Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.mft
File: PidCSWQA2BC-W0CW_e3sMKIx-as.mft (raw, json)
Hash identifier: JGiSrKXWL4LCDy2FzYtamNA+n+KrmLV3zsGo+02G3K4=
Subject key identifier: BF:DC:C8:A1:F9:01:90:C5:C4:D5:FD:08:05:59:E7:64:91:45:53:59
Authority key identifier: 3E:27:42:49:64:00:D8:10:BE:5B:40:96:FD:ED:EC:30:A2:31:F9:AB
Certificate issuer: /CN=3e2742496400d810be5b4096fdedec30a231f9ab
Certificate serial: 0199FE46AA1A2613A92C10F43B91BF2BB23C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PidCSWQA2BC-W0CW_e3sMKIx-as.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.mft
Manifest number: 0AC6
Signing time: Sun 19 Oct 2025 21:01:07 +0000
Manifest this update: Sun 19 Oct 2025 21:01:07 +0000
Manifest next update: Mon 20 Oct 2025 21:01:07 +0000
Files and hashes: 1: 5pXO0rccDvdcNpNF4kBVulDgfCw.roa (hash: N4A+PObGjvFgO5mi8UIuKYZJSnV7LB7QBUfSUqvfnRE=)
2: PidCSWQA2BC-W0CW_e3sMKIx-as.crl (hash: vr/paOpPSAoGPsZyS30VDmyQb42GlLBhQa94Cuj8uj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.mft
rsync://rpki.ripe.net/repository/DEFAULT/PidCSWQA2BC-W0CW_e3sMKIx-as.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:aa:1a:26:13:a9:2c:10:f4:3b:91:bf:2b:b2:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e2742496400d810be5b4096fdedec30a231f9ab
Validity
Not Before: Oct 19 21:01:07 2025 GMT
Not After : Oct 20 21:01:07 2025 GMT
Subject: CN=bfdcc8a1f90190c5c4d5fd080559e76491455359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a8:aa:3c:be:79:51:50:0a:ca:eb:82:4b:9b:
46:4c:be:80:84:bf:3e:79:7e:c0:9e:62:6b:d3:60:
83:e6:fb:1f:8b:da:3b:ea:53:2e:bd:28:00:9c:3e:
82:b7:7c:5d:67:0f:88:ad:91:a2:f6:10:13:3c:8f:
bf:70:96:fc:1d:6c:a6:2c:c0:49:dc:3c:8d:c8:ba:
7a:0e:7f:f0:be:fe:a6:7f:59:70:36:68:54:38:f1:
72:c6:ff:47:ca:de:a5:31:70:0d:98:03:e1:30:64:
1a:56:a5:ae:47:17:65:28:94:27:82:d0:2e:9f:4b:
00:d4:a5:72:b4:b9:44:ec:a6:0c:c8:1e:48:7b:4a:
63:3a:45:51:f6:97:0c:59:9b:90:08:d0:fc:c9:d9:
fa:eb:b9:19:54:7d:1c:06:4d:ee:4c:23:12:ba:3e:
46:bf:da:6d:16:94:0c:53:25:69:44:35:b9:68:06:
7d:d4:37:33:ff:ec:b8:aa:9e:93:92:4c:4d:60:63:
a8:23:90:cf:1e:ea:37:d7:01:71:2c:89:8a:9a:68:
55:88:52:80:57:2c:19:5b:1f:b9:91:fe:e8:e1:c2:
b3:96:5c:f0:0e:c3:15:0d:d8:33:17:75:1c:60:3c:
14:4d:b3:a5:15:ef:95:ab:2b:8e:fb:7d:0b:37:c2:
27:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:DC:C8:A1:F9:01:90:C5:C4:D5:FD:08:05:59:E7:64:91:45:53:59
X509v3 Authority Key Identifier:
keyid:3E:27:42:49:64:00:D8:10:BE:5B:40:96:FD:ED:EC:30:A2:31:F9:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PidCSWQA2BC-W0CW_e3sMKIx-as.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:f9:a1:71:c7:61:ad:fe:54:46:5b:c1:56:c4:26:c6:65:fe:
58:f0:f8:ea:2c:83:74:ef:bd:8e:48:7f:fd:59:8a:61:68:df:
a4:77:fb:32:3e:da:d3:e7:b3:b0:c2:42:af:3e:08:da:74:e4:
5f:fd:27:67:fe:ef:78:b1:88:15:8c:06:e2:b5:d0:70:35:95:
f6:73:0e:8c:c5:8b:ab:09:d0:4d:0f:a0:c4:b6:8f:23:80:47:
ab:06:3b:8d:e3:0c:bf:bf:44:c6:b9:f2:4e:67:c1:39:0a:9d:
bc:e1:63:0c:87:b1:02:34:5c:0d:07:54:e9:67:af:b8:e2:4e:
3c:b8:07:43:a3:fe:31:45:11:8c:41:5a:32:78:41:e2:91:dc:
11:9f:e4:cb:05:76:7b:bf:9b:10:a0:98:e4:26:d8:60:24:cf:
01:c0:d6:2a:58:45:64:95:92:d0:99:64:aa:91:5e:38:29:05:
ff:a9:ae:6b:0c:ec:9f:79:bd:2e:f2:c6:f6:2f:05:fe:ee:58:
26:b3:d7:ef:50:47:d8:39:07:11:e4:2f:1a:f3:4d:f4:57:59:
e3:c4:b9:da:ce:e1:77:64:9e:23:6a:b1:80:a9:c3:1c:9c:38:
0c:ca:99:98:40:18:87:ca:ca:63:fb:64:fb:a0:b7:0a:83:72:
68:23:c0:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:30:17 2025 by rpki-client