Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft
File: PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft (raw, json)
Hash identifier: lYQluSDe8IXIY2bdo+dpFpObV/B1qmWfZe8smKQnqcE=
Subject key identifier: BC:A8:DB:02:5F:4A:51:20:AA:E3:8E:93:F6:28:A4:B5:4F:98:98:BE
Authority key identifier: 3C:85:9E:D6:93:CE:3D:E0:59:CA:A0:A0:C1:E4:24:5C:5E:9E:37:E4
Certificate issuer: /CN=3c859ed693ce3de059caa0a0c1e4245c5e9e37e4
Certificate serial: 019A4DE1FAE98D74F16D18A21F9FB62F5F71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PIWe1pPOPeBZyqCgweQkXF6eN-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft
Manifest number: 08B1
Signing time: Tue 04 Nov 2025 08:00:46 +0000
Manifest this update: Tue 04 Nov 2025 08:00:46 +0000
Manifest next update: Wed 05 Nov 2025 08:00:46 +0000
Files and hashes: 1: PIWe1pPOPeBZyqCgweQkXF6eN-Q.crl (hash: TVmEsWVMCU9k2EEMDgTT6Go+TOhd++FowpNmPCS87Po=)
2: cIvicQwvTTI6J8NGKDerxCkfUpQ.roa (hash: KRBjaA428X4oNlaq/pV1Uncb9bEVRkbIjJIh/xlTHjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/PIWe1pPOPeBZyqCgweQkXF6eN-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:fa:e9:8d:74:f1:6d:18:a2:1f:9f:b6:2f:5f:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c859ed693ce3de059caa0a0c1e4245c5e9e37e4
Validity
Not Before: Nov 4 08:00:46 2025 GMT
Not After : Nov 5 08:00:46 2025 GMT
Subject: CN=bca8db025f4a5120aae38e93f628a4b54f9898be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4e:4d:d5:56:0d:12:48:fe:fa:a9:38:ca:26:
43:e1:66:6c:d2:c5:84:5a:b0:43:b5:a0:27:2c:76:
fd:4a:ed:5d:90:cf:6b:a9:df:c7:7e:50:2a:d0:00:
c4:29:85:86:a7:56:0d:36:c3:a1:79:99:51:9f:9c:
a8:15:df:4d:85:b8:fa:b1:8d:65:b9:c6:ed:1e:9d:
5c:60:d4:c8:d5:de:8e:91:38:9f:01:a9:62:03:c8:
08:16:89:74:1c:02:ca:24:d1:fc:0e:e0:91:44:fb:
1d:be:73:f7:22:bc:61:fd:e0:f8:94:08:80:47:8c:
31:18:96:2c:51:27:0d:31:d3:a9:2d:7c:6f:df:9b:
cb:0f:3c:a3:5b:3f:4f:46:19:c9:58:dc:f8:24:87:
f8:b3:a0:09:b6:19:60:db:87:30:e2:69:5f:b3:d0:
47:36:20:c2:1d:0e:6e:cc:82:86:2e:da:8b:44:69:
a4:c9:ae:31:95:fe:c7:86:f9:69:cb:84:c4:e4:fc:
26:a8:29:e9:99:50:ec:07:c9:ba:4c:4b:22:76:8c:
0b:c2:7c:97:31:ff:4f:bb:ac:b8:4a:82:72:5d:45:
53:86:51:45:e9:d7:55:9f:b3:c2:73:7f:26:c2:2c:
0d:84:c0:2f:6f:df:75:02:76:4c:c2:6c:e9:0e:b8:
7b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:A8:DB:02:5F:4A:51:20:AA:E3:8E:93:F6:28:A4:B5:4F:98:98:BE
X509v3 Authority Key Identifier:
keyid:3C:85:9E:D6:93:CE:3D:E0:59:CA:A0:A0:C1:E4:24:5C:5E:9E:37:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PIWe1pPOPeBZyqCgweQkXF6eN-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:03:14:7f:77:14:9e:f2:61:bc:da:b1:18:10:7a:eb:4f:a6:
9c:8c:ff:1b:39:8b:10:aa:14:01:3d:ba:e4:4d:09:6d:2a:f7:
16:4d:65:6a:85:4d:2e:db:0e:41:4e:b7:5f:e3:cc:74:e7:bc:
3d:60:5d:94:6f:0e:1c:2d:22:0e:6b:4f:1d:a0:dc:1b:51:46:
0b:97:d0:dc:c2:eb:43:71:6f:4e:22:78:8d:e1:a1:90:07:2d:
a6:5f:46:21:b1:ba:83:29:f0:fb:6e:69:c7:20:d5:08:a1:49:
82:86:84:c9:6f:b8:79:49:54:ea:b6:26:fd:7f:c1:bf:ca:c0:
1e:31:53:03:a7:13:d8:c8:4e:24:2f:54:70:02:64:0e:97:d8:
a4:f0:1d:90:87:54:42:19:e8:a6:cf:38:14:e8:41:3f:d6:48:
bc:7c:f6:c7:6d:aa:70:47:ce:48:4a:4e:d0:bc:c7:75:6e:2b:
5d:88:da:34:9f:6b:a4:96:92:a2:ba:b2:a6:fd:ef:d7:86:11:
5b:89:11:8d:ba:6c:6b:4a:76:be:9b:16:2c:e8:73:36:f4:60:
7a:a8:bb:f2:6e:c4:1a:62:7d:a5:5d:e0:10:aa:dd:2b:51:a5:
72:ca:c0:ff:d2:6a:28:bb:90:6c:77:e9:f2:3f:61:8b:85:aa:
bc:35:31:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:42:31 2025 by rpki-client