Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/95ffd9-19d3-4517-8c47-c61661d1b71b/1/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.mft
File: PuWh3Qzuh0wG4eofcoJ9l8vGcYc.mft (raw, json)
Hash identifier: nuJJcCEWwgJDV7un48MIrtuaHJtuhFFRU/CbBrvm+Jc=
Subject key identifier: A2:92:53:0F:9A:01:44:AE:8A:AC:B2:84:B3:CC:03:B9:16:EE:67:3B
Authority key identifier: 3E:E5:A1:DD:0C:EE:87:4C:06:E1:EA:1F:72:82:7D:97:CB:C6:71:87
Certificate issuer: /CN=3ee5a1dd0cee874c06e1ea1f72827d97cbc67187
Certificate serial: 019A4DE15D71A6920F887A66DFFB3839242B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/95ffd9-19d3-4517-8c47-c61661d1b71b/1/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 08:00:06 +0000
Manifest this update: Tue 04 Nov 2025 08:00:06 +0000
Manifest next update: Wed 05 Nov 2025 08:00:06 +0000
Files and hashes: 1: 3Gi7K5otbF8YAPl6ViRUI8XiRNU.roa (hash: aFHAU+eeRwSzWLG9T2U4VKkPQW4ZT7Ys728VZHAX80s=)
2: PuWh3Qzuh0wG4eofcoJ9l8vGcYc.crl (hash: EZfx1VXI2HT9nsa/ZsspZlYj9QhgQ8s5hYUMHy5lkDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/95ffd9-19d3-4517-8c47-c61661d1b71b/1/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/95ffd9-19d3-4517-8c47-c61661d1b71b/1/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:5d:71:a6:92:0f:88:7a:66:df:fb:38:39:24:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ee5a1dd0cee874c06e1ea1f72827d97cbc67187
Validity
Not Before: Nov 4 08:00:06 2025 GMT
Not After : Nov 5 08:00:06 2025 GMT
Subject: CN=a292530f9a0144ae8aacb284b3cc03b916ee673b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:95:d5:40:7c:62:2f:32:bd:bc:1b:f6:b3:db:
d1:80:05:7d:e4:ba:ff:80:c0:1b:44:69:9e:46:e8:
20:1f:10:b6:e7:6e:af:38:57:9b:b7:fa:34:db:55:
a2:ee:03:89:04:82:38:42:9d:bc:ae:92:77:ba:ff:
bd:d7:04:d6:fd:76:91:a2:7b:8c:11:ec:50:80:4d:
76:c5:f9:ba:b3:9d:bc:34:f0:6a:e3:4c:a3:bc:ba:
b2:42:90:70:a2:5c:a0:62:07:8b:39:e9:42:90:a8:
dd:a9:10:f4:a0:ee:5a:d9:00:60:0c:57:33:e0:54:
f3:cf:d7:1a:f6:9f:ef:76:d1:75:38:02:e3:d8:a7:
7e:bd:c2:8c:6e:02:09:b0:04:18:14:44:14:17:d2:
db:31:50:f9:4c:85:1f:1f:28:b4:19:fe:3e:89:82:
3a:b4:28:e1:96:03:21:52:ab:7a:0d:95:fb:f2:67:
0e:f8:90:80:05:4c:18:f1:85:95:9f:03:7c:67:9b:
48:d5:a6:f1:81:ae:e4:ce:ca:85:e8:6e:07:0d:4d:
2a:2f:06:75:e6:b9:12:a8:9a:3f:ee:63:70:0c:b9:
84:0f:9c:2d:a0:7b:c9:9e:30:42:97:fa:ca:8b:b8:
7b:e7:e0:35:9c:e0:d8:76:60:f8:e7:5e:12:bf:a1:
c4:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:92:53:0F:9A:01:44:AE:8A:AC:B2:84:B3:CC:03:B9:16:EE:67:3B
X509v3 Authority Key Identifier:
keyid:3E:E5:A1:DD:0C:EE:87:4C:06:E1:EA:1F:72:82:7D:97:CB:C6:71:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/95ffd9-19d3-4517-8c47-c61661d1b71b/1/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/95ffd9-19d3-4517-8c47-c61661d1b71b/1/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:c5:ab:bc:ec:8a:3b:92:c3:0e:59:9c:84:3f:c8:7a:fc:2b:
56:15:6b:ac:06:3f:aa:fb:99:2e:cc:aa:cc:fc:f3:5a:c0:0f:
bc:07:67:0e:ff:db:a2:ca:9f:42:4a:49:ac:99:c5:82:10:25:
41:54:b9:d5:fa:74:79:58:60:a9:e1:26:c0:55:dc:84:30:54:
27:e8:22:de:01:03:4f:9a:64:1e:59:9b:20:b8:6d:e2:94:94:
56:cf:78:61:6e:06:b0:aa:06:94:bb:6b:32:f2:98:98:41:48:
4c:ba:22:4f:88:be:0b:a6:c3:53:08:dc:c0:51:d0:8d:ee:ac:
bd:72:b6:84:a3:c6:e0:5a:32:8c:7c:1d:4f:b2:76:b1:51:c0:
05:25:ae:63:43:68:44:f7:1a:ce:1b:6b:5e:2a:fa:10:ef:b4:
c6:69:11:91:29:78:f9:eb:bc:9a:ee:bb:dc:43:5a:0b:eb:1b:
ac:8d:b0:94:ab:86:8e:97:84:c1:ce:5e:50:0b:b2:64:71:63:
2a:3a:60:55:ee:a9:7a:3f:d6:ea:38:06:e5:21:62:b4:16:ef:
1f:76:1d:bc:fd:a1:f3:5e:8d:d0:a7:cc:b7:fb:70:ff:a1:2c:
55:c7:d4:51:48:06:e5:7f:95:b6:17:e6:86:c7:d0:f3:e8:4d:
2b:46:4a:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:02:09 2025 by rpki-client