Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.mft
File: PWVWSolU1q6VL4ofevbBz7p4CUo.mft (raw, json)
Hash identifier: k6qiefreRjswcc2Ffoh+ymVp9Vl+tv7enEcH5/Il2eE=
Subject key identifier: 83:65:DD:31:E4:BD:94:C4:71:6E:F6:15:BC:5F:B8:E6:27:6B:D7:8E
Authority key identifier: 3D:65:56:4A:89:54:D6:AE:95:2F:8A:1F:7A:F6:C1:CF:BA:78:09:4A
Certificate issuer: /CN=3d65564a8954d6ae952f8a1f7af6c1cfba78094a
Certificate serial: 019A50E3B3A430651C762324A3CEF89D4CEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PWVWSolU1q6VL4ofevbBz7p4CUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.mft
Manifest number: 160A
Signing time: Tue 04 Nov 2025 22:01:31 +0000
Manifest this update: Tue 04 Nov 2025 22:01:31 +0000
Manifest next update: Wed 05 Nov 2025 22:01:31 +0000
Files and hashes: 1: PWVWSolU1q6VL4ofevbBz7p4CUo.crl (hash: kTevN8RTMJYO3O5OwOPlNFlIIz95DoVb/v3m51IiNcQ=)
2: ev3ATXcLdak2upi-q5CN2dVa8sw.roa (hash: Pui9NepJvKzqfzXLpJKX8HaOdkpWn4dOU8GbtL7nT0M=)
3: jnu9mPgopzA31RWkYxNmWkz3kyg.roa (hash: cra9mYolkxUmIpM2wu5PjhAJgTEYoxZ+ixlWu91VIrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PWVWSolU1q6VL4ofevbBz7p4CUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:b3:a4:30:65:1c:76:23:24:a3:ce:f8:9d:4c:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d65564a8954d6ae952f8a1f7af6c1cfba78094a
Validity
Not Before: Nov 4 22:01:31 2025 GMT
Not After : Nov 5 22:01:31 2025 GMT
Subject: CN=8365dd31e4bd94c4716ef615bc5fb8e6276bd78e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ae:ae:be:fb:45:cf:38:9b:8f:8b:72:7f:2c:
36:60:ad:17:b2:83:5f:41:60:79:df:87:aa:be:52:
85:5d:17:f3:f7:07:57:2d:68:ab:ce:4a:57:92:a8:
2a:09:29:5b:7a:85:58:aa:e0:a9:f5:23:38:fc:82:
e1:df:42:12:99:59:0c:93:6f:71:d5:67:94:dd:31:
b1:30:95:00:03:34:96:5f:66:c6:9a:62:7e:12:f7:
33:b3:74:45:88:be:cc:e4:96:f9:c9:57:20:5d:72:
61:33:38:3f:3c:67:3f:17:1b:f2:50:74:c0:d0:85:
f1:63:aa:dd:0f:69:27:e3:84:7a:38:8d:f8:26:57:
b1:2c:a3:96:b4:10:8d:a3:13:07:68:7d:1a:66:85:
7c:b7:00:50:8c:12:72:fd:b8:98:67:76:09:83:16:
f6:37:73:04:25:de:57:80:9f:95:50:3b:a8:32:71:
95:1f:60:e5:59:c3:8c:bc:ce:c6:ea:7f:77:94:46:
20:23:b2:95:af:75:0f:59:a5:7f:d7:ed:51:17:1d:
90:df:a7:68:50:a9:8a:8b:02:b6:8d:5f:07:12:ae:
9c:03:cf:17:4e:74:21:1b:a0:00:1f:6e:ce:2b:b1:
da:ca:3a:aa:90:7d:c0:4f:3d:5d:41:3a:a8:1e:c4:
e0:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:65:DD:31:E4:BD:94:C4:71:6E:F6:15:BC:5F:B8:E6:27:6B:D7:8E
X509v3 Authority Key Identifier:
keyid:3D:65:56:4A:89:54:D6:AE:95:2F:8A:1F:7A:F6:C1:CF:BA:78:09:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PWVWSolU1q6VL4ofevbBz7p4CUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:c6:81:81:dd:12:c6:cc:5f:a7:b3:58:dc:2a:bd:28:31:c0:
f3:cb:27:61:85:18:c6:8b:86:6e:af:15:cb:e3:3c:b5:d3:e3:
e3:66:3c:f0:33:40:08:4f:c1:7b:94:49:d1:53:85:c1:84:02:
48:b8:6d:7b:2d:8b:f4:64:ae:d1:5e:43:ce:6a:52:cc:16:05:
37:e1:06:c9:4c:a2:17:f3:b3:c4:40:30:6e:53:ef:65:1d:35:
b0:21:b0:ab:cc:1e:4a:a6:6a:b6:40:4b:e3:18:47:e3:23:67:
c0:ad:88:f1:e1:3b:bc:ce:0a:a8:c4:9c:0c:3c:2b:78:e9:fb:
3a:55:6a:de:90:fd:7b:9a:15:a6:18:5a:4e:26:b8:9f:40:be:
ae:94:90:51:2f:82:dc:1b:18:9d:47:5f:18:94:92:a5:c4:0b:
fe:9f:54:46:bd:26:39:63:3b:c5:1a:38:c5:0e:dc:78:f1:95:
0a:38:a3:a7:4c:c2:9f:8a:ed:32:40:26:5e:6e:4b:0f:58:e6:
5c:47:bc:14:2c:3d:1c:30:65:7b:48:ed:0a:c4:1e:36:e2:b3:
9b:0d:9e:c5:da:01:cc:28:29:28:a9:63:98:3c:2d:99:7f:10:
51:20:e4:a2:ed:0a:0a:ac:9f:af:61:e5:6d:a9:73:85:47:87:
1a:1e:e4:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:49:56 2025 by rpki-client