Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.mft
File: PwKJr_qvCA4lJxjj9Eidop2fpVo.mft (raw, json)
Hash identifier: BrEqzZXu1xYOe7rYjMyqn+M7qrvX3IsAwWEqkjo1LOI=
Subject key identifier: 34:8B:01:1B:77:D2:F9:E2:31:77:BF:83:C9:41:AC:4A:75:D0:9C:1C
Authority key identifier: 3F:02:89:AF:FA:AF:08:0E:25:27:18:E3:F4:48:9D:A2:9D:9F:A5:5A
Certificate issuer: /CN=3f0289affaaf080e252718e3f4489da29d9fa55a
Certificate serial: 019A0BCA9321C0CE3239E0BC46517EE92489
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PwKJr_qvCA4lJxjj9Eidop2fpVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.mft
Manifest number: 16EB
Signing time: Wed 22 Oct 2025 12:00:16 +0000
Manifest this update: Wed 22 Oct 2025 12:00:16 +0000
Manifest next update: Thu 23 Oct 2025 12:00:16 +0000
Files and hashes: 1: 4vBZmgBMnVCe-FhubPi7IwTZR7U.roa (hash: pC9viwrfXhDTa2hNSC3okPZXSzJEUX3jBZCttoAMuYA=)
2: PwKJr_qvCA4lJxjj9Eidop2fpVo.crl (hash: L442vjzHyEUbufTncpIO4cpzbS2GebVGqa8FZs5YHaA=)
3: liO3Dk9HW5maOXYINfx-lTJgFC0.roa (hash: q4LEiFG0iKJd0o8pxD+sRsl85pA8hcAalAJZcMAOiLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PwKJr_qvCA4lJxjj9Eidop2fpVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 12:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0b:ca:93:21:c0:ce:32:39:e0:bc:46:51:7e:e9:24:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f0289affaaf080e252718e3f4489da29d9fa55a
Validity
Not Before: Oct 22 12:00:16 2025 GMT
Not After : Oct 23 12:00:16 2025 GMT
Subject: CN=348b011b77d2f9e23177bf83c941ac4a75d09c1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:4b:a5:c4:31:e7:93:16:b8:72:a3:ed:48:92:
bd:9c:39:f5:4b:d4:82:e6:54:ce:e9:af:07:e9:88:
86:90:8e:6b:1f:cf:d7:58:a6:72:68:23:b7:36:5f:
31:21:b7:c0:50:0c:ad:06:99:d1:84:9f:b0:2c:eb:
48:46:fa:d2:c3:2f:47:c2:90:e9:03:8d:72:3e:c6:
96:22:72:85:bb:f3:c7:b6:61:1b:2f:2c:df:41:23:
74:e5:bc:bb:90:c6:f3:44:36:5f:f2:c4:f2:69:fc:
eb:d3:8e:7e:ff:4f:79:80:1c:85:a1:bc:d9:00:55:
16:b0:3c:2a:18:f9:19:40:cf:4b:b5:bb:1b:7d:18:
c7:47:1d:6f:ac:4b:ee:b3:91:37:3a:a3:85:fb:3e:
0e:64:02:b6:11:55:da:6a:86:1b:3a:a9:e9:61:61:
98:05:9e:8d:82:58:af:ec:bb:00:91:69:8e:6a:87:
45:e9:ea:1b:a9:e9:28:a0:aa:f0:bc:a2:45:68:95:
fa:c5:b7:15:2c:0b:e6:99:58:92:0a:1d:5f:15:8b:
fd:57:89:4f:43:ca:bd:f0:b5:43:81:d1:d7:02:3e:
4a:07:be:89:37:70:df:58:22:7a:ca:a4:96:13:22:
d7:01:24:9f:f5:13:9c:04:5e:7f:fc:67:8c:d9:af:
27:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:8B:01:1B:77:D2:F9:E2:31:77:BF:83:C9:41:AC:4A:75:D0:9C:1C
X509v3 Authority Key Identifier:
keyid:3F:02:89:AF:FA:AF:08:0E:25:27:18:E3:F4:48:9D:A2:9D:9F:A5:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PwKJr_qvCA4lJxjj9Eidop2fpVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:87:4f:98:54:b0:1c:46:15:ef:4d:f7:77:02:4c:7a:18:5c:
db:19:f1:4f:05:e0:53:1e:80:5e:5d:fb:60:e7:5c:bd:ce:45:
a2:4b:a6:56:03:ea:c8:af:68:ea:79:b8:d0:c9:d8:10:3d:67:
19:7f:ef:6f:33:02:e0:1a:f9:da:f4:02:7f:20:fe:0c:20:9a:
8a:b4:d2:fd:48:a7:67:54:c7:58:fd:80:ec:79:0d:32:11:b6:
cf:f4:13:cc:d6:47:c5:38:57:0f:ea:c2:ee:a7:4f:28:a3:73:
b7:a8:ca:13:e6:ba:94:74:4c:33:dc:0d:08:99:9d:96:03:10:
c6:79:4d:8d:2b:37:d5:7e:5f:39:d5:7e:f8:88:2f:47:31:73:
e9:55:50:6d:d9:c5:4c:f9:45:16:e4:da:bf:ea:61:0d:34:d6:
a1:f7:e3:5c:38:b1:e9:2e:8f:7c:c5:63:e4:be:c7:03:11:bc:
19:ba:cb:72:7d:76:d1:bf:86:bc:7c:14:a4:ca:d2:0f:d3:8d:
dc:56:b9:95:d3:66:b8:2c:09:9d:bb:bd:96:f3:62:82:69:ec:
6a:1f:84:dd:5a:12:32:33:24:78:41:b8:84:a0:bf:44:b3:14:
c7:6b:be:cc:9a:51:8a:cd:59:77:9c:ca:82:4b:11:ca:9b:2a:
a7:43:09:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoLypMhwM4yOeC8RlF+6SSJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmMDI4OWFmZmFhZjA4MGUyNTI3MThlM2Y0NDg5ZGEyOWQ5
ZmE1NWEwHhcNMjUxMDIyMTIwMDE2WhcNMjUxMDIzMTIwMDE2WjAzMTEwLwYDVQQD
EygzNDhiMDExYjc3ZDJmOWUyMzE3N2JmODNjOTQxYWM0YTc1ZDA5YzFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA30ulxDHnkxa4cqPtSJK9nDn1S9SC
5lTO6a8H6YiGkI5rH8/XWKZyaCO3Nl8xIbfAUAytBpnRhJ+wLOtIRvrSwy9HwpDp
A41yPsaWInKFu/PHtmEbLyzfQSN05by7kMbzRDZf8sTyafzr045+/095gByFobzZ
AFUWsDwqGPkZQM9LtbsbfRjHRx1vrEvus5E3OqOF+z4OZAK2EVXaaoYbOqnpYWGY
BZ6Ngliv7LsAkWmOaodF6eobqekooKrwvKJFaJX6xbcVLAvmmViSCh1fFYv9V4lP
Q8q98LVDgdHXAj5KB76JN3DfWCJ6yqSWEyLXASSf9ROcBF5//GeM2a8n6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDSLARt30vniMXe/g8lBrEp10JwcMB8GA1UdIwQY
MBaAFD8Cia/6rwgOJScY4/RInaKdn6VaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHdLSnJfcXZDQTRsSnhqajlFaWRvcDJmcFZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni85ZmNjY2YtZTdhYS00YzQ0LTk1OTAt
MWNmMGZlYWFhM2VhLzEvUHdLSnJfcXZDQTRsSnhqajlFaWRvcDJmcFZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni85ZmNjY2YtZTdhYS00YzQ0LTk1OTAtMWNmMGZlYWFhM2Vh
LzEvUHdLSnJfcXZDQTRsSnhqajlFaWRvcDJmcFZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbIdPmFSw
HEYV7033dwJMehhc2xnxTwXgUx6AXl37YOdcvc5FokumVgPqyK9o6nm40MnYED1n
GX/vbzMC4Br52vQCfyD+DCCairTS/UinZ1THWP2A7HkNMhG2z/QTzNZHxThXD+rC
7qdPKKNzt6jKE+a6lHRMM9wNCJmdlgMQxnlNjSs31X5fOdV++IgvRzFz6VVQbdnF
TPlFFuTav+phDTTWoffjXDix6S6PfMVj5L7HAxG8GbrLcn120b+GvHwUpMrSD9ON
3Fa5ldNmuCwJnbu9lvNigmnsah+E3VoSMjMkeEG4hKC/RLMUx2u+zJpRis1Zd5zK
gksRypsqp0MJdg==
-----END CERTIFICATE-----
Generated at Wed Oct 22 18:46:22 2025 by rpki-client