Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.mft
File: PiWraYX3nKneBumOi52iRdhVmrY.mft (raw, json)
Hash identifier: PoeKDDtuq44VqiVG8/46OMz0oOrp9if7c4J8FG4iqOw=
Subject key identifier: B4:90:07:4B:7A:1D:E7:FF:7E:62:50:1E:8B:84:36:D5:B2:FF:B9:23
Authority key identifier: 3E:25:AB:69:85:F7:9C:A9:DE:06:E9:8E:8B:9D:A2:45:D8:55:9A:B6
Certificate issuer: /CN=3e25ab6985f79ca9de06e98e8b9da245d8559ab6
Certificate serial: 0198D4731106EB974F3F33E192CF92F2CD2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PiWraYX3nKneBumOi52iRdhVmrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.mft
Manifest number: 03C8
Signing time: Sat 23 Aug 2025 01:02:47 +0000
Manifest this update: Sat 23 Aug 2025 01:02:47 +0000
Manifest next update: Sun 24 Aug 2025 01:02:47 +0000
Files and hashes: 1: JIju3Zu3gqnn8i4w1MTEOOx7hro.roa (hash: dCgTEEXu0bVao+NC3O8cgRpfY5p29zC65jhR3uUto00=)
2: PiWraYX3nKneBumOi52iRdhVmrY.crl (hash: BxPX0PODFMGIc6GOpRrNVZIZ1tpwvrUeHEGn7OWvcfs=)
3: pwdlb--yOjorbcCQL2QR9oUUpWI.roa (hash: 1klYczNt5J1n/8K98SAjHgNfDm84PABZ1H0MBugMFMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.mft
rsync://rpki.ripe.net/repository/DEFAULT/PiWraYX3nKneBumOi52iRdhVmrY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:11:06:eb:97:4f:3f:33:e1:92:cf:92:f2:cd:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e25ab6985f79ca9de06e98e8b9da245d8559ab6
Validity
Not Before: Aug 23 01:02:47 2025 GMT
Not After : Aug 24 01:02:47 2025 GMT
Subject: CN=b490074b7a1de7ff7e62501e8b8436d5b2ffb923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ef:76:2a:df:8e:4d:69:dc:ad:56:2c:61:50:
5a:af:67:0d:f1:75:bd:49:c6:6f:64:7f:82:d7:60:
0b:d4:bb:bc:17:db:a6:96:21:a2:e5:73:af:09:ae:
30:b8:d3:3f:da:30:de:df:24:f5:9a:a1:2b:6e:2d:
0d:38:f2:29:ce:0d:14:36:08:1d:e0:7c:8d:b4:72:
cf:49:75:ea:aa:d6:2a:eb:df:c0:5b:f2:63:13:8d:
f2:a6:3f:c4:ee:38:1c:63:6e:14:9b:77:07:8f:90:
eb:9f:6c:1b:e5:b6:80:34:25:bd:46:14:fc:a6:11:
be:c9:0c:78:a2:98:fa:d6:f8:a7:fd:13:a7:4e:93:
4c:3d:f2:5a:9d:ae:94:e2:cc:57:91:6a:c9:f1:10:
a9:44:92:5e:a4:79:04:9a:4a:b3:8b:6b:b9:bf:b9:
fa:27:49:51:0d:b5:b4:f0:a0:c5:a2:54:2d:bc:1b:
f4:f8:4a:17:40:0e:48:64:5b:6a:cc:b0:33:24:32:
d7:39:b4:5b:e9:20:7e:25:70:24:9e:3f:ce:a7:01:
cb:2b:d0:5e:30:6a:60:1d:94:db:e0:32:00:6b:f9:
3d:59:5c:b4:9c:54:fc:e3:ee:4b:e0:a9:23:49:9e:
fb:97:b9:5b:c2:c0:bc:6a:2d:45:ee:dc:71:04:2e:
c0:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:90:07:4B:7A:1D:E7:FF:7E:62:50:1E:8B:84:36:D5:B2:FF:B9:23
X509v3 Authority Key Identifier:
keyid:3E:25:AB:69:85:F7:9C:A9:DE:06:E9:8E:8B:9D:A2:45:D8:55:9A:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PiWraYX3nKneBumOi52iRdhVmrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:e5:d7:d1:4a:cb:d7:dd:a3:4b:b1:5e:a6:2d:4f:91:d7:85:
c6:98:61:00:fb:83:4d:6d:c9:36:e8:c2:9b:d1:85:69:9e:ed:
33:f4:3c:40:b5:9a:3d:15:44:6b:e6:a4:da:be:33:a7:ce:9d:
e0:ad:45:5a:7a:94:fd:60:1d:10:f2:53:73:19:da:83:72:4b:
60:2e:b0:e4:ff:65:f0:9d:9e:b6:94:e3:d0:89:83:35:a7:17:
5e:aa:12:f7:8a:08:dd:cc:55:ee:28:9a:94:b4:ab:0b:3d:e3:
79:bc:0f:15:17:2b:c6:85:3a:6a:4f:b8:f2:6f:9d:c8:c8:2e:
0c:85:2f:b1:e9:c1:91:9e:49:85:7e:33:12:82:0d:17:0f:9b:
2a:2f:80:f7:ac:91:12:3d:75:23:62:0d:58:f0:73:5d:c8:c3:
c3:f0:b6:3e:72:74:df:d2:22:9b:0f:34:b1:d8:2e:84:dc:1e:
25:42:dd:70:f5:07:2a:01:7a:ac:dd:8f:65:f0:96:89:60:55:
a8:50:9f:e0:3d:7c:19:31:b2:73:08:a7:99:eb:e2:eb:94:17:
b9:b8:82:89:83:08:58:23:78:38:e0:9b:8f:62:94:bd:d9:40:
63:db:fa:ea:73:0b:64:96:80:f6:7d:94:e4:34:32:de:6a:46:
86:78:ae:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:01 2025 by rpki-client