Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft
File: PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft (raw, json)
Hash identifier: 7k4pL0YSVSpF6g1o/psH7xkpIyCKoOFvZSSunN1iT6A=
Subject key identifier: 4F:F6:8F:8F:68:47:5E:9E:BE:A6:61:71:AB:C0:D0:79:1B:38:12:4F
Authority key identifier: 3C:85:9E:D6:93:CE:3D:E0:59:CA:A0:A0:C1:E4:24:5C:5E:9E:37:E4
Certificate issuer: /CN=3c859ed693ce3de059caa0a0c1e4245c5e9e37e4
Certificate serial: 0199FCC6C52BEA2ACF17DB4A6148913824CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PIWe1pPOPeBZyqCgweQkXF6eN-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft
Manifest number: 0887
Signing time: Sun 19 Oct 2025 14:01:48 +0000
Manifest this update: Sun 19 Oct 2025 14:01:48 +0000
Manifest next update: Mon 20 Oct 2025 14:01:48 +0000
Files and hashes: 1: PIWe1pPOPeBZyqCgweQkXF6eN-Q.crl (hash: i8agjnu603SJc2KA+sQG4eE3hzAnQe6UaVIpnWoKU3g=)
2: cIvicQwvTTI6J8NGKDerxCkfUpQ.roa (hash: KRBjaA428X4oNlaq/pV1Uncb9bEVRkbIjJIh/xlTHjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/PIWe1pPOPeBZyqCgweQkXF6eN-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:c5:2b:ea:2a:cf:17:db:4a:61:48:91:38:24:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c859ed693ce3de059caa0a0c1e4245c5e9e37e4
Validity
Not Before: Oct 19 14:01:48 2025 GMT
Not After : Oct 20 14:01:48 2025 GMT
Subject: CN=4ff68f8f68475e9ebea66171abc0d0791b38124f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b7:aa:f8:91:8c:59:5f:ef:96:c6:f2:b3:0a:
fc:33:64:64:38:d8:e3:8d:73:55:4d:89:b4:30:32:
e9:ea:3b:00:13:8b:d0:24:66:3b:68:1e:b3:b0:86:
cb:0a:6c:db:0d:6a:d6:4c:59:6a:65:27:49:52:4c:
b7:2c:b9:47:05:d5:ab:9e:7d:7d:67:e4:f2:5d:bb:
c3:1e:c1:2e:a9:5f:03:42:15:cd:2e:1e:eb:d9:26:
39:a9:8b:a9:64:c3:75:b9:d2:30:35:aa:83:b3:1f:
8a:16:4e:22:29:0d:ce:5d:ab:4e:03:c6:c9:5b:13:
d3:db:b7:94:a6:e8:2e:c7:09:69:fe:45:6e:ca:bb:
51:12:2e:e7:e3:c7:c5:be:ac:2a:c0:7a:63:1c:e9:
03:4a:ec:e8:14:85:6d:a9:da:91:dc:4f:ce:d2:55:
ec:d4:76:73:2e:1a:16:15:7b:49:50:52:5f:a1:0f:
7b:1d:bc:36:f1:83:63:94:dc:35:05:a1:0a:d9:4f:
78:a4:dc:ea:ca:5f:4d:1c:71:a9:43:83:dd:42:32:
c5:57:72:96:ed:97:93:eb:48:e0:61:70:76:c1:d3:
55:55:39:fc:7a:7e:ce:35:d7:f4:e1:c6:92:0f:97:
44:82:5b:80:bd:cc:7f:25:a9:3f:83:c0:92:6f:a2:
23:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:F6:8F:8F:68:47:5E:9E:BE:A6:61:71:AB:C0:D0:79:1B:38:12:4F
X509v3 Authority Key Identifier:
keyid:3C:85:9E:D6:93:CE:3D:E0:59:CA:A0:A0:C1:E4:24:5C:5E:9E:37:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PIWe1pPOPeBZyqCgweQkXF6eN-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:a5:00:b2:10:2d:39:5a:40:6e:a8:90:7a:d8:c0:2f:62:c5:
8d:53:01:63:d4:e1:f9:26:d4:e0:17:24:60:ef:42:69:2f:da:
13:b6:c6:71:56:d1:7f:e2:d7:3a:70:53:06:0c:6b:ab:7d:c3:
06:fb:9c:d4:da:52:91:c3:b7:10:05:bd:8e:ca:9e:ed:c0:a2:
a6:66:ed:4b:64:cc:ae:70:cf:83:17:ef:ed:11:ae:9f:91:82:
cf:61:fc:dd:e9:f7:e6:ea:f5:77:32:27:ed:a9:6a:2c:df:64:
e8:e5:8e:c6:8e:0d:29:53:c2:13:76:2a:08:1c:f6:07:5e:60:
8e:cb:90:40:bb:70:12:5c:56:12:72:e4:3c:68:a7:71:44:91:
f2:2f:15:d9:d3:4c:1d:ad:55:df:1c:45:4c:01:00:c9:87:e0:
f3:07:89:6a:54:aa:e7:f1:41:e5:a2:00:5e:81:70:67:86:30:
dc:16:ba:2f:df:54:5e:31:b9:c4:ef:95:11:ee:37:d4:d0:19:
d8:4d:a4:43:65:fc:bd:3c:1d:d5:56:d6:78:bc:74:32:f7:59:
fc:fe:73:4a:48:13:a7:a0:83:b0:76:e4:35:df:7b:cf:4e:cd:
26:cc:6c:37:42:6d:53:76:14:35:f8:b7:1f:06:62:b0:4b:3c:
a3:96:60:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:44:54 2025 by rpki-client