Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.mft
File: PiWraYX3nKneBumOi52iRdhVmrY.mft (raw, json)
Hash identifier: wmO/5u8ivDn55CdoniVRctX1CkFJLiobyg/oH3NVcw0=
Subject key identifier: 96:3F:44:AE:16:0F:98:51:33:87:6A:8D:7D:62:81:BD:DF:20:B2:22
Authority key identifier: 3E:25:AB:69:85:F7:9C:A9:DE:06:E9:8E:8B:9D:A2:45:D8:55:9A:B6
Certificate issuer: /CN=3e25ab6985f79ca9de06e98e8b9da245d8559ab6
Certificate serial: 0197B6A19F74153550B453DB34E7D6640095
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PiWraYX3nKneBumOi52iRdhVmrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.mft
Manifest number: 0334
Signing time: Sat 28 Jun 2025 13:02:14 +0000
Manifest this update: Sat 28 Jun 2025 13:02:14 +0000
Manifest next update: Sun 29 Jun 2025 13:02:14 +0000
Files and hashes: 1: JIju3Zu3gqnn8i4w1MTEOOx7hro.roa (hash: dCgTEEXu0bVao+NC3O8cgRpfY5p29zC65jhR3uUto00=)
2: PiWraYX3nKneBumOi52iRdhVmrY.crl (hash: QNhLozJJfwmhwDKxKk/i/pz/WDQyC3/pgvDRtjHcTeE=)
3: pwdlb--yOjorbcCQL2QR9oUUpWI.roa (hash: 1klYczNt5J1n/8K98SAjHgNfDm84PABZ1H0MBugMFMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.mft
rsync://rpki.ripe.net/repository/DEFAULT/PiWraYX3nKneBumOi52iRdhVmrY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:9f:74:15:35:50:b4:53:db:34:e7:d6:64:00:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e25ab6985f79ca9de06e98e8b9da245d8559ab6
Validity
Not Before: Jun 28 13:02:14 2025 GMT
Not After : Jun 29 13:02:14 2025 GMT
Subject: CN=963f44ae160f985133876a8d7d6281bddf20b222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:9a:34:8e:a6:c5:b8:45:e4:d1:9f:cd:30:f8:
d3:39:33:5c:0a:44:74:11:57:55:80:6c:ac:b7:e6:
00:29:4e:43:63:b4:4b:82:87:74:c5:e2:7d:86:4d:
9b:ff:a0:d8:0a:49:52:f7:04:cd:14:6f:39:2b:c5:
a9:5d:f6:e2:03:86:25:7f:a0:58:62:5b:d0:de:1b:
2f:83:43:54:9a:b2:f1:d7:e3:9b:13:0a:6c:c3:ca:
44:cd:8d:8c:34:00:6b:92:a2:a8:cb:7d:ca:40:49:
54:31:4f:d4:cd:e2:6d:d0:4d:33:71:6c:d6:f8:4e:
d6:b2:d6:43:e1:51:85:5c:22:c7:75:9c:7e:ab:71:
17:e3:c8:9c:8c:02:64:f9:22:73:19:04:a5:ca:b3:
3f:ab:74:24:23:fc:9f:eb:63:14:2a:52:3d:05:d6:
87:b5:3f:08:19:d6:58:a2:01:79:53:08:ba:98:75:
98:01:9c:cb:fc:a9:03:af:05:05:c4:95:be:f5:77:
2a:57:66:57:bc:57:cc:e4:3a:d1:5b:f8:fe:e2:f4:
d5:6b:6a:97:0d:58:a5:1a:9b:69:ed:f1:f9:e3:cc:
13:43:96:33:9d:eb:e1:da:6d:a8:19:e2:97:40:1c:
0a:fb:60:a6:75:87:70:a5:af:39:19:e1:01:4c:90:
c5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:3F:44:AE:16:0F:98:51:33:87:6A:8D:7D:62:81:BD:DF:20:B2:22
X509v3 Authority Key Identifier:
keyid:3E:25:AB:69:85:F7:9C:A9:DE:06:E9:8E:8B:9D:A2:45:D8:55:9A:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PiWraYX3nKneBumOi52iRdhVmrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:76:88:a5:4f:41:7f:3e:d2:9d:ac:61:15:e7:b0:3d:c4:b9:
e5:c5:9f:f8:13:9d:37:22:ba:e9:9f:0d:43:8c:46:11:35:7b:
fb:e2:c9:ba:f4:f5:46:b2:53:74:51:32:86:ff:11:4b:ac:9f:
40:23:af:12:81:cb:21:1a:dd:83:93:80:7a:42:4d:93:e1:a9:
4c:a5:70:0c:ca:f4:f4:fc:7f:ce:a7:f4:f2:10:90:3b:30:cb:
06:f3:1d:dc:fe:a0:26:a1:9d:2f:90:bd:a0:0a:0a:4c:c2:29:
02:37:7d:3d:37:f1:0f:62:a3:ac:69:64:f0:65:f9:38:fe:2a:
9d:8e:97:12:83:c6:ab:ea:de:73:fb:74:3f:f8:51:bc:d8:d2:
7f:71:8c:44:68:28:01:d7:34:41:c6:5e:aa:ef:d0:cd:5f:b1:
e6:67:90:ae:4e:af:8c:73:e7:35:18:a1:65:fd:ea:82:6f:18:
1e:60:90:7f:d0:b7:a8:a4:cc:95:89:05:41:ac:75:f8:52:1b:
6e:89:b5:75:1e:0e:18:cd:89:26:b9:11:c5:9f:3a:c5:77:47:
f1:9c:f7:69:74:01:36:90:7a:f1:5c:8c:a2:01:8f:7a:f8:bd:
dc:eb:55:a6:94:c3:bb:f9:1f:e5:86:ea:11:79:10:55:51:a7:
e6:68:66:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:42:19 2025 by rpki-client