Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/aa6565-5d97-4a80-9a5d-424c23f50ff3/1/PrkfNs_-gO_g3_JhI_j5fBXZdjw.mft
File: PrkfNs_-gO_g3_JhI_j5fBXZdjw.mft (raw, json)
Hash identifier: mrrROzgPsREizfauggCCw+Ldwia00bhxF9ZK9kAp3/Y=
Subject key identifier: F3:7C:F3:EE:7E:3C:41:00:6D:3C:50:71:E8:1F:9A:63:80:C4:7E:67
Authority key identifier: 3E:B9:1F:36:CF:FE:80:EF:E0:DF:F2:61:23:F8:F9:7C:15:D9:76:3C
Certificate issuer: /CN=3eb91f36cffe80efe0dff26123f8f97c15d9763c
Certificate serial: 019A50E38D26C2E68AD433802AC761601463
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PrkfNs_-gO_g3_JhI_j5fBXZdjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/aa6565-5d97-4a80-9a5d-424c23f50ff3/1/PrkfNs_-gO_g3_JhI_j5fBXZdjw.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 22:01:21 +0000
Manifest this update: Tue 04 Nov 2025 22:01:21 +0000
Manifest next update: Wed 05 Nov 2025 22:01:21 +0000
Files and hashes: 1: PrkfNs_-gO_g3_JhI_j5fBXZdjw.crl (hash: U/xscXXqAtMGJ0ywPyaTBfTY4j8gytL+5+LKZz0tHo4=)
2: nuDK-TC5cc4Dv5m-g_HwBrvB2yM.roa (hash: HAIc8rXtzi2UFMvUxwUOqrhRhKG5mpUAWpR1IBhhhmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/aa6565-5d97-4a80-9a5d-424c23f50ff3/1/PrkfNs_-gO_g3_JhI_j5fBXZdjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/aa6565-5d97-4a80-9a5d-424c23f50ff3/1/PrkfNs_-gO_g3_JhI_j5fBXZdjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PrkfNs_-gO_g3_JhI_j5fBXZdjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:8d:26:c2:e6:8a:d4:33:80:2a:c7:61:60:14:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eb91f36cffe80efe0dff26123f8f97c15d9763c
Validity
Not Before: Nov 4 22:01:21 2025 GMT
Not After : Nov 5 22:01:21 2025 GMT
Subject: CN=f37cf3ee7e3c41006d3c5071e81f9a6380c47e67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ea:94:b6:9e:df:bf:b7:85:e3:55:a2:1d:c3:
af:3b:75:d7:ae:53:12:5e:c7:e8:31:b1:41:4b:e4:
9e:96:70:5b:63:80:92:98:2f:8d:40:73:a8:12:d4:
3c:0f:f4:9f:15:96:00:e2:5c:88:fb:c8:9b:a3:23:
fd:a1:22:fc:2c:ff:8e:e0:1f:7d:81:b7:02:a8:a5:
7d:18:6e:17:71:69:4b:b6:49:e1:3d:cc:10:76:29:
9d:ca:f6:01:38:43:32:37:dc:90:a9:02:74:9e:2d:
ad:92:82:6e:cf:71:f3:63:24:d8:ee:f9:3c:9e:b5:
87:31:5b:90:a6:0e:29:01:44:0a:2c:7c:37:51:d9:
42:9f:04:24:b9:4a:d1:2a:55:c4:66:50:8d:c5:00:
16:93:e4:2f:e2:15:e0:5d:23:0c:4e:79:82:c3:71:
d1:5a:38:52:a4:cd:10:e2:e7:b6:4d:25:14:3f:ef:
27:48:0c:5c:3d:d7:d7:64:09:20:c6:47:c6:c3:42:
04:53:b8:0b:32:32:82:87:76:c0:34:82:0b:c1:08:
12:48:e7:6a:21:02:29:a3:93:5c:e3:c9:82:39:4e:
87:60:98:ed:dd:53:58:cf:6b:7a:77:6a:81:df:03:
93:db:fe:99:05:c7:66:b0:19:40:76:ca:8f:9f:6e:
ce:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:7C:F3:EE:7E:3C:41:00:6D:3C:50:71:E8:1F:9A:63:80:C4:7E:67
X509v3 Authority Key Identifier:
keyid:3E:B9:1F:36:CF:FE:80:EF:E0:DF:F2:61:23:F8:F9:7C:15:D9:76:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PrkfNs_-gO_g3_JhI_j5fBXZdjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/aa6565-5d97-4a80-9a5d-424c23f50ff3/1/PrkfNs_-gO_g3_JhI_j5fBXZdjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/aa6565-5d97-4a80-9a5d-424c23f50ff3/1/PrkfNs_-gO_g3_JhI_j5fBXZdjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:c3:2b:e5:e4:f3:cd:f2:b6:c6:75:cd:58:90:b8:46:ba:45:
c2:70:d0:90:40:f8:d8:c4:3c:f4:85:b3:f1:82:2a:01:0e:50:
1a:4f:d1:51:35:0b:71:c5:60:81:a3:4f:56:0e:d0:88:e8:72:
76:09:23:dc:b9:22:bf:15:7a:4d:09:80:e2:53:41:2d:1a:08:
c1:e8:ce:50:0b:bd:1e:0f:a3:38:5f:dd:28:6d:28:6b:ff:c0:
b4:5b:fb:32:57:0a:55:d1:63:13:18:80:e7:09:e6:99:47:d6:
d9:18:16:cb:53:14:f8:e1:8f:d2:59:1c:0a:f5:58:41:ab:71:
83:89:7f:76:2c:6b:39:be:ad:56:f8:16:7a:7d:35:71:a6:20:
a9:08:64:46:09:36:0b:91:69:4b:5f:4f:cc:26:b0:67:cd:ba:
9e:f4:51:6b:a6:e1:b8:dd:7b:f4:6f:ef:bc:e8:76:2b:63:c1:
2f:f8:d7:19:a6:65:ae:e4:72:41:1c:fd:ee:cf:f7:78:dc:78:
14:e4:84:af:40:d9:8d:d9:be:18:5b:19:50:e9:42:be:47:4f:
d5:58:58:fd:78:8a:1b:7c:5a:50:ea:e0:14:e5:9a:f8:f6:8a:
98:91:b6:50:15:8c:55:b9:d6:b1:d8:44:e4:32:82:ef:d8:2a:
4b:49:7f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:11:15 2025 by rpki-client