Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.mft
File: PidCSWQA2BC-W0CW_e3sMKIx-as.mft (raw, json)
Hash identifier: XSJDnqTSA4Da2ZQTrOkuJiNkhHJ6fkIRViAi4WLhhZ8=
Subject key identifier: C1:27:0C:00:CE:1B:83:43:83:B5:55:C1:36:EC:A5:8A:65:82:D3:FF
Authority key identifier: 3E:27:42:49:64:00:D8:10:BE:5B:40:96:FD:ED:EC:30:A2:31:F9:AB
Certificate issuer: /CN=3e2742496400d810be5b4096fdedec30a231f9ab
Certificate serial: 0198D6CD3DF0C4049DA8DAC7257195C40F21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PidCSWQA2BC-W0CW_e3sMKIx-as.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.mft
Manifest number: 0A2D
Signing time: Sat 23 Aug 2025 12:00:31 +0000
Manifest this update: Sat 23 Aug 2025 12:00:31 +0000
Manifest next update: Sun 24 Aug 2025 12:00:31 +0000
Files and hashes: 1: 5pXO0rccDvdcNpNF4kBVulDgfCw.roa (hash: N4A+PObGjvFgO5mi8UIuKYZJSnV7LB7QBUfSUqvfnRE=)
2: PidCSWQA2BC-W0CW_e3sMKIx-as.crl (hash: G3ZpY5r8U6hgHIwn1KoaZqlY5kmA67D3bKvphZz2NnM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.mft
rsync://rpki.ripe.net/repository/DEFAULT/PidCSWQA2BC-W0CW_e3sMKIx-as.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:3d:f0:c4:04:9d:a8:da:c7:25:71:95:c4:0f:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e2742496400d810be5b4096fdedec30a231f9ab
Validity
Not Before: Aug 23 12:00:31 2025 GMT
Not After : Aug 24 12:00:31 2025 GMT
Subject: CN=c1270c00ce1b834383b555c136eca58a6582d3ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a7:c7:a3:fb:96:b2:65:1b:cd:82:f7:74:d2:
41:55:fe:d9:f9:1b:68:19:c3:74:48:1c:ed:cb:2f:
0d:8c:cc:ea:ff:5d:3b:67:55:c8:0d:87:92:c0:36:
ac:68:88:61:b2:03:68:5c:c9:44:0c:45:3a:88:2b:
e1:ad:52:7d:cd:e8:87:60:c0:0b:e0:ce:8a:ef:58:
d0:aa:f0:0e:c2:00:43:e8:cc:9b:ad:54:8c:28:8c:
5a:b5:a4:b2:0a:41:5b:44:1a:c1:8e:9b:94:99:f9:
58:51:62:72:78:1e:2d:a0:5c:6b:31:4c:d0:4a:93:
54:06:4c:ba:f6:42:54:6f:ab:99:ea:c3:3b:67:61:
64:48:94:cb:25:db:35:a5:58:44:58:aa:12:5a:37:
cb:05:ff:fc:16:2b:d4:d1:47:4e:49:14:70:0b:91:
42:3e:09:b5:9d:c6:d8:15:f9:38:76:1a:53:eb:be:
ef:8a:ad:bb:36:01:e1:93:61:be:b8:4b:6e:16:8c:
61:00:15:2e:a3:3c:9f:e2:36:9d:5c:08:93:f0:c5:
fa:a2:b2:e4:6b:94:34:21:5c:2b:b7:90:8a:7d:f6:
04:24:35:b1:6a:16:a2:fe:dd:48:08:ab:41:e7:35:
1b:09:06:96:e3:b0:5d:14:23:89:c7:42:25:aa:ef:
c8:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:27:0C:00:CE:1B:83:43:83:B5:55:C1:36:EC:A5:8A:65:82:D3:FF
X509v3 Authority Key Identifier:
keyid:3E:27:42:49:64:00:D8:10:BE:5B:40:96:FD:ED:EC:30:A2:31:F9:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PidCSWQA2BC-W0CW_e3sMKIx-as.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:07:6b:22:f4:50:0b:98:15:9a:3b:30:3c:aa:fb:07:8e:77:
3f:a1:ba:b3:6d:e3:fb:c6:12:71:95:57:ad:49:59:35:95:0b:
28:db:b4:9f:00:6d:01:b3:e6:4c:85:ba:52:de:cc:84:e7:5d:
17:70:9c:16:6b:81:9a:18:48:2f:ac:57:15:0d:62:8b:26:8a:
a8:1b:cb:c8:93:67:be:6d:4e:d8:ea:70:25:eb:62:9f:aa:dc:
97:21:88:9c:4e:13:11:55:bf:d2:96:0b:7d:ca:fa:a1:f8:ee:
a4:a8:06:e5:4c:b1:9b:57:d4:54:22:86:a7:94:15:52:19:2a:
9b:0a:47:b2:e6:56:19:ee:08:5f:6d:f6:60:3f:d2:5e:b0:7c:
a2:91:14:7e:7c:e1:15:65:c3:70:e7:37:0e:6e:35:3a:bf:22:
35:7a:ed:2c:fa:52:dd:a1:98:ee:da:3f:15:fe:c0:9d:b9:bb:
aa:59:69:9a:41:2d:c9:19:bc:13:9a:ec:f6:c5:81:44:92:f2:
d2:b8:9d:11:1f:59:4e:9f:cd:8a:3d:b2:fa:ba:11:c2:3a:ee:
9c:53:b3:09:66:8a:43:b6:cc:f4:30:02:89:00:69:5b:be:fc:
3d:82:86:65:2e:03:27:56:92:06:b7:ac:2a:96:82:ed:e3:93:
3a:9c:23:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:27:46 2025 by rpki-client