Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft
File: PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft (raw, json)
Hash identifier: YDEXPMfVVnKaqTlimog1Y2TxlpDAw0hmk3vUHz2aERk=
Subject key identifier: 5E:72:86:E3:1C:C3:5C:0F:5A:2F:9B:4E:25:0F:AC:3E:90:A0:79:86
Authority key identifier: 3C:85:9E:D6:93:CE:3D:E0:59:CA:A0:A0:C1:E4:24:5C:5E:9E:37:E4
Certificate issuer: /CN=3c859ed693ce3de059caa0a0c1e4245c5e9e37e4
Certificate serial: 01989F3A533616E532742DC911E7B3D21E2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PIWe1pPOPeBZyqCgweQkXF6eN-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft
Manifest number: 07D2
Signing time: Tue 12 Aug 2025 17:00:56 +0000
Manifest this update: Tue 12 Aug 2025 17:00:56 +0000
Manifest next update: Wed 13 Aug 2025 17:00:56 +0000
Files and hashes: 1: PIWe1pPOPeBZyqCgweQkXF6eN-Q.crl (hash: f1lutY0hyOPjwzI1Obmob8bRA/01TScjfvhMw+1mbyY=)
2: cIvicQwvTTI6J8NGKDerxCkfUpQ.roa (hash: KRBjaA428X4oNlaq/pV1Uncb9bEVRkbIjJIh/xlTHjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/PIWe1pPOPeBZyqCgweQkXF6eN-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:24:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:3a:53:36:16:e5:32:74:2d:c9:11:e7:b3:d2:1e:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c859ed693ce3de059caa0a0c1e4245c5e9e37e4
Validity
Not Before: Aug 12 17:00:56 2025 GMT
Not After : Aug 13 17:00:56 2025 GMT
Subject: CN=5e7286e31cc35c0f5a2f9b4e250fac3e90a07986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:86:27:56:66:6d:95:c0:e6:d4:94:3e:a4:a8:
89:92:5b:7e:c6:13:35:3f:8d:4e:46:f9:84:97:d3:
98:e7:2f:b7:42:78:e5:29:2c:f5:3b:30:c1:dd:91:
4f:8f:90:73:1d:37:ab:0b:2a:8d:57:ec:f1:64:8c:
38:0f:fe:cd:c8:9e:be:9a:77:f0:b4:8c:91:71:cf:
70:dd:9d:38:c6:4a:c8:2e:cc:7c:ce:55:66:d4:bc:
d1:8d:a4:7b:d9:5c:35:57:bd:8b:c2:e0:57:48:6f:
6d:24:d6:c4:8e:80:5f:52:61:77:9c:00:e0:50:84:
e8:b7:84:2e:fd:dd:2e:79:f7:f7:35:23:c3:43:53:
5d:65:fe:e2:ec:bd:6c:38:03:68:b7:83:7f:0c:23:
da:db:4c:ac:a3:4e:6c:46:f9:e7:63:e7:fb:9d:da:
2d:9c:ac:72:74:ee:36:1a:fe:87:bd:94:06:dc:a8:
16:79:05:e4:d0:57:9d:13:9a:39:59:a0:06:e3:ff:
c6:ad:4d:5b:11:f5:6c:77:e8:1a:89:34:b7:b5:4b:
e2:d6:77:ca:d1:fe:d6:c9:81:ed:20:25:54:9e:07:
fb:27:32:4c:e9:46:ea:26:52:a2:7c:8e:4e:e5:07:
12:0d:17:8d:12:34:f3:50:b3:08:7a:84:e2:6c:bb:
6a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:72:86:E3:1C:C3:5C:0F:5A:2F:9B:4E:25:0F:AC:3E:90:A0:79:86
X509v3 Authority Key Identifier:
keyid:3C:85:9E:D6:93:CE:3D:E0:59:CA:A0:A0:C1:E4:24:5C:5E:9E:37:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PIWe1pPOPeBZyqCgweQkXF6eN-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:11:33:35:01:32:74:e7:75:99:2d:2d:d1:85:15:50:89:2e:
db:81:5f:c7:07:02:c4:ea:c0:e9:88:1c:d0:c6:02:64:a7:04:
67:2e:77:48:96:f1:49:46:64:aa:90:23:29:1f:10:c7:16:6f:
d6:2b:92:81:b7:63:c5:f4:45:b4:00:a3:8e:70:0d:b5:bb:ff:
a0:6f:2a:4d:4d:e8:2b:b0:ec:cc:fa:a7:e7:a3:2a:75:c2:7b:
fa:5a:15:36:41:38:6a:ed:04:bb:8a:73:94:c0:13:5c:06:5b:
22:f6:ce:ca:6f:13:da:c6:57:f8:ee:6d:20:fa:74:b2:e6:5e:
59:8e:e5:67:3f:e3:20:30:ce:ca:35:f6:62:e4:ca:79:a9:cf:
80:48:1e:b9:f8:4d:24:39:08:0d:1c:e7:e1:70:a1:40:97:b7:
9b:c3:8b:20:24:32:25:15:7f:44:4d:a1:bf:96:12:68:1e:4b:
cc:fd:dd:bc:d1:f0:36:88:fe:33:85:78:a4:90:97:1f:72:e5:
6b:b1:84:a7:5e:63:9e:ae:1e:af:42:6f:36:c5:79:55:4a:97:
a6:7c:51:50:73:3c:53:fd:cf:ce:d2:75:a0:13:6a:72:47:51:
51:60:4a:fc:9f:2c:ca:bd:d1:d5:68:30:38:65:b4:b3:a6:30:
0b:77:d2:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 22:53:55 2025 by rpki-client