Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/PWwpWBRfRfrV2u6zi3W1LAlmEEY.mft
File: PWwpWBRfRfrV2u6zi3W1LAlmEEY.mft (raw, json)
Hash identifier: fby/SPP+rdMNmm7Hj+gowN1uLsYYxttkti2jmcWGKiQ=
Subject key identifier: 9E:CD:9C:91:D8:14:1A:FA:86:FB:47:1D:CD:33:1D:73:04:DE:26:7D
Authority key identifier: 3D:6C:29:58:14:5F:45:FA:D5:DA:EE:B3:8B:75:B5:2C:09:66:10:46
Certificate issuer: /CN=3d6c2958145f45fad5daeeb38b75b52c09661046
Certificate serial: 01989034FBBFC6713C47E9C41C7A8BED7112
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PWwpWBRfRfrV2u6zi3W1LAlmEEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/PWwpWBRfRfrV2u6zi3W1LAlmEEY.mft
Manifest number: 058F
Signing time: Sat 09 Aug 2025 19:00:48 +0000
Manifest this update: Sat 09 Aug 2025 19:00:48 +0000
Manifest next update: Sun 10 Aug 2025 19:00:48 +0000
Files and hashes: 1: PWwpWBRfRfrV2u6zi3W1LAlmEEY.crl (hash: 05l0R398LVse7dkyohnYYZFWO+LTsWGfgVGuhwMy0Ts=)
2: gdLyflAsCyF8taKXwI9Ohy9cbTg.roa (hash: watnTPY7ltSg0Ey7o57Cxg1ndShvduTve51cc1ZXeew=)
3: t5B6L3SDpnNQxpYAOqxx1KDKYiM.roa (hash: 2vbjQ+gKJBatZbu743TFnHPjWQew0j+rLlGQUa/1PSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/PWwpWBRfRfrV2u6zi3W1LAlmEEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/PWwpWBRfRfrV2u6zi3W1LAlmEEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/PWwpWBRfRfrV2u6zi3W1LAlmEEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 19:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:90:34:fb:bf:c6:71:3c:47:e9:c4:1c:7a:8b:ed:71:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d6c2958145f45fad5daeeb38b75b52c09661046
Validity
Not Before: Aug 9 19:00:48 2025 GMT
Not After : Aug 10 19:00:48 2025 GMT
Subject: CN=9ecd9c91d8141afa86fb471dcd331d7304de267d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:f8:32:05:7e:ed:1a:d4:3a:1b:23:e7:a7:ae:
13:71:8e:98:ce:b1:84:71:22:47:7d:25:9e:48:ec:
25:f1:cf:05:76:00:cb:03:b8:5b:1e:ff:cc:6d:53:
aa:ff:cd:3c:a3:2a:72:b9:72:89:bd:48:ee:99:cb:
94:16:d5:d0:1c:e9:55:ae:b3:cb:77:ab:18:7c:41:
19:01:87:e7:8a:d3:07:d3:f2:24:98:07:47:22:16:
3b:b0:06:ee:bb:14:8d:bd:4f:10:48:71:2b:23:a5:
1a:8a:ed:f9:05:ba:09:b1:c9:d4:c0:ff:7d:32:e7:
25:85:5a:c6:66:25:8b:ed:a8:7b:ef:1e:8f:89:23:
85:fe:71:58:51:e4:f1:87:4b:66:86:c9:e9:f7:9f:
39:38:63:00:1c:ef:e6:b6:34:90:4a:5b:9a:fa:62:
5b:bc:33:10:93:66:3a:6c:12:95:25:84:f0:2f:15:
87:ab:3d:ae:ac:2a:43:a5:c8:bb:9c:77:c5:cf:c1:
04:6f:ad:25:12:5e:fd:09:c8:1e:72:cd:02:df:17:
ae:87:39:b6:62:dd:f9:f0:8b:5c:d7:16:79:22:d1:
34:37:1e:be:96:18:c4:2a:b1:b8:0d:df:b9:bd:53:
67:97:a8:63:09:ec:09:aa:a8:0b:3a:f9:93:71:79:
d6:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:CD:9C:91:D8:14:1A:FA:86:FB:47:1D:CD:33:1D:73:04:DE:26:7D
X509v3 Authority Key Identifier:
keyid:3D:6C:29:58:14:5F:45:FA:D5:DA:EE:B3:8B:75:B5:2C:09:66:10:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PWwpWBRfRfrV2u6zi3W1LAlmEEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/PWwpWBRfRfrV2u6zi3W1LAlmEEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/PWwpWBRfRfrV2u6zi3W1LAlmEEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:11:e1:53:ff:63:d5:a4:54:78:a5:d7:55:da:07:50:66:00:
76:47:a3:18:60:e4:1d:6c:7e:f5:2d:7c:f3:d5:4e:34:20:47:
e5:94:3a:6d:1c:78:a7:18:c5:a3:3c:e6:79:16:b5:b9:c0:ad:
88:02:bc:90:3c:bd:fc:28:b4:76:d0:22:27:9f:7c:a8:db:66:
6e:bd:a1:2b:99:8e:5e:d4:a0:2a:f3:29:b7:6a:7e:c2:14:fb:
2d:94:55:ba:ca:99:c9:8f:5e:31:c6:95:5c:c4:c8:04:24:30:
85:90:87:38:a7:96:28:e9:75:5d:de:f5:b2:04:6e:90:cd:70:
20:53:a4:4f:8c:6c:c1:9b:66:dc:f6:77:79:96:0e:ce:ff:a0:
19:f1:5b:95:07:01:44:b9:ba:04:a8:e3:ab:b2:54:18:7e:20:
70:3e:0c:0b:64:5e:6a:56:4f:b5:eb:c1:11:1e:8c:b9:db:ce:
ea:84:0c:e5:a3:13:1d:47:6b:5d:c8:11:ff:e3:fb:24:46:72:
74:5d:3d:34:98:4f:84:22:9d:fd:76:72:6c:43:40:f9:7e:ac:
6f:4b:49:ff:b1:ef:2e:53:4d:5b:c7:26:ea:be:75:df:64:79:
3c:7f:02:c0:10:75:d6:e0:ec:7f:57:ae:b6:1d:64:a9:d9:c0:
a3:ff:17:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiQNPu/xnE8R+nEHHqL7XESMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkNmMyOTU4MTQ1ZjQ1ZmFkNWRhZWViMzhiNzViNTJjMDk2
NjEwNDYwHhcNMjUwODA5MTkwMDQ4WhcNMjUwODEwMTkwMDQ4WjAzMTEwLwYDVQQD
Eyg5ZWNkOWM5MWQ4MTQxYWZhODZmYjQ3MWRjZDMzMWQ3MzA0ZGUyNjdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5PgyBX7tGtQ6GyPnp64TcY6YzrGE
cSJHfSWeSOwl8c8FdgDLA7hbHv/MbVOq/808oypyuXKJvUjumcuUFtXQHOlVrrPL
d6sYfEEZAYfnitMH0/IkmAdHIhY7sAbuuxSNvU8QSHErI6Uaiu35BboJscnUwP99
MuclhVrGZiWL7ah77x6PiSOF/nFYUeTxh0tmhsnp9585OGMAHO/mtjSQSlua+mJb
vDMQk2Y6bBKVJYTwLxWHqz2urCpDpci7nHfFz8EEb60lEl79Ccgecs0C3xeuhzm2
Yt358Itc1xZ5ItE0Nx6+lhjEKrG4Dd+5vVNnl6hjCewJqqgLOvmTcXnW5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ7NnJHYFBr6hvtHHc0zHXME3iZ9MB8GA1UdIwQY
MBaAFD1sKVgUX0X61drus4t1tSwJZhBGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFd3cFdCUmZSZnJWMnU2emkzVzFMQWxtRUVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8yYTU1NzQtN2IxMi00ZGEyLWEwNjQt
NWUxYjA3ODg5MjNiLzEvUFd3cFdCUmZSZnJWMnU2emkzVzFMQWxtRUVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS8yYTU1NzQtN2IxMi00ZGEyLWEwNjQtNWUxYjA3ODg5MjNi
LzEvUFd3cFdCUmZSZnJWMnU2emkzVzFMQWxtRUVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJxHhU/9j
1aRUeKXXVdoHUGYAdkejGGDkHWx+9S1889VONCBH5ZQ6bRx4pxjFozzmeRa1ucCt
iAK8kDy9/Ci0dtAiJ598qNtmbr2hK5mOXtSgKvMpt2p+whT7LZRVusqZyY9eMcaV
XMTIBCQwhZCHOKeWKOl1Xd71sgRukM1wIFOkT4xswZtm3PZ3eZYOzv+gGfFblQcB
RLm6BKjjq7JUGH4gcD4MC2RealZPtevBER6MudvO6oQM5aMTHUdrXcgR/+P7JEZy
dF09NJhPhCKd/XZybENA+X6sb0tJ/7HvLlNNW8cm6r5132R5PH8CwBB11uDsf1eu
th1kqdnAo/8XxA==
-----END CERTIFICATE-----
Generated at Sun Aug 10 05:34:21 2025 by rpki-client