Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/PWwpWBRfRfrV2u6zi3W1LAlmEEY.mft
File: PWwpWBRfRfrV2u6zi3W1LAlmEEY.mft (raw, json)
Hash identifier: VwEreqd5V6L4JV+A3cTs+EWBRLzpyE9ouOWB30hxNCo=
Subject key identifier: E7:EA:D6:06:54:57:AC:31:31:52:17:9F:98:14:D2:DF:7C:EB:3B:91
Authority key identifier: 3D:6C:29:58:14:5F:45:FA:D5:DA:EE:B3:8B:75:B5:2C:09:66:10:46
Certificate issuer: /CN=3d6c2958145f45fad5daeeb38b75b52c09661046
Certificate serial: 019A522C11EF43636E67EFC083130C4B136A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PWwpWBRfRfrV2u6zi3W1LAlmEEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/PWwpWBRfRfrV2u6zi3W1LAlmEEY.mft
Manifest number: 0678
Signing time: Wed 05 Nov 2025 04:00:11 +0000
Manifest this update: Wed 05 Nov 2025 04:00:11 +0000
Manifest next update: Thu 06 Nov 2025 04:00:11 +0000
Files and hashes: 1: PWwpWBRfRfrV2u6zi3W1LAlmEEY.crl (hash: k2klXE0F4T5uPA2UoBjL58YGBajsHro6m8uEjc4iThg=)
2: gdLyflAsCyF8taKXwI9Ohy9cbTg.roa (hash: watnTPY7ltSg0Ey7o57Cxg1ndShvduTve51cc1ZXeew=)
3: t5B6L3SDpnNQxpYAOqxx1KDKYiM.roa (hash: 2vbjQ+gKJBatZbu743TFnHPjWQew0j+rLlGQUa/1PSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/PWwpWBRfRfrV2u6zi3W1LAlmEEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/PWwpWBRfRfrV2u6zi3W1LAlmEEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/PWwpWBRfRfrV2u6zi3W1LAlmEEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:11:ef:43:63:6e:67:ef:c0:83:13:0c:4b:13:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d6c2958145f45fad5daeeb38b75b52c09661046
Validity
Not Before: Nov 5 04:00:11 2025 GMT
Not After : Nov 6 04:00:11 2025 GMT
Subject: CN=e7ead6065457ac313152179f9814d2df7ceb3b91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b9:8c:c8:71:6d:65:71:08:f3:3f:62:81:fa:
b1:46:7b:35:2b:11:c6:d0:96:45:22:96:0e:6b:9c:
4a:a2:3e:13:b2:d7:5b:50:60:88:74:89:9b:56:c1:
05:a7:aa:52:9a:d3:b6:60:69:93:5e:82:92:20:fe:
16:5e:cc:f5:b1:33:dd:08:bc:ec:53:61:70:ba:da:
fa:37:7a:eb:b3:3c:6f:6d:3b:34:93:60:a6:a2:56:
98:0e:52:ef:35:14:c7:9b:cc:22:3a:2c:b6:13:02:
d1:60:76:df:7a:9a:cc:75:13:96:4e:80:45:2a:f5:
02:74:df:5f:1f:6b:81:78:e8:d6:01:23:6b:db:52:
e8:b5:73:22:c4:a3:4a:22:63:ec:26:6f:8f:fa:bd:
dc:d5:a5:1a:d2:1f:5f:b6:cd:98:83:bb:55:c3:9f:
83:95:a6:a1:15:ff:be:b4:36:00:10:ae:d8:d7:aa:
01:ee:29:ba:71:88:19:77:3b:07:20:46:22:7d:60:
cf:49:8b:3d:a8:1d:cb:1a:5a:90:90:38:eb:9e:c5:
d7:a7:e5:2f:97:16:b0:12:3f:fa:c6:5a:3b:28:f9:
f6:bc:2e:6d:95:59:8c:64:d0:b4:5f:13:5a:cf:0a:
3e:9d:fb:19:7f:35:aa:5e:75:ea:79:25:41:96:9a:
cc:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:EA:D6:06:54:57:AC:31:31:52:17:9F:98:14:D2:DF:7C:EB:3B:91
X509v3 Authority Key Identifier:
keyid:3D:6C:29:58:14:5F:45:FA:D5:DA:EE:B3:8B:75:B5:2C:09:66:10:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PWwpWBRfRfrV2u6zi3W1LAlmEEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/PWwpWBRfRfrV2u6zi3W1LAlmEEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/PWwpWBRfRfrV2u6zi3W1LAlmEEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:dd:3f:75:e0:b1:77:5e:60:b4:34:7c:2f:da:c5:3c:4c:fb:
21:b9:d4:f5:35:8e:b2:0a:27:44:c0:d7:b6:a7:32:c1:bf:e7:
92:87:dd:93:36:b3:cb:25:a8:79:82:4a:70:3a:ed:9f:8b:0e:
e6:c5:b0:9c:1e:21:49:37:7a:d0:26:1b:46:0b:64:6c:57:bf:
ed:33:fc:a8:d4:d9:bd:72:1a:71:ff:3a:b5:cd:4d:4d:7b:e5:
69:9f:16:53:57:4d:27:f7:76:21:1c:d6:f6:f4:3a:62:db:88:
30:ae:08:7c:4f:d7:13:0c:91:b3:29:11:04:fa:b7:95:77:ea:
39:de:22:56:96:2b:bc:ae:a8:97:26:37:49:e1:89:87:0a:5b:
a9:fe:bc:80:b3:57:61:f1:56:bc:3a:ca:25:a9:da:fc:f6:5f:
3d:50:28:e2:25:0f:5d:29:d0:a5:9d:4a:a5:b9:03:8f:cb:47:
07:b0:53:89:f5:1f:13:bd:3c:ba:fe:27:d4:db:5f:1e:6f:0b:
2f:23:5c:96:06:97:99:c8:ec:5f:c9:ab:e9:ea:1b:1f:5e:c9:
89:e6:28:e5:57:8d:7a:f3:5b:d1:b7:8e:f1:db:5d:cf:ee:bd:
6f:7f:8e:a1:5f:e1:4d:e6:83:b0:72:d1:dd:26:02:48:94:a9:
d4:25:ef:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:46:52 2025 by rpki-client