Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.mft
File: PidCSWQA2BC-W0CW_e3sMKIx-as.mft (raw, json)
Hash identifier: 5d7SUZJx1HjL/QmCxOtRfHrnokffCvNlqiMNamTai0w=
Subject key identifier: E8:9E:F2:58:E0:81:12:48:2D:10:58:B2:C4:F3:DF:38:A8:4B:A5:99
Authority key identifier: 3E:27:42:49:64:00:D8:10:BE:5B:40:96:FD:ED:EC:30:A2:31:F9:AB
Certificate issuer: /CN=3e2742496400d810be5b4096fdedec30a231f9ab
Certificate serial: 019A4F62B7E68B29FFFB5A9E2EBA005D6743
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PidCSWQA2BC-W0CW_e3sMKIx-as.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.mft
Manifest number: 0AF0
Signing time: Tue 04 Nov 2025 15:01:00 +0000
Manifest this update: Tue 04 Nov 2025 15:01:00 +0000
Manifest next update: Wed 05 Nov 2025 15:01:00 +0000
Files and hashes: 1: 5pXO0rccDvdcNpNF4kBVulDgfCw.roa (hash: N4A+PObGjvFgO5mi8UIuKYZJSnV7LB7QBUfSUqvfnRE=)
2: PidCSWQA2BC-W0CW_e3sMKIx-as.crl (hash: I3I5w08Igs8epJcSNnQHbVu0z++IgYNA5CiS58ewcAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.mft
rsync://rpki.ripe.net/repository/DEFAULT/PidCSWQA2BC-W0CW_e3sMKIx-as.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:b7:e6:8b:29:ff:fb:5a:9e:2e:ba:00:5d:67:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e2742496400d810be5b4096fdedec30a231f9ab
Validity
Not Before: Nov 4 15:01:00 2025 GMT
Not After : Nov 5 15:01:00 2025 GMT
Subject: CN=e89ef258e08112482d1058b2c4f3df38a84ba599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9a:d0:1f:e2:cf:73:91:53:76:67:96:ff:7c:
c8:51:48:e8:ee:83:ea:d4:66:ec:af:fa:04:4d:9e:
a7:41:1f:ea:bb:29:66:59:c5:c8:59:76:e9:f3:41:
07:eb:84:70:9d:66:5f:85:ee:d5:70:85:45:19:6b:
82:af:21:fd:21:08:45:20:8f:a7:3d:cd:35:a8:6c:
c7:70:46:e6:59:66:e9:e0:d8:24:9e:32:40:3b:6e:
94:10:cf:b8:27:75:84:66:a7:c7:9d:e6:92:32:15:
82:e3:f5:0f:18:11:93:1b:3e:52:96:2a:4a:9a:ee:
d7:a5:46:ef:14:b2:ae:42:92:19:50:8a:ce:c5:4a:
7f:12:6c:bc:70:ce:54:2b:e4:01:83:52:14:0b:70:
92:dd:b7:32:22:bb:33:d0:dd:82:16:db:ad:22:78:
7a:4b:b9:78:50:fb:ae:8a:aa:0f:36:91:58:12:60:
9a:08:29:7f:40:b0:6b:32:28:d7:61:cc:c8:96:f9:
01:25:3f:0f:18:ad:e7:c3:02:30:b3:7d:7f:3c:c5:
9a:4e:9c:3f:33:9e:cd:a7:de:fd:a1:2f:ae:aa:d3:
b7:19:93:8c:b4:14:ac:f1:d8:26:56:7d:44:03:83:
32:b1:87:d1:4e:4a:08:be:ee:a3:07:c3:d7:e0:4d:
bf:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:9E:F2:58:E0:81:12:48:2D:10:58:B2:C4:F3:DF:38:A8:4B:A5:99
X509v3 Authority Key Identifier:
keyid:3E:27:42:49:64:00:D8:10:BE:5B:40:96:FD:ED:EC:30:A2:31:F9:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PidCSWQA2BC-W0CW_e3sMKIx-as.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:0d:ee:b4:80:ac:c3:ea:de:56:68:95:fa:c9:5a:4a:ea:d9:
cf:31:a0:8b:39:9a:5b:ef:4e:5a:d8:d2:cc:da:37:47:1a:41:
46:10:cc:88:36:5f:4d:cb:81:b3:3a:d5:bf:8b:77:5e:64:27:
b0:19:62:af:70:ae:3c:ca:37:6a:85:f0:c0:cf:6f:1a:b6:10:
79:31:a5:f1:a9:c5:87:37:08:22:fc:71:13:f7:8d:59:a8:dd:
9f:f9:b8:65:f6:78:db:d3:c7:b6:82:08:11:f8:2f:a4:fc:05:
e7:25:a0:53:21:6f:14:67:20:cc:73:fa:29:be:5e:cc:5a:92:
b4:3d:d2:e1:f8:51:0a:bd:46:78:f5:af:3c:6f:1c:2b:01:51:
f7:10:1f:02:69:25:e4:fb:fc:77:3d:0d:83:20:65:0e:f7:59:
a4:fa:83:f2:8d:54:01:6d:2c:cf:94:4a:48:84:8f:6c:08:2e:
cf:41:3d:08:2c:5c:7e:5b:6b:c2:61:b2:7a:1c:ef:51:47:e2:
f3:6a:c7:55:d3:a0:b8:f4:d6:95:f6:00:73:1d:ac:7e:d7:29:
23:ba:64:68:d3:89:67:0b:15:e4:cb:07:5a:e7:10:cf:62:05:
af:4f:be:24:a9:68:5e:c7:9d:1c:13:d2:70:14:5a:b2:f3:74:
e9:a3:e7:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:58:44 2025 by rpki-client