Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.mft
File: PRH7pD9XqwRF5UL87suHaBZXzPM.mft (raw, json)
Hash identifier: g4RFdBm+M6TinLJ5MLDKt97RJ5figErJmZqfsHHQy3g=
Subject key identifier: AA:13:0F:2B:1F:03:0A:D8:E3:9D:03:53:92:D3:2D:82:95:AB:D5:24
Authority key identifier: 3D:11:FB:A4:3F:57:AB:04:45:E5:42:FC:EE:CB:87:68:16:57:CC:F3
Certificate issuer: /CN=3d11fba43f57ab0445e542fceecb87681657ccf3
Certificate serial: 019873E333044665CAD23ED2B3B41FC2E777
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRH7pD9XqwRF5UL87suHaBZXzPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.mft
Manifest number: 02A0
Signing time: Mon 04 Aug 2025 07:02:06 +0000
Manifest this update: Mon 04 Aug 2025 07:02:06 +0000
Manifest next update: Tue 05 Aug 2025 07:02:06 +0000
Files and hashes: 1: 2DxOeFRwGr0ZkLmLFLoh-xJZObE.roa (hash: aeAg8fL5FqA68LiiZmemChuMc/666QpvAefI6BAnFLU=)
2: PRH7pD9XqwRF5UL87suHaBZXzPM.crl (hash: 9SNxcVbdT7t0fuEi89t+uqRBONaK8CdMhzI+hIbZi0w=)
3: QubVM_6N5lx1EgDJtxcjPI_RV3o.roa (hash: 0U5OEeLVzA3Fo3jdio9FkyyDkZiO1CmcUt6CGyuWF74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PRH7pD9XqwRF5UL87suHaBZXzPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:33:04:46:65:ca:d2:3e:d2:b3:b4:1f:c2:e7:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d11fba43f57ab0445e542fceecb87681657ccf3
Validity
Not Before: Aug 4 07:02:06 2025 GMT
Not After : Aug 5 07:02:06 2025 GMT
Subject: CN=aa130f2b1f030ad8e39d035392d32d8295abd524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1b:ca:c2:3b:83:73:9e:24:7f:30:c9:99:bd:
b5:47:1c:9d:48:24:82:89:8d:2a:85:27:ac:86:c8:
5a:58:79:8d:40:67:c1:18:db:60:5e:09:b2:49:54:
e4:3e:07:c6:67:f3:03:9c:4a:82:53:dd:09:44:6d:
fd:86:b7:31:9d:dd:c2:08:60:c9:65:59:f0:31:2a:
e4:3b:d5:fc:7e:19:61:01:eb:71:f0:72:c1:b0:c3:
fe:5a:99:9a:76:40:a9:a1:00:10:ad:70:a7:5a:7d:
0b:b5:c9:af:c6:8f:a0:8f:f0:de:0b:48:16:cf:b1:
8d:1d:fc:4c:fd:b8:af:3b:37:44:22:5b:46:c3:58:
38:28:5c:24:83:47:8e:51:4c:0b:a4:ed:66:93:5e:
05:f5:fd:58:2c:c4:8f:ef:f0:12:f5:28:8b:8e:8b:
58:89:85:d2:97:33:76:d1:6a:59:cb:61:7f:eb:ab:
db:aa:d6:45:a5:7e:87:4a:7d:1b:84:51:70:ba:a9:
a3:6c:be:fc:01:1f:a3:41:55:cd:ee:5d:bd:aa:5c:
06:57:6d:f5:c1:27:27:99:cb:22:05:0d:b5:ca:dd:
cf:39:51:08:1e:b3:8b:cf:10:0a:60:c3:b8:68:ff:
8e:61:41:f5:1a:90:2d:9d:a8:0f:6b:40:4a:2f:bf:
43:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:13:0F:2B:1F:03:0A:D8:E3:9D:03:53:92:D3:2D:82:95:AB:D5:24
X509v3 Authority Key Identifier:
keyid:3D:11:FB:A4:3F:57:AB:04:45:E5:42:FC:EE:CB:87:68:16:57:CC:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRH7pD9XqwRF5UL87suHaBZXzPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:10:28:5a:f8:bd:46:d3:46:b9:3d:ba:30:07:1d:f7:59:92:
7d:95:be:e5:4d:a5:73:fd:ff:4d:06:b4:81:37:8e:1e:02:52:
05:b0:2b:d8:e6:4b:54:21:dd:02:b4:1f:6a:d3:30:eb:a4:90:
19:88:bf:1d:88:b0:c3:0f:17:b4:4b:70:06:38:fd:64:49:60:
90:8e:3c:61:0d:7c:37:03:88:50:db:27:60:d7:f9:3d:68:fb:
12:77:26:97:ee:60:84:4d:52:17:a9:4d:56:81:bb:45:6b:a9:
d2:dd:55:67:22:c0:6f:74:39:d7:8a:50:b5:33:aa:d5:77:94:
78:bb:66:2e:d5:43:86:72:ef:5b:b9:57:32:81:96:66:0a:ff:
c6:a6:57:95:30:bf:21:25:93:3f:a7:3b:28:a2:1e:02:59:f7:
94:38:5d:69:02:3e:c6:56:c2:a5:4f:dd:6c:92:6e:1d:53:78:
c6:c4:1f:67:82:cf:c6:b5:72:e3:e6:31:67:49:a5:01:0d:8d:
9b:5f:ea:07:36:54:d2:80:dc:59:50:47:e4:10:5a:59:6f:3b:
e3:5e:d4:2d:ed:e7:94:83:00:60:59:58:97:eb:2b:53:ff:8e:
90:05:03:53:87:82:ef:28:ff:7f:21:19:e9:97:e2:96:8c:2d:
61:4d:6c:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4zMERmXK0j7Ss7Qfwud3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkMTFmYmE0M2Y1N2FiMDQ0NWU1NDJmY2VlY2I4NzY4MTY1
N2NjZjMwHhcNMjUwODA0MDcwMjA2WhcNMjUwODA1MDcwMjA2WjAzMTEwLwYDVQQD
EyhhYTEzMGYyYjFmMDMwYWQ4ZTM5ZDAzNTM5MmQzMmQ4Mjk1YWJkNTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRvKwjuDc54kfzDJmb21RxydSCSC
iY0qhSeshshaWHmNQGfBGNtgXgmySVTkPgfGZ/MDnEqCU90JRG39hrcxnd3CCGDJ
ZVnwMSrkO9X8fhlhAetx8HLBsMP+WpmadkCpoQAQrXCnWn0Ltcmvxo+gj/DeC0gW
z7GNHfxM/bivOzdEIltGw1g4KFwkg0eOUUwLpO1mk14F9f1YLMSP7/AS9SiLjotY
iYXSlzN20WpZy2F/66vbqtZFpX6HSn0bhFFwuqmjbL78AR+jQVXN7l29qlwGV231
wScnmcsiBQ21yt3POVEIHrOLzxAKYMO4aP+OYUH1GpAtnagPa0BKL79DMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKoTDysfAwrY450DU5LTLYKVq9UkMB8GA1UdIwQY
MBaAFD0R+6Q/V6sEReVC/O7Lh2gWV8zzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFJIN3BEOVhxd1JGNVVMODdzdUhhQlpYelBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80NzNhZGUtYjUwNC00YjEwLWFlZDYt
YzVkZDM4NTdhNGQyLzEvUFJIN3BEOVhxd1JGNVVMODdzdUhhQlpYelBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80NzNhZGUtYjUwNC00YjEwLWFlZDYtYzVkZDM4NTdhNGQy
LzEvUFJIN3BEOVhxd1JGNVVMODdzdUhhQlpYelBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASxAoWvi9
RtNGuT26MAcd91mSfZW+5U2lc/3/TQa0gTeOHgJSBbAr2OZLVCHdArQfatMw66SQ
GYi/HYiwww8XtEtwBjj9ZElgkI48YQ18NwOIUNsnYNf5PWj7Encml+5ghE1SF6lN
VoG7RWup0t1VZyLAb3Q514pQtTOq1XeUeLtmLtVDhnLvW7lXMoGWZgr/xqZXlTC/
ISWTP6c7KKIeAln3lDhdaQI+xlbCpU/dbJJuHVN4xsQfZ4LPxrVy4+YxZ0mlAQ2N
m1/qBzZU0oDcWVBH5BBaWW87417ULe3nlIMAYFlYl+srU/+OkAUDU4eC7yj/fyEZ
6ZfilowtYU1sQA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:13 2025 by rpki-client