Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.mft
File: PwKJr_qvCA4lJxjj9Eidop2fpVo.mft (raw, json)
Hash identifier: Q+ypelIu571myqcLw8yiAQ/mgH8sDzuF6D4t7TE1Z20=
Subject key identifier: BC:EA:2B:BB:CC:C3:15:86:04:CE:3E:A8:C8:3F:C2:63:D1:60:1E:1B
Authority key identifier: 3F:02:89:AF:FA:AF:08:0E:25:27:18:E3:F4:48:9D:A2:9D:9F:A5:5A
Certificate issuer: /CN=3f0289affaaf080e252718e3f4489da29d9fa55a
Certificate serial: 019748FA0C22FD3A9A4D6C548EB52E4F0EC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PwKJr_qvCA4lJxjj9Eidop2fpVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 06:00:36 +0000
Manifest this update: Sat 07 Jun 2025 06:00:36 +0000
Manifest next update: Sun 08 Jun 2025 06:00:36 +0000
Files and hashes: 1: 4vBZmgBMnVCe-FhubPi7IwTZR7U.roa (hash: pC9viwrfXhDTa2hNSC3okPZXSzJEUX3jBZCttoAMuYA=)
2: PwKJr_qvCA4lJxjj9Eidop2fpVo.crl (hash: bL/k4wD72NaTnXUjcT1hn6OdHcI1Vubfj6IsOSg8yaA=)
3: liO3Dk9HW5maOXYINfx-lTJgFC0.roa (hash: q4LEiFG0iKJd0o8pxD+sRsl85pA8hcAalAJZcMAOiLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PwKJr_qvCA4lJxjj9Eidop2fpVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:0c:22:fd:3a:9a:4d:6c:54:8e:b5:2e:4f:0e:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f0289affaaf080e252718e3f4489da29d9fa55a
Validity
Not Before: Jun 7 06:00:36 2025 GMT
Not After : Jun 8 06:00:36 2025 GMT
Subject: CN=bcea2bbbccc3158604ce3ea8c83fc263d1601e1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ef:a1:45:9e:e8:fd:00:46:98:fd:40:5a:0d:
82:60:54:b9:ac:8f:93:be:61:d9:63:4a:cb:76:ad:
71:b7:86:b0:62:79:0d:8a:1c:94:11:12:94:35:e3:
71:1a:11:e3:06:05:af:91:6f:ae:df:99:38:72:b7:
29:c6:75:9d:7f:e1:cf:e6:d7:c8:02:2e:a9:7f:d8:
16:8e:f5:0c:d8:4b:33:5b:65:7c:b5:12:b0:82:27:
a2:8c:3b:19:e3:a4:99:c3:59:2c:f4:27:28:8b:72:
be:96:2c:47:58:df:f3:67:85:41:10:2a:cc:5f:a1:
59:11:13:17:c1:58:a0:ed:ab:13:7d:3b:e5:f3:0d:
1b:1e:ad:d8:22:12:fa:17:bb:2b:88:41:1e:0d:02:
70:7c:9f:7b:9c:36:ff:a7:7f:60:8b:7e:35:5b:08:
a1:9c:c5:3c:45:56:a4:d9:03:ab:36:b1:6d:20:ce:
2a:9a:21:90:9c:aa:df:00:eb:32:d2:15:c4:37:5e:
1d:33:a1:7f:9a:a5:1b:02:5e:8d:08:f1:70:15:98:
31:d7:3f:70:1b:7f:43:0f:ac:03:87:d6:6d:2e:46:
f5:6a:44:88:1b:17:ed:77:31:43:6e:8c:d1:a8:5a:
bc:87:bb:95:83:bb:75:6b:48:1a:f0:3f:db:40:59:
b8:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:EA:2B:BB:CC:C3:15:86:04:CE:3E:A8:C8:3F:C2:63:D1:60:1E:1B
X509v3 Authority Key Identifier:
keyid:3F:02:89:AF:FA:AF:08:0E:25:27:18:E3:F4:48:9D:A2:9D:9F:A5:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PwKJr_qvCA4lJxjj9Eidop2fpVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:af:6b:0f:2e:6c:df:0b:46:e1:c7:b0:e4:d2:19:93:82:51:
ef:9a:29:44:7e:0e:90:48:a4:49:94:08:14:82:41:f6:6f:5b:
3b:d3:bc:ac:fb:d4:77:13:d9:b4:cf:d2:34:14:7a:99:a5:7e:
fe:e1:89:38:ba:16:48:fa:dd:28:18:b0:e9:b4:55:4f:a7:dc:
74:a1:99:88:35:a5:ed:46:81:77:01:73:33:bc:92:bc:9d:59:
6d:e2:d4:ca:0f:86:cd:c3:c7:50:bc:d2:4d:0b:68:0f:da:0c:
38:00:40:bf:ee:f2:5d:53:24:73:b6:5b:b4:46:fa:4b:b0:2c:
fd:06:0c:36:53:f7:ed:7a:2a:18:6a:c1:e3:e3:fb:e9:d6:b3:
33:e5:eb:0d:06:c4:2b:c1:e3:e3:a3:ac:16:2f:3d:fd:b2:d6:
3e:7d:c1:5a:87:f8:21:aa:25:81:10:02:a4:bf:9c:e5:ff:e7:
b3:a0:2a:84:9d:9b:b9:70:28:4c:8d:80:66:8f:50:1f:8a:ac:
dd:00:c9:ca:02:d9:d8:8c:e5:ca:5d:a0:59:de:7a:84:3c:40:
81:25:87:80:8d:c7:ef:56:ac:7c:11:88:26:b4:f4:c0:ab:d5:
ff:5f:35:97:4f:bd:63:7d:8c:c1:b3:9b:7f:b8:fa:0d:d6:8d:
43:e3:ed:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 08:10:06 2025 by rpki-client