:7e:e3:f2:
f6:ad:d6:e8:ba:e9:51:f8:b2:6f:88:10:93:21:ec:e4:4d:b5:
ec:23:d9:4f:38:b4:17:68:62:49:b2:5d:7a:99:f9:86:48:d0:
c2:53:8c:4d:6e:e7:49:ae:63:87:68:3d:26:a9:1c:36:9c:8e:
81:a3:12:bf:3e:8d:61:bc:3f:3e:39:9d:f0:65:ed:2b:82:af:
cd:ff:57:2e:91:e8:af:b4:a7:01:a0:3a:58:f6:ec:64:9b:24:
28:4b:f1:5e:40:77:2e:2a:31:3a:11:6d:a9:6a:ad:af:86:2e:
b8:33:02:ac:8b:7f:20:96:8b:ab:f6:33:ee:89:40:c7:8f:af:
d5:66:e6:86:f6:b1:4f:c6:fd:d2:72:b5:19:c5:66:5a:23:14:
1c:eb:82:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:51:12 2025 by rpki-client