Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/de68c6-650f-4dfa-bd13-000082c123e7/1/PwWOQyu_cjaXUKmVHVJZQwtcpL8.mft
File: PwWOQyu_cjaXUKmVHVJZQwtcpL8.mft (raw, json)
Hash identifier: kMmfuXHtZs082NfcZWLr1NuRSFNFtrosxLg30psuWhk=
Subject key identifier: DF:85:66:76:4F:07:0C:63:03:E5:3E:F5:03:0D:BC:E0:36:26:93:F1
Authority key identifier: 3F:05:8E:43:2B:BF:72:36:97:50:A9:95:1D:52:59:43:0B:5C:A4:BF
Certificate issuer: /CN=3f058e432bbf72369750a9951d5259430b5ca4bf
Certificate serial: 019A7226512A075D060EFF01E5FB21B33BAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PwWOQyu_cjaXUKmVHVJZQwtcpL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/de68c6-650f-4dfa-bd13-000082c123e7/1/PwWOQyu_cjaXUKmVHVJZQwtcpL8.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 09:01:44 +0000
Manifest this update: Tue 11 Nov 2025 09:01:44 +0000
Manifest next update: Wed 12 Nov 2025 09:01:44 +0000
Files and hashes: 1: LHapQb8ix5yDr9XdIdq3SLfgGJQ.roa (hash: OTBcvGKIAwNH7dYThkaA46DYb8Du7nUhG7Wp8v0hqOA=)
2: PwWOQyu_cjaXUKmVHVJZQwtcpL8.crl (hash: LsUSmvJue68huDGN2s/Qvq70R6TFEt+kkc3LBaTh+1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/de68c6-650f-4dfa-bd13-000082c123e7/1/PwWOQyu_cjaXUKmVHVJZQwtcpL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/de68c6-650f-4dfa-bd13-000082c123e7/1/PwWOQyu_cjaXUKmVHVJZQwtcpL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/PwWOQyu_cjaXUKmVHVJZQwtcpL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:51:2a:07:5d:06:0e:ff:01:e5:fb:21:b3:3b:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f058e432bbf72369750a9951d5259430b5ca4bf
Validity
Not Before: Nov 11 09:01:44 2025 GMT
Not After : Nov 12 09:01:44 2025 GMT
Subject: CN=df8566764f070c6303e53ef5030dbce0362693f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:4c:e2:f9:2d:04:56:46:87:2c:f4:08:1d:46:
01:59:cb:9e:cd:c2:a0:f2:b0:fc:0e:e2:db:9e:2f:
e0:86:90:4b:87:0d:7a:de:7f:91:0b:d5:e8:a2:5a:
cf:17:b0:9e:fd:01:9c:32:23:4c:98:4a:3a:e3:92:
2a:33:65:cf:9d:3a:47:da:b1:39:45:81:e5:e4:98:
f9:35:c8:53:29:ec:06:20:ff:68:a5:dc:91:0d:fa:
5d:0a:e7:8a:46:f9:d3:53:e7:2a:7d:fd:8b:95:53:
68:a5:aa:a6:d3:7d:e1:13:be:03:e6:17:8e:71:3a:
10:42:81:ea:b3:10:a4:29:b2:6b:89:6a:8a:f0:e2:
a5:ad:65:49:20:3b:82:32:55:df:d5:37:b0:ab:c5:
cd:9d:f0:77:2b:5a:84:5f:93:e9:61:58:b8:34:9a:
ed:0e:87:a8:cc:53:5d:77:3e:b6:b9:32:32:cf:31:
3f:e1:79:29:21:d6:8c:07:e7:6a:3a:c7:23:e5:ef:
b7:a0:38:54:bc:90:48:14:89:1e:fe:47:28:67:49:
e5:3e:cc:14:0d:20:ca:cc:e0:32:c1:e1:9f:be:05:
a6:7f:1b:74:4d:5b:00:22:60:2f:73:d1:cb:6b:6b:
b9:87:61:c6:76:df:8d:c3:ea:36:a9:d1:58:6e:b8:
dc:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:85:66:76:4F:07:0C:63:03:E5:3E:F5:03:0D:BC:E0:36:26:93:F1
X509v3 Authority Key Identifier:
keyid:3F:05:8E:43:2B:BF:72:36:97:50:A9:95:1D:52:59:43:0B:5C:A4:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PwWOQyu_cjaXUKmVHVJZQwtcpL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/de68c6-650f-4dfa-bd13-000082c123e7/1/PwWOQyu_cjaXUKmVHVJZQwtcpL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/de68c6-650f-4dfa-bd13-000082c123e7/1/PwWOQyu_cjaXUKmVHVJZQwtcpL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:46:a9:0e:97:e8:4d:d5:e4:ad:d5:97:b3:ef:0c:eb:54:72:
71:16:d0:28:8d:61:1f:17:16:28:29:fe:19:70:cf:73:5b:88:
f1:cc:5f:08:73:ef:30:b0:fc:64:db:6f:21:05:d6:a0:5e:06:
e1:d6:30:73:ab:81:4f:8a:48:1e:43:c3:5a:88:61:aa:42:5f:
db:e3:c4:e2:53:b8:44:12:2c:7a:43:12:12:34:cc:74:38:b5:
57:c1:92:68:ee:17:97:4c:31:2e:f4:94:6a:2d:c6:91:52:2a:
55:57:7c:17:fc:15:0a:ac:cc:02:9e:c3:3f:0f:df:9b:52:77:
07:35:58:f8:c2:8e:3a:fa:9f:0c:2d:d3:94:60:47:f4:64:5f:
cf:b1:dc:cf:e4:32:14:b1:c4:28:55:bf:b7:ea:76:7d:6c:ae:
e6:0d:7a:d3:d5:1d:9b:98:21:5f:cc:20:83:23:24:5f:c1:f0:
9c:dc:91:5a:41:96:ae:de:fd:69:8c:23:18:a4:c5:0c:76:68:
3c:dd:59:19:9a:95:14:5a:64:4a:2a:f1:11:f4:d8:f4:7e:d3:
97:92:be:f0:e7:2e:78:b9:b7:28:df:58:4d:84:12:38:37:1b:
60:f0:00:ae:4a:b6:51:61:88:a3:3f:0a:eb:6c:33:d6:37:c4:
92:b4:27:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:40 2025 by rpki-client