Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/5fb803-4333-4175-90df-aec14ea17ebf/1/PWq-XEiuzr1KI34VPDaE8wYI1EQ.mft
File: PWq-XEiuzr1KI34VPDaE8wYI1EQ.mft (raw, json)
Hash identifier: I+c2sz5q1foFRTk7e7PXpQWGmbQBSEKMweEjRa/jlIY=
Subject key identifier: 2D:22:9C:9C:70:10:11:D0:21:91:A0:EF:30:E7:0E:C8:99:FD:7F:06
Authority key identifier: 3D:6A:BE:5C:48:AE:CE:BD:4A:23:7E:15:3C:36:84:F3:06:08:D4:44
Certificate issuer: /CN=3d6abe5c48aecebd4a237e153c3684f30608d444
Certificate serial: 0199FC5839790ABC27336C1DB9DEFFC40344
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PWq-XEiuzr1KI34VPDaE8wYI1EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/5fb803-4333-4175-90df-aec14ea17ebf/1/PWq-XEiuzr1KI34VPDaE8wYI1EQ.mft
Manifest number: 04E7
Signing time: Sun 19 Oct 2025 12:01:04 +0000
Manifest this update: Sun 19 Oct 2025 12:01:04 +0000
Manifest next update: Mon 20 Oct 2025 12:01:04 +0000
Files and hashes: 1: 0-NbRqc8zQ3-jTIYZOwXbybz260.roa (hash: F4aAH1P/CqccbM0rJQ6/jB1mC+tQi8oCbtTD8Uif+I8=)
2: PWq-XEiuzr1KI34VPDaE8wYI1EQ.crl (hash: UElnz6lagt8U7Lgh8CV91ZIolT47SBdzeVK1NYh7RGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/5fb803-4333-4175-90df-aec14ea17ebf/1/PWq-XEiuzr1KI34VPDaE8wYI1EQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/5fb803-4333-4175-90df-aec14ea17ebf/1/PWq-XEiuzr1KI34VPDaE8wYI1EQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PWq-XEiuzr1KI34VPDaE8wYI1EQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:39:79:0a:bc:27:33:6c:1d:b9:de:ff:c4:03:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d6abe5c48aecebd4a237e153c3684f30608d444
Validity
Not Before: Oct 19 12:01:04 2025 GMT
Not After : Oct 20 12:01:04 2025 GMT
Subject: CN=2d229c9c701011d02191a0ef30e70ec899fd7f06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3a:e3:18:ad:37:ea:89:1f:ec:d4:68:a6:cb:
b0:98:bb:94:6d:05:a2:73:bb:02:ac:4f:bc:9c:fd:
20:7f:50:83:40:9b:32:f5:01:77:a4:c4:0b:6b:9e:
c5:23:77:06:32:de:ce:d7:af:82:69:4b:08:3e:71:
be:19:d6:c1:c8:9b:57:1e:2b:eb:a5:25:26:97:9f:
2f:7c:de:2a:37:b6:5a:9a:f5:10:b4:75:25:2c:83:
2f:a2:df:aa:e4:7b:04:4c:dc:17:4a:45:fc:e6:ca:
9b:22:97:70:49:a2:ab:3a:15:d6:fc:56:e0:41:8d:
99:76:e4:8b:00:d1:be:2d:4c:f0:59:45:cb:c8:59:
71:7b:b7:5b:17:b4:78:e6:bb:ff:3b:0c:b9:a9:85:
4c:21:a9:e6:0e:01:cb:8f:fd:3f:46:c8:ec:1e:1f:
4c:17:f4:8c:a5:2d:6c:8b:77:59:e1:0a:65:46:45:
87:81:71:90:f5:91:c8:5b:89:97:fe:c2:ec:95:77:
08:d1:dd:95:02:61:94:65:33:0f:6f:5f:02:dd:58:
10:5c:3e:b4:f0:b8:52:06:ee:19:35:8b:b7:54:3c:
b8:a5:09:a8:f3:9b:92:a6:ba:03:39:0f:42:ef:14:
15:c4:57:ae:80:8d:0a:35:f5:a7:46:22:04:85:2f:
8f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:22:9C:9C:70:10:11:D0:21:91:A0:EF:30:E7:0E:C8:99:FD:7F:06
X509v3 Authority Key Identifier:
keyid:3D:6A:BE:5C:48:AE:CE:BD:4A:23:7E:15:3C:36:84:F3:06:08:D4:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PWq-XEiuzr1KI34VPDaE8wYI1EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/5fb803-4333-4175-90df-aec14ea17ebf/1/PWq-XEiuzr1KI34VPDaE8wYI1EQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/5fb803-4333-4175-90df-aec14ea17ebf/1/PWq-XEiuzr1KI34VPDaE8wYI1EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:11:46:86:e3:3d:09:a0:be:48:2f:52:b8:af:84:d6:3a:60:
c0:b8:47:de:5c:61:e6:a8:cc:5f:59:95:70:fb:6c:6c:6d:49:
d6:a3:fd:d1:60:0e:5f:2d:b2:87:63:45:69:1a:e1:ff:e1:6b:
6d:7d:4c:6d:93:ed:a4:08:32:2a:4d:0d:c5:fd:49:3a:ad:da:
a2:7f:f1:79:2b:f1:7a:1d:8f:7f:3a:eb:a1:00:e3:5a:bd:bd:
1a:50:7d:df:2b:28:7b:39:4a:22:1c:a1:74:ef:a5:59:f2:4f:
c7:72:77:34:08:c0:ec:b0:de:21:27:f0:62:6d:4d:0d:7d:30:
b9:fc:93:be:bd:a4:f4:6c:14:ea:0f:95:81:f8:42:d9:28:18:
9d:e9:59:8c:43:6f:17:fb:83:0f:da:36:4e:29:8e:07:67:b9:
42:3b:9c:86:00:64:4a:d6:82:e9:f2:f9:44:40:4a:fd:a7:98:
4a:c1:d8:21:c7:fa:d8:ac:9b:f2:ca:55:88:69:17:ad:bd:8a:
33:52:10:df:42:8c:e7:94:23:7d:e4:4a:7b:68:e0:09:85:bc:
3a:f7:2e:3c:42:5b:6c:6a:7d:e9:1d:88:5e:16:b3:89:be:cb:
08:a6:85:65:bf:ad:df:01:99:98:c1:23:72:59:1c:9e:2a:47:
6a:dd:af:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:29 2025 by rpki-client