Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.mft
File: PwKJr_qvCA4lJxjj9Eidop2fpVo.mft (raw, json)
Hash identifier: kDmx5LI9kzfG4N+KZUvSORxpj2io9tE0Q4XAEgEg9io=
Subject key identifier: C9:CB:F6:86:62:5D:92:73:D3:D4:12:7E:FC:D0:A2:1A:25:2A:C5:1D
Authority key identifier: 3F:02:89:AF:FA:AF:08:0E:25:27:18:E3:F4:48:9D:A2:9D:9F:A5:5A
Certificate issuer: /CN=3f0289affaaf080e252718e3f4489da29d9fa55a
Certificate serial: 01987FE63B95FD5BAB5084A8E3DDEDB1ED2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PwKJr_qvCA4lJxjj9Eidop2fpVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.mft
Manifest number: 161E
Signing time: Wed 06 Aug 2025 15:00:51 +0000
Manifest this update: Wed 06 Aug 2025 15:00:51 +0000
Manifest next update: Thu 07 Aug 2025 15:00:51 +0000
Files and hashes: 1: 4vBZmgBMnVCe-FhubPi7IwTZR7U.roa (hash: pC9viwrfXhDTa2hNSC3okPZXSzJEUX3jBZCttoAMuYA=)
2: PwKJr_qvCA4lJxjj9Eidop2fpVo.crl (hash: 3Br4wGhFXhnQtVCGDCJMWmEBUZx9sgAy4SBZlMnuI8M=)
3: liO3Dk9HW5maOXYINfx-lTJgFC0.roa (hash: q4LEiFG0iKJd0o8pxD+sRsl85pA8hcAalAJZcMAOiLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PwKJr_qvCA4lJxjj9Eidop2fpVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 15:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:e6:3b:95:fd:5b:ab:50:84:a8:e3:dd:ed:b1:ed:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f0289affaaf080e252718e3f4489da29d9fa55a
Validity
Not Before: Aug 6 15:00:51 2025 GMT
Not After : Aug 7 15:00:51 2025 GMT
Subject: CN=c9cbf686625d9273d3d4127efcd0a21a252ac51d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:57:23:7f:27:a8:88:02:7d:67:f9:1a:9b:b5:
cd:9e:37:69:68:11:3f:9c:df:4b:3d:6c:c0:da:c4:
36:3c:e8:c3:4d:7b:cc:4a:20:49:20:9f:df:34:61:
d7:a6:01:83:ce:96:1c:ce:9e:22:e8:14:53:60:57:
eb:dc:a5:48:15:f0:7e:be:92:9b:45:ac:38:ec:3d:
9e:82:d0:ec:dd:71:94:1f:ad:33:ab:63:66:a8:c0:
18:57:be:4b:6a:cc:03:6f:bb:a5:1a:b2:7f:87:9c:
79:b0:0c:ca:d4:5d:13:c9:f2:df:2d:53:1e:51:50:
12:52:bc:94:fc:e8:90:4c:63:19:7a:58:54:84:50:
a6:40:8d:ac:d8:8d:d9:b0:63:e8:95:23:a2:3d:af:
9a:a4:03:c8:6f:f4:7e:bc:05:1d:b5:01:49:f5:fd:
15:e7:bf:6b:2f:6b:35:fc:e6:56:df:81:15:f7:0f:
45:fa:de:70:d3:e2:94:d7:e8:f7:27:72:11:a1:8b:
28:25:62:bb:5f:d7:08:d4:9a:08:58:8d:01:ad:7d:
70:aa:7d:89:a8:a9:40:5c:11:5b:2a:c6:86:b0:b8:
26:58:4d:46:a8:c8:60:e7:9a:66:17:8e:46:e8:62:
b4:29:95:64:2c:8f:ca:f1:a2:7b:08:39:ce:4f:17:
cc:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:CB:F6:86:62:5D:92:73:D3:D4:12:7E:FC:D0:A2:1A:25:2A:C5:1D
X509v3 Authority Key Identifier:
keyid:3F:02:89:AF:FA:AF:08:0E:25:27:18:E3:F4:48:9D:A2:9D:9F:A5:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PwKJr_qvCA4lJxjj9Eidop2fpVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:12:97:8b:79:84:f7:10:3f:96:29:55:ad:18:41:a1:d7:a2:
b6:02:bc:07:ba:39:8a:c1:c5:26:e0:a5:bd:43:7a:68:42:98:
66:37:40:6a:93:2c:d6:d7:07:a5:96:9e:f7:ea:19:24:fc:d5:
2e:d6:c4:3f:72:40:42:aa:a9:86:02:78:50:7c:9e:77:b4:f5:
5a:eb:c5:d0:c3:56:a9:66:03:be:a0:90:f5:8c:d4:82:1f:64:
87:c6:04:89:6c:3d:d2:45:ab:c8:a3:61:14:9f:cc:1a:1f:02:
a3:7a:af:bb:c7:fd:87:b6:f2:6f:51:7b:20:ba:cc:29:67:25:
89:e1:c4:1c:51:c1:ee:4f:3c:d8:56:52:4d:03:1b:04:d8:f7:
81:8d:98:c9:5c:75:88:e2:16:38:97:3a:8f:2e:be:35:79:98:
16:d0:d1:5d:8e:f6:69:8c:c0:a7:2b:a4:29:b3:dc:1f:03:49:
3e:11:ee:84:be:91:2b:d6:74:72:4a:79:76:69:fa:36:9f:69:
85:a3:63:cd:c1:9d:8c:37:33:c9:37:13:6d:87:18:4b:ca:dc:
9c:7d:1d:c8:16:4d:f9:60:aa:b2:64:e8:00:09:ce:2e:8c:fa:
d1:94:89:63:77:62:e0:93:e0:67:30:08:7f:c5:05:96:df:40:
a4:8d:90:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:10:33 2025 by rpki-client