Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.mft
File: PWVWSolU1q6VL4ofevbBz7p4CUo.mft (raw, json)
Hash identifier: e2GQsTYaxmLwIKlVwNC/fexndoYQ1/mVNPCZfbaq1Hw=
Subject key identifier: 99:FD:E6:5C:90:D2:26:6D:C0:31:43:D4:B0:FE:53:3F:8D:FB:07:11
Authority key identifier: 3D:65:56:4A:89:54:D6:AE:95:2F:8A:1F:7A:F6:C1:CF:BA:78:09:4A
Certificate issuer: /CN=3d65564a8954d6ae952f8a1f7af6c1cfba78094a
Certificate serial: 019A71B7DEDB9C763E39B8B12728FD67A84B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PWVWSolU1q6VL4ofevbBz7p4CUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.mft
Manifest number: 161B
Signing time: Tue 11 Nov 2025 07:01:06 +0000
Manifest this update: Tue 11 Nov 2025 07:01:06 +0000
Manifest next update: Wed 12 Nov 2025 07:01:06 +0000
Files and hashes: 1: PWVWSolU1q6VL4ofevbBz7p4CUo.crl (hash: eU6EhQUhqvI6444VlxDCGVhhBvRJsYETFCTiubmCaSQ=)
2: ev3ATXcLdak2upi-q5CN2dVa8sw.roa (hash: Pui9NepJvKzqfzXLpJKX8HaOdkpWn4dOU8GbtL7nT0M=)
3: jnu9mPgopzA31RWkYxNmWkz3kyg.roa (hash: cra9mYolkxUmIpM2wu5PjhAJgTEYoxZ+ixlWu91VIrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PWVWSolU1q6VL4ofevbBz7p4CUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:de:db:9c:76:3e:39:b8:b1:27:28:fd:67:a8:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d65564a8954d6ae952f8a1f7af6c1cfba78094a
Validity
Not Before: Nov 11 07:01:06 2025 GMT
Not After : Nov 12 07:01:06 2025 GMT
Subject: CN=99fde65c90d2266dc03143d4b0fe533f8dfb0711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:25:9d:7c:54:97:c1:a7:f9:10:d0:2a:7c:a7:
e6:e9:18:2b:3a:c9:37:29:15:4f:c6:e9:e0:dc:43:
42:b9:24:33:60:e2:a2:e0:29:2e:3b:ad:23:f0:3a:
2b:bb:98:1b:90:2f:e0:c4:16:a3:38:50:44:69:43:
ca:63:74:33:ae:a0:82:9f:61:be:05:6d:8e:f3:74:
68:a7:09:f9:74:da:aa:53:e0:70:c8:6b:27:5d:e0:
1a:1d:c8:27:14:53:e4:5e:32:28:83:71:71:b8:2b:
44:c5:f3:7a:a2:d0:ea:63:5e:bd:c5:ec:57:da:03:
3f:4b:fa:5f:e5:fd:2d:0d:3f:b4:c8:b6:89:f2:d2:
01:15:d3:e8:32:a1:2a:29:dd:f7:0b:f2:28:28:5d:
eb:8f:71:b2:cf:77:e0:c4:c5:10:7f:54:ab:0b:d9:
65:3a:8b:09:5a:1e:c2:44:3f:99:94:4a:f8:d3:d3:
e1:0a:8a:83:3e:76:87:c7:3a:6d:68:53:de:5b:6f:
10:d8:05:50:32:fb:cb:b0:1a:a9:be:ad:3b:3b:33:
da:be:91:ba:64:1c:5f:57:ef:03:11:6a:d2:1a:c9:
d9:ea:a7:37:71:2b:99:f8:48:60:0e:9f:9f:2d:e7:
44:a1:14:a5:57:dd:b8:47:fb:ec:d2:2e:75:26:fe:
c3:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:FD:E6:5C:90:D2:26:6D:C0:31:43:D4:B0:FE:53:3F:8D:FB:07:11
X509v3 Authority Key Identifier:
keyid:3D:65:56:4A:89:54:D6:AE:95:2F:8A:1F:7A:F6:C1:CF:BA:78:09:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PWVWSolU1q6VL4ofevbBz7p4CUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:22:b4:be:fe:5c:2f:ec:ce:9b:13:ec:13:78:01:d2:b8:33:
d8:04:83:7b:8d:8e:99:a2:5a:75:ae:db:80:26:4a:80:be:8d:
9a:e7:03:c3:8f:85:31:30:aa:d2:17:36:41:35:50:d5:0a:3e:
83:8c:ce:25:a9:d2:20:8e:cf:24:a6:40:f9:bc:e0:83:36:80:
b9:7a:b0:75:f9:0c:84:01:ba:d2:02:b1:af:fe:cc:7d:82:40:
cb:94:2e:51:83:05:72:08:d6:60:21:65:a0:04:b6:ee:3d:87:
35:fd:2e:34:bd:bd:fd:aa:34:8e:d8:75:97:cc:52:24:bc:1f:
ac:3d:7c:2d:23:1b:c2:5f:22:b6:a1:94:94:20:b2:a3:ea:57:
a5:23:2f:4e:c6:7a:fe:f4:e7:48:e4:de:0b:00:c2:cb:5d:91:
ec:bc:e2:d6:f3:e2:d1:80:1e:53:03:24:88:b8:1e:9e:ea:bb:
ae:90:c4:eb:8f:d5:a1:fb:a7:1e:9f:f2:2a:d0:62:e0:a2:58:
05:d4:81:77:bf:ce:9a:ff:ad:67:3d:f2:e0:73:6f:5c:42:80:
3b:8c:1c:7e:36:b8:90:2c:b4:96:63:d3:70:43:2e:c1:aa:f8:
ca:4c:22:57:5e:51:0c:c6:56:1f:07:fe:ac:0b:ff:06:28:d3:
f8:e6:3c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:04 2025 by rpki-client