Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.mft
File: PwKJr_qvCA4lJxjj9Eidop2fpVo.mft (raw, json)
Hash identifier: k4vrKlv8z5bY2z95Sq1szPMdnsdC3yqgL4yN/DEciT4=
Subject key identifier: EA:2A:9E:92:E5:04:B2:65:25:A1:00:95:76:FE:E6:E8:09:57:2A:69
Authority key identifier: 3F:02:89:AF:FA:AF:08:0E:25:27:18:E3:F4:48:9D:A2:9D:9F:A5:5A
Certificate issuer: /CN=3f0289affaaf080e252718e3f4489da29d9fa55a
Certificate serial: 01976BBD36AEB75F1F90DFCBF0A0C6332871
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PwKJr_qvCA4lJxjj9Eidop2fpVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 00:00:51 +0000
Manifest this update: Sat 14 Jun 2025 00:00:51 +0000
Manifest next update: Sun 15 Jun 2025 00:00:51 +0000
Files and hashes: 1: 4vBZmgBMnVCe-FhubPi7IwTZR7U.roa (hash: pC9viwrfXhDTa2hNSC3okPZXSzJEUX3jBZCttoAMuYA=)
2: PwKJr_qvCA4lJxjj9Eidop2fpVo.crl (hash: PBr9JhG6pGNvLnP/t6VV71KVlIedu2HZKvBMwNS0Vrk=)
3: liO3Dk9HW5maOXYINfx-lTJgFC0.roa (hash: q4LEiFG0iKJd0o8pxD+sRsl85pA8hcAalAJZcMAOiLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PwKJr_qvCA4lJxjj9Eidop2fpVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bd:36:ae:b7:5f:1f:90:df:cb:f0:a0:c6:33:28:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f0289affaaf080e252718e3f4489da29d9fa55a
Validity
Not Before: Jun 14 00:00:51 2025 GMT
Not After : Jun 15 00:00:51 2025 GMT
Subject: CN=ea2a9e92e504b26525a1009576fee6e809572a69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0f:60:fe:d7:ca:8b:aa:d7:aa:8e:0b:b5:20:
5f:9e:15:4e:81:95:93:5e:39:a9:dc:1c:c5:86:c1:
a1:ae:af:70:62:3d:9a:de:11:58:50:af:f3:cc:7e:
54:24:08:2a:09:02:23:0c:50:12:af:4f:3d:31:71:
bd:01:a0:77:45:3c:4c:18:46:3e:77:61:9d:6e:df:
bc:4d:ba:bf:54:75:b5:5a:c1:54:7c:ce:22:ac:c8:
88:2e:6c:30:97:91:ad:b8:04:f2:a6:ad:6a:59:db:
3a:f7:85:3f:f1:48:a1:ef:de:9d:34:56:3d:a6:93:
e9:2c:49:08:c5:3b:8e:d8:a5:03:cc:43:4b:34:38:
26:ca:06:94:8c:90:5a:84:d8:d7:e8:15:d1:c5:e6:
18:d1:59:a9:00:90:bb:7a:e3:a3:c5:ba:33:d7:2f:
26:e7:09:1b:42:db:3c:89:95:67:27:8d:0f:85:a6:
05:9d:7f:5d:60:21:11:94:03:b8:f1:40:4d:bb:df:
dd:a4:e6:a4:39:15:b0:f7:9a:b9:f3:42:fb:1f:73:
e6:a0:b6:89:b7:b0:92:bc:45:02:20:b1:77:07:5e:
c7:52:42:14:cf:42:c5:29:2d:52:ee:26:70:35:20:
12:5f:85:43:70:ab:76:60:c0:ef:f2:d0:dd:f9:c0:
41:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:2A:9E:92:E5:04:B2:65:25:A1:00:95:76:FE:E6:E8:09:57:2A:69
X509v3 Authority Key Identifier:
keyid:3F:02:89:AF:FA:AF:08:0E:25:27:18:E3:F4:48:9D:A2:9D:9F:A5:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PwKJr_qvCA4lJxjj9Eidop2fpVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:9b:9c:ac:b2:1d:3c:ee:cf:33:85:d2:58:77:1b:f2:e9:00:
89:6b:75:1c:37:60:6c:23:ab:20:79:4f:e3:90:5e:06:4e:2a:
95:df:e1:37:ba:05:09:01:7e:24:37:63:dc:ce:00:7e:09:5e:
dc:00:4e:48:2a:42:c4:ec:2d:58:3a:a4:a9:c8:30:55:0d:1c:
85:65:68:16:15:4d:fa:4f:93:32:8c:6c:05:d6:fa:e9:79:60:
3e:a0:64:bf:c7:38:17:ed:37:8b:1c:4a:57:e0:be:ee:f4:1e:
00:16:c3:fa:7a:f4:8c:0f:e7:d9:08:3a:94:fd:1a:48:ae:a8:
a5:87:7a:70:01:9e:e3:76:74:4b:ca:43:19:59:0f:6a:41:b0:
97:41:12:ae:1a:c6:2a:ef:ca:94:47:b3:b4:1f:b1:d1:e9:7b:
4b:50:b2:f2:4f:1a:a7:ef:78:e2:38:7e:10:71:ba:b6:cc:4b:
57:d5:26:70:79:05:62:3a:e4:2b:83:49:3d:11:fe:ad:76:d7:
f4:cb:14:f5:83:6c:a8:65:ba:a3:81:7f:f4:d7:a9:b8:ea:d9:
48:12:63:25:be:b8:73:3d:8c:6a:eb:bb:0c:9e:d2:70:e6:26:
72:61:b4:d0:2b:13:84:b0:79:a6:39:60:31:4e:3d:87:59:b2:
72:39:15:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:02:13 2025 by rpki-client