Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.mft
File: PidCSWQA2BC-W0CW_e3sMKIx-as.mft (raw, json)
Hash identifier: apVJu8Vd3BHnOWdPaXUuYR8MFE30D8etnPiGvO+3DTs=
Subject key identifier: 61:BD:B8:86:7C:63:97:7A:6D:0D:37:F0:5F:0F:88:00:5C:76:6E:37
Authority key identifier: 3E:27:42:49:64:00:D8:10:BE:5B:40:96:FD:ED:EC:30:A2:31:F9:AB
Certificate issuer: /CN=3e2742496400d810be5b4096fdedec30a231f9ab
Certificate serial: 0198745089D3D417B4EACECAFF31377EE939
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PidCSWQA2BC-W0CW_e3sMKIx-as.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.mft
Manifest number: 09FA
Signing time: Mon 04 Aug 2025 09:01:31 +0000
Manifest this update: Mon 04 Aug 2025 09:01:31 +0000
Manifest next update: Tue 05 Aug 2025 09:01:31 +0000
Files and hashes: 1: 5pXO0rccDvdcNpNF4kBVulDgfCw.roa (hash: N4A+PObGjvFgO5mi8UIuKYZJSnV7LB7QBUfSUqvfnRE=)
2: PidCSWQA2BC-W0CW_e3sMKIx-as.crl (hash: QGKPqbVELvOCaKjKiGKQ5iuJ4LXa5/Qkg1GPZujlJ0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.mft
rsync://rpki.ripe.net/repository/DEFAULT/PidCSWQA2BC-W0CW_e3sMKIx-as.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:89:d3:d4:17:b4:ea:ce:ca:ff:31:37:7e:e9:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e2742496400d810be5b4096fdedec30a231f9ab
Validity
Not Before: Aug 4 09:01:31 2025 GMT
Not After : Aug 5 09:01:31 2025 GMT
Subject: CN=61bdb8867c63977a6d0d37f05f0f88005c766e37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ac:03:b2:fb:0e:77:3a:40:a5:40:50:e1:4b:
9a:0f:65:f4:ff:fe:8d:b3:ac:9a:32:1c:75:f9:65:
da:80:38:84:91:d0:9f:18:6b:d2:64:8a:9c:63:5f:
fc:4e:be:87:9e:3d:70:de:ca:07:1d:3e:8a:c2:44:
1c:ab:da:3e:f6:fa:dc:4f:22:f3:4e:78:ca:08:fc:
83:d8:7e:cf:7d:1b:42:2e:ba:5b:ca:86:8b:82:97:
48:7a:32:49:1c:ad:f1:38:6c:1a:d5:e0:dd:b6:2f:
3c:3b:d2:8a:52:85:cb:58:98:84:18:6e:75:0b:86:
82:d0:77:5c:d0:62:87:19:6f:3f:cd:2b:50:9a:d3:
ea:8a:8d:fc:83:58:82:c8:5e:1d:42:a9:cd:d4:da:
53:42:19:14:11:e4:67:a9:b3:2e:31:de:08:d5:f9:
ec:37:25:c7:5a:33:04:c9:ec:a0:de:45:4c:cd:85:
e5:e5:ab:ae:cd:4e:66:82:b8:00:5e:66:b1:66:98:
c9:16:df:6a:f1:63:28:bd:31:f0:53:5b:5f:40:75:
f6:85:a0:3f:a2:a3:cc:af:1f:34:5b:4b:00:c6:db:
24:7a:95:50:61:4c:0f:89:4d:4a:95:13:ba:fc:86:
4f:5c:ed:e9:72:64:aa:20:4c:33:b4:88:c3:2e:af:
e0:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:BD:B8:86:7C:63:97:7A:6D:0D:37:F0:5F:0F:88:00:5C:76:6E:37
X509v3 Authority Key Identifier:
keyid:3E:27:42:49:64:00:D8:10:BE:5B:40:96:FD:ED:EC:30:A2:31:F9:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PidCSWQA2BC-W0CW_e3sMKIx-as.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:ec:53:2c:0b:1d:dc:6b:97:60:47:35:f2:49:1d:45:06:88:
ed:9e:25:45:a1:cf:06:62:2f:17:44:b3:d9:e6:e5:b3:3e:5e:
b9:1e:85:c9:91:97:a4:00:5e:b7:ec:0c:8b:12:71:1f:08:41:
b0:be:f4:cf:ee:3e:0b:61:a4:ed:e2:bb:b3:12:9f:f7:b9:cb:
2f:41:ff:98:c5:70:76:b5:21:99:4d:3d:86:5f:15:64:6f:94:
39:19:1c:f4:7e:df:94:b9:0f:27:5c:d2:99:bd:d1:d4:2f:a1:
ae:40:82:31:ce:0d:39:ab:17:d0:5c:d5:9e:81:46:6b:5a:8e:
e2:48:c7:f7:9a:ab:9c:6c:36:67:03:13:1f:d3:ff:c3:47:b4:
6c:af:52:9e:ae:bb:8a:a2:db:e8:89:48:0a:70:9d:d0:cd:ba:
15:aa:2b:a0:ca:2a:79:5b:b0:38:2e:37:b0:93:7d:69:00:96:
1a:74:61:87:ee:01:e8:f7:65:1f:89:df:6f:e6:7c:77:e4:03:
5b:97:91:4b:f7:bf:c6:ba:86:c8:a8:83:a6:4d:36:df:d8:1a:
a2:51:2c:80:60:71:21:c5:e8:e2:8e:12:c3:99:f8:4f:d4:77:
ca:39:c8:48:55:d3:99:72:93:0d:70:d9:1e:3e:28:2e:27:16:
18:0d:66:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:13:04 2025 by rpki-client