Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/de68c6-650f-4dfa-bd13-000082c123e7/1/PwWOQyu_cjaXUKmVHVJZQwtcpL8.mft
File: PwWOQyu_cjaXUKmVHVJZQwtcpL8.mft (raw, json)
Hash identifier: vlgxgEnV7IwBYB6O0JK51HU/0YmXFflnp33ZtcSwJjs=
Subject key identifier: A1:BD:49:8A:9B:A6:22:7F:69:EB:19:E7:F1:10:F8:65:71:AD:CF:E9
Authority key identifier: 3F:05:8E:43:2B:BF:72:36:97:50:A9:95:1D:52:59:43:0B:5C:A4:BF
Certificate issuer: /CN=3f058e432bbf72369750a9951d5259430b5ca4bf
Certificate serial: 019A4F628E21095A77E11673BF933B2A57B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PwWOQyu_cjaXUKmVHVJZQwtcpL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/de68c6-650f-4dfa-bd13-000082c123e7/1/PwWOQyu_cjaXUKmVHVJZQwtcpL8.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 15:00:50 +0000
Manifest this update: Tue 04 Nov 2025 15:00:50 +0000
Manifest next update: Wed 05 Nov 2025 15:00:50 +0000
Files and hashes: 1: LHapQb8ix5yDr9XdIdq3SLfgGJQ.roa (hash: OTBcvGKIAwNH7dYThkaA46DYb8Du7nUhG7Wp8v0hqOA=)
2: PwWOQyu_cjaXUKmVHVJZQwtcpL8.crl (hash: lmwYVDu9x5nChbBmqcEygR89kznvjTuMXDhNnxtPIzI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/de68c6-650f-4dfa-bd13-000082c123e7/1/PwWOQyu_cjaXUKmVHVJZQwtcpL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/de68c6-650f-4dfa-bd13-000082c123e7/1/PwWOQyu_cjaXUKmVHVJZQwtcpL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/PwWOQyu_cjaXUKmVHVJZQwtcpL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:8e:21:09:5a:77:e1:16:73:bf:93:3b:2a:57:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f058e432bbf72369750a9951d5259430b5ca4bf
Validity
Not Before: Nov 4 15:00:50 2025 GMT
Not After : Nov 5 15:00:50 2025 GMT
Subject: CN=a1bd498a9ba6227f69eb19e7f110f86571adcfe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:61:24:e1:a2:ae:ba:d3:38:76:a9:8a:99:4e:
ba:3f:5a:26:56:60:d5:2e:89:e8:97:ba:cd:1c:3a:
8e:0f:88:55:20:a8:28:ec:8a:21:a8:f3:4c:3c:07:
71:b4:ee:25:2c:14:26:37:92:65:47:15:70:17:04:
ca:80:ae:8b:5f:67:97:56:a0:1f:31:36:d8:19:48:
88:5f:54:8a:08:f8:ed:92:fc:20:97:5e:74:0c:57:
d0:bc:29:10:40:c9:61:0d:61:d3:59:b1:77:73:ad:
df:a9:06:60:33:42:2b:16:f9:60:f1:f9:8b:b9:9f:
ab:88:50:b8:7a:74:0e:b5:91:ea:25:13:17:2d:b9:
dc:09:88:b1:f1:c8:89:41:ca:72:a7:e6:70:c3:99:
9c:f7:b3:22:93:ba:96:c3:61:29:4d:03:ed:4b:13:
04:8e:2c:e4:b0:77:f1:ea:3c:c2:97:52:22:7e:cb:
25:b7:fa:ea:bd:e8:84:13:ac:33:a7:ad:dc:3f:b1:
50:97:83:05:d6:d8:8f:bb:6f:d4:4e:ac:5f:cc:87:
7c:e4:1e:95:96:25:75:a3:d2:4b:c0:69:c1:d5:e8:
54:05:aa:cb:64:e6:2d:87:f0:cb:72:a7:8f:61:6b:
dd:d9:09:a9:40:f9:00:05:8a:15:83:03:7e:73:d1:
79:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:BD:49:8A:9B:A6:22:7F:69:EB:19:E7:F1:10:F8:65:71:AD:CF:E9
X509v3 Authority Key Identifier:
keyid:3F:05:8E:43:2B:BF:72:36:97:50:A9:95:1D:52:59:43:0B:5C:A4:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PwWOQyu_cjaXUKmVHVJZQwtcpL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/de68c6-650f-4dfa-bd13-000082c123e7/1/PwWOQyu_cjaXUKmVHVJZQwtcpL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/de68c6-650f-4dfa-bd13-000082c123e7/1/PwWOQyu_cjaXUKmVHVJZQwtcpL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:48:b5:37:cb:01:94:33:c8:40:41:21:de:bd:9c:ca:07:4a:
e9:d9:eb:12:3c:a7:74:98:f1:9e:83:8c:f8:44:57:83:42:2c:
ae:bb:d5:a6:bb:50:16:b4:ee:e8:3d:a8:f6:04:ad:33:07:0b:
50:09:b1:a0:59:a9:3f:f8:21:e0:cb:14:9e:f7:ed:c3:9e:b1:
b3:40:d9:07:ec:95:cc:de:a6:c7:a4:fd:90:17:7b:43:5f:9f:
b6:3b:5a:7b:cc:3a:56:98:e3:c7:39:44:e7:24:20:37:54:16:
44:65:bb:3a:23:01:d9:2e:2d:9e:fe:78:9b:f4:8f:9d:f8:81:
f3:e3:75:1e:37:4f:cb:46:c5:66:84:16:fb:eb:0d:1c:bd:fa:
25:d9:09:16:b2:2c:de:a6:14:8a:fe:f7:76:ce:07:1b:78:66:
f3:96:cb:50:a1:bb:e9:75:ef:9d:70:a1:14:39:da:0b:fd:58:
32:7e:1b:c4:61:a6:91:ff:f0:03:1a:1c:9e:17:47:f8:63:fb:
7a:da:cf:1b:9e:b1:0b:0f:f8:ee:80:ae:07:90:9f:8b:d1:34:
76:7f:fe:a9:c5:6d:d5:4b:4e:4e:56:c8:82:7e:64:cd:ba:fe:
37:b1:9c:d5:45:50:d7:6a:3f:25:93:2e:64:23:b4:ad:87:da:
b9:57:b0:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:47:51 2025 by rpki-client