Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/PRLRHJogPV58gmPt9URH47c1i38.mft
File: PRLRHJogPV58gmPt9URH47c1i38.mft (raw, json)
Hash identifier: Zp6VDdbRqEdsZR0kCu7+wKbD9kxLrDj29T8Oy2LwEK0=
Subject key identifier: 9E:C3:18:66:3E:75:C1:6A:D2:5C:3A:78:89:4E:9A:11:F0:7C:CF:4F
Authority key identifier: 3D:12:D1:1C:9A:20:3D:5E:7C:82:63:ED:F5:44:47:E3:B7:35:8B:7F
Certificate issuer: /CN=3d12d11c9a203d5e7c8263edf54447e3b7358b7f
Certificate serial: 019A51875D44B63DDB17C5FE35AE393F6594
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRLRHJogPV58gmPt9URH47c1i38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/PRLRHJogPV58gmPt9URH47c1i38.mft
Manifest number: 1235
Signing time: Wed 05 Nov 2025 01:00:16 +0000
Manifest this update: Wed 05 Nov 2025 01:00:16 +0000
Manifest next update: Thu 06 Nov 2025 01:00:16 +0000
Files and hashes: 1: IFYqWjpdJxRaG3uyQLqw79JLTGo.roa (hash: alQatZzeYH3fzwBxC+QNB+5aLjO5V+OfKBsHgM/Tlv8=)
2: PRLRHJogPV58gmPt9URH47c1i38.crl (hash: d6t8Xe8YP1gNlfSmAt9FPrBXQQWkeWc79U4+o0sCx7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/PRLRHJogPV58gmPt9URH47c1i38.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/PRLRHJogPV58gmPt9URH47c1i38.mft
rsync://rpki.ripe.net/repository/DEFAULT/PRLRHJogPV58gmPt9URH47c1i38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 01:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:5d:44:b6:3d:db:17:c5:fe:35:ae:39:3f:65:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d12d11c9a203d5e7c8263edf54447e3b7358b7f
Validity
Not Before: Nov 5 01:00:16 2025 GMT
Not After : Nov 6 01:00:16 2025 GMT
Subject: CN=9ec318663e75c16ad25c3a78894e9a11f07ccf4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:52:a1:9c:bd:18:93:c5:08:23:ea:a0:d5:db:
a7:94:64:e3:b3:f9:fc:a3:31:f7:55:cf:67:05:4c:
88:14:00:f6:a4:89:5b:83:5d:1c:39:6d:08:e8:c0:
05:30:d9:43:ae:fd:b7:b8:a0:57:16:e0:c5:b6:0f:
c2:00:69:23:7c:0f:06:5e:ad:2e:20:bc:cb:cb:4b:
47:9e:fc:a8:50:6f:f1:ab:3f:74:da:e6:07:ad:6c:
b0:82:9f:df:08:8a:4d:d7:9d:d2:39:c6:f7:9a:04:
7b:57:d0:c3:b4:39:d4:83:15:1e:18:d6:d6:ce:d8:
7b:3e:30:73:73:69:29:dc:cc:e2:b6:5f:b7:34:46:
37:58:62:d2:69:a8:d0:9d:06:56:d0:99:5c:05:60:
f5:f8:97:6c:0a:bb:9d:67:83:e2:bc:23:45:b3:7f:
66:89:98:8a:ec:5e:71:83:f7:f5:a8:7a:f7:e4:fc:
ea:0f:6a:4e:e5:02:85:ba:37:ff:64:41:66:dd:18:
9b:5e:3a:c3:ec:1b:ef:2c:a2:b4:a3:49:43:c8:65:
03:33:9f:26:21:1a:28:f0:5f:87:91:5e:ae:17:e7:
65:03:de:c9:f7:0b:aa:df:67:42:78:c7:10:dd:3c:
5d:e9:1f:92:ff:c7:03:80:b5:cc:26:8f:79:e7:3c:
db:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:C3:18:66:3E:75:C1:6A:D2:5C:3A:78:89:4E:9A:11:F0:7C:CF:4F
X509v3 Authority Key Identifier:
keyid:3D:12:D1:1C:9A:20:3D:5E:7C:82:63:ED:F5:44:47:E3:B7:35:8B:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRLRHJogPV58gmPt9URH47c1i38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/PRLRHJogPV58gmPt9URH47c1i38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/PRLRHJogPV58gmPt9URH47c1i38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:7d:96:3b:6d:e2:3b:9d:53:40:58:4b:b1:d5:f1:e7:c7:c0:
19:de:2e:99:19:33:2e:46:ee:53:b4:9c:ff:06:c2:21:f3:6f:
53:2e:99:f7:36:0b:d6:c4:af:f4:7a:72:96:61:62:07:ee:06:
55:ab:0e:33:ab:b4:a5:a9:b0:97:7a:85:a4:0c:b4:96:ce:86:
a5:71:9f:df:e3:b4:8d:5d:d1:c8:1d:10:1c:9b:97:ce:8b:ac:
a8:84:7c:75:94:e7:fd:a3:ba:38:a8:21:7f:72:1a:5e:50:2e:
1e:4c:66:1a:06:c2:1a:71:22:0b:a1:dd:26:97:b8:34:b8:ec:
9e:e3:38:52:14:86:7f:ef:ee:a8:3c:2e:80:53:a6:e1:fd:50:
2d:39:87:aa:41:16:7a:29:ae:b2:5d:8b:98:74:53:aa:d3:70:
5b:73:05:10:01:84:d9:c2:73:84:86:19:c2:f9:15:8e:7d:94:
b2:60:49:fb:3b:dd:52:30:04:8b:b4:11:1c:b1:0b:98:bd:73:
ae:4a:26:40:2a:b2:0b:a9:d3:86:1e:e2:a7:7c:52:6f:04:e4:
59:29:56:72:39:b2:07:28:de:50:84:df:cc:05:30:67:2e:4e:
f8:5c:1c:ec:cd:f9:e6:cb:8c:41:b9:de:eb:97:82:4f:a0:a6:
6b:8e:b3:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:00:01 2025 by rpki-client