Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6d1930-6815-487f-abe9-e2816ee6ba56/1/P2U3Wk029crhof4kWKOAUmz-22o.mft
File: P2U3Wk029crhof4kWKOAUmz-22o.mft (raw, json)
Hash identifier: PQy3Udkq7XskCYjtgjpaUeVQPhI30LHu4oXEJVBpElg=
Subject key identifier: 54:03:3F:1B:43:03:E1:38:8F:D0:8B:ED:8E:6B:10:5A:C3:02:98:69
Authority key identifier: 3F:65:37:5A:4D:36:F5:CA:E1:A1:FE:24:58:A3:80:52:6C:FE:DB:6A
Certificate issuer: /CN=3f65375a4d36f5cae1a1fe2458a380526cfedb6a
Certificate serial: 019A2478F47D04CD33FC1AEE431DBDFDD3B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P2U3Wk029crhof4kWKOAUmz-22o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/6d1930-6815-487f-abe9-e2816ee6ba56/1/P2U3Wk029crhof4kWKOAUmz-22o.mft
Manifest number: 0255
Signing time: Mon 27 Oct 2025 07:01:37 +0000
Manifest this update: Mon 27 Oct 2025 07:01:37 +0000
Manifest next update: Tue 28 Oct 2025 07:01:37 +0000
Files and hashes: 1: 9-o0NLiGvlKmMx-qIL22lBoBavY.roa (hash: x3fjMZ9f1cmTHw/gRrQuIfz02fOQCT025xB0UcuPW+Y=)
2: P2U3Wk029crhof4kWKOAUmz-22o.crl (hash: ZrM3r+6/4ZklMbeN/oryEDhYRBkngkVP2opAakiibdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/6d1930-6815-487f-abe9-e2816ee6ba56/1/P2U3Wk029crhof4kWKOAUmz-22o.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/6d1930-6815-487f-abe9-e2816ee6ba56/1/P2U3Wk029crhof4kWKOAUmz-22o.mft
rsync://rpki.ripe.net/repository/DEFAULT/P2U3Wk029crhof4kWKOAUmz-22o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 07:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:78:f4:7d:04:cd:33:fc:1a:ee:43:1d:bd:fd:d3:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f65375a4d36f5cae1a1fe2458a380526cfedb6a
Validity
Not Before: Oct 27 07:01:37 2025 GMT
Not After : Oct 28 07:01:37 2025 GMT
Subject: CN=54033f1b4303e1388fd08bed8e6b105ac3029869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:85:93:bb:ed:68:d3:dd:de:e6:4e:5e:48:2e:
07:d3:79:ed:88:de:16:15:a5:1c:bb:2c:02:06:59:
6f:fe:13:3a:41:18:c6:7f:2c:96:ba:a1:30:84:40:
89:71:cd:36:b1:cc:ea:26:9e:79:71:08:8f:e5:0f:
8b:17:c9:cd:c4:7f:e9:ce:74:81:2f:55:37:fa:93:
45:e3:5f:9f:ed:26:1d:e0:28:f7:0c:c6:a9:ae:c8:
dc:c7:66:cb:04:fa:69:1e:e9:96:b9:06:ea:2d:f7:
43:08:22:eb:b3:63:f4:d7:c3:56:46:2f:f7:68:1b:
c4:a0:2b:21:96:a8:a6:7b:a7:54:64:a8:08:73:e8:
4c:33:7c:b6:f2:76:ec:2b:8d:69:f8:1c:72:78:8e:
c0:52:a9:39:0c:f3:9d:74:af:12:3b:3f:38:4f:f4:
9c:33:af:eb:0f:c2:ab:5d:f9:06:59:7d:65:5f:15:
3b:94:8a:d7:15:cb:2d:bb:f1:2e:11:4d:1c:b2:d8:
4c:03:e6:7d:cc:56:8a:fc:ea:8e:73:af:c0:55:ab:
46:00:de:7a:a4:2b:e5:d9:4b:d0:11:60:16:d2:66:
78:96:86:e2:5b:12:9d:bc:d4:c8:e4:45:80:a9:c2:
a5:63:71:b2:97:71:d5:16:70:07:e6:81:ea:2e:8b:
c6:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:03:3F:1B:43:03:E1:38:8F:D0:8B:ED:8E:6B:10:5A:C3:02:98:69
X509v3 Authority Key Identifier:
keyid:3F:65:37:5A:4D:36:F5:CA:E1:A1:FE:24:58:A3:80:52:6C:FE:DB:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P2U3Wk029crhof4kWKOAUmz-22o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6d1930-6815-487f-abe9-e2816ee6ba56/1/P2U3Wk029crhof4kWKOAUmz-22o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6d1930-6815-487f-abe9-e2816ee6ba56/1/P2U3Wk029crhof4kWKOAUmz-22o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:00:39:ec:fa:c2:f0:79:29:4b:6d:90:17:f3:1f:d3:bc:e3:
42:54:90:75:ca:b0:bf:c9:0d:e2:97:6a:e2:10:84:14:b3:38:
25:52:76:8a:da:64:a6:cd:3c:49:f8:00:9c:b4:b1:a2:0f:ea:
76:93:80:0f:b7:3e:d2:85:6c:36:6e:49:38:9d:55:1f:a1:a8:
46:38:16:01:6a:44:88:66:8c:e1:1e:83:b0:d9:06:e2:88:f6:
2f:65:70:22:47:4b:e8:9d:16:64:d2:f1:2a:41:ea:34:1a:3c:
a2:a9:e6:be:8c:a0:e1:10:cb:a5:ed:7f:3e:d3:e8:f8:d6:d1:
5f:e6:f0:8c:2f:d5:8e:ae:5f:3a:88:61:82:f0:88:eb:fc:0c:
81:70:0f:9a:f2:25:7b:bc:7b:3d:f8:b3:cc:ea:af:fe:c0:41:
9b:01:79:77:a1:a5:83:b6:20:cb:33:3c:b7:44:3f:7c:6c:db:
ec:f1:c9:ca:5b:31:26:16:04:a2:a8:54:4d:7d:37:43:b6:a8:
54:09:9b:91:ad:b8:6a:ef:fe:b7:7a:27:a6:cc:3a:1c:97:e6:
99:c3:c7:d6:0a:6c:67:14:69:e1:ec:8e:ec:f4:89:b8:cf:c1:
c1:c2:0c:fe:59:81:ee:70:78:a8:f0:c6:13:43:fb:e2:66:e3:
12:56:4b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 14:31:11 2025 by rpki-client