Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.mft
File: PWVWSolU1q6VL4ofevbBz7p4CUo.mft (raw, json)
Hash identifier: RoVW7j/vxgQb8SZrt4Y6oPaZpRgT1CMRvX0ZSzoLsCU=
Subject key identifier: 5A:A3:33:99:BA:52:1B:25:E8:4D:20:F1:B2:D3:0F:55:F6:B3:6E:1A
Authority key identifier: 3D:65:56:4A:89:54:D6:AE:95:2F:8A:1F:7A:F6:C1:CF:BA:78:09:4A
Certificate issuer: /CN=3d65564a8954d6ae952f8a1f7af6c1cfba78094a
Certificate serial: 019A52D1412071CA0EB01C958AC97D68CAA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PWVWSolU1q6VL4ofevbBz7p4CUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.mft
Manifest number: 160B
Signing time: Wed 05 Nov 2025 07:00:36 +0000
Manifest this update: Wed 05 Nov 2025 07:00:36 +0000
Manifest next update: Thu 06 Nov 2025 07:00:36 +0000
Files and hashes: 1: PWVWSolU1q6VL4ofevbBz7p4CUo.crl (hash: owUfrcSJW5cUuPJgmJ2wR+z97HPCbu2G61j/QrND0Sc=)
2: ev3ATXcLdak2upi-q5CN2dVa8sw.roa (hash: Pui9NepJvKzqfzXLpJKX8HaOdkpWn4dOU8GbtL7nT0M=)
3: jnu9mPgopzA31RWkYxNmWkz3kyg.roa (hash: cra9mYolkxUmIpM2wu5PjhAJgTEYoxZ+ixlWu91VIrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PWVWSolU1q6VL4ofevbBz7p4CUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:41:20:71:ca:0e:b0:1c:95:8a:c9:7d:68:ca:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d65564a8954d6ae952f8a1f7af6c1cfba78094a
Validity
Not Before: Nov 5 07:00:36 2025 GMT
Not After : Nov 6 07:00:36 2025 GMT
Subject: CN=5aa33399ba521b25e84d20f1b2d30f55f6b36e1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b0:cd:82:d7:94:94:19:4f:3e:21:6e:9d:dc:
f3:4b:f2:f0:77:6c:1a:68:ee:24:b1:66:5e:aa:21:
db:48:2f:3c:9d:a2:ef:51:a7:dc:09:f6:d7:b2:c3:
4f:5f:03:06:32:45:72:5d:49:f7:12:e5:c8:5f:ec:
dc:3d:40:c7:23:6f:bf:0d:ca:63:92:6a:f0:9c:1a:
22:c1:ef:5b:91:58:58:97:3b:33:d6:a5:fd:09:3d:
82:d8:b9:b7:b5:87:1c:87:3b:4b:02:b7:42:3a:28:
a5:d4:03:c1:b4:66:27:4f:ec:10:45:cf:89:a3:c3:
8c:00:79:63:23:46:e9:04:0c:b6:04:c6:4d:a8:dc:
ab:13:b0:ef:52:c9:03:b2:f4:eb:0d:c3:9d:59:4a:
5e:12:55:ed:4f:07:ee:ba:ab:3c:67:84:e7:0e:0f:
d1:51:9e:d2:91:5f:66:d4:60:13:ea:58:53:33:bb:
09:fc:07:49:0b:a7:30:bc:2e:7d:e9:dd:d9:37:a1:
08:59:e7:92:0b:a7:ee:85:a0:67:4d:a3:9d:5e:3b:
a5:09:27:54:ff:7f:24:30:db:0b:c3:ad:82:f1:7a:
e2:d3:32:b5:18:6e:50:68:ea:da:14:e6:d2:47:3c:
d3:e1:d4:ca:52:ed:5a:ba:0d:98:da:12:14:17:0c:
57:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:A3:33:99:BA:52:1B:25:E8:4D:20:F1:B2:D3:0F:55:F6:B3:6E:1A
X509v3 Authority Key Identifier:
keyid:3D:65:56:4A:89:54:D6:AE:95:2F:8A:1F:7A:F6:C1:CF:BA:78:09:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PWVWSolU1q6VL4ofevbBz7p4CUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:a9:42:cd:46:5a:10:cc:a0:74:d8:1c:df:61:0b:48:2c:e3:
17:78:ab:19:c8:ad:c3:c1:ad:cf:9b:a2:b7:32:25:41:d8:ab:
3c:74:5a:e5:c8:c7:5c:01:cb:47:b1:ce:bb:cf:21:48:c8:d0:
cb:68:8d:83:fd:e7:1b:2a:7c:58:48:69:4d:d8:27:4a:09:cd:
4b:4f:97:9f:6b:d9:95:fd:99:22:de:da:7e:cd:2b:e2:11:52:
dd:9d:90:9d:a5:37:27:31:69:9e:91:71:08:eb:b3:eb:de:d2:
55:66:9d:5f:5b:51:8c:bd:bf:f4:0a:73:d6:2d:52:b4:c3:44:
21:48:bf:c2:03:f0:db:bf:82:57:b1:ee:a9:33:9d:b4:c0:97:
66:d4:ac:7d:11:95:d1:da:98:6a:64:71:5d:b8:80:ca:5b:6b:
1a:50:74:6a:dc:85:cb:ce:f4:32:6c:96:79:16:25:d7:b7:92:
16:1d:aa:a0:6b:d2:df:4a:50:2d:b2:bc:30:43:05:62:c9:66:
ce:f5:56:ea:c6:64:cb:0c:c6:dd:c3:d9:3c:57:9f:23:d4:bd:
9e:a2:bd:f2:9e:9f:58:c1:a0:4e:81:61:d2:0b:8c:41:2b:d4:
ef:13:55:54:e9:6b:11:71:43:f7:87:d0:34:a2:77:8d:f7:23:
87:2a:b0:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:35:46 2025 by rpki-client