Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.mft
File: PiWraYX3nKneBumOi52iRdhVmrY.mft (raw, json)
Hash identifier: Qd8K7ByyKth19bhl3cyASblwav1f37TK0mDBSFRvHS4=
Subject key identifier: A2:58:76:5D:80:AF:E8:E1:5B:42:55:05:47:85:CC:47:D4:2E:AC:D0
Authority key identifier: 3E:25:AB:69:85:F7:9C:A9:DE:06:E9:8E:8B:9D:A2:45:D8:55:9A:B6
Certificate issuer: /CN=3e25ab6985f79ca9de06e98e8b9da245d8559ab6
Certificate serial: 019892C919524AB197CB2ADD5BA4ECE1CE84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PiWraYX3nKneBumOi52iRdhVmrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.mft
Manifest number: 03A6
Signing time: Sun 10 Aug 2025 07:01:49 +0000
Manifest this update: Sun 10 Aug 2025 07:01:49 +0000
Manifest next update: Mon 11 Aug 2025 07:01:49 +0000
Files and hashes: 1: JIju3Zu3gqnn8i4w1MTEOOx7hro.roa (hash: dCgTEEXu0bVao+NC3O8cgRpfY5p29zC65jhR3uUto00=)
2: PiWraYX3nKneBumOi52iRdhVmrY.crl (hash: JXvC7+t/xl9fCSPoRrHc8DsR4ZyMPjtxr9ypB6OAkUM=)
3: pwdlb--yOjorbcCQL2QR9oUUpWI.roa (hash: 1klYczNt5J1n/8K98SAjHgNfDm84PABZ1H0MBugMFMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.mft
rsync://rpki.ripe.net/repository/DEFAULT/PiWraYX3nKneBumOi52iRdhVmrY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 07:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:c9:19:52:4a:b1:97:cb:2a:dd:5b:a4:ec:e1:ce:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e25ab6985f79ca9de06e98e8b9da245d8559ab6
Validity
Not Before: Aug 10 07:01:49 2025 GMT
Not After : Aug 11 07:01:49 2025 GMT
Subject: CN=a258765d80afe8e15b4255054785cc47d42eacd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:57:04:34:5a:53:e2:00:e8:e9:d5:24:27:91:
a6:5f:b3:51:ee:83:3e:6f:cd:11:a8:ba:e9:a8:85:
c7:b9:a3:3c:32:dd:ae:52:66:a7:8c:76:2f:c8:f8:
99:74:5b:c0:ee:0b:3f:97:0a:30:d7:56:32:3c:de:
24:0b:b4:02:cd:c7:bc:d9:ed:9f:0d:2b:be:23:08:
72:20:4c:4d:3f:70:ca:7f:63:a4:14:65:0b:47:1c:
f7:20:39:77:72:13:31:8a:bf:16:a1:e5:0c:bf:05:
bd:9e:c7:1a:ce:a6:62:c9:2b:51:33:5f:e4:ed:ef:
2d:3a:61:52:63:b7:14:82:29:c0:89:b5:2e:d7:b3:
67:d6:15:ea:41:18:a3:81:39:e1:71:d5:ee:cf:fa:
ec:1c:63:3f:7e:02:d6:3d:b1:1b:d6:4d:d4:d6:e6:
05:7d:d3:96:ce:a2:48:69:74:f4:8e:93:7f:00:23:
b7:91:1e:68:3a:7d:a8:53:e2:ec:17:4e:f2:58:7c:
a2:29:35:b9:3d:82:75:d5:dd:97:ee:0c:e7:8f:86:
44:02:2e:0b:2f:3a:7d:50:fd:10:a8:51:42:b0:e5:
ea:93:d2:b7:1b:ec:ed:0f:1a:ea:a0:90:4d:a2:f1:
8c:f0:ec:09:17:1b:15:0a:85:da:10:9a:1e:1a:11:
32:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:58:76:5D:80:AF:E8:E1:5B:42:55:05:47:85:CC:47:D4:2E:AC:D0
X509v3 Authority Key Identifier:
keyid:3E:25:AB:69:85:F7:9C:A9:DE:06:E9:8E:8B:9D:A2:45:D8:55:9A:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PiWraYX3nKneBumOi52iRdhVmrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:d4:e8:5b:29:a3:97:f4:ed:02:b6:ab:82:80:b2:c9:be:ce:
9d:e5:a4:75:ac:9b:77:27:fc:b4:b1:63:4f:0e:62:66:71:b5:
03:8a:24:6b:ff:1d:cb:d4:b5:68:d4:bc:d2:31:8d:c2:fe:f7:
39:8a:5a:77:68:cc:0f:ef:40:86:94:32:92:f6:33:1b:4b:29:
6e:f2:7e:c7:1f:09:85:1a:6e:a0:6f:7d:5f:d6:3e:0f:bd:2d:
3b:89:cd:fa:ea:5b:06:d5:c7:3d:4c:b5:1f:0e:56:b8:b9:f7:
ed:65:74:99:d1:21:c0:dc:f8:7d:0e:a8:35:5a:76:87:b7:28:
32:3b:b0:02:8d:61:bc:cf:1e:28:22:de:7c:b1:da:a6:29:ea:
bf:4b:ea:5f:58:4a:12:05:7f:92:75:d6:53:95:2c:f2:95:ef:
9c:44:ee:75:b5:2d:07:96:db:c0:04:41:02:87:56:4d:44:18:
5e:3d:6b:0d:a9:7b:78:c7:83:7b:01:29:71:85:29:8c:40:b0:
23:5b:44:c4:aa:8f:4a:7a:8e:25:aa:b7:3a:41:a5:87:5b:fb:
79:8a:de:69:34:45:05:1a:d0:07:0b:50:a4:4e:53:2d:fa:b7:
69:e4:2f:6b:f3:49:a3:cd:1d:11:59:2f:f2:e6:54:b6:f9:33:
b6:19:67:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiSyRlSSrGXyyrdW6Ts4c6EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlMjVhYjY5ODVmNzljYTlkZTA2ZTk4ZThiOWRhMjQ1ZDg1
NTlhYjYwHhcNMjUwODEwMDcwMTQ5WhcNMjUwODExMDcwMTQ5WjAzMTEwLwYDVQQD
EyhhMjU4NzY1ZDgwYWZlOGUxNWI0MjU1MDU0Nzg1Y2M0N2Q0MmVhY2QwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+lcENFpT4gDo6dUkJ5GmX7NR7oM+
b80RqLrpqIXHuaM8Mt2uUmanjHYvyPiZdFvA7gs/lwow11YyPN4kC7QCzce82e2f
DSu+IwhyIExNP3DKf2OkFGULRxz3IDl3chMxir8WoeUMvwW9nscazqZiyStRM1/k
7e8tOmFSY7cUginAibUu17Nn1hXqQRijgTnhcdXuz/rsHGM/fgLWPbEb1k3U1uYF
fdOWzqJIaXT0jpN/ACO3kR5oOn2oU+LsF07yWHyiKTW5PYJ11d2X7gznj4ZEAi4L
Lzp9UP0QqFFCsOXqk9K3G+ztDxrqoJBNovGM8OwJFxsVCoXaEJoeGhEyfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKJYdl2Ar+jhW0JVBUeFzEfULqzQMB8GA1UdIwQY
MBaAFD4lq2mF95yp3gbpjoudokXYVZq2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGlXcmFZWDNuS25lQnVtT2k1MmlSZGhWbXJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8yMmQxNzUtYzcxZC00NjM3LWEwOTAt
YjE5YWQ1NDU1YmZkLzEvUGlXcmFZWDNuS25lQnVtT2k1MmlSZGhWbXJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS8yMmQxNzUtYzcxZC00NjM3LWEwOTAtYjE5YWQ1NDU1YmZk
LzEvUGlXcmFZWDNuS25lQnVtT2k1MmlSZGhWbXJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVNToWymj
l/TtArargoCyyb7OneWkdaybdyf8tLFjTw5iZnG1A4oka/8dy9S1aNS80jGNwv73
OYpad2jMD+9AhpQykvYzG0spbvJ+xx8JhRpuoG99X9Y+D70tO4nN+upbBtXHPUy1
Hw5WuLn37WV0mdEhwNz4fQ6oNVp2h7coMjuwAo1hvM8eKCLefLHapinqv0vqX1hK
EgV/knXWU5Us8pXvnETudbUtB5bbwARBAodWTUQYXj1rDal7eMeDewEpcYUpjECw
I1tExKqPSnqOJaq3OkGlh1v7eYreaTRFBRrQBwtQpE5TLfq3aeQva/NJo80dEVkv
8uZUtvkzthln2Q==
-----END CERTIFICATE-----
Generated at Sun Aug 10 13:45:05 2025 by rpki-client