Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/de68c6-650f-4dfa-bd13-000082c123e7/1/PwWOQyu_cjaXUKmVHVJZQwtcpL8.mft
File: PwWOQyu_cjaXUKmVHVJZQwtcpL8.mft (raw, json)
Hash identifier: G7+vITNsB2dEz9fWWlpkBpqkltpytqCjWUsS+qofP1w=
Subject key identifier: 7D:E4:D8:FB:8D:FA:3A:81:0D:23:02:1C:F4:0F:E3:0C:21:5D:47:0C
Authority key identifier: 3F:05:8E:43:2B:BF:72:36:97:50:A9:95:1D:52:59:43:0B:5C:A4:BF
Certificate issuer: /CN=3f058e432bbf72369750a9951d5259430b5ca4bf
Certificate serial: 0198D4E09A801330FA77B6E2552F4F120BD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PwWOQyu_cjaXUKmVHVJZQwtcpL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/de68c6-650f-4dfa-bd13-000082c123e7/1/PwWOQyu_cjaXUKmVHVJZQwtcpL8.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 03:02:26 +0000
Manifest this update: Sat 23 Aug 2025 03:02:26 +0000
Manifest next update: Sun 24 Aug 2025 03:02:26 +0000
Files and hashes: 1: LHapQb8ix5yDr9XdIdq3SLfgGJQ.roa (hash: OTBcvGKIAwNH7dYThkaA46DYb8Du7nUhG7Wp8v0hqOA=)
2: PwWOQyu_cjaXUKmVHVJZQwtcpL8.crl (hash: G4R3fthlzENt7nAELWyTou9PJOYEjFXw9Ap2dfJVxWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/de68c6-650f-4dfa-bd13-000082c123e7/1/PwWOQyu_cjaXUKmVHVJZQwtcpL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/de68c6-650f-4dfa-bd13-000082c123e7/1/PwWOQyu_cjaXUKmVHVJZQwtcpL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/PwWOQyu_cjaXUKmVHVJZQwtcpL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:9a:80:13:30:fa:77:b6:e2:55:2f:4f:12:0b:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f058e432bbf72369750a9951d5259430b5ca4bf
Validity
Not Before: Aug 23 03:02:26 2025 GMT
Not After : Aug 24 03:02:26 2025 GMT
Subject: CN=7de4d8fb8dfa3a810d23021cf40fe30c215d470c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:93:75:3e:62:1f:86:9f:f4:ae:b0:2c:b2:77:
43:03:7b:a1:7a:ff:19:8d:da:f9:8f:70:a2:a1:15:
25:f7:9c:84:06:b8:24:3a:6f:e2:01:92:06:fb:47:
31:9e:dc:f1:2a:e0:10:53:4b:0b:25:0e:ca:62:00:
dd:e7:84:67:6e:16:f6:0a:87:d7:6b:d7:21:12:95:
bb:1f:d0:e2:f4:26:71:c5:3c:af:05:4c:a7:26:ec:
ea:fe:e4:b8:73:04:32:1a:ec:9c:ad:8f:4a:ff:43:
fc:66:c0:13:bc:c0:d2:67:e6:fc:b7:1b:27:9a:ed:
c2:10:10:e9:ba:90:e5:e6:cf:0e:dc:18:84:53:5c:
39:2d:d6:41:bf:0b:6f:2a:2c:3d:81:af:08:64:62:
c2:de:5e:47:f6:79:26:34:84:81:61:37:71:be:f1:
6a:d1:c5:42:aa:af:d5:88:15:1e:c2:cb:29:5e:b8:
1c:32:98:dd:67:95:da:fb:8b:6b:ae:ff:ee:8c:32:
98:d4:78:37:61:20:84:1d:cb:7b:8b:9c:86:33:f7:
c5:0f:77:fd:f3:f4:e9:3d:1d:a8:cf:a9:4c:0d:ff:
90:4c:fe:54:79:5e:af:ff:99:bc:fd:3a:e4:dc:49:
8b:95:c2:9f:38:a2:8d:cd:9c:91:bb:f3:5c:70:dc:
d6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:E4:D8:FB:8D:FA:3A:81:0D:23:02:1C:F4:0F:E3:0C:21:5D:47:0C
X509v3 Authority Key Identifier:
keyid:3F:05:8E:43:2B:BF:72:36:97:50:A9:95:1D:52:59:43:0B:5C:A4:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PwWOQyu_cjaXUKmVHVJZQwtcpL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/de68c6-650f-4dfa-bd13-000082c123e7/1/PwWOQyu_cjaXUKmVHVJZQwtcpL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/de68c6-650f-4dfa-bd13-000082c123e7/1/PwWOQyu_cjaXUKmVHVJZQwtcpL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:5c:9a:c2:0b:13:9e:6e:88:55:80:3d:64:ba:90:45:91:61:
a5:13:47:0a:de:e8:5d:2c:3d:14:b3:d3:03:09:81:91:77:46:
ba:88:61:65:00:95:cc:b6:18:b3:05:fa:cc:5c:6e:ac:15:8c:
37:95:ae:bb:59:c1:30:37:31:8d:47:63:81:f9:1b:dd:24:58:
40:27:9d:7e:41:1b:c4:80:1a:4d:f9:0e:6d:3f:50:14:97:e9:
d0:78:11:b7:6a:d5:ed:23:9c:b0:9d:da:16:95:e2:3f:bf:c1:
49:f8:dc:be:f4:ec:2d:b5:d6:3d:03:44:51:e3:d7:42:fe:4e:
ac:8e:50:18:a3:6e:1a:3d:8a:6f:05:3c:8c:68:d7:6b:27:bd:
77:32:a1:ce:ea:7b:f8:7c:30:ee:ec:a9:76:21:82:9c:bf:be:
71:35:0d:cd:b1:63:b5:48:fa:cd:a6:6a:0a:5a:ce:f8:89:2b:
7e:03:fb:f0:c7:ae:89:19:9d:df:f7:28:56:bd:17:52:68:21:
cf:4b:6a:cf:75:ac:e6:10:47:f0:96:c5:c1:5e:84:50:68:6a:
02:dc:4d:6f:3c:76:05:31:a3:48:cc:44:0b:7f:0f:00:c1:9e:
b7:03:58:ec:0b:87:48:94:cb:f0:97:75:6b:65:f4:4f:0c:31:
62:f7:8d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:25:58 2025 by rpki-client