Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.mft
File: PidCSWQA2BC-W0CW_e3sMKIx-as.mft (raw, json)
Hash identifier: 4Gg65PBfK5njrdLpFUbxKaFdJJpV6yVXxULPrNBrxnk=
Subject key identifier: 6E:30:7E:02:CA:03:87:AB:FA:E1:F5:41:DD:B1:D1:F4:54:DB:BF:9D
Authority key identifier: 3E:27:42:49:64:00:D8:10:BE:5B:40:96:FD:ED:EC:30:A2:31:F9:AB
Certificate issuer: /CN=3e2742496400d810be5b4096fdedec30a231f9ab
Certificate serial: 0197B70E8F67DF2086AEAF5C84ABE2DAF0FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PidCSWQA2BC-W0CW_e3sMKIx-as.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.mft
Manifest number: 0998
Signing time: Sat 28 Jun 2025 15:01:13 +0000
Manifest this update: Sat 28 Jun 2025 15:01:13 +0000
Manifest next update: Sun 29 Jun 2025 15:01:13 +0000
Files and hashes: 1: 5pXO0rccDvdcNpNF4kBVulDgfCw.roa (hash: N4A+PObGjvFgO5mi8UIuKYZJSnV7LB7QBUfSUqvfnRE=)
2: PidCSWQA2BC-W0CW_e3sMKIx-as.crl (hash: tJYciGT7ZA6DZD9nCn53NnkJzT+fqLtp3I3Lo57D2jg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.mft
rsync://rpki.ripe.net/repository/DEFAULT/PidCSWQA2BC-W0CW_e3sMKIx-as.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:8f:67:df:20:86:ae:af:5c:84:ab:e2:da:f0:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e2742496400d810be5b4096fdedec30a231f9ab
Validity
Not Before: Jun 28 15:01:13 2025 GMT
Not After : Jun 29 15:01:13 2025 GMT
Subject: CN=6e307e02ca0387abfae1f541ddb1d1f454dbbf9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f7:e7:ec:29:95:46:93:84:f4:87:e9:41:4a:
28:b9:97:95:df:a8:f7:55:57:1a:25:a6:54:65:c6:
6a:4a:c4:81:71:3a:65:fc:9e:00:21:d0:f4:02:68:
62:ca:04:76:70:9c:50:4e:0a:1f:c9:b4:43:0c:dc:
b8:ef:a2:dd:43:a7:78:9a:4a:d9:4d:a1:87:99:4a:
bf:0d:62:69:6a:55:27:ed:8a:5e:93:d3:7f:1e:e3:
91:eb:2a:07:27:1a:f3:cf:4e:35:00:47:1b:db:41:
06:e5:94:75:fb:57:70:da:05:a2:ec:2b:43:fa:76:
5b:65:04:e0:04:05:0a:0b:c4:fd:4f:65:41:10:46:
94:90:29:b5:15:17:0f:75:22:1c:2d:cd:85:4f:aa:
bf:36:c8:1e:7b:c4:6d:9c:cd:d8:41:37:3b:71:59:
cc:2e:d6:21:05:0a:a0:6e:39:fc:40:c8:8a:8f:b5:
40:f3:6b:60:42:fe:ef:25:d9:12:4e:91:76:dc:0c:
a2:b3:8c:2e:25:bd:bf:d0:73:b5:08:8c:f0:77:10:
02:50:e9:c3:54:db:f2:ef:9d:65:94:1b:2a:09:18:
3c:ae:90:1b:f0:fd:dd:b9:0f:c9:11:ad:46:ff:00:
3d:a0:47:e8:58:f1:35:7c:03:a9:08:92:4a:f1:17:
d5:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:30:7E:02:CA:03:87:AB:FA:E1:F5:41:DD:B1:D1:F4:54:DB:BF:9D
X509v3 Authority Key Identifier:
keyid:3E:27:42:49:64:00:D8:10:BE:5B:40:96:FD:ED:EC:30:A2:31:F9:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PidCSWQA2BC-W0CW_e3sMKIx-as.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:50:3b:af:6a:72:0d:66:d4:07:7e:17:29:2a:16:e1:ff:d4:
47:8d:e9:24:5d:a1:1f:1f:52:28:99:f1:52:d0:58:62:51:d5:
8f:26:3f:57:39:d9:b4:f4:81:31:5e:7f:ee:11:6a:0d:36:e2:
f5:16:e1:dc:da:cb:e7:8f:08:aa:e4:2f:45:6b:26:d6:7e:4d:
9d:3d:0f:7c:51:db:74:12:a5:15:ac:fc:c3:51:fe:1d:26:63:
e6:38:6a:3b:42:33:60:66:f1:08:93:62:84:e5:14:73:3f:47:
88:a6:97:22:96:10:12:f7:3c:f1:0a:f1:31:73:83:e0:d4:98:
7a:54:26:31:18:16:a4:15:99:2d:54:64:42:d9:5c:5f:60:6a:
ad:09:0a:e8:5b:da:ac:19:8b:5e:ee:5e:ab:96:28:34:8a:f8:
bc:15:06:00:fe:8c:f3:b3:fe:cf:81:97:58:fe:cf:a7:7e:05:
48:93:d9:98:ef:9a:5b:6a:28:97:d4:39:c1:01:f7:70:5c:11:
61:d2:27:1e:92:47:5c:fa:16:3b:6f:3c:3b:49:66:39:26:0a:
22:c9:bb:ef:04:85:c7:25:6f:fd:cc:38:cd:84:bb:d0:7c:33:
9c:e2:a5:90:8c:83:f1:d8:d9:2e:60:06:6b:58:de:be:9b:18:
67:f9:24:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3Do9n3yCGrq9chKvi2vD+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlMjc0MjQ5NjQwMGQ4MTBiZTViNDA5NmZkZWRlYzMwYTIz
MWY5YWIwHhcNMjUwNjI4MTUwMTEzWhcNMjUwNjI5MTUwMTEzWjAzMTEwLwYDVQQD
Eyg2ZTMwN2UwMmNhMDM4N2FiZmFlMWY1NDFkZGIxZDFmNDU0ZGJiZjlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoffn7CmVRpOE9IfpQUoouZeV36j3
VVcaJaZUZcZqSsSBcTpl/J4AIdD0AmhiygR2cJxQTgofybRDDNy476LdQ6d4mkrZ
TaGHmUq/DWJpalUn7Ypek9N/HuOR6yoHJxrzz041AEcb20EG5ZR1+1dw2gWi7CtD
+nZbZQTgBAUKC8T9T2VBEEaUkCm1FRcPdSIcLc2FT6q/Nsgee8RtnM3YQTc7cVnM
LtYhBQqgbjn8QMiKj7VA82tgQv7vJdkSTpF23Ayis4wuJb2/0HO1CIzwdxACUOnD
VNvy751llBsqCRg8rpAb8P3duQ/JEa1G/wA9oEfoWPE1fAOpCJJK8RfVTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG4wfgLKA4er+uH1Qd2x0fRU27+dMB8GA1UdIwQY
MBaAFD4nQklkANgQvltAlv3t7DCiMfmrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGlkQ1NXUUEyQkMtVzBDV19lM3NNS0l4LWFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85MjJmNmQtN2E3NC00ZmE4LTk0OTUt
MTg0ZGZmMjkyYTMwLzEvUGlkQ1NXUUEyQkMtVzBDV19lM3NNS0l4LWFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS85MjJmNmQtN2E3NC00ZmE4LTk0OTUtMTg0ZGZmMjkyYTMw
LzEvUGlkQ1NXUUEyQkMtVzBDV19lM3NNS0l4LWFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPFA7r2py
DWbUB34XKSoW4f/UR43pJF2hHx9SKJnxUtBYYlHVjyY/VznZtPSBMV5/7hFqDTbi
9Rbh3NrL548IquQvRWsm1n5NnT0PfFHbdBKlFaz8w1H+HSZj5jhqO0IzYGbxCJNi
hOUUcz9HiKaXIpYQEvc88QrxMXOD4NSYelQmMRgWpBWZLVRkQtlcX2BqrQkK6Fva
rBmLXu5eq5YoNIr4vBUGAP6M87P+z4GXWP7Pp34FSJPZmO+aW2ool9Q5wQH3cFwR
YdInHpJHXPoWO288O0lmOSYKIsm77wSFxyVv/cw4zYS70HwznOKlkIyD8djZLmAG
a1jevpsYZ/kkSA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:32:47 2025 by rpki-client