Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.mft
File: PiWraYX3nKneBumOi52iRdhVmrY.mft (raw, json)
Hash identifier: nMLgmG/KJWKMzygOBXuiNFBWnv8lVFV1Zv/ZyXJQemo=
Subject key identifier: CF:2F:EF:4A:52:62:90:76:A7:F5:2E:9E:2E:59:AE:5A:7C:D4:61:31
Authority key identifier: 3E:25:AB:69:85:F7:9C:A9:DE:06:E9:8E:8B:9D:A2:45:D8:55:9A:B6
Certificate issuer: /CN=3e25ab6985f79ca9de06e98e8b9da245d8559ab6
Certificate serial: 0199266932C14C8A1B2C854D02EA848FCAF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PiWraYX3nKneBumOi52iRdhVmrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.mft
Manifest number: 03F5
Signing time: Sun 07 Sep 2025 23:00:52 +0000
Manifest this update: Sun 07 Sep 2025 23:00:52 +0000
Manifest next update: Mon 08 Sep 2025 23:00:52 +0000
Files and hashes: 1: 2UhYLcd2j-KdAauqxCqQQx52q2U.roa (hash: MFZ2OT0V1ZDMTvLmKJXIXyij1pz5j8dbnfqUGRmXftA=)
2: JIju3Zu3gqnn8i4w1MTEOOx7hro.roa (hash: dCgTEEXu0bVao+NC3O8cgRpfY5p29zC65jhR3uUto00=)
3: PiWraYX3nKneBumOi52iRdhVmrY.crl (hash: vS+cfEdr0RSpgbzx1SZcun3JDn0Mlm6//181p1+P0zk=)
4: pwdlb--yOjorbcCQL2QR9oUUpWI.roa (hash: 1klYczNt5J1n/8K98SAjHgNfDm84PABZ1H0MBugMFMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.mft
rsync://rpki.ripe.net/repository/DEFAULT/PiWraYX3nKneBumOi52iRdhVmrY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 23:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:26:69:32:c1:4c:8a:1b:2c:85:4d:02:ea:84:8f:ca:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e25ab6985f79ca9de06e98e8b9da245d8559ab6
Validity
Not Before: Sep 7 23:00:52 2025 GMT
Not After : Sep 8 23:00:52 2025 GMT
Subject: CN=cf2fef4a52629076a7f52e9e2e59ae5a7cd46131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:30:55:7d:25:be:d9:fa:d3:a2:88:69:c1:96:
a2:69:97:c2:1d:ad:45:6f:4b:e2:1f:cb:c2:df:03:
e7:32:ca:3f:d7:e3:6e:41:7d:39:e5:2f:97:dd:4d:
84:d7:33:af:9b:13:0b:08:1b:7c:56:2b:b5:0e:51:
5a:36:64:2c:c7:c6:72:fb:3b:84:7f:2a:34:c6:a4:
65:63:4c:09:f1:0a:2d:47:aa:4c:da:6c:27:7e:68:
f4:03:9b:7c:7c:b1:1d:ea:4f:4a:26:2b:dc:3a:a3:
9f:0a:75:8d:fd:40:52:88:e3:f2:e3:29:4b:e4:7b:
87:c3:4e:8e:cb:38:8a:f8:e1:40:2d:21:27:4f:10:
f6:0f:06:df:39:1f:f7:32:b4:90:10:46:ef:5a:cd:
64:e6:05:dd:87:ce:35:6c:5c:1c:0c:93:d6:a9:2a:
9b:01:b4:4c:61:e4:d2:cb:54:51:01:fe:bb:0b:54:
90:14:d3:a0:99:81:3a:03:cd:9d:25:ac:f8:71:46:
d2:e1:5c:48:cc:3a:2b:9b:07:50:b4:25:7d:8e:5e:
d1:13:c3:1a:08:ee:73:ed:98:4d:a0:c4:b9:c9:6a:
75:31:25:5f:5c:2b:4c:eb:de:13:04:11:37:ae:66:
d7:80:d3:fe:40:07:54:a4:22:05:3a:b4:1f:7d:80:
3e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:2F:EF:4A:52:62:90:76:A7:F5:2E:9E:2E:59:AE:5A:7C:D4:61:31
X509v3 Authority Key Identifier:
keyid:3E:25:AB:69:85:F7:9C:A9:DE:06:E9:8E:8B:9D:A2:45:D8:55:9A:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PiWraYX3nKneBumOi52iRdhVmrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:68:2d:eb:15:27:6f:c6:9e:30:c1:ff:9b:88:58:25:81:5c:
da:60:88:b3:54:a9:97:54:da:30:78:56:71:3a:34:1e:66:40:
af:04:7a:28:0d:67:c8:55:6a:a5:0a:78:72:7b:08:49:6b:44:
de:75:72:fa:f2:19:8c:01:97:bc:8c:fe:25:d7:c4:59:63:c6:
92:85:2e:aa:78:f0:ff:1f:3f:a5:11:b6:10:9a:60:e9:ad:35:
ca:f3:2f:5c:32:be:06:4a:63:be:2b:6b:13:19:f0:88:69:41:
bf:7b:f5:2f:a0:26:eb:44:24:09:d0:e0:ff:af:3d:7d:f1:7d:
29:75:94:c9:27:8b:e1:b2:8a:6b:b2:a1:66:b6:07:c1:fc:38:
68:49:a6:8f:29:3d:29:fd:55:c5:a1:98:50:ea:7d:c8:d5:ac:
44:63:f1:da:05:53:28:b7:ea:66:29:93:71:b3:dd:e9:ce:44:
dd:cf:c8:cb:7b:50:2f:dd:9a:fe:7e:c9:e7:4e:93:a9:89:3c:
bc:49:75:9d:00:67:91:8c:f4:59:28:c2:e3:13:22:a1:ef:82:
36:11:6e:0f:c8:9f:94:c3:b6:2c:76:2b:83:d2:70:f5:9c:4f:
4c:3b:23:7e:02:fe:bf:79:0f:16:0e:40:4c:e7:6e:97:05:ae:
bb:d5:f0:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 08:14:42 2025 by rpki-client