Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.mft
File: PWVWSolU1q6VL4ofevbBz7p4CUo.mft (raw, json)
Hash identifier: 5/SGFP7ieQZ72PKYzktgh57yXSWj8Fjx+jfkUcIarmk=
Subject key identifier: 71:43:53:4D:12:12:A9:2F:4F:C4:3C:99:8E:27:96:DC:FF:4A:E3:81
Authority key identifier: 3D:65:56:4A:89:54:D6:AE:95:2F:8A:1F:7A:F6:C1:CF:BA:78:09:4A
Certificate issuer: /CN=3d65564a8954d6ae952f8a1f7af6c1cfba78094a
Certificate serial: 0199FFC73AC54000D08A5B2B38119E0BF3CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PWVWSolU1q6VL4ofevbBz7p4CUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.mft
Manifest number: 15E0
Signing time: Mon 20 Oct 2025 04:01:10 +0000
Manifest this update: Mon 20 Oct 2025 04:01:10 +0000
Manifest next update: Tue 21 Oct 2025 04:01:10 +0000
Files and hashes: 1: PWVWSolU1q6VL4ofevbBz7p4CUo.crl (hash: A08HOnjeOX116gSKslmC0+eMZGD5stOFN63xEV16EBc=)
2: ev3ATXcLdak2upi-q5CN2dVa8sw.roa (hash: Pui9NepJvKzqfzXLpJKX8HaOdkpWn4dOU8GbtL7nT0M=)
3: jnu9mPgopzA31RWkYxNmWkz3kyg.roa (hash: cra9mYolkxUmIpM2wu5PjhAJgTEYoxZ+ixlWu91VIrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PWVWSolU1q6VL4ofevbBz7p4CUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:3a:c5:40:00:d0:8a:5b:2b:38:11:9e:0b:f3:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d65564a8954d6ae952f8a1f7af6c1cfba78094a
Validity
Not Before: Oct 20 04:01:10 2025 GMT
Not After : Oct 21 04:01:10 2025 GMT
Subject: CN=7143534d1212a92f4fc43c998e2796dcff4ae381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9f:c4:81:7d:8a:37:92:89:8e:40:83:96:5f:
65:ea:3e:46:84:00:ea:b2:0b:32:8e:5b:f2:c4:23:
bc:42:89:fd:81:2d:69:4d:f1:2a:a1:22:2c:ec:9a:
52:84:89:33:60:1b:66:e6:a4:bc:71:5a:0d:df:64:
df:98:e9:28:ca:a0:3f:da:5a:19:49:4b:d9:29:69:
ca:e3:fc:3d:5b:21:8a:68:ce:c0:e7:82:38:59:1c:
54:17:1b:ca:e0:78:1f:42:53:49:cf:04:e8:5f:5a:
bf:07:c9:03:d5:2e:7b:96:49:23:f0:8c:fe:57:1e:
66:93:bb:f6:9b:19:08:bd:73:c7:02:97:13:f1:61:
64:f0:59:2c:8d:0b:2d:1d:12:55:16:b2:87:54:5c:
08:ea:e6:56:3f:dc:bf:cf:0f:e8:64:c9:aa:67:9e:
9a:3a:08:e1:1c:35:ed:06:97:50:97:9f:29:89:24:
9c:10:76:1c:a2:57:b0:6c:b2:8a:7e:fd:36:55:ea:
72:3f:6b:3d:1b:cf:9f:56:97:00:58:16:89:b4:94:
ff:95:d6:4d:4b:51:40:af:b2:5d:65:f8:1c:d0:63:
1c:36:1d:2f:7c:4f:2d:4d:cd:35:07:70:70:16:cb:
e0:5a:07:58:aa:27:6e:c0:48:c0:0f:b0:bb:d6:1b:
14:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:43:53:4D:12:12:A9:2F:4F:C4:3C:99:8E:27:96:DC:FF:4A:E3:81
X509v3 Authority Key Identifier:
keyid:3D:65:56:4A:89:54:D6:AE:95:2F:8A:1F:7A:F6:C1:CF:BA:78:09:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PWVWSolU1q6VL4ofevbBz7p4CUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:83:f4:d2:b4:81:1b:36:ca:ee:92:c5:b8:0a:70:e1:6e:ba:
ea:ba:22:2d:2c:3a:2a:0c:0e:e7:cf:07:5d:bb:e7:ef:bf:d6:
1f:10:8f:2b:14:ea:72:25:f2:a5:8a:2d:98:4e:c9:3e:9c:77:
b9:3b:e1:0d:a4:a5:be:8b:42:41:5d:b2:50:1d:2f:02:a4:70:
a2:9f:9e:0f:23:06:94:ff:cc:39:4b:53:41:1a:45:54:6e:c0:
5e:f4:a4:52:d1:5a:7d:07:2b:17:3f:bd:84:9b:4b:f2:34:39:
f6:6b:c6:93:bd:fc:87:4e:30:4e:23:7e:b7:ee:96:98:e4:65:
12:78:07:d0:70:af:f3:26:59:c3:2d:72:ae:19:98:09:f0:89:
6c:7b:4a:84:d3:87:f9:16:de:5e:d6:30:4e:ba:fd:f9:ea:c9:
54:80:bb:d5:17:b1:a2:7f:eb:f5:08:0d:a8:bc:33:4d:a3:bf:
c0:52:ae:25:68:e0:b8:e7:d7:4c:67:40:85:31:3c:b5:69:c5:
66:66:63:ef:a1:5c:f8:de:c6:94:23:a1:ce:50:8c:dc:63:60:
ca:8d:80:9e:f9:f8:d9:65:08:57:6c:6b:32:6f:c5:a3:32:e6:
3b:9f:f2:d8:32:03:50:09:ac:8f:ea:b6:f8:d6:ba:e9:b9:23:
88:b5:e9:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:51:42 2025 by rpki-client