Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/PWwpWBRfRfrV2u6zi3W1LAlmEEY.mft
File: PWwpWBRfRfrV2u6zi3W1LAlmEEY.mft (raw, json)
Hash identifier: OVAkaiatkvc7+q6bP53V5mp+YZU5fFlcIa4QNWxW/UI=
Subject key identifier: 79:97:08:EB:D6:3E:C2:B0:D9:DE:E7:6B:ED:2C:49:CD:C0:B2:7C:B3
Authority key identifier: 3D:6C:29:58:14:5F:45:FA:D5:DA:EE:B3:8B:75:B5:2C:09:66:10:46
Certificate issuer: /CN=3d6c2958145f45fad5daeeb38b75b52c09661046
Certificate serial: 019A71136BC406C771833332C15DE72FEEF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PWwpWBRfRfrV2u6zi3W1LAlmEEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/PWwpWBRfRfrV2u6zi3W1LAlmEEY.mft
Manifest number: 0688
Signing time: Tue 11 Nov 2025 04:01:29 +0000
Manifest this update: Tue 11 Nov 2025 04:01:29 +0000
Manifest next update: Wed 12 Nov 2025 04:01:29 +0000
Files and hashes: 1: PWwpWBRfRfrV2u6zi3W1LAlmEEY.crl (hash: fJVZRwj2ESfj4VTPYhZSAkZc6zSma76N7m7ZbIdfThk=)
2: gdLyflAsCyF8taKXwI9Ohy9cbTg.roa (hash: watnTPY7ltSg0Ey7o57Cxg1ndShvduTve51cc1ZXeew=)
3: t5B6L3SDpnNQxpYAOqxx1KDKYiM.roa (hash: 2vbjQ+gKJBatZbu743TFnHPjWQew0j+rLlGQUa/1PSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/PWwpWBRfRfrV2u6zi3W1LAlmEEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/PWwpWBRfRfrV2u6zi3W1LAlmEEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/PWwpWBRfRfrV2u6zi3W1LAlmEEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:6b:c4:06:c7:71:83:33:32:c1:5d:e7:2f:ee:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d6c2958145f45fad5daeeb38b75b52c09661046
Validity
Not Before: Nov 11 04:01:29 2025 GMT
Not After : Nov 12 04:01:29 2025 GMT
Subject: CN=799708ebd63ec2b0d9dee76bed2c49cdc0b27cb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:93:2f:97:3c:0a:46:99:27:40:2a:d4:7f:45:
37:1f:7f:2e:f1:59:70:b0:fe:70:db:ec:eb:d8:df:
ab:d5:2f:77:de:f6:24:41:d6:55:f9:03:ee:75:f1:
a2:ac:c9:a5:86:02:3a:63:b8:fd:20:8b:d9:e8:7d:
cd:f1:86:d0:b9:da:9a:2b:fa:be:b0:a9:19:1f:50:
e9:8c:60:79:1d:27:38:85:bc:70:e7:70:a8:41:19:
5e:ed:67:7f:52:81:fb:e4:45:fa:02:5e:ff:99:e0:
41:99:4a:8d:22:15:fe:32:21:7a:58:c2:1e:d9:0c:
dc:80:91:e1:a7:65:8d:d3:dc:bd:48:d6:c7:9e:ae:
57:30:8d:a1:60:15:7b:ba:7e:7c:c3:1b:2a:ac:76:
b2:ce:30:27:c0:4d:ce:57:2a:6a:8d:5a:b7:df:b2:
6f:33:12:af:d7:99:83:ad:3a:c8:ed:bf:5c:ba:38:
30:14:55:73:b7:6c:6f:58:f6:9d:17:d1:86:1e:c8:
5a:00:c2:38:8a:68:73:62:82:13:26:08:7a:b2:0b:
a7:4d:9c:5e:db:df:96:b0:61:34:4c:b7:92:6b:75:
d0:24:1b:78:c0:8e:cb:89:84:6e:a5:fa:94:b7:36:
cd:0b:08:2d:fe:0a:d3:e1:db:3c:6d:bd:c3:00:21:
fe:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:97:08:EB:D6:3E:C2:B0:D9:DE:E7:6B:ED:2C:49:CD:C0:B2:7C:B3
X509v3 Authority Key Identifier:
keyid:3D:6C:29:58:14:5F:45:FA:D5:DA:EE:B3:8B:75:B5:2C:09:66:10:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PWwpWBRfRfrV2u6zi3W1LAlmEEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/PWwpWBRfRfrV2u6zi3W1LAlmEEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/PWwpWBRfRfrV2u6zi3W1LAlmEEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:9b:b6:eb:ee:2f:71:c2:e8:ba:cf:0a:9b:99:7d:f5:fb:24:
8d:71:ef:57:ac:12:0d:58:21:c6:6b:43:f6:57:f8:f5:c2:2f:
8a:75:34:60:5f:8d:8f:e4:35:57:1d:a3:44:2f:19:81:1c:e0:
b3:a1:f1:66:ad:1e:17:87:09:52:fd:d6:4a:1e:7d:5f:e4:18:
c2:fb:16:c2:58:74:76:32:68:5e:85:31:ee:12:92:25:67:41:
ef:4e:59:29:2e:94:3f:3d:da:b3:64:59:0b:4b:a9:bb:d3:69:
86:a3:fd:23:d6:fe:27:50:3b:3f:bd:02:61:fb:6d:1f:7f:ed:
7a:c8:e6:3f:d8:9e:c2:00:9c:44:ca:fe:46:fa:0c:02:d8:4f:
f7:fe:06:6d:4f:a9:ae:ba:9a:e1:18:1a:92:ea:a7:32:c7:8d:
6c:ea:2b:9f:6b:55:a1:71:9f:92:60:8b:b8:21:48:2b:89:c3:
ba:1a:a6:1e:46:6d:36:14:ac:57:f5:1c:f4:8c:e7:da:1d:e2:
cf:6c:e4:86:61:7a:7d:26:0f:81:2a:ab:5c:8f:4a:d8:12:a0:
59:7f:60:10:7b:6e:8d:c4:c8:d6:ae:6b:c8:fc:af:42:21:c5:
42:2c:71:35:d9:cc:7d:72:a9:43:10:39:e8:67:68:18:8f:f4:
99:e8:0b:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:50 2025 by rpki-client