
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft
File: PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft (raw, json)
Hash identifier: uaiU3h7iyy54gsRgcVhXm3NwvqMnaWl67/D2H5RMYyM=
Subject key identifier: B0:12:40:D1:82:A9:63:BD:60:CD:D2:FC:20:20:F9:66:60:42:9E:C3
Authority key identifier: 3C:85:9E:D6:93:CE:3D:E0:59:CA:A0:A0:C1:E4:24:5C:5E:9E:37:E4
Certificate issuer: /CN=3c859ed693ce3de059caa0a0c1e4245c5e9e37e4
Certificate serial: 0198D54E0B80182C92772F60246D1A56B27A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PIWe1pPOPeBZyqCgweQkXF6eN-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft
Manifest number: 07EE
Signing time: Sat 23 Aug 2025 05:01:58 +0000
Manifest this update: Sat 23 Aug 2025 05:01:58 +0000
Manifest next update: Sun 24 Aug 2025 05:01:58 +0000
Files and hashes: 1: PIWe1pPOPeBZyqCgweQkXF6eN-Q.crl (hash: +IZRJmJR3r5771FtsemOyJZDyQZchXvnFEqHECSFzuE=)
2: cIvicQwvTTI6J8NGKDerxCkfUpQ.roa (hash: KRBjaA428X4oNlaq/pV1Uncb9bEVRkbIjJIh/xlTHjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/PIWe1pPOPeBZyqCgweQkXF6eN-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:0b:80:18:2c:92:77:2f:60:24:6d:1a:56:b2:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c859ed693ce3de059caa0a0c1e4245c5e9e37e4
Validity
Not Before: Aug 23 05:01:58 2025 GMT
Not After : Aug 24 05:01:58 2025 GMT
Subject: CN=b01240d182a963bd60cdd2fc2020f96660429ec3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:64:5a:4c:56:2c:8a:77:32:3d:09:99:37:1e:
9d:63:8c:c2:46:70:5b:b8:79:75:1c:70:7c:e1:f8:
5c:92:de:78:7a:74:c8:83:88:89:79:78:90:d4:4f:
48:87:e1:c5:a6:76:b6:78:49:d6:03:ff:df:13:6f:
92:15:43:08:bb:ff:d3:fe:28:3c:6a:ee:04:9f:e9:
e4:37:2a:41:b3:d7:a0:67:51:2f:ca:34:58:10:48:
0a:f4:92:67:db:31:2e:b7:3b:a3:13:e6:d2:cd:fb:
7e:a3:09:39:d6:28:4c:80:a3:e5:e7:31:67:8c:0c:
24:7d:d6:a9:7f:8f:23:a9:80:62:8b:df:60:c4:53:
b6:f7:38:7e:4a:93:81:e6:61:10:a3:7b:d8:c7:d7:
9f:43:32:80:ff:7d:d2:24:f6:c4:0e:45:9f:1c:99:
e9:c7:d1:4f:a2:42:b6:00:2c:88:03:93:f3:48:1f:
db:2b:20:5f:27:3f:c0:49:5a:56:f1:7e:fe:2c:13:
c6:10:5e:b9:e4:83:c6:1c:4d:36:a5:5e:8f:06:77:
66:85:be:ac:3f:4e:5e:c6:4a:1e:36:36:b5:df:54:
fc:38:06:5e:b9:55:3a:6f:1e:27:b9:d5:b5:a0:e8:
31:ea:9a:ad:ad:23:5d:d6:77:26:57:4c:95:df:3b:
5c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:12:40:D1:82:A9:63:BD:60:CD:D2:FC:20:20:F9:66:60:42:9E:C3
X509v3 Authority Key Identifier:
keyid:3C:85:9E:D6:93:CE:3D:E0:59:CA:A0:A0:C1:E4:24:5C:5E:9E:37:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PIWe1pPOPeBZyqCgweQkXF6eN-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:ff:95:7e:1d:4a:be:5a:6d:c6:49:e1:98:c7:87:62:24:01:
23:36:0c:82:dd:52:28:74:77:65:2c:46:59:7c:6e:58:94:46:
df:c5:16:d8:78:46:20:b6:c9:0f:0d:0f:c5:b6:6f:ce:ab:4b:
fc:e9:34:dc:7d:9f:d5:2e:5a:8b:28:29:7e:58:d9:35:1e:6f:
f6:77:ee:0c:87:9d:ea:00:80:94:42:71:63:a2:de:97:1d:8a:
b2:3c:b4:a4:8f:3e:f2:19:95:94:f1:79:80:0e:17:55:87:39:
1f:3a:e6:8d:f0:3f:21:9c:bb:33:7b:0d:59:85:f4:6f:0d:8b:
f9:9f:d7:36:ee:47:e9:37:ac:c7:7c:3a:dc:0d:7a:55:19:90:
c9:4f:79:4c:7e:90:83:f0:31:c8:d4:32:e7:a1:a9:21:00:2e:
6e:4a:9d:c1:d5:1f:27:3c:c3:d3:4b:4f:01:47:75:95:3e:89:
40:04:9e:c0:26:d6:4f:3f:35:7e:9e:a5:bd:6c:bb:62:4b:71:
90:66:17:a9:d0:aa:f4:3d:a1:d0:7f:ea:f4:6e:86:03:0e:35:
eb:35:15:85:c8:76:b9:be:1c:e9:3a:d7:c7:37:01:fe:36:03:
a7:c4:30:27:35:9d:10:5c:9c:29:53:12:26:5c:02:18:4a:69:
7f:1f:5e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:43:10 2025 by rpki-client