Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.mft
File: PidCSWQA2BC-W0CW_e3sMKIx-as.mft (raw, json)
Hash identifier: CSHJ7b/FXroyoj+RJqQgbiFSr3gkXKyWqf+t0fPEh3U=
Subject key identifier: 42:46:31:D8:5B:E6:2C:EC:88:DE:97:12:A4:A2:79:D3:DE:46:CE:53
Authority key identifier: 3E:27:42:49:64:00:D8:10:BE:5B:40:96:FD:ED:EC:30:A2:31:F9:AB
Certificate issuer: /CN=3e2742496400d810be5b4096fdedec30a231f9ab
Certificate serial: 019771880CBB206124653B8B2DC21F998F85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PidCSWQA2BC-W0CW_e3sMKIx-as.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.mft
Manifest number: 0974
Signing time: Sun 15 Jun 2025 03:00:30 +0000
Manifest this update: Sun 15 Jun 2025 03:00:30 +0000
Manifest next update: Mon 16 Jun 2025 03:00:30 +0000
Files and hashes: 1: 5pXO0rccDvdcNpNF4kBVulDgfCw.roa (hash: N4A+PObGjvFgO5mi8UIuKYZJSnV7LB7QBUfSUqvfnRE=)
2: PidCSWQA2BC-W0CW_e3sMKIx-as.crl (hash: 85jbvQIPl5jCPCe62eVXOp3v0KkkREpZz2YLOuhXgbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.mft
rsync://rpki.ripe.net/repository/DEFAULT/PidCSWQA2BC-W0CW_e3sMKIx-as.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:88:0c:bb:20:61:24:65:3b:8b:2d:c2:1f:99:8f:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e2742496400d810be5b4096fdedec30a231f9ab
Validity
Not Before: Jun 15 03:00:30 2025 GMT
Not After : Jun 16 03:00:30 2025 GMT
Subject: CN=424631d85be62cec88de9712a4a279d3de46ce53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0e:58:09:40:05:e1:79:e3:d5:70:03:33:79:
81:54:04:00:6b:45:af:48:3d:03:36:74:c8:43:1c:
98:4a:6a:10:d0:f2:3f:a0:9a:9d:a7:1d:3d:ec:22:
63:1d:51:07:df:7f:79:9c:82:26:0f:1a:c6:98:ed:
e0:cc:53:25:72:4b:ad:0f:6b:e5:fe:29:ff:76:20:
de:6f:7f:49:e1:dc:de:a4:95:41:51:de:2d:88:96:
85:8a:fa:7f:59:ba:08:7a:cc:1e:a2:b5:81:ea:dd:
62:f4:c3:65:02:0a:86:8a:46:21:17:f6:a1:ff:e3:
0b:59:58:ee:0a:81:f7:78:83:8c:d0:b7:2a:98:89:
0a:76:da:67:82:11:d4:5d:cb:a7:8c:45:c6:b6:20:
6b:6a:02:45:51:b3:f9:6f:ae:0f:8f:78:8e:9e:39:
a7:c7:ce:1a:42:e6:ca:3b:16:14:a8:6a:5a:e3:0d:
b7:cb:15:eb:32:b7:c6:84:d0:7e:da:a2:d9:8d:7e:
3b:6e:0e:9a:c8:26:8b:c0:1a:cd:60:04:a8:59:4e:
ca:d2:36:be:81:12:2a:36:11:84:45:0f:b4:fe:6a:
78:e5:d3:b9:bb:79:18:53:ef:21:2f:4e:a6:8f:ae:
c4:a8:82:84:42:fd:64:9c:e7:3c:75:b4:77:33:46:
5f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:46:31:D8:5B:E6:2C:EC:88:DE:97:12:A4:A2:79:D3:DE:46:CE:53
X509v3 Authority Key Identifier:
keyid:3E:27:42:49:64:00:D8:10:BE:5B:40:96:FD:ED:EC:30:A2:31:F9:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PidCSWQA2BC-W0CW_e3sMKIx-as.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:4c:b7:d4:7b:5b:0f:bd:af:f9:22:40:8f:27:34:42:b0:2b:
99:b7:1e:c2:59:8b:01:84:a1:df:21:fd:cc:a8:ec:a5:7a:f9:
c8:35:ff:ee:d2:99:3b:91:d3:38:15:65:32:89:8d:1c:01:a9:
cf:8f:7d:bb:c0:ba:5d:a1:8f:75:c9:e7:16:a1:35:da:e7:20:
d3:47:4c:42:f7:94:ac:39:4b:f7:7e:f9:59:41:c0:8d:13:ac:
72:4d:2e:58:c1:9c:38:34:63:15:e0:9d:c2:a1:5d:e6:f8:d0:
73:6a:75:e1:e6:10:da:1b:17:87:b0:81:25:c1:70:8c:6a:e5:
99:cf:57:55:9c:a1:cd:ae:c4:e2:c8:86:6a:de:7e:75:9b:59:
56:97:b3:95:71:71:8b:a0:93:87:da:3f:ac:af:ac:3b:86:c2:
c9:37:74:42:b0:33:b6:7f:6a:81:e3:fb:26:84:f0:c5:ce:fd:
c6:a2:a4:83:7d:70:ec:6b:26:39:b6:3f:4d:a3:23:fd:c4:8c:
d3:e5:cf:d4:f8:da:19:16:60:f9:83:cb:f4:71:a9:b9:fa:5c:
04:49:62:69:a7:5f:81:73:28:a4:92:fa:74:96:ee:a7:ea:46:
aa:d1:f0:0c:ea:4f:f0:d6:f4:54:a3:be:5e:fc:3c:5d:69:43:
b6:5c:60:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdxiAy7IGEkZTuLLcIfmY+FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlMjc0MjQ5NjQwMGQ4MTBiZTViNDA5NmZkZWRlYzMwYTIz
MWY5YWIwHhcNMjUwNjE1MDMwMDMwWhcNMjUwNjE2MDMwMDMwWjAzMTEwLwYDVQQD
Eyg0MjQ2MzFkODViZTYyY2VjODhkZTk3MTJhNGEyNzlkM2RlNDZjZTUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsA5YCUAF4Xnj1XADM3mBVAQAa0Wv
SD0DNnTIQxyYSmoQ0PI/oJqdpx097CJjHVEH3395nIImDxrGmO3gzFMlckutD2vl
/in/diDeb39J4dzepJVBUd4tiJaFivp/WboIesweorWB6t1i9MNlAgqGikYhF/ah
/+MLWVjuCoH3eIOM0LcqmIkKdtpnghHUXcunjEXGtiBragJFUbP5b64Pj3iOnjmn
x84aQubKOxYUqGpa4w23yxXrMrfGhNB+2qLZjX47bg6ayCaLwBrNYASoWU7K0ja+
gRIqNhGERQ+0/mp45dO5u3kYU+8hL06mj67EqIKEQv1knOc8dbR3M0ZfIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEJGMdhb5izsiN6XEqSiedPeRs5TMB8GA1UdIwQY
MBaAFD4nQklkANgQvltAlv3t7DCiMfmrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGlkQ1NXUUEyQkMtVzBDV19lM3NNS0l4LWFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85MjJmNmQtN2E3NC00ZmE4LTk0OTUt
MTg0ZGZmMjkyYTMwLzEvUGlkQ1NXUUEyQkMtVzBDV19lM3NNS0l4LWFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS85MjJmNmQtN2E3NC00ZmE4LTk0OTUtMTg0ZGZmMjkyYTMw
LzEvUGlkQ1NXUUEyQkMtVzBDV19lM3NNS0l4LWFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcEy31Htb
D72v+SJAjyc0QrArmbcewlmLAYSh3yH9zKjspXr5yDX/7tKZO5HTOBVlMomNHAGp
z499u8C6XaGPdcnnFqE12ucg00dMQveUrDlL9375WUHAjROsck0uWMGcODRjFeCd
wqFd5vjQc2p14eYQ2hsXh7CBJcFwjGrlmc9XVZyhza7E4siGat5+dZtZVpezlXFx
i6CTh9o/rK+sO4bCyTd0QrAztn9qgeP7JoTwxc79xqKkg31w7GsmObY/TaMj/cSM
0+XP1PjaGRZg+YPL9HGpufpcBEliaadfgXMopJL6dJbup+pGqtHwDOpP8Nb0VKO+
Xvw8XWlDtlxgtQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 07:36:27 2025 by rpki-client