Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.mft
File: PwKJr_qvCA4lJxjj9Eidop2fpVo.mft (raw, json)
Hash identifier: 6am5dAmhPlhaEUbCfW7KzJE9oednlltfjSrZ5e0QnJg=
Subject key identifier: 3D:28:33:54:4E:2F:A8:54:AC:0F:F5:8D:49:C8:BB:F8:5F:66:37:95
Authority key identifier: 3F:02:89:AF:FA:AF:08:0E:25:27:18:E3:F4:48:9D:A2:9D:9F:A5:5A
Certificate issuer: /CN=3f0289affaaf080e252718e3f4489da29d9fa55a
Certificate serial: 0196B8239EBECE0855BBECFADCAE3EDAFA91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PwKJr_qvCA4lJxjj9Eidop2fpVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.mft
Manifest number: 1532
Signing time: Sat 10 May 2025 03:01:04 +0000
Manifest this update: Sat 10 May 2025 03:01:04 +0000
Manifest next update: Sun 11 May 2025 03:01:04 +0000
Files and hashes: 1: 4vBZmgBMnVCe-FhubPi7IwTZR7U.roa (hash: pC9viwrfXhDTa2hNSC3okPZXSzJEUX3jBZCttoAMuYA=)
2: PwKJr_qvCA4lJxjj9Eidop2fpVo.crl (hash: 5W0VvT2D2NHEOh4/TR94ZuY092Vt4s1z+oYukn9f9sY=)
3: liO3Dk9HW5maOXYINfx-lTJgFC0.roa (hash: q4LEiFG0iKJd0o8pxD+sRsl85pA8hcAalAJZcMAOiLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PwKJr_qvCA4lJxjj9Eidop2fpVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 03:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:23:9e:be:ce:08:55:bb:ec:fa:dc:ae:3e:da:fa:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f0289affaaf080e252718e3f4489da29d9fa55a
Validity
Not Before: May 10 03:01:04 2025 GMT
Not After : May 11 03:01:04 2025 GMT
Subject: CN=3d2833544e2fa854ac0ff58d49c8bbf85f663795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:34:a1:83:2d:01:40:67:28:83:53:23:73:31:
41:4c:87:21:0b:86:69:cf:ee:2a:8e:85:25:09:a9:
34:06:37:3e:d5:6c:ea:06:b5:18:72:a3:c9:a7:9d:
2e:a6:92:e8:18:a3:7d:ea:de:f7:a1:94:62:41:01:
9f:7c:95:36:69:d8:4b:2c:36:ab:08:0b:35:8f:24:
bc:2e:40:75:6f:16:f3:d1:c9:bc:c0:d8:ed:6f:22:
88:aa:91:6a:13:fa:5c:50:a7:eb:5e:cb:b8:f1:ef:
78:71:a7:73:5f:9f:33:d9:ff:a0:2b:d3:f9:bb:a8:
98:a8:e8:3d:c1:d2:2c:af:0c:0d:9b:9b:7a:a6:d2:
35:eb:d2:85:d8:f5:14:61:86:0d:a0:06:dd:a8:53:
fe:6c:0b:07:2f:93:b9:ba:14:a9:47:bc:ce:9d:98:
1f:62:26:56:e0:16:00:26:ba:7c:4d:04:b4:cd:52:
64:21:b2:ef:1c:d6:bd:6e:e9:f8:44:cd:6c:80:85:
47:75:9f:12:8b:66:dc:59:ee:eb:6d:a7:22:3c:b0:
3a:6a:a8:b5:b3:ed:1c:65:9b:96:1a:d5:84:91:16:
2a:99:c2:77:72:44:4e:a5:6c:14:8e:fa:c3:10:b9:
55:38:28:2d:7c:58:99:7e:e5:36:de:96:6b:ad:9f:
bf:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:28:33:54:4E:2F:A8:54:AC:0F:F5:8D:49:C8:BB:F8:5F:66:37:95
X509v3 Authority Key Identifier:
keyid:3F:02:89:AF:FA:AF:08:0E:25:27:18:E3:F4:48:9D:A2:9D:9F:A5:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PwKJr_qvCA4lJxjj9Eidop2fpVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:ee:49:e3:26:e2:00:ee:ba:32:73:fb:05:d6:ae:a6:c8:f6:
98:b1:7c:02:23:14:35:37:f2:ce:22:7d:81:7d:cc:9b:fa:b6:
30:06:61:f6:04:ec:51:a4:a2:56:f0:10:df:14:4d:04:30:8b:
1e:c6:ef:ff:86:d8:21:c0:02:57:ac:f1:14:d6:bf:01:5e:3d:
b0:fa:df:fd:9d:3d:6b:41:ae:79:1d:e3:e1:b8:8b:8b:6a:26:
4c:70:4e:4c:c4:37:4a:88:1e:1c:7d:78:1f:ca:ef:9e:5c:70:
a5:9d:25:76:46:54:2b:3a:ed:d6:2b:d2:4b:67:9b:1c:95:e2:
0f:ee:86:2d:27:5b:4c:f1:43:b9:5c:cf:53:9e:59:d3:6f:9c:
e0:4a:5a:b9:c7:c7:84:ec:52:62:72:70:98:b6:ab:d4:fe:a5:
60:91:f8:9c:18:63:3d:4d:1e:6f:c3:80:c0:96:d9:c7:e3:5d:
e9:3e:ed:d9:82:6c:be:9f:d8:68:eb:d9:df:8a:5d:2c:1a:ff:
f6:41:63:83:98:c9:b3:cd:62:a1:d0:85:64:0e:e0:1d:c3:67:
6c:60:88:03:aa:02:8b:27:31:64:39:e2:bb:19:d6:07:cb:3b:
d2:7a:75:1d:1d:c8:8d:aa:aa:a0:01:9b:7e:fe:d5:bb:8b:bd:
90:08:22:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa4I56+zghVu+z63K4+2vqRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmMDI4OWFmZmFhZjA4MGUyNTI3MThlM2Y0NDg5ZGEyOWQ5
ZmE1NWEwHhcNMjUwNTEwMDMwMTA0WhcNMjUwNTExMDMwMTA0WjAzMTEwLwYDVQQD
EygzZDI4MzM1NDRlMmZhODU0YWMwZmY1OGQ0OWM4YmJmODVmNjYzNzk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTShgy0BQGcog1MjczFBTIchC4Zp
z+4qjoUlCak0Bjc+1WzqBrUYcqPJp50uppLoGKN96t73oZRiQQGffJU2adhLLDar
CAs1jyS8LkB1bxbz0cm8wNjtbyKIqpFqE/pcUKfrXsu48e94cadzX58z2f+gK9P5
u6iYqOg9wdIsrwwNm5t6ptI169KF2PUUYYYNoAbdqFP+bAsHL5O5uhSpR7zOnZgf
YiZW4BYAJrp8TQS0zVJkIbLvHNa9bun4RM1sgIVHdZ8Si2bcWe7rbaciPLA6aqi1
s+0cZZuWGtWEkRYqmcJ3ckROpWwUjvrDELlVOCgtfFiZfuU23pZrrZ+/CQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD0oM1ROL6hUrA/1jUnIu/hfZjeVMB8GA1UdIwQY
MBaAFD8Cia/6rwgOJScY4/RInaKdn6VaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHdLSnJfcXZDQTRsSnhqajlFaWRvcDJmcFZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni85ZmNjY2YtZTdhYS00YzQ0LTk1OTAt
MWNmMGZlYWFhM2VhLzEvUHdLSnJfcXZDQTRsSnhqajlFaWRvcDJmcFZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni85ZmNjY2YtZTdhYS00YzQ0LTk1OTAtMWNmMGZlYWFhM2Vh
LzEvUHdLSnJfcXZDQTRsSnhqajlFaWRvcDJmcFZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANO5J4ybi
AO66MnP7Bdaupsj2mLF8AiMUNTfyziJ9gX3Mm/q2MAZh9gTsUaSiVvAQ3xRNBDCL
Hsbv/4bYIcACV6zxFNa/AV49sPrf/Z09a0GueR3j4biLi2omTHBOTMQ3SogeHH14
H8rvnlxwpZ0ldkZUKzrt1ivSS2ebHJXiD+6GLSdbTPFDuVzPU55Z02+c4EpaucfH
hOxSYnJwmLar1P6lYJH4nBhjPU0eb8OAwJbZx+Nd6T7t2YJsvp/YaOvZ34pdLBr/
9kFjg5jJs81iodCFZA7gHcNnbGCIA6oCiycxZDniuxnWB8s70np1HR3IjaqqoAGb
fv7Vu4u9kAgikA==
-----END CERTIFICATE-----
Generated at Sat May 10 09:48:45 2025 by rpki-client