Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.mft
File: PwKJr_qvCA4lJxjj9Eidop2fpVo.mft (raw, json)
Hash identifier: dD5+NqvX9Pa47EgWiBF9osieg5Hl7aYS00I6jJV1miI=
Subject key identifier: 46:2C:10:BC:88:1E:D4:20:B6:C1:3B:DD:C7:7E:A1:71:5F:97:AB:E2
Authority key identifier: 3F:02:89:AF:FA:AF:08:0E:25:27:18:E3:F4:48:9D:A2:9D:9F:A5:5A
Certificate issuer: /CN=3f0289affaaf080e252718e3f4489da29d9fa55a
Certificate serial: 0196463271F74E6C6DBAA0CE8EA9D3317951
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PwKJr_qvCA4lJxjj9Eidop2fpVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.mft
Manifest number: 14F7
Signing time: Fri 18 Apr 2025 00:00:33 +0000
Manifest this update: Fri 18 Apr 2025 00:00:33 +0000
Manifest next update: Sat 19 Apr 2025 00:00:33 +0000
Files and hashes: 1: 4vBZmgBMnVCe-FhubPi7IwTZR7U.roa (hash: pC9viwrfXhDTa2hNSC3okPZXSzJEUX3jBZCttoAMuYA=)
2: PwKJr_qvCA4lJxjj9Eidop2fpVo.crl (hash: k6MJaAhdVw1tlO2j55cpld/OwK5kXQZPv+Iw3c+XywM=)
3: liO3Dk9HW5maOXYINfx-lTJgFC0.roa (hash: q4LEiFG0iKJd0o8pxD+sRsl85pA8hcAalAJZcMAOiLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PwKJr_qvCA4lJxjj9Eidop2fpVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:46:32:71:f7:4e:6c:6d:ba:a0:ce:8e:a9:d3:31:79:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f0289affaaf080e252718e3f4489da29d9fa55a
Validity
Not Before: Apr 18 00:00:33 2025 GMT
Not After : Apr 19 00:00:33 2025 GMT
Subject: CN=462c10bc881ed420b6c13bddc77ea1715f97abe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:36:9d:c1:64:fb:5f:27:c3:69:58:28:f9:2c:
e6:9a:fd:35:e6:1d:12:c9:b2:5f:46:fc:50:7a:16:
fd:28:0c:54:1f:f9:4a:76:22:33:14:a0:7a:27:4b:
6e:34:36:52:e5:ff:d1:06:d7:7b:aa:8a:c7:4d:f5:
e5:5c:78:f0:1e:8f:62:a3:10:84:a8:4c:50:33:7f:
a4:dc:f2:fe:89:e9:29:13:09:75:6c:37:58:24:c8:
59:89:e2:ca:8f:e8:4d:68:ef:11:81:da:bb:d3:f4:
b1:51:a3:3d:bc:e3:ee:e5:29:9e:34:f2:fb:28:fa:
8c:46:fc:c3:c0:2a:3f:21:1e:0c:9a:0c:c3:3b:6a:
04:0a:c8:f1:04:a0:e4:37:a5:7c:17:fe:6b:32:54:
01:21:1f:94:23:a2:a9:3f:69:41:e7:a2:17:84:ff:
81:5c:12:7b:5c:99:11:32:52:a1:4f:c3:5e:62:7a:
fd:6a:27:d5:12:32:b9:91:4c:c5:18:98:08:e2:ee:
8f:95:91:5a:56:4f:70:cd:4a:41:c9:01:e7:2f:e6:
15:9a:80:3c:42:ad:d2:43:33:41:7f:6f:24:e0:ec:
34:36:65:ac:7d:de:98:bf:62:d5:cd:2b:a0:7a:57:
85:a0:4b:ec:22:1f:58:35:41:80:51:0d:91:64:1a:
87:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:2C:10:BC:88:1E:D4:20:B6:C1:3B:DD:C7:7E:A1:71:5F:97:AB:E2
X509v3 Authority Key Identifier:
keyid:3F:02:89:AF:FA:AF:08:0E:25:27:18:E3:F4:48:9D:A2:9D:9F:A5:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PwKJr_qvCA4lJxjj9Eidop2fpVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:84:6e:23:78:8f:6d:77:80:63:7c:05:6a:65:38:2d:da:9d:
e1:bd:41:61:b0:ee:e5:cf:c2:72:e3:68:dc:03:2c:7d:b8:80:
a4:4f:00:7e:70:3a:17:78:e1:b2:5f:8f:f4:f6:21:f9:95:dc:
59:d3:c3:90:22:fa:28:87:e4:e9:70:00:ee:91:18:d6:aa:3d:
1e:3f:ec:d9:b0:44:2c:9d:83:77:9f:13:73:6e:83:dc:74:7e:
c0:90:49:8d:be:7a:96:c0:9d:05:9b:3a:46:fd:1f:43:88:92:
ef:c8:e6:0b:43:c1:2d:d3:8d:7b:0d:e9:58:da:9a:f3:9b:60:
7e:70:8e:08:15:f0:bf:03:95:71:bc:2c:a6:d2:c3:1d:7a:9e:
b8:c3:ef:af:27:13:74:d1:fe:34:82:6e:97:e5:75:9d:dd:a1:
49:51:40:6c:be:f5:29:79:11:57:c4:21:68:83:c7:ee:69:36:
36:60:48:81:9a:81:7a:48:65:7a:ff:aa:d4:8b:bf:93:a9:fd:
19:3d:cd:9b:b9:f9:7a:cc:d1:90:01:ec:61:b6:a8:a5:82:4a:
e6:60:71:dd:dd:f0:bb:02:91:a4:f9:4f:ca:a9:ed:6a:7f:4f:
0a:58:4e:b0:d4:17:ad:af:af:9c:06:2f:db:e4:f4:4b:70:59:
6f:d0:97:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 02:05:26 2025 by rpki-client