Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.mft
File: PwKJr_qvCA4lJxjj9Eidop2fpVo.mft (raw, json)
Hash identifier: 4OnQcIjlDZ6XVVVZQzFfmYmkAcFCRFll7a3fv4SLNMc=
Subject key identifier: 9C:58:CB:E8:83:15:ED:47:D5:1B:C3:A1:15:8A:DD:81:2B:7D:F2:D7
Authority key identifier: 3F:02:89:AF:FA:AF:08:0E:25:27:18:E3:F4:48:9D:A2:9D:9F:A5:5A
Certificate issuer: /CN=3f0289affaaf080e252718e3f4489da29d9fa55a
Certificate serial: 0197B70EF76F63AED673454A9D3020F4BFA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PwKJr_qvCA4lJxjj9Eidop2fpVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 15:01:40 +0000
Manifest this update: Sat 28 Jun 2025 15:01:40 +0000
Manifest next update: Sun 29 Jun 2025 15:01:40 +0000
Files and hashes: 1: 4vBZmgBMnVCe-FhubPi7IwTZR7U.roa (hash: pC9viwrfXhDTa2hNSC3okPZXSzJEUX3jBZCttoAMuYA=)
2: PwKJr_qvCA4lJxjj9Eidop2fpVo.crl (hash: KJi35lw62d++5rIWxYeBb/41UFDPZSkqwGv8DntxaUo=)
3: liO3Dk9HW5maOXYINfx-lTJgFC0.roa (hash: q4LEiFG0iKJd0o8pxD+sRsl85pA8hcAalAJZcMAOiLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PwKJr_qvCA4lJxjj9Eidop2fpVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:f7:6f:63:ae:d6:73:45:4a:9d:30:20:f4:bf:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f0289affaaf080e252718e3f4489da29d9fa55a
Validity
Not Before: Jun 28 15:01:40 2025 GMT
Not After : Jun 29 15:01:40 2025 GMT
Subject: CN=9c58cbe88315ed47d51bc3a1158add812b7df2d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b8:38:48:b7:58:05:da:33:95:dd:91:2d:57:
34:a5:28:0c:ef:98:f6:ee:df:83:7a:b8:1d:3c:7d:
f2:a8:4e:fe:cb:8c:05:47:b7:3a:08:13:30:c9:19:
dc:32:2c:73:bd:60:52:c5:f8:ca:82:6e:53:f4:5c:
d7:fa:47:0b:16:ea:e8:1f:82:34:cc:24:74:9f:0f:
f4:50:cd:07:cf:be:37:9b:b2:d6:85:01:20:4d:d3:
72:ed:26:aa:25:79:26:32:c3:52:13:b7:ba:c2:97:
99:71:26:e0:93:0b:f2:10:bf:8b:0a:9b:93:70:18:
da:98:3e:08:95:b4:8b:9a:f4:29:9b:34:a5:7b:f2:
b2:74:fd:1d:5e:b0:b8:3c:01:b2:38:c2:fd:1c:14:
5c:01:f5:90:e1:a6:ec:8a:fa:56:0c:52:7d:70:a2:
ae:c3:1b:b9:16:12:97:d7:a7:f0:47:d7:86:6c:06:
f4:f8:f3:94:be:19:79:62:51:44:be:6c:cc:40:a5:
67:06:b2:dd:73:b7:9a:7c:71:e0:f0:55:1f:19:77:
6a:cf:dc:8d:06:6e:21:0c:4a:89:0c:95:e3:96:d5:
12:b9:85:77:28:f1:02:73:8c:32:a1:de:10:f5:43:
f5:48:73:f4:0f:4d:ce:3f:ef:9b:f0:4e:85:0c:9d:
3d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:58:CB:E8:83:15:ED:47:D5:1B:C3:A1:15:8A:DD:81:2B:7D:F2:D7
X509v3 Authority Key Identifier:
keyid:3F:02:89:AF:FA:AF:08:0E:25:27:18:E3:F4:48:9D:A2:9D:9F:A5:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PwKJr_qvCA4lJxjj9Eidop2fpVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:2b:00:84:36:01:c7:12:79:69:fa:55:ba:50:9e:e5:2f:f4:
db:54:2e:df:35:c3:a7:8c:2d:5f:1e:ad:5e:76:7b:1f:ac:4b:
1c:4c:08:8b:1f:31:b9:4c:84:ec:0c:82:eb:dd:09:2e:04:6c:
b7:39:85:87:70:de:e5:56:10:59:36:7b:20:e3:01:b8:01:59:
21:87:69:7e:9d:f0:cd:9a:80:b5:3e:5d:b6:8c:da:8a:b2:61:
09:4e:d3:76:94:ec:4b:9c:65:1c:9b:60:67:65:47:2b:08:6f:
2b:8d:1f:10:e6:65:56:85:63:3c:45:92:2c:b9:00:89:cc:f0:
a3:4b:41:69:47:02:c4:90:d3:b9:d6:26:e4:65:6f:4e:e0:f6:
cc:49:34:65:42:bc:01:50:d0:6a:27:d0:22:32:93:fa:1e:3b:
99:38:b6:00:bb:93:f8:6e:2a:62:cb:3a:55:85:08:62:57:ae:
63:93:04:c5:39:e5:4f:d1:39:b1:19:a6:33:30:cd:cd:7c:4f:
79:40:d5:b6:0c:7a:ed:25:4a:75:b2:4b:24:c8:53:e2:5f:de:
9c:9f:5a:6e:b7:45:50:87:3f:ff:d6:43:d6:50:be:2f:a6:ea:
59:ef:d9:16:13:7b:2b:43:9d:14:e0:49:09:fe:61:9d:a8:d7:
4e:b5:8a:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:37:27 2025 by rpki-client