Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/aa6565-5d97-4a80-9a5d-424c23f50ff3/1/PrkfNs_-gO_g3_JhI_j5fBXZdjw.mft
File: PrkfNs_-gO_g3_JhI_j5fBXZdjw.mft (raw, json)
Hash identifier: /XECYRJtQxiSpqVJdN2oW0YyHub0NBfwfTUt0RC37bg=
Subject key identifier: 6F:FA:12:31:89:7D:66:F7:47:35:49:4E:2B:A3:87:3A:3F:CE:75:62
Authority key identifier: 3E:B9:1F:36:CF:FE:80:EF:E0:DF:F2:61:23:F8:F9:7C:15:D9:76:3C
Certificate issuer: /CN=3eb91f36cffe80efe0dff26123f8f97c15d9763c
Certificate serial: 01988168812171EA2A894A64F92A81761057
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PrkfNs_-gO_g3_JhI_j5fBXZdjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/aa6565-5d97-4a80-9a5d-424c23f50ff3/1/PrkfNs_-gO_g3_JhI_j5fBXZdjw.mft
Manifest number: 161D
Signing time: Wed 06 Aug 2025 22:02:46 +0000
Manifest this update: Wed 06 Aug 2025 22:02:46 +0000
Manifest next update: Thu 07 Aug 2025 22:02:46 +0000
Files and hashes: 1: PrkfNs_-gO_g3_JhI_j5fBXZdjw.crl (hash: r0zEO6Q7wwwyDMFKpyShy/c0BOWSTgS0xQttJiH+A4k=)
2: nuDK-TC5cc4Dv5m-g_HwBrvB2yM.roa (hash: HAIc8rXtzi2UFMvUxwUOqrhRhKG5mpUAWpR1IBhhhmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/aa6565-5d97-4a80-9a5d-424c23f50ff3/1/PrkfNs_-gO_g3_JhI_j5fBXZdjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/aa6565-5d97-4a80-9a5d-424c23f50ff3/1/PrkfNs_-gO_g3_JhI_j5fBXZdjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PrkfNs_-gO_g3_JhI_j5fBXZdjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:68:81:21:71:ea:2a:89:4a:64:f9:2a:81:76:10:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eb91f36cffe80efe0dff26123f8f97c15d9763c
Validity
Not Before: Aug 6 22:02:46 2025 GMT
Not After : Aug 7 22:02:46 2025 GMT
Subject: CN=6ffa1231897d66f74735494e2ba3873a3fce7562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:0b:8f:9f:08:9b:56:9a:2e:62:a3:03:fb:e7:
57:3e:b7:2a:f2:4a:3b:18:f4:03:12:e7:65:82:9a:
92:81:f2:61:e2:f8:80:fc:d5:0b:a0:78:3f:19:1b:
a9:53:88:8f:4d:f0:22:7b:c9:b9:36:e5:80:62:7e:
38:22:e5:a4:3b:b9:ab:f3:8e:d5:81:f3:78:ad:a7:
80:ae:0e:bd:91:4d:40:88:3a:a8:e7:19:02:48:0c:
73:a3:7f:83:cf:26:81:75:76:2d:93:76:58:98:13:
b5:d5:c6:00:bc:f4:3b:7b:19:36:b0:91:0a:80:ef:
54:66:09:a1:ea:27:5b:68:9c:9c:00:c1:47:b1:fc:
2c:ff:8c:63:ee:12:ba:7f:29:22:99:82:d0:8a:e1:
82:9a:2e:40:8b:15:80:6e:8d:22:c5:17:3e:13:98:
d6:4e:36:0d:ee:0f:6d:55:36:bf:59:f5:ca:8a:70:
b2:94:5a:f2:11:b8:5a:6f:65:31:25:f3:d8:93:2c:
23:66:6f:20:83:88:75:4e:09:45:10:a7:7b:4a:b2:
6a:e3:34:c5:9c:7b:e9:2a:49:24:82:88:db:ab:26:
c8:8b:b7:7d:be:cd:56:70:6b:b0:06:1b:2c:15:86:
bd:c1:23:84:b9:97:48:d9:16:45:bb:60:f9:63:68:
25:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:FA:12:31:89:7D:66:F7:47:35:49:4E:2B:A3:87:3A:3F:CE:75:62
X509v3 Authority Key Identifier:
keyid:3E:B9:1F:36:CF:FE:80:EF:E0:DF:F2:61:23:F8:F9:7C:15:D9:76:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PrkfNs_-gO_g3_JhI_j5fBXZdjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/aa6565-5d97-4a80-9a5d-424c23f50ff3/1/PrkfNs_-gO_g3_JhI_j5fBXZdjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/aa6565-5d97-4a80-9a5d-424c23f50ff3/1/PrkfNs_-gO_g3_JhI_j5fBXZdjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:8d:6a:d7:73:b0:f2:2a:7a:41:2b:d4:ad:ed:1d:fb:51:6f:
d5:10:ed:c5:4b:6a:89:be:45:67:74:6d:d8:46:e1:d5:87:f0:
37:4c:a7:ad:f2:b5:5b:44:9b:32:16:2e:4b:3c:09:20:94:df:
a6:18:24:b6:4a:86:46:d2:5f:86:5d:10:b8:f6:fd:38:af:27:
10:b7:50:8c:71:85:5b:68:07:d0:73:81:0c:ef:8e:1d:d0:30:
51:83:6d:ca:d2:10:04:29:e2:68:e9:0a:89:8e:7b:18:13:be:
4c:20:8e:5d:fc:b3:e6:28:03:3f:8b:ef:d1:d5:64:de:f3:96:
22:6d:a5:7c:4d:4f:38:d2:43:3c:89:a8:81:6f:18:fd:c0:23:
a3:07:90:3b:38:68:2e:37:df:b5:f1:af:8a:04:bf:ab:b6:b2:
64:4b:a2:6b:4d:67:fc:09:9e:15:4b:9c:13:6f:17:ab:5a:30:
21:2a:b0:61:f9:96:6e:6c:be:d8:d2:f9:d1:d5:9b:4e:65:91:
4a:93:c4:33:99:67:2f:95:e5:c4:14:aa:74:0b:a7:da:58:a5:
96:24:04:62:3a:9a:27:d8:50:29:7d:ed:59:3f:b3:07:1c:c5:
1e:ec:ad:ff:24:2f:b8:17:dc:d9:c5:6a:b9:34:7a:56:01:05:
20:7b:60:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:15:52 2025 by rpki-client