Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.mft
File: PWVWSolU1q6VL4ofevbBz7p4CUo.mft (raw, json)
Hash identifier: hFrRGpRcwJlISxvW7Pl3O6UKqeSQqMnXpe2eyDos8ac=
Subject key identifier: D0:8B:F0:68:9B:55:9D:05:87:F1:C5:25:21:58:72:6C:C5:5C:D4:DF
Authority key identifier: 3D:65:56:4A:89:54:D6:AE:95:2F:8A:1F:7A:F6:C1:CF:BA:78:09:4A
Certificate issuer: /CN=3d65564a8954d6ae952f8a1f7af6c1cfba78094a
Certificate serial: 0198D65F4BCE7BD1AAC7A2AFDEA6F191BFFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PWVWSolU1q6VL4ofevbBz7p4CUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.mft
Manifest number: 1546
Signing time: Sat 23 Aug 2025 10:00:26 +0000
Manifest this update: Sat 23 Aug 2025 10:00:26 +0000
Manifest next update: Sun 24 Aug 2025 10:00:26 +0000
Files and hashes: 1: PWVWSolU1q6VL4ofevbBz7p4CUo.crl (hash: dfojrBhJ4i1FA49mIH2/WRzh18FSemcIaOlhBpeDm1U=)
2: ev3ATXcLdak2upi-q5CN2dVa8sw.roa (hash: Pui9NepJvKzqfzXLpJKX8HaOdkpWn4dOU8GbtL7nT0M=)
3: jnu9mPgopzA31RWkYxNmWkz3kyg.roa (hash: cra9mYolkxUmIpM2wu5PjhAJgTEYoxZ+ixlWu91VIrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PWVWSolU1q6VL4ofevbBz7p4CUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:4b:ce:7b:d1:aa:c7:a2:af:de:a6:f1:91:bf:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d65564a8954d6ae952f8a1f7af6c1cfba78094a
Validity
Not Before: Aug 23 10:00:26 2025 GMT
Not After : Aug 24 10:00:26 2025 GMT
Subject: CN=d08bf0689b559d0587f1c5252158726cc55cd4df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:52:cb:21:1b:e8:a7:68:7f:30:b0:8b:40:e2:
7c:b6:57:94:1f:7a:e8:93:ef:ac:82:03:ba:c5:dc:
9f:c7:5f:28:b0:48:e6:0b:a8:81:4f:4a:09:de:ea:
55:e0:0e:c3:02:26:33:35:64:e9:66:2f:d1:e1:69:
6a:ec:b8:a6:d9:29:b5:fc:99:4d:d1:12:09:39:80:
17:41:85:e4:a3:17:47:be:82:d7:18:01:ee:a2:98:
62:cb:48:3c:ce:40:e1:b5:eb:4e:bd:8f:f7:b6:d6:
64:02:25:62:cd:85:9f:e3:06:2d:df:9e:f5:b4:01:
a9:de:ab:ea:02:e0:3d:2e:68:fd:45:61:f7:4e:ed:
c9:63:fe:35:cf:7a:00:3e:a1:3f:ec:e5:b4:14:53:
95:28:76:29:11:a7:32:e9:f6:17:65:dc:c1:5d:b9:
1b:d9:c6:4f:d6:df:22:91:92:a1:98:80:d7:cf:72:
bf:50:90:9d:f6:df:64:53:5e:93:20:90:58:d7:e8:
e8:4a:bf:86:9c:cb:37:78:62:e3:ba:56:91:c3:d1:
d1:70:3b:22:d8:24:27:f1:02:bb:a0:ac:6d:31:94:
9b:4b:e0:59:19:73:a6:20:9c:84:9f:af:90:8e:b6:
8f:d8:9c:a1:3e:f8:df:ba:98:6a:6b:04:d8:25:6a:
bc:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:8B:F0:68:9B:55:9D:05:87:F1:C5:25:21:58:72:6C:C5:5C:D4:DF
X509v3 Authority Key Identifier:
keyid:3D:65:56:4A:89:54:D6:AE:95:2F:8A:1F:7A:F6:C1:CF:BA:78:09:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PWVWSolU1q6VL4ofevbBz7p4CUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:f0:8c:1a:09:0a:d4:f6:5f:2c:21:00:3a:13:bb:49:24:06:
77:89:4d:dc:d1:f6:df:27:95:94:b7:4c:d4:2c:50:14:50:13:
5d:52:0d:64:e2:6a:5c:35:b7:04:73:77:7e:11:6b:90:8e:91:
37:f0:49:ca:12:66:21:85:a2:11:d4:0e:8a:c1:63:ab:02:f3:
75:27:5e:bc:29:18:34:43:25:60:78:b1:c8:80:2c:d4:db:b4:
89:fc:11:61:00:92:62:7d:f5:51:84:94:55:91:43:34:72:fb:
f4:cb:4f:15:38:5b:a7:00:90:1f:21:18:0d:98:76:58:0b:ea:
49:76:52:ee:dd:e5:c4:5b:6d:82:73:c3:4c:23:be:f7:28:4b:
ba:2d:e8:cb:79:d1:9a:75:7f:28:23:a3:15:15:ad:f8:cc:4c:
f8:24:a3:0e:c4:e0:0b:23:24:3c:31:91:b3:8a:8b:29:ac:6a:
d0:60:ab:91:46:e9:b7:f8:95:2c:d0:11:82:52:8c:48:68:67:
bc:88:b0:a9:2e:bf:3e:da:4a:f2:ab:3a:a9:f4:e6:68:41:5b:
3b:aa:c6:4a:60:01:f9:8d:42:c7:63:5c:83:3a:95:68:66:1a:
a5:57:e6:b9:b7:b1:c9:76:76:9c:e3:ec:4d:06:da:73:d5:1e:
68:da:e6:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:59:27 2025 by rpki-client