Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.mft
File: PwKJr_qvCA4lJxjj9Eidop2fpVo.mft (raw, json)
Hash identifier: 5qdZ6Q9E/ILEk6cWH6O+JxIfpItndQipyeImpfd+DMc=
Subject key identifier: 9F:B8:63:92:14:50:B3:19:7E:D2:6D:F5:91:DC:9D:6B:45:A4:BE:A6
Authority key identifier: 3F:02:89:AF:FA:AF:08:0E:25:27:18:E3:F4:48:9D:A2:9D:9F:A5:5A
Certificate issuer: /CN=3f0289affaaf080e252718e3f4489da29d9fa55a
Certificate serial: 01984BC127B555FAC208D4292D6A2BC3D1BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PwKJr_qvCA4lJxjj9Eidop2fpVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.mft
Manifest number: 1603
Signing time: Sun 27 Jul 2025 12:00:06 +0000
Manifest this update: Sun 27 Jul 2025 12:00:06 +0000
Manifest next update: Mon 28 Jul 2025 12:00:06 +0000
Files and hashes: 1: 4vBZmgBMnVCe-FhubPi7IwTZR7U.roa (hash: pC9viwrfXhDTa2hNSC3okPZXSzJEUX3jBZCttoAMuYA=)
2: PwKJr_qvCA4lJxjj9Eidop2fpVo.crl (hash: qMi3sgC4d2vurz8nJUd/bFQN7JehnOherMi6EVSyNI4=)
3: liO3Dk9HW5maOXYINfx-lTJgFC0.roa (hash: q4LEiFG0iKJd0o8pxD+sRsl85pA8hcAalAJZcMAOiLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PwKJr_qvCA4lJxjj9Eidop2fpVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 12:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:c1:27:b5:55:fa:c2:08:d4:29:2d:6a:2b:c3:d1:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f0289affaaf080e252718e3f4489da29d9fa55a
Validity
Not Before: Jul 27 12:00:06 2025 GMT
Not After : Jul 28 12:00:06 2025 GMT
Subject: CN=9fb863921450b3197ed26df591dc9d6b45a4bea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1b:7d:61:da:02:55:7e:5f:bb:b2:3a:3d:4d:
21:81:76:c2:2f:b8:8a:e2:c7:0b:47:27:ac:28:7b:
67:f1:80:54:81:92:7a:ce:d0:e7:a9:be:4f:a4:b8:
72:69:48:89:6e:72:5f:5f:6e:88:d0:6b:02:5f:67:
96:c3:64:13:77:67:cf:c6:1d:57:22:99:d3:7f:5e:
61:a7:53:aa:95:9a:23:ca:57:5a:61:5c:51:f7:8c:
8e:0f:28:07:25:70:2e:81:ad:59:6d:f2:91:cf:ce:
eb:33:cb:4d:51:35:7b:5e:86:06:19:f9:a1:45:35:
cd:96:58:5a:d6:ad:b3:78:f0:fb:e2:77:a0:70:54:
ec:c7:50:2b:8b:89:26:07:c1:3d:60:b1:a4:7b:e1:
59:80:da:58:37:9f:46:8f:79:3b:28:a0:d9:69:fc:
5e:a8:51:f5:8a:27:52:03:04:43:3b:c3:a6:9b:74:
2c:44:59:85:a7:9c:4e:06:d8:55:23:12:b8:c0:a5:
5c:8f:fe:7e:70:88:98:22:c7:cd:58:b2:0c:a3:cf:
a8:fa:1b:bb:dc:60:ae:a7:ef:53:bc:10:be:3d:79:
a7:d9:02:ac:4e:d2:b8:cd:cd:4c:fa:3c:d3:b9:ba:
72:34:25:23:0c:ae:47:fe:e6:ef:62:2e:7d:b6:a9:
12:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:B8:63:92:14:50:B3:19:7E:D2:6D:F5:91:DC:9D:6B:45:A4:BE:A6
X509v3 Authority Key Identifier:
keyid:3F:02:89:AF:FA:AF:08:0E:25:27:18:E3:F4:48:9D:A2:9D:9F:A5:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PwKJr_qvCA4lJxjj9Eidop2fpVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:bc:25:46:92:0c:06:59:42:06:05:f6:5c:c0:d5:cf:ef:11:
76:97:95:70:0a:b4:72:2a:f7:04:56:41:f9:4e:c0:96:ee:62:
63:dc:6c:dd:96:f9:25:46:e7:7f:02:6a:68:3f:22:dd:51:7b:
45:74:2b:eb:00:4b:24:fd:16:32:b0:21:d0:86:4d:07:5a:32:
5c:d1:fb:8c:ef:ce:e5:f9:26:55:39:19:62:65:c8:63:6e:1f:
0e:8d:00:19:bd:e3:53:bb:49:07:f5:19:3d:35:a6:43:1e:93:
06:9d:b6:1c:de:62:3d:b0:ab:1e:8e:98:34:0a:f6:6c:a8:1f:
44:43:a0:60:d6:1b:de:3d:60:9e:af:03:26:60:fe:3d:61:63:
99:2c:4b:b5:00:5c:73:f4:ac:89:d9:10:c6:45:94:9a:c1:1f:
44:2f:77:ad:c8:1a:fd:f5:be:f5:8c:80:77:62:f0:6d:fe:b3:
be:8c:53:5a:4c:91:f9:76:15:af:9a:46:c6:09:e2:ac:a9:eb:
ba:00:94:f7:f2:d8:6d:d9:87:d6:08:22:b9:ac:9b:93:e4:4b:
49:b4:1c:63:4c:ca:a6:16:a1:3c:4b:e5:2a:6d:0c:8f:36:cf:
8b:d0:68:c6:c1:6e:23:5a:56:19:c0:01:a7:14:92:5b:11:2b:
64:13:b2:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 21:40:43 2025 by rpki-client