Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.mft
File: PRH7pD9XqwRF5UL87suHaBZXzPM.mft (raw, json)
Hash identifier: Hv+iNkDe9DpsVXYK2fY/DWLSfiM8KR8Kb46b/2LWDu4=
Subject key identifier: 2F:61:38:71:C5:98:A5:AA:03:76:74:6E:F3:28:89:74:59:01:B8:E7
Authority key identifier: 3D:11:FB:A4:3F:57:AB:04:45:E5:42:FC:EE:CB:87:68:16:57:CC:F3
Certificate issuer: /CN=3d11fba43f57ab0445e542fceecb87681657ccf3
Certificate serial: 019A4EF5DE9BC988CFE3AAB71BCF4B76D1DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRH7pD9XqwRF5UL87suHaBZXzPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.mft
Manifest number: 0396
Signing time: Tue 04 Nov 2025 13:02:07 +0000
Manifest this update: Tue 04 Nov 2025 13:02:07 +0000
Manifest next update: Wed 05 Nov 2025 13:02:07 +0000
Files and hashes: 1: 2DxOeFRwGr0ZkLmLFLoh-xJZObE.roa (hash: aeAg8fL5FqA68LiiZmemChuMc/666QpvAefI6BAnFLU=)
2: PRH7pD9XqwRF5UL87suHaBZXzPM.crl (hash: K5OkQTF8NNNDquy+nzvCRYg/fDetY6hiQjH1sr3q1Es=)
3: QubVM_6N5lx1EgDJtxcjPI_RV3o.roa (hash: 0U5OEeLVzA3Fo3jdio9FkyyDkZiO1CmcUt6CGyuWF74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PRH7pD9XqwRF5UL87suHaBZXzPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:de:9b:c9:88:cf:e3:aa:b7:1b:cf:4b:76:d1:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d11fba43f57ab0445e542fceecb87681657ccf3
Validity
Not Before: Nov 4 13:02:07 2025 GMT
Not After : Nov 5 13:02:07 2025 GMT
Subject: CN=2f613871c598a5aa0376746ef32889745901b8e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a4:90:ef:f6:6a:6f:00:ed:31:44:7d:54:76:
c9:7d:d8:77:20:bd:57:ba:27:cb:e9:be:40:d3:6f:
65:92:28:56:eb:b3:a8:51:e7:4e:2c:ad:b0:3e:54:
fe:c0:da:6e:7f:d2:43:5a:8d:1a:1d:f4:4e:6a:1d:
8a:62:d9:8c:13:e6:7e:60:bc:69:32:e2:9d:ad:0e:
4b:5b:63:75:a2:e2:cb:f7:45:e8:62:af:2c:b4:6d:
74:02:5d:16:2d:ed:ba:3c:af:c2:da:0c:67:c4:62:
a9:7c:00:91:f5:9d:b4:20:01:fd:f2:53:ab:b9:e0:
38:f8:13:59:7b:9a:97:46:42:90:2e:78:63:cf:41:
77:29:7c:13:0a:c3:ca:02:80:4c:7f:de:21:27:ca:
19:2b:4e:54:e5:34:35:58:43:09:b1:3a:ec:5f:fa:
e9:18:65:c2:4f:57:6c:44:32:60:de:5e:a1:c6:68:
e6:e5:33:32:27:2f:13:be:35:38:19:f8:e3:76:43:
59:af:a6:99:c3:2c:48:2b:e3:8c:c8:2f:e1:f2:69:
81:29:dd:40:22:6b:8a:14:6a:31:2e:6c:6f:42:30:
20:e9:62:b4:7c:34:1d:59:ab:13:8a:20:c3:fe:34:
3c:3b:a2:06:df:b8:ba:3a:c5:5f:67:3c:e7:12:8b:
89:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:61:38:71:C5:98:A5:AA:03:76:74:6E:F3:28:89:74:59:01:B8:E7
X509v3 Authority Key Identifier:
keyid:3D:11:FB:A4:3F:57:AB:04:45:E5:42:FC:EE:CB:87:68:16:57:CC:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRH7pD9XqwRF5UL87suHaBZXzPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:16:36:25:e2:49:83:e2:0c:c1:23:7d:f3:44:d4:dc:33:ce:
3a:b3:49:ea:56:4e:39:99:37:a3:c4:0a:77:a1:3b:45:55:6b:
42:75:1b:63:e1:cc:08:36:e7:e0:cd:f2:75:97:32:1b:64:b8:
bc:14:8d:04:a8:a4:2c:d9:16:13:8f:e4:e1:4f:55:a4:55:2f:
af:39:b5:82:e5:5e:ef:c1:f8:1d:ba:35:02:5e:b8:14:ea:ed:
39:4a:c8:6c:2a:00:a1:ac:13:cf:9e:08:62:6f:0c:d3:e6:56:
e8:48:26:8a:01:a3:f8:0c:cf:f3:40:50:c9:1e:e9:70:ad:cb:
98:b5:c9:02:ad:a8:a2:45:c2:94:1b:3d:ff:c7:2a:1a:8e:8d:
14:cf:33:a9:4a:26:58:bb:c5:45:a7:50:e4:b4:9b:2c:c4:54:
0c:a7:9c:88:d5:0a:bd:99:92:43:9f:6a:47:f7:e6:ad:e0:c3:
5f:e8:7a:a5:25:17:87:06:9b:c7:fb:0a:e1:70:d2:69:32:4c:
12:da:cf:c5:a1:87:8d:24:dc:00:d1:09:b1:e7:0f:8e:f3:85:
6d:91:c2:bd:6d:07:b1:34:1b:11:b5:77:f9:e7:d3:63:a0:77:
24:03:d8:05:0a:ed:7c:17:22:bc:cd:fa:e3:c8:7b:15:14:9c:
ed:29:60:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:12:38 2025 by rpki-client