Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft
File: PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft (raw, json)
Hash identifier: LaJydqkSw0q9YKMXRrCmlqAZmORA8RayEdYLSMdUvMQ=
Subject key identifier: 42:98:1C:59:83:FB:90:09:0D:D9:3A:C8:00:C5:0F:A6:7C:A6:3C:5E
Authority key identifier: 3C:85:9E:D6:93:CE:3D:E0:59:CA:A0:A0:C1:E4:24:5C:5E:9E:37:E4
Certificate issuer: /CN=3c859ed693ce3de059caa0a0c1e4245c5e9e37e4
Certificate serial: 019A2741AC0A484F54115D063DB308C006F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PIWe1pPOPeBZyqCgweQkXF6eN-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft
Manifest number: 089D
Signing time: Mon 27 Oct 2025 20:00:06 +0000
Manifest this update: Mon 27 Oct 2025 20:00:06 +0000
Manifest next update: Tue 28 Oct 2025 20:00:06 +0000
Files and hashes: 1: PIWe1pPOPeBZyqCgweQkXF6eN-Q.crl (hash: zU4kCvSKpsujeF3nSFxev84ccGvBPxOWobWLVCVn5Lc=)
2: cIvicQwvTTI6J8NGKDerxCkfUpQ.roa (hash: KRBjaA428X4oNlaq/pV1Uncb9bEVRkbIjJIh/xlTHjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/PIWe1pPOPeBZyqCgweQkXF6eN-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 15:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:27:41:ac:0a:48:4f:54:11:5d:06:3d:b3:08:c0:06:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c859ed693ce3de059caa0a0c1e4245c5e9e37e4
Validity
Not Before: Oct 27 20:00:06 2025 GMT
Not After : Oct 28 20:00:06 2025 GMT
Subject: CN=42981c5983fb90090dd93ac800c50fa67ca63c5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:11:f3:87:ea:78:83:e0:2a:83:05:58:49:1e:
02:60:b5:1e:94:d8:39:b7:8f:a9:df:72:61:c8:08:
e9:c5:f2:d9:02:68:ef:13:35:e0:8e:54:aa:2e:6d:
44:62:d1:e0:9b:50:a0:18:68:42:63:63:a5:6f:59:
5b:56:09:87:59:9c:0f:62:90:59:de:6a:41:aa:79:
6e:b5:72:6b:7e:40:5f:b9:9c:e3:19:30:78:d6:49:
91:58:a9:f0:49:e1:39:01:1f:cf:7b:61:7d:f7:07:
a4:24:55:5e:b4:cd:28:58:a6:c5:2e:8d:c9:e4:7b:
cc:d4:6c:87:ad:8e:10:0d:ed:25:11:c5:fa:7c:70:
fc:38:e3:7d:97:a1:17:e3:29:80:cf:a6:18:10:88:
ec:4e:c9:1c:42:bb:b3:4c:8e:e6:51:bd:10:0f:82:
c6:56:a4:8f:9a:04:87:ab:e9:53:c7:69:59:20:a9:
b3:83:d9:0d:bf:95:5b:04:7b:db:ff:6a:bc:9c:62:
e3:02:c2:75:e6:a1:4a:2c:51:7c:c5:00:79:b3:40:
1b:e0:05:72:3f:f1:91:05:41:be:e2:c3:5f:6a:54:
48:c0:1e:a2:98:2e:bb:42:8a:15:ea:34:30:7d:96:
e1:e2:c1:7e:6c:b9:b9:e0:c2:67:da:b1:7b:07:d0:
ea:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:98:1C:59:83:FB:90:09:0D:D9:3A:C8:00:C5:0F:A6:7C:A6:3C:5E
X509v3 Authority Key Identifier:
keyid:3C:85:9E:D6:93:CE:3D:E0:59:CA:A0:A0:C1:E4:24:5C:5E:9E:37:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PIWe1pPOPeBZyqCgweQkXF6eN-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:0a:0d:8a:d8:47:61:31:31:54:20:ac:43:96:37:4f:45:e4:
fd:8a:fc:1b:38:76:15:02:00:89:9c:5e:95:c6:ae:c2:34:5b:
fd:2b:55:9b:ed:1c:20:c7:fc:07:14:fe:b8:9c:4d:99:af:e1:
5b:19:77:fd:12:b3:38:a7:83:b9:d7:27:70:8e:02:c0:c9:57:
58:7c:2a:ca:62:bc:0f:18:10:51:f3:db:31:00:9a:37:67:01:
e6:89:c3:74:d5:9d:4a:15:cd:ed:ce:77:41:97:f8:78:66:4d:
02:7c:25:f1:fe:1f:26:3c:72:bb:1f:be:8b:1e:29:22:fc:38:
67:78:1a:8e:ab:53:6e:0a:d6:86:3c:f7:9e:0c:fe:65:0a:06:
2d:34:42:1e:ad:c3:d6:89:26:8c:6b:1d:b4:46:50:bf:1b:b9:
78:91:4a:0e:6b:71:b0:82:e1:b6:b8:db:5d:c5:2b:fd:21:38:
cb:ad:1d:6e:4f:af:b1:c9:75:10:09:d1:e9:d7:00:5e:04:a8:
8a:e3:d9:bc:7b:ff:0a:9a:35:dc:c1:91:60:6d:75:8f:fc:0d:
87:16:5b:25:4f:c7:9a:28:00:dc:af:01:d6:08:48:10:c9:db:
e6:4b:7a:94:ef:05:d1:37:b4:ee:01:20:66:19:de:2b:c8:db:
65:d5:eb:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 00:39:43 2025 by rpki-client