Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.mft
File: PwKJr_qvCA4lJxjj9Eidop2fpVo.mft (raw, json)
Hash identifier: QZolCFAY6Rvuw+H0HBfW1RvNGqody9qsMlISaEN7yWA=
Subject key identifier: E6:C4:50:EB:15:B3:69:70:05:F4:C2:5F:36:91:46:07:37:03:AE:DC
Authority key identifier: 3F:02:89:AF:FA:AF:08:0E:25:27:18:E3:F4:48:9D:A2:9D:9F:A5:5A
Certificate issuer: /CN=3f0289affaaf080e252718e3f4489da29d9fa55a
Certificate serial: 0198D4E08C28D37010152A4C8027D5B2C4F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PwKJr_qvCA4lJxjj9Eidop2fpVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 03:02:22 +0000
Manifest this update: Sat 23 Aug 2025 03:02:22 +0000
Manifest next update: Sun 24 Aug 2025 03:02:22 +0000
Files and hashes: 1: 4vBZmgBMnVCe-FhubPi7IwTZR7U.roa (hash: pC9viwrfXhDTa2hNSC3okPZXSzJEUX3jBZCttoAMuYA=)
2: PwKJr_qvCA4lJxjj9Eidop2fpVo.crl (hash: PBAwAtNzcXC/NtbBqX54Jj1IQ+s6MUWrKL9mMiqlAQU=)
3: liO3Dk9HW5maOXYINfx-lTJgFC0.roa (hash: q4LEiFG0iKJd0o8pxD+sRsl85pA8hcAalAJZcMAOiLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PwKJr_qvCA4lJxjj9Eidop2fpVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:8c:28:d3:70:10:15:2a:4c:80:27:d5:b2:c4:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f0289affaaf080e252718e3f4489da29d9fa55a
Validity
Not Before: Aug 23 03:02:22 2025 GMT
Not After : Aug 24 03:02:22 2025 GMT
Subject: CN=e6c450eb15b3697005f4c25f369146073703aedc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:bb:d7:82:f9:25:28:61:c6:28:b2:ae:e9:b7:
fa:6e:3a:73:76:6c:3e:39:40:af:9a:db:ae:fa:2e:
f6:d2:8f:8f:06:5d:29:6a:15:04:14:55:16:16:8a:
5c:35:d0:c0:1a:3f:b2:a4:be:eb:fe:fb:fd:0b:4b:
d4:59:f1:9a:e4:56:ad:f7:3d:d4:ed:b3:32:7b:46:
af:e1:fd:e0:ab:d4:69:ee:23:f1:ff:38:27:e8:85:
6a:a1:f6:aa:28:93:ed:a6:b7:6b:11:4b:45:d5:c1:
55:74:b8:89:21:e1:cc:26:62:68:ec:a5:a6:69:39:
8a:ed:f8:ab:f5:24:cd:e0:44:25:dc:b6:06:a7:9c:
3c:3c:29:2c:dc:fb:fc:b6:a2:c7:77:bf:ad:9d:d4:
d9:6a:79:4f:1d:7a:ed:2d:8a:36:70:e4:57:66:f2:
f1:d6:c9:89:50:f7:8c:ad:93:72:07:c3:f9:b1:89:
8a:f8:ea:93:a8:a5:57:06:12:d5:cb:bc:ae:2f:93:
35:d4:f9:f1:db:ae:93:8f:eb:0c:68:dd:3d:6e:06:
8a:93:39:56:17:19:42:5b:6c:fc:59:64:1e:f3:97:
5b:0a:1a:b5:a7:63:24:a5:53:b1:f5:bb:45:67:99:
7e:02:a8:0f:65:ea:4c:b7:26:3d:0a:47:d5:c1:e5:
0e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:C4:50:EB:15:B3:69:70:05:F4:C2:5F:36:91:46:07:37:03:AE:DC
X509v3 Authority Key Identifier:
keyid:3F:02:89:AF:FA:AF:08:0E:25:27:18:E3:F4:48:9D:A2:9D:9F:A5:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PwKJr_qvCA4lJxjj9Eidop2fpVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:2e:a8:1e:fe:7f:31:24:37:86:68:71:67:7e:85:90:c2:6a:
29:34:1f:27:ab:22:e7:0a:c9:c9:c4:66:de:74:44:98:8b:7c:
79:40:0d:7e:5a:1a:d5:7a:b3:50:49:b8:75:9d:8f:9f:54:14:
93:11:63:11:e2:e2:d1:0f:02:54:d5:cf:e9:26:35:2d:ad:73:
fa:ea:85:31:30:f4:84:ca:e4:fa:b6:0d:a6:ac:61:57:51:07:
60:77:65:c5:83:e3:cd:e3:18:be:29:6c:bf:d8:51:ce:6b:f8:
50:86:b0:08:6c:23:f8:35:6f:92:c6:a7:db:67:19:2d:4c:30:
ba:3d:6f:37:4f:db:8a:62:22:73:b7:f6:29:2b:dd:fd:cc:dc:
04:ab:90:81:5b:ed:84:4e:41:ed:5e:eb:df:d8:96:96:bd:ef:
3e:b1:fb:83:1b:2e:e2:cc:5e:65:e1:4f:28:1c:54:e5:1b:9d:
43:8d:e9:44:d1:48:0e:5a:d7:b5:e1:ec:68:f4:8a:db:16:a3:
e0:94:3b:73:e1:9e:81:d8:00:02:f1:4c:dd:68:79:0d:48:4e:
30:21:32:b1:64:c4:01:f2:af:2f:20:11:c5:88:d5:a9:46:fa:
3b:43:ef:09:8f:ba:b4:4d:30:11:07:3c:00:00:fe:d8:9f:56:
ac:6e:e9:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4Iwo03AQFSpMgCfVssT3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmMDI4OWFmZmFhZjA4MGUyNTI3MThlM2Y0NDg5ZGEyOWQ5
ZmE1NWEwHhcNMjUwODIzMDMwMjIyWhcNMjUwODI0MDMwMjIyWjAzMTEwLwYDVQQD
EyhlNmM0NTBlYjE1YjM2OTcwMDVmNGMyNWYzNjkxNDYwNzM3MDNhZWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7vXgvklKGHGKLKu6bf6bjpzdmw+
OUCvmtuu+i720o+PBl0pahUEFFUWFopcNdDAGj+ypL7r/vv9C0vUWfGa5Fat9z3U
7bMye0av4f3gq9Rp7iPx/zgn6IVqofaqKJPtprdrEUtF1cFVdLiJIeHMJmJo7KWm
aTmK7fir9STN4EQl3LYGp5w8PCks3Pv8tqLHd7+tndTZanlPHXrtLYo2cORXZvLx
1smJUPeMrZNyB8P5sYmK+OqTqKVXBhLVy7yuL5M11Pnx266Tj+sMaN09bgaKkzlW
FxlCW2z8WWQe85dbChq1p2MkpVOx9btFZ5l+AqgPZepMtyY9CkfVweUOzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFObEUOsVs2lwBfTCXzaRRgc3A67cMB8GA1UdIwQY
MBaAFD8Cia/6rwgOJScY4/RInaKdn6VaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHdLSnJfcXZDQTRsSnhqajlFaWRvcDJmcFZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni85ZmNjY2YtZTdhYS00YzQ0LTk1OTAt
MWNmMGZlYWFhM2VhLzEvUHdLSnJfcXZDQTRsSnhqajlFaWRvcDJmcFZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni85ZmNjY2YtZTdhYS00YzQ0LTk1OTAtMWNmMGZlYWFhM2Vh
LzEvUHdLSnJfcXZDQTRsSnhqajlFaWRvcDJmcFZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiS6oHv5/
MSQ3hmhxZ36FkMJqKTQfJ6si5wrJycRm3nREmIt8eUANfloa1XqzUEm4dZ2Pn1QU
kxFjEeLi0Q8CVNXP6SY1La1z+uqFMTD0hMrk+rYNpqxhV1EHYHdlxYPjzeMYvils
v9hRzmv4UIawCGwj+DVvksan22cZLUwwuj1vN0/bimIic7f2KSvd/czcBKuQgVvt
hE5B7V7r39iWlr3vPrH7gxsu4sxeZeFPKBxU5RudQ43pRNFIDlrXteHsaPSK2xaj
4JQ7c+GegdgAAvFM3Wh5DUhOMCEysWTEAfKvLyARxYjVqUb6O0PvCY+6tE0wEQc8
AAD+2J9WrG7pZQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:27:15 2025 by rpki-client