Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/5fb803-4333-4175-90df-aec14ea17ebf/1/PWq-XEiuzr1KI34VPDaE8wYI1EQ.mft
File: PWq-XEiuzr1KI34VPDaE8wYI1EQ.mft (raw, json)
Hash identifier: A4c6ALD7lHX90FJ72B8zswbi089KR2EbSGZbYmtFFkI=
Subject key identifier: E7:5D:F4:C9:0E:B2:E8:F4:E0:BB:30:7A:21:46:D2:B7:C4:9B:00:36
Authority key identifier: 3D:6A:BE:5C:48:AE:CE:BD:4A:23:7E:15:3C:36:84:F3:06:08:D4:44
Certificate issuer: /CN=3d6abe5c48aecebd4a237e153c3684f30608d444
Certificate serial: 01989713B55476CC7045254F2B691E459099
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PWq-XEiuzr1KI34VPDaE8wYI1EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/5fb803-4333-4175-90df-aec14ea17ebf/1/PWq-XEiuzr1KI34VPDaE8wYI1EQ.mft
Manifest number: 042E
Signing time: Mon 11 Aug 2025 03:01:47 +0000
Manifest this update: Mon 11 Aug 2025 03:01:47 +0000
Manifest next update: Tue 12 Aug 2025 03:01:47 +0000
Files and hashes: 1: 0-NbRqc8zQ3-jTIYZOwXbybz260.roa (hash: F4aAH1P/CqccbM0rJQ6/jB1mC+tQi8oCbtTD8Uif+I8=)
2: PWq-XEiuzr1KI34VPDaE8wYI1EQ.crl (hash: olICGE55/Kgy8BWRm90dmqEI1NdPyli4OHCy46eNtn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/5fb803-4333-4175-90df-aec14ea17ebf/1/PWq-XEiuzr1KI34VPDaE8wYI1EQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/5fb803-4333-4175-90df-aec14ea17ebf/1/PWq-XEiuzr1KI34VPDaE8wYI1EQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PWq-XEiuzr1KI34VPDaE8wYI1EQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:13:b5:54:76:cc:70:45:25:4f:2b:69:1e:45:90:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d6abe5c48aecebd4a237e153c3684f30608d444
Validity
Not Before: Aug 11 03:01:47 2025 GMT
Not After : Aug 12 03:01:47 2025 GMT
Subject: CN=e75df4c90eb2e8f4e0bb307a2146d2b7c49b0036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:00:f7:f4:9d:2c:fc:ad:6c:30:90:a8:1f:4e:
f1:27:d1:50:ca:9e:eb:4b:89:45:0b:dc:15:10:41:
46:11:c9:af:c3:89:67:c0:39:77:27:ae:04:04:c3:
a6:89:91:df:70:1e:29:7f:eb:07:3f:05:c1:52:98:
35:b9:7f:7f:84:18:71:fa:4e:16:c1:aa:d0:5e:62:
af:c8:ff:55:b3:b6:a2:fe:9e:16:32:ab:9e:45:b4:
20:91:a7:49:8e:6b:a7:8b:26:4b:25:f7:10:5c:aa:
94:9e:9a:7c:8b:52:09:9e:17:4c:a2:10:59:d1:39:
2a:52:56:62:e4:5c:2c:b1:dd:fb:9c:7e:5d:2c:22:
a2:0f:5e:cd:6f:14:87:c5:f0:af:d4:9f:fd:bf:c3:
68:d9:eb:3d:63:07:27:5a:46:d9:f2:75:7a:da:9d:
1a:9f:c6:af:d0:5d:e8:f6:ec:0f:e0:40:a1:e2:b7:
04:ff:13:d7:6d:d5:ef:ed:2a:22:4c:e1:b5:74:fc:
09:5f:81:ca:29:10:5c:c9:d9:64:21:2e:73:c0:4b:
9d:a1:db:01:28:9e:1c:40:ef:ff:02:9c:09:77:9b:
0e:7f:b2:a3:cd:74:29:9e:4a:b4:71:55:cd:f2:84:
d9:fb:d4:6e:c8:86:87:6e:b2:f8:0d:71:99:6d:02:
e0:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:5D:F4:C9:0E:B2:E8:F4:E0:BB:30:7A:21:46:D2:B7:C4:9B:00:36
X509v3 Authority Key Identifier:
keyid:3D:6A:BE:5C:48:AE:CE:BD:4A:23:7E:15:3C:36:84:F3:06:08:D4:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PWq-XEiuzr1KI34VPDaE8wYI1EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/5fb803-4333-4175-90df-aec14ea17ebf/1/PWq-XEiuzr1KI34VPDaE8wYI1EQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/5fb803-4333-4175-90df-aec14ea17ebf/1/PWq-XEiuzr1KI34VPDaE8wYI1EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:21:ad:05:11:1a:b9:7c:bd:eb:75:38:39:25:61:74:c5:09:
57:8b:d2:54:a6:c6:76:a4:71:e6:d5:2c:59:75:c8:46:c5:62:
14:04:d2:36:56:b6:ee:b1:2d:8b:e0:77:38:e2:1b:eb:68:1a:
a5:51:62:2d:a7:84:f8:c4:33:60:d4:f9:1a:73:ed:5d:18:1d:
d3:79:53:7d:bd:fb:23:fc:fa:64:aa:d6:bf:93:f1:8b:98:36:
ff:95:ff:55:43:79:88:33:cc:1a:d1:83:ba:99:41:25:8a:b6:
79:01:11:cd:7b:37:d6:09:97:ce:ec:2f:10:69:8a:25:4a:83:
aa:5b:aa:a7:ac:af:fb:79:4f:6d:df:87:d2:b7:49:74:f5:0c:
d6:69:69:50:f1:49:99:71:bd:f6:ae:a3:75:5d:fe:67:09:9a:
20:55:80:58:e7:c3:5a:21:94:ec:4b:82:11:d0:2c:b4:00:d1:
fe:c5:25:f1:05:43:c7:b1:b3:99:bf:88:8a:96:af:97:6e:ce:
8e:da:f8:e6:1f:17:01:38:96:7e:7c:28:0e:32:dc:31:8d:0d:
80:f0:13:6d:6d:de:91:cb:7f:8f:f5:fa:71:2d:a4:b4:bb:63:
10:ba:5b:90:a2:fa:60:4d:ce:db:29:28:75:62:a9:96:48:45:
1a:13:a0:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:26:52 2025 by rpki-client