Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.mft
File: PidCSWQA2BC-W0CW_e3sMKIx-as.mft (raw, json)
Hash identifier: uKu/EGK+5yqFzletE/HTySYJFdCh0EYC9peVHx0eJDs=
Subject key identifier: 01:0D:61:2D:F7:53:DE:0E:5F:C2:1C:C1:9B:F5:72:4C:04:6F:3A:CF
Authority key identifier: 3E:27:42:49:64:00:D8:10:BE:5B:40:96:FD:ED:EC:30:A2:31:F9:AB
Certificate issuer: /CN=3e2742496400d810be5b4096fdedec30a231f9ab
Certificate serial: 019849D30907154A95B6B358C5070E862763
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PidCSWQA2BC-W0CW_e3sMKIx-as.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.mft
Manifest number: 09E4
Signing time: Sun 27 Jul 2025 03:00:23 +0000
Manifest this update: Sun 27 Jul 2025 03:00:23 +0000
Manifest next update: Mon 28 Jul 2025 03:00:23 +0000
Files and hashes: 1: 5pXO0rccDvdcNpNF4kBVulDgfCw.roa (hash: N4A+PObGjvFgO5mi8UIuKYZJSnV7LB7QBUfSUqvfnRE=)
2: PidCSWQA2BC-W0CW_e3sMKIx-as.crl (hash: NNt6ou0TJvtnqGSc5axd5FesSCth5fLe8ak8VMz1o78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.mft
rsync://rpki.ripe.net/repository/DEFAULT/PidCSWQA2BC-W0CW_e3sMKIx-as.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:09:07:15:4a:95:b6:b3:58:c5:07:0e:86:27:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e2742496400d810be5b4096fdedec30a231f9ab
Validity
Not Before: Jul 27 03:00:23 2025 GMT
Not After : Jul 28 03:00:23 2025 GMT
Subject: CN=010d612df753de0e5fc21cc19bf5724c046f3acf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:00:69:33:a4:3d:ca:80:1b:89:ab:9a:25:e1:
0d:9b:65:53:f1:96:0a:27:c2:c0:bf:a1:54:ee:49:
08:c9:57:23:0f:bc:ca:cc:f7:f5:70:81:e6:19:8d:
36:62:a9:24:bc:2e:46:8b:71:25:c6:56:4e:07:ca:
b7:e4:98:18:ba:47:2a:58:7f:ce:2c:82:2e:41:3f:
e1:26:be:55:cc:50:21:b3:e5:39:73:7f:6d:bc:d1:
82:9b:65:93:af:b7:17:ca:94:05:49:a4:11:86:f6:
e1:67:c0:60:9b:db:b8:b5:7e:40:43:a0:b2:e9:c4:
c0:90:56:d8:c7:15:fa:37:d1:fb:62:33:62:cb:25:
62:82:87:60:fa:a0:47:5b:7d:4f:c0:29:84:09:70:
b3:0f:07:b7:9f:37:e5:30:21:1e:ac:d5:78:65:30:
a9:17:9e:a4:cf:d6:03:17:49:95:87:84:4b:0b:4c:
9b:15:fb:f0:4e:65:85:57:35:e7:31:8a:c6:dd:b2:
4d:05:d5:58:99:f6:72:83:34:17:5e:6c:1a:49:a8:
d1:5e:59:65:1a:be:2d:e0:d2:e5:e6:ba:39:f3:a1:
15:2e:dd:1c:6e:df:aa:c5:1e:ee:24:e0:bd:7a:bf:
ea:92:ee:a0:ca:88:99:ae:c3:96:fd:9a:d4:9c:0d:
73:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:0D:61:2D:F7:53:DE:0E:5F:C2:1C:C1:9B:F5:72:4C:04:6F:3A:CF
X509v3 Authority Key Identifier:
keyid:3E:27:42:49:64:00:D8:10:BE:5B:40:96:FD:ED:EC:30:A2:31:F9:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PidCSWQA2BC-W0CW_e3sMKIx-as.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:9f:48:9d:60:33:db:ca:78:24:16:34:48:6d:d7:af:f8:bf:
45:c8:31:90:2f:4c:a3:18:f6:31:9c:8f:43:d8:24:42:75:23:
0e:8b:bb:06:dd:3e:ac:6d:8e:f8:a9:2f:2f:4b:11:9b:68:0c:
79:32:f9:ac:dd:2b:ae:1f:54:1a:f7:78:e7:90:43:8f:a7:ed:
53:cb:83:3b:53:7c:ac:00:a0:b3:2d:ee:76:69:e8:c8:b4:df:
76:e1:5f:e8:ff:48:07:59:9b:ab:5c:74:e3:a4:c0:2a:a0:8c:
e1:83:14:8f:cb:50:2e:5d:cb:29:03:0d:e6:6a:a0:f3:3b:86:
27:97:d0:1a:73:5e:77:9c:39:c4:a7:db:52:ca:74:79:4f:5e:
89:6a:7a:54:b5:b0:66:7e:8d:0e:d0:ad:31:be:17:ed:3d:8f:
37:4f:6e:68:38:3e:9f:ef:11:e3:3e:78:5d:1e:f9:af:35:48:
38:df:6e:e4:55:a2:5b:8e:3c:ae:a8:c3:0b:43:03:14:35:80:
24:a7:2a:4c:0c:c5:21:e2:d9:db:fe:9a:8b:45:ef:ab:31:82:
8e:9b:ef:32:27:f4:02:0e:02:ec:e5:4c:67:26:49:1c:0c:16:
be:cf:35:4e:ca:8f:c4:41:94:c3:8b:84:e0:69:46:9a:26:22:
55:f7:23:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJ0wkHFUqVtrNYxQcOhidjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlMjc0MjQ5NjQwMGQ4MTBiZTViNDA5NmZkZWRlYzMwYTIz
MWY5YWIwHhcNMjUwNzI3MDMwMDIzWhcNMjUwNzI4MDMwMDIzWjAzMTEwLwYDVQQD
EygwMTBkNjEyZGY3NTNkZTBlNWZjMjFjYzE5YmY1NzI0YzA0NmYzYWNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzgBpM6Q9yoAbiauaJeENm2VT8ZYK
J8LAv6FU7kkIyVcjD7zKzPf1cIHmGY02YqkkvC5Gi3ElxlZOB8q35JgYukcqWH/O
LIIuQT/hJr5VzFAhs+U5c39tvNGCm2WTr7cXypQFSaQRhvbhZ8Bgm9u4tX5AQ6Cy
6cTAkFbYxxX6N9H7YjNiyyVigodg+qBHW31PwCmECXCzDwe3nzflMCEerNV4ZTCp
F56kz9YDF0mVh4RLC0ybFfvwTmWFVzXnMYrG3bJNBdVYmfZygzQXXmwaSajRXlll
Gr4t4NLl5ro586EVLt0cbt+qxR7uJOC9er/qku6gyoiZrsOW/ZrUnA1zzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAENYS33U94OX8IcwZv1ckwEbzrPMB8GA1UdIwQY
MBaAFD4nQklkANgQvltAlv3t7DCiMfmrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGlkQ1NXUUEyQkMtVzBDV19lM3NNS0l4LWFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85MjJmNmQtN2E3NC00ZmE4LTk0OTUt
MTg0ZGZmMjkyYTMwLzEvUGlkQ1NXUUEyQkMtVzBDV19lM3NNS0l4LWFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS85MjJmNmQtN2E3NC00ZmE4LTk0OTUtMTg0ZGZmMjkyYTMw
LzEvUGlkQ1NXUUEyQkMtVzBDV19lM3NNS0l4LWFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc59InWAz
28p4JBY0SG3Xr/i/RcgxkC9Moxj2MZyPQ9gkQnUjDou7Bt0+rG2O+KkvL0sRm2gM
eTL5rN0rrh9UGvd455BDj6ftU8uDO1N8rACgsy3udmnoyLTfduFf6P9IB1mbq1x0
46TAKqCM4YMUj8tQLl3LKQMN5mqg8zuGJ5fQGnNed5w5xKfbUsp0eU9eiWp6VLWw
Zn6NDtCtMb4X7T2PN09uaDg+n+8R4z54XR75rzVION9u5FWiW448rqjDC0MDFDWA
JKcqTAzFIeLZ2/6ai0XvqzGCjpvvMif0Ag4C7OVMZyZJHAwWvs81TsqPxEGUw4uE
4GlGmiYiVfcjWw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 08:27:09 2025 by rpki-client