Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.mft
File: PwKJr_qvCA4lJxjj9Eidop2fpVo.mft (raw, json)
Hash identifier: 42hB+YLyaiyn4AJTypM8gkWZWAI0RWvEJiUO4Zo3OCE=
Subject key identifier: 63:41:BC:E3:B7:14:6D:C1:0E:42:D8:D9:B4:48:85:80:42:6F:B8:E5
Authority key identifier: 3F:02:89:AF:FA:AF:08:0E:25:27:18:E3:F4:48:9D:A2:9D:9F:A5:5A
Certificate issuer: /CN=3f0289affaaf080e252718e3f4489da29d9fa55a
Certificate serial: 0196767A3BB663049608D61752BF5C4E9F94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PwKJr_qvCA4lJxjj9Eidop2fpVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.mft
Manifest number: 1510
Signing time: Sun 27 Apr 2025 09:00:44 +0000
Manifest this update: Sun 27 Apr 2025 09:00:44 +0000
Manifest next update: Mon 28 Apr 2025 09:00:44 +0000
Files and hashes: 1: 4vBZmgBMnVCe-FhubPi7IwTZR7U.roa (hash: pC9viwrfXhDTa2hNSC3okPZXSzJEUX3jBZCttoAMuYA=)
2: PwKJr_qvCA4lJxjj9Eidop2fpVo.crl (hash: 3H5AS4JHbYQmtAZIN78SAxiRfQTicPh2GS0us0NCNJE=)
3: liO3Dk9HW5maOXYINfx-lTJgFC0.roa (hash: q4LEiFG0iKJd0o8pxD+sRsl85pA8hcAalAJZcMAOiLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PwKJr_qvCA4lJxjj9Eidop2fpVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:7a:3b:b6:63:04:96:08:d6:17:52:bf:5c:4e:9f:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f0289affaaf080e252718e3f4489da29d9fa55a
Validity
Not Before: Apr 27 09:00:44 2025 GMT
Not After : Apr 28 09:00:44 2025 GMT
Subject: CN=6341bce3b7146dc10e42d8d9b4488580426fb8e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c9:a8:31:53:69:d0:54:5a:c8:5d:c8:8d:d9:
8f:ff:3f:86:c8:7b:f1:e4:cf:98:fd:ed:48:f0:a1:
2e:47:0f:aa:70:b7:30:e3:3d:b6:c2:75:48:35:0b:
60:07:44:d2:9b:0e:3a:01:29:40:90:0e:e0:f2:d9:
6f:90:52:56:36:22:00:68:d6:17:7e:97:af:ad:36:
ca:03:32:1c:21:26:cd:93:26:c9:a6:50:3b:4a:39:
06:d3:ae:d3:d3:71:6d:a7:34:1e:c5:a2:6a:ba:d1:
4b:f2:6c:03:f2:29:09:a8:33:6c:ee:ba:41:0d:61:
ba:3e:73:76:8d:39:e0:78:9b:e4:86:17:64:f4:6a:
83:38:10:97:a5:f9:a5:17:75:45:8d:54:39:8a:b9:
46:12:8e:a3:21:1e:82:c3:87:e8:d1:df:bb:09:a3:
63:3c:b9:c8:72:3b:5a:c2:d9:52:ae:fa:60:db:e1:
2d:0d:1e:a9:f6:82:94:2a:1e:c5:59:bc:61:ba:cd:
0a:67:5b:5a:63:37:fb:7c:6f:45:98:cb:d1:2a:de:
ee:87:5c:ff:b3:6f:be:9f:f6:6b:09:18:79:6f:da:
43:99:32:05:55:55:93:50:3b:c1:41:5d:9b:8d:33:
77:6f:76:ef:15:0d:79:01:d4:41:67:f6:b6:e8:45:
36:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:41:BC:E3:B7:14:6D:C1:0E:42:D8:D9:B4:48:85:80:42:6F:B8:E5
X509v3 Authority Key Identifier:
keyid:3F:02:89:AF:FA:AF:08:0E:25:27:18:E3:F4:48:9D:A2:9D:9F:A5:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PwKJr_qvCA4lJxjj9Eidop2fpVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:3d:47:cf:fd:0b:84:f8:4a:c1:ee:64:2d:ab:c2:4b:c2:d5:
99:6e:55:39:f5:3c:b5:97:96:2b:1f:33:e0:6a:61:f6:9a:98:
d2:9a:b8:49:d8:81:5b:39:56:ab:b9:53:01:6b:d1:5f:5f:fa:
19:30:44:35:01:c0:34:e1:cc:1c:c2:69:17:63:cd:67:1d:b5:
bd:7b:4d:3e:56:f0:37:88:5f:e7:65:e6:59:88:04:e7:dc:df:
71:92:60:b1:b9:0e:9c:65:36:9c:b3:39:79:52:29:ae:5e:f2:
df:6c:8c:79:62:f1:f7:9f:59:9e:d0:22:b7:49:42:20:19:e5:
97:86:13:a3:92:21:69:bd:56:41:95:d0:fa:39:06:ad:1d:98:
26:50:de:f7:71:e1:6f:33:47:93:a0:29:2c:38:4d:eb:87:79:
3c:cc:67:a9:95:55:29:1a:f1:74:94:5e:af:d5:1c:a3:01:4e:
63:a6:e9:2b:bf:81:8f:5c:6c:a6:5e:b4:ec:b7:8b:76:bf:b9:
b9:0f:42:c0:db:15:24:f9:0e:70:c6:f3:db:c8:5f:00:59:01:
c9:ca:28:0d:91:fd:89:02:dc:9c:ef:9f:0a:88:ad:0c:51:29:
47:5c:9a:4e:bb:6b:40:7f:82:49:ed:8f:f0:86:15:77:bc:46:
dd:d9:57:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2eju2YwSWCNYXUr9cTp+UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmMDI4OWFmZmFhZjA4MGUyNTI3MThlM2Y0NDg5ZGEyOWQ5
ZmE1NWEwHhcNMjUwNDI3MDkwMDQ0WhcNMjUwNDI4MDkwMDQ0WjAzMTEwLwYDVQQD
Eyg2MzQxYmNlM2I3MTQ2ZGMxMGU0MmQ4ZDliNDQ4ODU4MDQyNmZiOGU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusmoMVNp0FRayF3IjdmP/z+GyHvx
5M+Y/e1I8KEuRw+qcLcw4z22wnVINQtgB0TSmw46ASlAkA7g8tlvkFJWNiIAaNYX
fpevrTbKAzIcISbNkybJplA7SjkG067T03FtpzQexaJqutFL8mwD8ikJqDNs7rpB
DWG6PnN2jTngeJvkhhdk9GqDOBCXpfmlF3VFjVQ5irlGEo6jIR6Cw4fo0d+7CaNj
PLnIcjtawtlSrvpg2+EtDR6p9oKUKh7FWbxhus0KZ1taYzf7fG9FmMvRKt7uh1z/
s2++n/ZrCRh5b9pDmTIFVVWTUDvBQV2bjTN3b3bvFQ15AdRBZ/a26EU24wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGNBvOO3FG3BDkLY2bRIhYBCb7jlMB8GA1UdIwQY
MBaAFD8Cia/6rwgOJScY4/RInaKdn6VaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHdLSnJfcXZDQTRsSnhqajlFaWRvcDJmcFZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni85ZmNjY2YtZTdhYS00YzQ0LTk1OTAt
MWNmMGZlYWFhM2VhLzEvUHdLSnJfcXZDQTRsSnhqajlFaWRvcDJmcFZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni85ZmNjY2YtZTdhYS00YzQ0LTk1OTAtMWNmMGZlYWFhM2Vh
LzEvUHdLSnJfcXZDQTRsSnhqajlFaWRvcDJmcFZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkj1Hz/0L
hPhKwe5kLavCS8LVmW5VOfU8tZeWKx8z4Gph9pqY0pq4SdiBWzlWq7lTAWvRX1/6
GTBENQHANOHMHMJpF2PNZx21vXtNPlbwN4hf52XmWYgE59zfcZJgsbkOnGU2nLM5
eVIprl7y32yMeWLx959ZntAit0lCIBnll4YTo5Ihab1WQZXQ+jkGrR2YJlDe93Hh
bzNHk6ApLDhN64d5PMxnqZVVKRrxdJRer9UcowFOY6bpK7+Bj1xspl607LeLdr+5
uQ9CwNsVJPkOcMbz28hfAFkBycooDZH9iQLcnO+fCoitDFEpR1yaTrtrQH+CSe2P
8IYVd7xG3dlXYw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 12:02:14 2025 by rpki-client