
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/PWwpWBRfRfrV2u6zi3W1LAlmEEY.mft
File: PWwpWBRfRfrV2u6zi3W1LAlmEEY.mft (raw, json)
Hash identifier: 7M08XZpXC06YVgQQa16s5pnG3tdHBLhgLc0mJTGzJxs=
Subject key identifier: BD:A2:CD:EF:C1:ED:7B:35:29:29:20:A5:CE:DE:DB:B3:C7:60:4D:00
Authority key identifier: 3D:6C:29:58:14:5F:45:FA:D5:DA:EE:B3:8B:75:B5:2C:09:66:10:46
Certificate issuer: /CN=3d6c2958145f45fad5daeeb38b75b52c09661046
Certificate serial: 01984965B2CA0E3AA2D09042E7AA69C4664C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PWwpWBRfRfrV2u6zi3W1LAlmEEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/PWwpWBRfRfrV2u6zi3W1LAlmEEY.mft
Manifest number: 056A
Signing time: Sun 27 Jul 2025 01:00:58 +0000
Manifest this update: Sun 27 Jul 2025 01:00:58 +0000
Manifest next update: Mon 28 Jul 2025 01:00:58 +0000
Files and hashes: 1: 6px4oQpQxURR5IW0gWezwsCgYUA.roa (hash: aKqSySkiQ4Z3UFY+0fQdpN2yWiQF1RqxRVXfSVXmnd4=)
2: PWwpWBRfRfrV2u6zi3W1LAlmEEY.crl (hash: uA1aqaWIVCzyKi+AGj6g4lOGq4AiGBTeY8UWT1BzdLs=)
3: gdLyflAsCyF8taKXwI9Ohy9cbTg.roa (hash: watnTPY7ltSg0Ey7o57Cxg1ndShvduTve51cc1ZXeew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/PWwpWBRfRfrV2u6zi3W1LAlmEEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/PWwpWBRfRfrV2u6zi3W1LAlmEEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/PWwpWBRfRfrV2u6zi3W1LAlmEEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:b2:ca:0e:3a:a2:d0:90:42:e7:aa:69:c4:66:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d6c2958145f45fad5daeeb38b75b52c09661046
Validity
Not Before: Jul 27 01:00:58 2025 GMT
Not After : Jul 28 01:00:58 2025 GMT
Subject: CN=bda2cdefc1ed7b35292920a5cededbb3c7604d00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:10:39:49:4e:89:08:11:75:73:34:a9:8e:80:
5b:aa:d4:47:50:17:af:58:1e:bc:ae:52:e3:6e:de:
2a:6a:cc:f9:6d:a2:90:d7:19:01:36:07:1a:04:74:
71:ab:5c:00:e8:6e:f9:6b:5d:ef:4d:06:68:b1:f4:
93:57:c7:95:25:7f:60:d3:56:15:d4:6f:eb:a6:70:
74:f8:70:49:70:bd:a3:4c:a4:5c:31:d0:f8:a7:63:
ea:7c:cd:25:0e:3e:c0:39:ae:54:a7:34:e3:3e:db:
88:d9:bd:36:af:1b:ff:5e:96:dd:84:3f:7e:ee:82:
11:2f:53:51:74:6c:11:a7:4f:fd:e4:46:f7:c2:09:
f8:14:36:fb:d5:23:84:b2:29:52:e6:a1:14:7f:29:
11:ad:9c:c3:37:bc:36:45:9e:f6:61:26:f3:88:cf:
cb:af:ea:e6:f8:03:34:f6:0f:55:04:5d:fa:39:cc:
01:b2:81:9d:d5:1e:60:eb:9f:f3:a3:3a:04:95:9a:
06:16:48:1f:87:92:e7:0b:fc:61:ce:1e:e1:89:63:
fc:f0:00:8f:76:96:29:72:89:53:e2:9d:1c:c0:64:
ed:ea:13:f4:fb:33:67:37:49:0c:ad:32:57:cc:4f:
75:86:3c:3b:f7:4c:f5:9b:7f:a0:ac:f1:e1:cd:c9:
56:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:A2:CD:EF:C1:ED:7B:35:29:29:20:A5:CE:DE:DB:B3:C7:60:4D:00
X509v3 Authority Key Identifier:
keyid:3D:6C:29:58:14:5F:45:FA:D5:DA:EE:B3:8B:75:B5:2C:09:66:10:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PWwpWBRfRfrV2u6zi3W1LAlmEEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/PWwpWBRfRfrV2u6zi3W1LAlmEEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/PWwpWBRfRfrV2u6zi3W1LAlmEEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:91:3d:df:ed:1a:a0:79:05:ac:eb:9f:21:f0:63:3a:a9:2c:
10:e5:60:39:1d:55:2c:54:bc:22:6f:09:9f:7c:74:41:49:72:
20:b0:f6:68:66:aa:1f:83:7e:d3:db:ce:ca:a7:e4:07:ae:5f:
2a:bb:06:0e:ed:f6:5a:02:e6:e4:21:9a:63:5e:c7:43:c2:f5:
4c:d0:0b:45:e2:bc:0c:da:c5:38:78:df:dd:36:de:d3:f5:49:
de:83:99:93:37:e7:99:80:20:46:a2:c1:3b:06:f1:2e:ea:7a:
47:c6:5e:6a:76:04:7e:56:d8:7f:d1:a4:dd:f5:0c:1d:de:46:
3e:03:20:58:bb:ca:ec:2f:4d:6e:63:99:0f:5f:2a:cd:85:ca:
b8:02:66:69:c2:f0:5f:86:4b:9c:90:7e:64:be:6b:67:34:74:
f9:38:ed:bb:a4:95:72:3e:fc:3a:5c:3f:d9:7a:2f:b0:e5:7e:
df:e1:6a:7a:20:4a:5b:36:bd:e1:6c:b8:76:1d:2e:b3:1d:36:
2f:39:3a:f2:e9:84:fe:e8:79:2f:ff:ce:80:ce:09:c9:56:8a:
2f:dd:4b:69:c5:36:ec:fb:cc:ad:1e:56:73:3e:bd:bf:b1:2b:
a8:69:08:0f:f9:f3:93:7b:e0:f5:26:79:e4:75:a7:e4:7f:01:
11:03:98:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:42:48 2025 by rpki-client