Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/PWwpWBRfRfrV2u6zi3W1LAlmEEY.mft
File: PWwpWBRfRfrV2u6zi3W1LAlmEEY.mft (raw, json)
Hash identifier: WGm5M3qrX2yc5sRb4Bl7F3SQtafXsUVlLK/L7q8LHNk=
Subject key identifier: F9:F5:55:F8:09:F2:27:00:82:93:98:7F:2F:E6:A1:EB:43:5C:BB:84
Authority key identifier: 3D:6C:29:58:14:5F:45:FA:D5:DA:EE:B3:8B:75:B5:2C:09:66:10:46
Certificate issuer: /CN=3d6c2958145f45fad5daeeb38b75b52c09661046
Certificate serial: 019A01115DD6CFC186001C51A2BB76A52FF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PWwpWBRfRfrV2u6zi3W1LAlmEEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/PWwpWBRfRfrV2u6zi3W1LAlmEEY.mft
Manifest number: 064E
Signing time: Mon 20 Oct 2025 10:01:46 +0000
Manifest this update: Mon 20 Oct 2025 10:01:46 +0000
Manifest next update: Tue 21 Oct 2025 10:01:46 +0000
Files and hashes: 1: PWwpWBRfRfrV2u6zi3W1LAlmEEY.crl (hash: YMztTjCFltJenJcz25iCEPadMo0AFbSzEIqq4sIRHtI=)
2: gdLyflAsCyF8taKXwI9Ohy9cbTg.roa (hash: watnTPY7ltSg0Ey7o57Cxg1ndShvduTve51cc1ZXeew=)
3: t5B6L3SDpnNQxpYAOqxx1KDKYiM.roa (hash: 2vbjQ+gKJBatZbu743TFnHPjWQew0j+rLlGQUa/1PSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/PWwpWBRfRfrV2u6zi3W1LAlmEEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/PWwpWBRfRfrV2u6zi3W1LAlmEEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/PWwpWBRfRfrV2u6zi3W1LAlmEEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 10:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:11:5d:d6:cf:c1:86:00:1c:51:a2:bb:76:a5:2f:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d6c2958145f45fad5daeeb38b75b52c09661046
Validity
Not Before: Oct 20 10:01:46 2025 GMT
Not After : Oct 21 10:01:46 2025 GMT
Subject: CN=f9f555f809f227008293987f2fe6a1eb435cbb84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:da:d4:94:65:ab:da:a6:67:e7:03:7a:b3:0f:
d4:3e:ed:89:b1:45:ff:80:bc:4c:c4:54:1e:8e:03:
7e:f5:2d:85:21:73:31:e7:26:2d:73:b8:80:44:88:
7d:12:b8:ed:30:5a:02:de:20:ad:fc:98:61:8c:01:
6f:a1:cd:77:44:38:a4:6d:8b:f1:af:a1:3b:50:e2:
60:39:4f:e0:d2:48:0f:a6:88:95:2d:2c:b5:4e:00:
a6:72:f2:d7:33:3b:00:70:83:50:be:9b:f3:fd:7b:
da:52:12:08:5e:e4:13:06:c7:23:fd:4b:4c:84:cc:
06:04:d0:d8:af:68:fa:3c:ad:0b:75:26:e3:73:69:
d2:9c:45:43:43:79:b3:e3:5e:4c:c7:c3:3e:9a:e8:
da:24:9a:47:fe:d9:97:70:50:74:0e:1f:d3:04:86:
91:25:26:03:dd:bb:41:73:c1:6a:64:ae:81:2d:56:
de:81:b9:a4:2f:81:86:20:29:9c:95:82:44:cc:fe:
8e:f2:ff:db:cd:5f:19:5a:5c:b2:e1:7e:a2:2c:35:
59:74:17:09:7e:5a:c0:7a:9d:43:66:69:73:c2:58:
fd:d6:43:75:b0:2f:49:05:3b:b1:08:72:bc:3f:43:
53:fb:84:99:43:26:4e:08:31:30:ec:6b:0f:d1:ad:
84:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:F5:55:F8:09:F2:27:00:82:93:98:7F:2F:E6:A1:EB:43:5C:BB:84
X509v3 Authority Key Identifier:
keyid:3D:6C:29:58:14:5F:45:FA:D5:DA:EE:B3:8B:75:B5:2C:09:66:10:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PWwpWBRfRfrV2u6zi3W1LAlmEEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/PWwpWBRfRfrV2u6zi3W1LAlmEEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/PWwpWBRfRfrV2u6zi3W1LAlmEEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:ae:a2:53:34:8e:43:b0:4a:79:d6:d9:4a:35:87:1a:1f:de:
2e:ba:5a:5f:5e:96:d6:b8:29:6c:a0:54:73:f9:cc:72:f6:39:
a7:00:40:5f:1f:11:82:eb:08:fc:76:c4:f6:58:b5:ca:bd:c4:
02:35:a2:a0:3c:24:c0:3e:ed:c0:2c:52:73:5d:60:69:89:88:
50:a8:1a:84:e3:cd:37:ed:77:d0:4d:3a:aa:4c:40:03:1e:2c:
88:3b:df:11:be:af:c1:c0:f7:89:e2:45:52:d4:44:3f:95:81:
4e:6e:13:0f:66:58:67:36:15:4b:65:93:ff:13:70:c9:c5:f2:
25:b3:fb:27:84:bb:51:60:42:57:d0:71:46:f4:2e:fe:e2:91:
48:3d:d6:bd:6a:c4:ce:99:af:9c:d5:5e:9a:ce:89:0b:ec:e6:
5a:63:5e:39:ca:a9:f5:32:4f:44:00:da:c7:98:9d:d5:a5:ab:
ec:11:8c:3d:86:03:d5:bd:d0:f5:73:6c:b5:06:d7:18:d7:3f:
01:ef:95:47:86:4c:51:6e:14:30:25:f5:c4:15:56:0c:e4:9d:
bb:b1:02:01:9a:5d:5c:d4:8b:cb:f3:6c:4d:47:4c:ab:e0:e3:
2c:f8:a5:be:06:a6:1b:c3:c2:7d:59:4e:33:52:41:cf:be:87:
48:66:24:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:22:37 2025 by rpki-client