Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.mft
File: PWVWSolU1q6VL4ofevbBz7p4CUo.mft (raw, json)
Hash identifier: GXRxJE7ANxCyPo9XMKRDKBl/9oVeYykZ1DvOubLxHFg=
Subject key identifier: E4:44:0B:6B:B0:A3:FE:E5:21:56:D8:03:27:78:19:7F:0B:3E:5C:70
Authority key identifier: 3D:65:56:4A:89:54:D6:AE:95:2F:8A:1F:7A:F6:C1:CF:BA:78:09:4A
Certificate issuer: /CN=3d65564a8954d6ae952f8a1f7af6c1cfba78094a
Certificate serial: 01986093966E9AD78B8BFDEC7B43C7DE4BED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PWVWSolU1q6VL4ofevbBz7p4CUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.mft
Manifest number: 1509
Signing time: Thu 31 Jul 2025 13:02:21 +0000
Manifest this update: Thu 31 Jul 2025 13:02:21 +0000
Manifest next update: Fri 01 Aug 2025 13:02:21 +0000
Files and hashes: 1: PWVWSolU1q6VL4ofevbBz7p4CUo.crl (hash: Wwyhu+LBHBjpjq4rWx4GHoAO4SltKWNnFJA9d8v3GXw=)
2: ev3ATXcLdak2upi-q5CN2dVa8sw.roa (hash: Pui9NepJvKzqfzXLpJKX8HaOdkpWn4dOU8GbtL7nT0M=)
3: jnu9mPgopzA31RWkYxNmWkz3kyg.roa (hash: cra9mYolkxUmIpM2wu5PjhAJgTEYoxZ+ixlWu91VIrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PWVWSolU1q6VL4ofevbBz7p4CUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 Aug 2025 09:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:60:93:96:6e:9a:d7:8b:8b:fd:ec:7b:43:c7:de:4b:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d65564a8954d6ae952f8a1f7af6c1cfba78094a
Validity
Not Before: Jul 31 13:02:21 2025 GMT
Not After : Aug 1 13:02:21 2025 GMT
Subject: CN=e4440b6bb0a3fee52156d8032778197f0b3e5c70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:0b:cd:1f:94:ab:e6:f4:31:ba:4c:de:af:b9:
bc:9c:80:56:41:50:c7:f3:ef:dd:a8:bf:c4:f0:64:
fe:cc:53:e3:17:e1:7f:ca:1f:a1:88:80:93:fd:a6:
eb:a1:a2:8d:40:8a:33:6e:a8:4b:e0:e2:37:2f:f9:
d6:38:3a:d2:16:03:8c:1c:c9:e0:11:7e:a8:de:ed:
ec:75:dd:ba:98:35:96:83:27:de:49:87:ca:40:21:
24:91:e6:85:97:1e:a9:ae:f1:bc:a5:b2:59:9d:98:
10:98:90:65:93:74:1d:ed:a1:2b:3c:ba:21:23:84:
4b:d1:9e:21:11:10:39:73:6c:7e:07:6c:77:ac:0f:
5e:ca:b7:1f:a1:84:a7:5e:bf:61:31:a7:66:1b:06:
b7:dc:15:39:89:ab:69:33:f9:61:d4:40:f3:f9:ec:
ae:6c:88:4f:4d:d5:4e:7b:02:7c:da:36:41:8c:35:
9e:50:32:58:4a:ca:c7:5f:a3:c1:1e:49:50:94:01:
26:28:3e:aa:23:b5:f7:b1:1b:8c:b9:7b:98:ec:9f:
8d:60:c4:84:78:27:de:27:df:3d:54:2f:df:40:67:
40:30:fa:38:76:ea:cb:ef:7b:51:78:09:f6:0b:16:
8b:73:bd:b5:7c:90:49:1d:86:21:c9:ef:7a:50:e8:
e9:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:44:0B:6B:B0:A3:FE:E5:21:56:D8:03:27:78:19:7F:0B:3E:5C:70
X509v3 Authority Key Identifier:
keyid:3D:65:56:4A:89:54:D6:AE:95:2F:8A:1F:7A:F6:C1:CF:BA:78:09:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PWVWSolU1q6VL4ofevbBz7p4CUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:80:19:77:52:de:4d:8c:0f:04:56:10:75:02:24:7b:fc:41:
14:89:ca:c6:85:82:72:cd:64:98:7f:5c:df:c1:9e:25:0c:35:
bc:ac:53:93:1d:05:78:89:03:5d:5b:77:88:cd:2d:7d:94:78:
94:e6:10:10:cf:00:6e:0a:15:7b:7e:06:5e:2a:22:3d:ec:ea:
f7:2f:5e:b7:11:ea:dc:60:b7:31:4c:82:0e:fd:ec:c5:cb:65:
15:1b:63:be:30:b7:17:be:80:23:76:72:7b:db:3b:e1:d6:e8:
7e:f0:f7:8d:74:98:2b:ca:8c:cc:f9:85:67:f0:66:84:86:ae:
d1:02:c7:55:4a:fc:9a:82:88:2e:8c:11:4c:ad:7b:56:48:90:
4f:e4:31:f9:f6:eb:a1:7d:42:8c:d4:03:c0:81:9d:13:8e:26:
d0:c0:3e:a0:9a:e9:9f:39:0a:88:33:dc:c6:d8:bc:2f:d5:b5:
6a:6c:80:79:95:6e:ce:e6:09:b0:64:33:00:fb:bc:db:43:5b:
86:d9:de:db:e8:c2:d8:db:db:06:20:dc:ee:79:03:37:dc:83:
46:a7:8b:d0:f9:75:2a:38:f7:95:bd:d8:09:10:15:f9:d3:39:
0a:10:f6:b0:cd:1b:65:16:73:73:ab:9e:3b:c7:a9:08:ea:31:
d0:fd:fd:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 14:54:14 2025 by rpki-client