Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/fb9093-407f-4620-b964-6e739f02d512/1/PrEhzwYygZ7s6r64qVVpxnUpiCE.mft
File: PrEhzwYygZ7s6r64qVVpxnUpiCE.mft (raw, json)
Hash identifier: QBNC9CfZ7TYCaXlOZSDtYX5TvaAdfO6tv8347crnCAQ=
Subject key identifier: 99:B1:98:77:59:DB:EB:0A:3B:F9:B8:53:0C:08:30:86:3B:60:D8:04
Authority key identifier: 3E:B1:21:CF:06:32:81:9E:EC:EA:BE:B8:A9:55:69:C6:75:29:88:21
Certificate issuer: /CN=3eb121cf0632819eeceabeb8a95569c675298821
Certificate serial: 01989335C3679F991123D4FCA591DC1A01E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PrEhzwYygZ7s6r64qVVpxnUpiCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/fb9093-407f-4620-b964-6e739f02d512/1/PrEhzwYygZ7s6r64qVVpxnUpiCE.mft
Manifest number: 11AB
Signing time: Sun 10 Aug 2025 09:00:30 +0000
Manifest this update: Sun 10 Aug 2025 09:00:30 +0000
Manifest next update: Mon 11 Aug 2025 09:00:30 +0000
Files and hashes: 1: PrEhzwYygZ7s6r64qVVpxnUpiCE.crl (hash: hcJ3CQDYqva5+46MZo5ud8jISKObiuvBa42eM4Ry/F0=)
2: _k-LVkRidjyVBxM5JDfBSAF4xXQ.roa (hash: sWdlQ6il1efqRiBOryvgVXuddGRGIEg9GvemLG8GNq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/fb9093-407f-4620-b964-6e739f02d512/1/PrEhzwYygZ7s6r64qVVpxnUpiCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/fb9093-407f-4620-b964-6e739f02d512/1/PrEhzwYygZ7s6r64qVVpxnUpiCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PrEhzwYygZ7s6r64qVVpxnUpiCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:35:c3:67:9f:99:11:23:d4:fc:a5:91:dc:1a:01:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eb121cf0632819eeceabeb8a95569c675298821
Validity
Not Before: Aug 10 09:00:30 2025 GMT
Not After : Aug 11 09:00:30 2025 GMT
Subject: CN=99b1987759dbeb0a3bf9b8530c0830863b60d804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:58:c5:18:2e:10:85:6f:76:20:f4:b1:73:c1:
f9:62:66:95:11:eb:3f:a9:de:02:ea:7e:52:ca:c0:
f0:66:ad:3a:c6:1e:75:13:a4:50:a7:1f:98:a2:9f:
4b:75:17:0e:9f:c4:53:66:17:3c:24:79:8c:2c:83:
bd:2b:58:17:00:77:97:f8:d6:7d:f4:ac:4b:bd:76:
19:a2:b8:3e:b2:36:a4:45:60:06:60:05:6c:59:f4:
99:dd:09:7a:20:95:92:54:aa:52:b2:38:85:73:1c:
78:f4:c8:17:53:cf:2d:d6:a8:a0:48:89:f8:a5:0d:
3c:72:85:33:9b:51:df:e9:22:ac:21:33:8f:3d:2a:
a7:bd:de:3d:ff:97:93:ab:64:d6:1c:dd:26:73:b0:
66:15:dc:ba:36:70:31:81:d9:1b:db:66:7c:cf:f3:
0c:17:d2:c8:5e:c0:2a:a4:ca:81:06:2a:d2:bb:93:
89:18:4f:5a:61:17:38:7e:31:fe:ab:a7:56:c3:4a:
02:9b:3d:a5:b1:47:5b:ae:48:a5:d3:9c:62:eb:ff:
80:84:dc:5b:d0:2a:c3:af:cb:e6:19:97:c9:83:35:
bd:79:aa:61:7f:5d:aa:aa:4c:ed:37:6b:fa:8e:aa:
32:5a:1e:1f:80:f3:06:5e:97:0e:67:0e:13:29:68:
d4:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:B1:98:77:59:DB:EB:0A:3B:F9:B8:53:0C:08:30:86:3B:60:D8:04
X509v3 Authority Key Identifier:
keyid:3E:B1:21:CF:06:32:81:9E:EC:EA:BE:B8:A9:55:69:C6:75:29:88:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PrEhzwYygZ7s6r64qVVpxnUpiCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/fb9093-407f-4620-b964-6e739f02d512/1/PrEhzwYygZ7s6r64qVVpxnUpiCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/fb9093-407f-4620-b964-6e739f02d512/1/PrEhzwYygZ7s6r64qVVpxnUpiCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:bd:5b:f7:81:f4:73:05:96:1c:12:ea:34:84:24:7f:37:73:
24:ef:c2:79:ec:6c:bd:85:a6:40:9b:e2:17:76:ee:82:60:25:
72:e0:9d:c5:e5:e9:b1:2d:e1:f0:63:d3:69:92:1e:65:4c:84:
e0:76:ee:f8:dd:38:a4:5a:7f:65:5f:47:53:cb:10:24:7e:6f:
5e:92:09:e8:02:77:22:6c:ba:b7:7e:03:c4:3b:c2:4a:a4:98:
a8:a2:8c:3f:93:5a:b2:bc:ed:a5:85:41:85:2f:58:77:f0:3e:
4a:7c:0b:52:33:88:48:2c:c2:1c:14:41:e8:bc:3e:9c:be:d5:
9f:28:2e:67:1e:32:de:89:a4:34:4e:f0:79:fc:2b:14:9c:88:
65:2d:7b:dc:33:95:4c:e6:3d:bf:98:51:2b:30:df:a9:5b:14:
ce:07:b2:d8:00:cd:0d:73:28:d4:ea:3c:77:f2:ff:ed:d5:f9:
fa:a6:20:f2:7b:4e:8a:ef:d1:d6:92:ca:d5:90:0d:4f:fe:1a:
29:33:85:8c:68:36:d3:85:e8:8f:35:f3:ce:1f:15:86:41:12:
4f:e2:4c:31:2f:c4:68:a3:1f:9b:d4:9c:2c:3d:e3:b0:b2:25:
26:4a:8b:5a:d0:7a:02:5f:c2:6b:ec:ac:72:c6:1a:3f:85:a7:
35:6b:79:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiTNcNnn5kRI9T8pZHcGgHkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlYjEyMWNmMDYzMjgxOWVlY2VhYmViOGE5NTU2OWM2NzUy
OTg4MjEwHhcNMjUwODEwMDkwMDMwWhcNMjUwODExMDkwMDMwWjAzMTEwLwYDVQQD
Eyg5OWIxOTg3NzU5ZGJlYjBhM2JmOWI4NTMwYzA4MzA4NjNiNjBkODA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFjFGC4QhW92IPSxc8H5YmaVEes/
qd4C6n5SysDwZq06xh51E6RQpx+Yop9LdRcOn8RTZhc8JHmMLIO9K1gXAHeX+NZ9
9KxLvXYZorg+sjakRWAGYAVsWfSZ3Ql6IJWSVKpSsjiFcxx49MgXU88t1qigSIn4
pQ08coUzm1Hf6SKsITOPPSqnvd49/5eTq2TWHN0mc7BmFdy6NnAxgdkb22Z8z/MM
F9LIXsAqpMqBBirSu5OJGE9aYRc4fjH+q6dWw0oCmz2lsUdbrkil05xi6/+AhNxb
0CrDr8vmGZfJgzW9eaphf12qqkztN2v6jqoyWh4fgPMGXpcOZw4TKWjUIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJmxmHdZ2+sKO/m4UwwIMIY7YNgEMB8GA1UdIwQY
MBaAFD6xIc8GMoGe7Oq+uKlVacZ1KYghMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHJFaHp3WXlnWjdzNnI2NHFWVnB4blVwaUNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9mYjkwOTMtNDA3Zi00NjIwLWI5NjQt
NmU3MzlmMDJkNTEyLzEvUHJFaHp3WXlnWjdzNnI2NHFWVnB4blVwaUNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi9mYjkwOTMtNDA3Zi00NjIwLWI5NjQtNmU3MzlmMDJkNTEy
LzEvUHJFaHp3WXlnWjdzNnI2NHFWVnB4blVwaUNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeL1b94H0
cwWWHBLqNIQkfzdzJO/CeexsvYWmQJviF3bugmAlcuCdxeXpsS3h8GPTaZIeZUyE
4Hbu+N04pFp/ZV9HU8sQJH5vXpIJ6AJ3Imy6t34DxDvCSqSYqKKMP5NasrztpYVB
hS9Yd/A+SnwLUjOISCzCHBRB6Lw+nL7VnyguZx4y3omkNE7wefwrFJyIZS173DOV
TOY9v5hRKzDfqVsUzgey2ADNDXMo1Oo8d/L/7dX5+qYg8ntOiu/R1pLK1ZANT/4a
KTOFjGg204XojzXzzh8VhkEST+JMMS/EaKMfm9ScLD3jsLIlJkqLWtB6Al/Ca+ys
csYaP4WnNWt5hA==
-----END CERTIFICATE-----
Generated at Sun Aug 10 16:00:34 2025 by rpki-client