Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.mft
File: PwKJr_qvCA4lJxjj9Eidop2fpVo.mft (raw, json)
Hash identifier: 9kcq8XpB5Dnoi5XCoFcBks2epSsEowfA8RBnByVwE2s=
Subject key identifier: 8D:02:67:29:5D:90:77:D2:32:80:F9:F5:FF:E4:78:85:A8:EF:20:12
Authority key identifier: 3F:02:89:AF:FA:AF:08:0E:25:27:18:E3:F4:48:9D:A2:9D:9F:A5:5A
Certificate issuer: /CN=3f0289affaaf080e252718e3f4489da29d9fa55a
Certificate serial: 019A003550CDEEF932DBE5803EA54F2AEF8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PwKJr_qvCA4lJxjj9Eidop2fpVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.mft
Manifest number: 16E5
Signing time: Mon 20 Oct 2025 06:01:25 +0000
Manifest this update: Mon 20 Oct 2025 06:01:25 +0000
Manifest next update: Tue 21 Oct 2025 06:01:25 +0000
Files and hashes: 1: 4vBZmgBMnVCe-FhubPi7IwTZR7U.roa (hash: pC9viwrfXhDTa2hNSC3okPZXSzJEUX3jBZCttoAMuYA=)
2: PwKJr_qvCA4lJxjj9Eidop2fpVo.crl (hash: uMTAoV9BNWtMjVc3405debAJZ2GF7jVjLCj43l7YsSA=)
3: liO3Dk9HW5maOXYINfx-lTJgFC0.roa (hash: q4LEiFG0iKJd0o8pxD+sRsl85pA8hcAalAJZcMAOiLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PwKJr_qvCA4lJxjj9Eidop2fpVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 06:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:50:cd:ee:f9:32:db:e5:80:3e:a5:4f:2a:ef:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f0289affaaf080e252718e3f4489da29d9fa55a
Validity
Not Before: Oct 20 06:01:25 2025 GMT
Not After : Oct 21 06:01:25 2025 GMT
Subject: CN=8d0267295d9077d23280f9f5ffe47885a8ef2012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:e9:d8:37:52:6c:5e:43:88:df:93:8f:60:25:
f9:c6:4e:06:87:0a:22:3f:cc:4e:f9:2a:99:ca:61:
af:8c:ca:62:87:1a:81:36:a0:ca:0e:6e:c7:ee:90:
0c:51:33:15:a5:2f:49:a9:c5:70:7f:e7:03:d6:22:
5c:d6:c1:d3:2d:eb:31:35:da:06:66:07:09:f4:d8:
b3:64:0e:18:73:b8:3c:4d:92:7c:2a:de:a4:d8:d8:
4f:bd:47:b8:1d:4f:89:bc:5c:13:d9:60:09:44:85:
89:77:1a:09:07:3f:15:27:6e:3b:92:36:f5:29:67:
13:0f:d8:1b:f5:12:dc:bd:cf:4f:97:00:3e:e8:77:
b3:da:c8:b3:28:28:b6:7a:68:dd:77:a7:df:f7:57:
ec:d7:3b:18:cf:e6:9c:4d:59:2a:5c:b6:22:7d:4f:
70:5a:fa:ff:12:30:95:06:6f:0d:dc:af:cd:95:90:
fd:af:3e:6a:37:49:15:56:85:25:a4:01:f1:c3:dc:
70:e1:9f:21:c2:10:d4:c4:a8:90:cf:0d:fe:65:ec:
a8:3d:55:51:dd:4d:54:97:38:3f:5f:a0:4d:fe:c1:
13:f4:93:84:47:8a:be:38:f8:83:8e:4a:ff:97:4c:
a9:2a:e0:4d:fb:81:a7:c8:fb:60:13:3a:4c:8a:62:
2b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:02:67:29:5D:90:77:D2:32:80:F9:F5:FF:E4:78:85:A8:EF:20:12
X509v3 Authority Key Identifier:
keyid:3F:02:89:AF:FA:AF:08:0E:25:27:18:E3:F4:48:9D:A2:9D:9F:A5:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PwKJr_qvCA4lJxjj9Eidop2fpVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:c7:4f:2a:2a:59:68:f2:4f:ec:8b:41:32:01:06:6e:5e:a1:
70:e2:7f:a4:f0:23:43:af:e4:b1:ee:be:5b:45:56:bd:66:4c:
0d:f8:77:33:7a:84:bf:04:15:b2:d3:1a:3b:47:40:5e:89:97:
25:6d:65:27:bd:d9:bc:8e:79:59:79:46:62:10:bd:5c:d5:ed:
27:56:79:ec:70:bd:d2:57:da:ba:7a:1e:1b:6b:49:b1:0d:cf:
ff:9c:88:88:90:74:1c:19:14:92:c0:18:4a:db:14:79:f0:8c:
32:05:dd:4e:1a:b7:94:3b:37:05:0d:ad:1e:4f:31:69:36:51:
a0:fa:6a:86:ee:af:4b:e2:84:81:00:f7:62:73:99:04:97:6d:
3e:c3:89:c3:10:eb:e8:f8:7e:9a:c0:20:aa:05:68:ae:a2:f7:
17:dc:13:46:c9:6d:e7:fe:35:da:8d:c4:54:eb:93:df:9a:ba:
8a:7f:a7:f6:5f:cb:31:85:83:eb:7b:a9:f7:b9:e5:a2:db:d0:
24:a3:54:8b:d6:4c:51:ee:97:01:76:fe:2b:ed:e2:b2:28:b8:
4c:07:45:2b:ee:53:0c:e0:c4:fd:fe:a0:7a:e2:c0:69:da:28:
48:4b:a8:a6:d0:84:5f:e9:1e:12:06:d9:04:7b:a1:13:0f:f7:
b9:67:02:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:53:51 2025 by rpki-client