Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft
File: PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft (raw, json)
Hash identifier: e+6nWhaz/EKXmnYBZQ6HhWRydG0J8uUNAenCXRQw21s=
Subject key identifier: 94:98:0A:2F:7B:DF:7D:FC:95:5E:BD:85:F9:55:03:7A:6B:7F:D8:14
Authority key identifier: 3C:85:9E:D6:93:CE:3D:E0:59:CA:A0:A0:C1:E4:24:5C:5E:9E:37:E4
Certificate issuer: /CN=3c859ed693ce3de059caa0a0c1e4245c5e9e37e4
Certificate serial: 019753105E950CF8E61427C6DD42CEEAB37B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PIWe1pPOPeBZyqCgweQkXF6eN-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft
Manifest number: 0726
Signing time: Mon 09 Jun 2025 05:01:10 +0000
Manifest this update: Mon 09 Jun 2025 05:01:10 +0000
Manifest next update: Tue 10 Jun 2025 05:01:10 +0000
Files and hashes: 1: PIWe1pPOPeBZyqCgweQkXF6eN-Q.crl (hash: dyOalihqwCwa3sIJFURQtiuXENSAAtgda5qMHOzjO1Y=)
2: cIvicQwvTTI6J8NGKDerxCkfUpQ.roa (hash: KRBjaA428X4oNlaq/pV1Uncb9bEVRkbIjJIh/xlTHjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/PIWe1pPOPeBZyqCgweQkXF6eN-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:10:5e:95:0c:f8:e6:14:27:c6:dd:42:ce:ea:b3:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c859ed693ce3de059caa0a0c1e4245c5e9e37e4
Validity
Not Before: Jun 9 05:01:10 2025 GMT
Not After : Jun 10 05:01:10 2025 GMT
Subject: CN=94980a2f7bdf7dfc955ebd85f955037a6b7fd814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:94:44:be:e5:3e:61:0f:d4:ad:49:1c:5e:58:
19:20:a9:51:83:3f:22:71:29:af:8c:ff:2a:c4:b3:
90:d3:80:06:93:70:cb:2f:da:09:c9:23:05:8e:79:
94:e7:ba:ea:15:8f:d1:d5:c0:31:26:90:7b:8f:72:
e4:ed:1b:7d:18:69:a0:cf:90:c1:3b:ea:99:e7:bb:
70:79:99:ad:8b:d2:06:87:75:c0:d5:53:3f:9e:4f:
89:35:2e:e0:32:23:6c:f5:b4:b8:82:91:4a:70:22:
ac:bd:02:e9:5c:60:52:33:b0:77:de:91:d9:fe:07:
98:90:6f:0e:60:3b:c4:9c:2a:9b:b4:a4:7e:f2:db:
56:b0:cc:36:8d:e6:d7:f9:f5:b0:3c:22:3c:af:95:
19:3b:f8:a1:ff:25:87:ff:df:75:24:41:d9:1e:b9:
91:32:21:76:af:98:07:4f:5d:a0:5b:55:9d:e9:1f:
bb:a1:af:ab:7c:00:bb:ee:01:03:24:9d:5e:98:04:
dc:94:ec:c1:a2:4c:e5:85:ed:cd:a0:11:10:14:db:
0b:e4:3c:be:e5:1a:fd:55:7e:60:00:a4:6b:cc:90:
f2:ad:b8:46:bd:b2:d6:3a:a3:5e:25:38:ea:93:00:
c9:c0:15:c6:9c:4e:1f:2b:83:dd:46:84:e5:98:5b:
9d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:98:0A:2F:7B:DF:7D:FC:95:5E:BD:85:F9:55:03:7A:6B:7F:D8:14
X509v3 Authority Key Identifier:
keyid:3C:85:9E:D6:93:CE:3D:E0:59:CA:A0:A0:C1:E4:24:5C:5E:9E:37:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PIWe1pPOPeBZyqCgweQkXF6eN-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:42:86:9d:df:b2:14:cb:12:07:9d:1f:00:1e:29:67:2f:31:
d9:b7:56:f4:88:99:9c:34:5b:e9:f4:e5:85:30:90:ca:db:21:
28:2c:67:e1:27:cd:ee:05:53:52:16:9d:dc:11:ad:b3:2d:b1:
c3:2a:d7:2c:4e:df:91:d8:ad:9d:a0:5d:92:a5:29:49:a0:14:
d1:e7:41:78:35:a0:ae:78:3a:b5:88:05:7f:5d:12:2b:d6:f1:
d0:ce:e4:e3:f8:30:f5:e7:94:86:ce:d7:08:32:1d:10:5f:4d:
2d:93:e0:2d:01:9a:47:81:4b:aa:df:ba:47:b6:75:71:0f:5b:
32:2d:f8:ab:1b:1d:7b:56:cc:69:b8:f3:b8:ce:32:6f:bf:74:
7d:d3:db:f3:f2:f2:33:d4:3d:51:be:92:96:7d:08:e0:3e:25:
17:db:d5:1c:80:f7:aa:cc:c1:47:0d:c7:55:64:90:34:0b:fb:
16:bc:59:4c:46:0b:f2:80:79:23:67:ad:53:ed:5b:4a:b9:33:
d1:64:a6:15:96:64:fe:5b:d5:fb:ab:d9:fd:93:9b:5d:4c:e4:
68:bb:e8:81:47:ff:8f:95:8e:5c:50:f3:52:06:3f:cd:41:ec:
a8:d8:49:56:8c:81:7d:63:71:ba:33:90:6a:52:07:07:3e:8a:
ca:77:a8:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 12:04:19 2025 by rpki-client