Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/8fef7f-d011-4cdb-ac0a-31700f0e1a61/1/praJ3e9Y8KM4Pi71qjonxP5FMY4.mft
File: praJ3e9Y8KM4Pi71qjonxP5FMY4.mft (raw, json)
Hash identifier: mSGlyuodxovHQvcmp3FJ8mib8eXnqkJAMdehXAT28BU=
Subject key identifier: 0D:22:4F:AC:4E:E8:87:A7:D8:62:6F:7C:08:31:67:29:60:22:A9:3B
Authority key identifier: A6:B6:89:DD:EF:58:F0:A3:38:3E:2E:F5:AA:3A:27:C4:FE:45:31:8E
Certificate issuer: /CN=a6b689ddef58f0a3383e2ef5aa3a27c4fe45318e
Certificate serial: 01987373F048F9EB4F73D02A0B694D2CF3F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/praJ3e9Y8KM4Pi71qjonxP5FMY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/8fef7f-d011-4cdb-ac0a-31700f0e1a61/1/praJ3e9Y8KM4Pi71qjonxP5FMY4.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 05:00:34 +0000
Manifest this update: Mon 04 Aug 2025 05:00:34 +0000
Manifest next update: Tue 05 Aug 2025 05:00:34 +0000
Files and hashes: 1: 1-hqyEGwonCGY9K2L38Pw7_zJV_k.roa (hash: a3BoJ3dncPr176aD5ziB0Bh5202joOPjBl2mIqn/r/0=)
2: praJ3e9Y8KM4Pi71qjonxP5FMY4.crl (hash: zydUjarPNSzLnCNdPSLsYVjmfieSn8O/Pdoesdxk6I4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/8fef7f-d011-4cdb-ac0a-31700f0e1a61/1/praJ3e9Y8KM4Pi71qjonxP5FMY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/8fef7f-d011-4cdb-ac0a-31700f0e1a61/1/praJ3e9Y8KM4Pi71qjonxP5FMY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/praJ3e9Y8KM4Pi71qjonxP5FMY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:73:f0:48:f9:eb:4f:73:d0:2a:0b:69:4d:2c:f3:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6b689ddef58f0a3383e2ef5aa3a27c4fe45318e
Validity
Not Before: Aug 4 05:00:34 2025 GMT
Not After : Aug 5 05:00:34 2025 GMT
Subject: CN=0d224fac4ee887a7d8626f7c083167296022a93b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c2:42:d5:a5:49:84:4f:63:57:6d:4f:62:88:
9e:11:28:cc:2d:04:29:09:22:08:53:eb:69:48:ce:
bd:ae:c3:94:4e:cb:9e:7a:06:63:74:32:4b:e6:25:
76:f0:52:1e:73:72:72:09:da:d1:3e:cd:0f:f4:d4:
08:d3:fb:50:15:36:e2:2a:2d:b9:4d:09:2d:dc:f4:
7f:06:21:7e:d1:56:fb:84:8d:d7:8e:ce:98:50:43:
1b:94:4a:ba:1a:cb:95:04:69:60:34:53:30:c4:80:
ba:ab:b0:c4:9c:02:d2:94:33:65:e6:fb:c5:47:86:
b6:4e:16:92:f6:db:54:ea:38:c6:ef:2a:e5:96:00:
e3:54:26:9b:21:eb:0e:aa:12:8e:89:49:58:ec:72:
8a:c1:bf:8e:3c:cf:0a:bc:62:86:db:49:ee:3b:d3:
33:09:99:0d:5e:32:06:44:33:69:1e:f8:e7:d0:73:
cf:0c:38:43:d6:b3:9c:3f:d6:25:cd:76:6b:a3:a7:
a5:84:d5:a1:03:34:9e:94:cf:86:59:b7:7f:ad:22:
65:0e:69:f7:e4:ba:d0:7a:e5:c0:ec:81:a0:a9:a6:
76:f0:13:83:02:98:de:de:82:be:48:65:14:e8:24:
5c:fe:cd:61:33:93:f8:00:d0:cc:43:a6:2d:a3:c2:
10:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:22:4F:AC:4E:E8:87:A7:D8:62:6F:7C:08:31:67:29:60:22:A9:3B
X509v3 Authority Key Identifier:
keyid:A6:B6:89:DD:EF:58:F0:A3:38:3E:2E:F5:AA:3A:27:C4:FE:45:31:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/praJ3e9Y8KM4Pi71qjonxP5FMY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8fef7f-d011-4cdb-ac0a-31700f0e1a61/1/praJ3e9Y8KM4Pi71qjonxP5FMY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8fef7f-d011-4cdb-ac0a-31700f0e1a61/1/praJ3e9Y8KM4Pi71qjonxP5FMY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:5c:cf:d3:76:6c:e7:de:16:2d:a7:fb:c9:0d:c8:95:f4:02:
e3:3f:60:78:a0:b2:d5:21:84:4c:e1:73:57:e9:65:a1:25:b5:
19:c8:f8:e6:98:1e:29:e7:94:53:86:d0:89:2d:15:83:7e:41:
a4:63:0c:7b:c8:dc:a8:eb:f0:23:83:94:52:04:8b:9f:be:79:
ac:fd:33:07:47:db:ba:c9:87:49:07:da:d8:59:fe:18:95:ac:
9f:e9:f7:8f:f4:a2:c0:e9:c7:b4:23:bd:bc:af:ea:48:43:15:
ce:16:de:1c:c3:40:8c:67:44:88:db:75:a7:9e:3f:33:7f:15:
4f:5f:77:38:0e:4e:14:63:9f:d5:19:5a:11:60:74:99:e0:d9:
73:46:35:ec:d2:db:ce:fd:9b:2f:db:d5:1d:32:ae:77:93:17:
f2:31:cd:7e:19:9b:ab:a7:2d:1e:15:2e:4a:55:ff:80:d0:cb:
ce:0d:9d:f8:a1:2a:9a:78:b2:79:30:ec:a7:f8:e4:c3:52:64:
5b:22:2d:3b:75:39:2a:6e:16:72:95:bf:6a:c0:e8:e2:d7:f4:
24:e3:f9:f0:87:e7:d6:7f:c0:d6:7d:3e:7f:9f:77:5b:69:24:
6e:4d:3f:82:41:d5:53:0f:10:b3:3e:2f:a0:d4:53:49:71:96:
c6:3a:58:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:20:09 2025 by rpki-client