Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/9014c3-1a49-4e62-9243-21335d1063af/1/Pwooe-qSWI_F2uT5P7JWKPMtGW0.mft
File: Pwooe-qSWI_F2uT5P7JWKPMtGW0.mft (raw, json)
Hash identifier: BlbscId/4RhmbpvqJ32iX/3QoFLrwDYOeIqHGfrDOTM=
Subject key identifier: CD:F6:15:9A:35:F1:36:94:04:DC:C7:31:46:30:5D:F0:C9:9B:81:8F
Authority key identifier: 3F:0A:28:7B:EA:92:58:8F:C5:DA:E4:F9:3F:B2:56:28:F3:2D:19:6D
Certificate issuer: /CN=3f0a287bea92588fc5dae4f93fb25628f32d196d
Certificate serial: 019748F9CD1EDD10E4CE35F924AB8F9E32A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pwooe-qSWI_F2uT5P7JWKPMtGW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/9014c3-1a49-4e62-9243-21335d1063af/1/Pwooe-qSWI_F2uT5P7JWKPMtGW0.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 06:00:19 +0000
Manifest this update: Sat 07 Jun 2025 06:00:19 +0000
Manifest next update: Sun 08 Jun 2025 06:00:19 +0000
Files and hashes: 1: EWY61EBMWvIz95kZvxz3f7Ao8DM.roa (hash: hUfTdT/UdwzPCuJouTIN5MiLU84ihpYE+x77dYeKVgo=)
2: Pwooe-qSWI_F2uT5P7JWKPMtGW0.crl (hash: i7mApBdCm9AduKUbjgbc7gj3Uqqm8A7HvxrGj5y4dVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/9014c3-1a49-4e62-9243-21335d1063af/1/Pwooe-qSWI_F2uT5P7JWKPMtGW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/9014c3-1a49-4e62-9243-21335d1063af/1/Pwooe-qSWI_F2uT5P7JWKPMtGW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pwooe-qSWI_F2uT5P7JWKPMtGW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:f9:cd:1e:dd:10:e4:ce:35:f9:24:ab:8f:9e:32:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f0a287bea92588fc5dae4f93fb25628f32d196d
Validity
Not Before: Jun 7 06:00:19 2025 GMT
Not After : Jun 8 06:00:19 2025 GMT
Subject: CN=cdf6159a35f1369404dcc73146305df0c99b818f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9d:3a:04:81:0f:f7:ac:43:5b:0f:07:6b:0e:
bd:e4:58:07:93:0e:88:fd:3e:4d:e0:48:74:2c:92:
9b:74:5b:c0:4a:2a:8a:b0:68:81:7d:cc:65:19:c2:
89:a5:c8:54:97:d5:94:80:c8:79:df:aa:88:90:a4:
3e:00:90:04:fc:1f:b3:f0:bf:b5:ae:7d:3d:bf:2f:
27:23:6f:38:62:16:b0:7d:09:54:01:04:a9:81:b6:
eb:b4:35:a4:a9:ba:3c:99:86:eb:d6:1d:1e:a7:5b:
2a:e2:43:48:85:26:4b:9a:5b:31:4e:49:ba:24:80:
b6:da:e2:3b:0b:cb:fd:3b:49:20:0f:65:01:6f:fc:
a4:04:44:25:e7:16:9b:35:d8:6f:0b:4c:fb:60:b8:
40:1b:7b:01:ef:58:37:cc:18:52:1c:6c:c3:68:4f:
f9:81:cf:01:36:91:01:af:ea:29:bc:db:af:bd:fb:
41:ba:1a:74:8e:7c:fb:5b:b8:5d:93:93:3f:d2:59:
37:5e:8c:ec:e8:c8:01:be:cd:6a:a6:ba:77:ca:99:
b4:cc:9d:61:1a:84:17:8c:47:05:4d:b4:c7:d0:73:
b1:c1:70:01:3b:ae:21:1c:cb:9d:65:45:de:42:81:
d9:64:4a:b8:93:8f:64:49:b1:d1:68:f7:02:4b:58:
c9:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:F6:15:9A:35:F1:36:94:04:DC:C7:31:46:30:5D:F0:C9:9B:81:8F
X509v3 Authority Key Identifier:
keyid:3F:0A:28:7B:EA:92:58:8F:C5:DA:E4:F9:3F:B2:56:28:F3:2D:19:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pwooe-qSWI_F2uT5P7JWKPMtGW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/9014c3-1a49-4e62-9243-21335d1063af/1/Pwooe-qSWI_F2uT5P7JWKPMtGW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/9014c3-1a49-4e62-9243-21335d1063af/1/Pwooe-qSWI_F2uT5P7JWKPMtGW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:5d:23:66:c4:37:d0:a5:12:84:24:ed:54:64:46:36:97:85:
c9:db:db:52:dc:ed:e7:a4:ca:8c:0d:bc:0b:8a:c1:f2:ed:f6:
e7:98:a9:21:85:68:c0:9d:9c:e7:d1:b6:73:3a:41:6d:b0:07:
bb:13:20:4e:a5:39:58:40:06:c1:c1:5e:a4:d9:55:79:29:1e:
1d:ef:14:58:b6:46:aa:d3:b5:be:59:a9:20:12:ce:66:1b:f3:
b8:88:3f:3c:bf:f2:63:62:ac:97:d5:2f:e4:c4:05:9b:4e:d0:
5b:e1:cd:32:af:9d:58:6e:a4:31:65:77:9c:be:98:c6:67:21:
43:66:d7:00:e1:f6:03:23:e4:74:88:94:2e:df:b9:a1:0d:9b:
b2:6c:1b:49:ea:d0:eb:d2:fb:ec:65:68:53:56:be:9e:7d:b9:
4b:9a:e2:79:60:58:6f:f9:ab:7e:0b:be:c6:6c:0b:83:89:38:
90:a5:0d:73:f4:45:0f:fc:6f:25:21:f2:c9:cc:6e:dc:73:23:
fe:37:a1:01:5a:75:4e:1b:2d:6e:ca:6a:7f:1d:a2:49:62:d4:
17:b9:0b:06:92:1e:97:ee:95:8a:53:6a:10:11:ed:aa:6a:e9:
4c:89:a8:c5:16:a7:38:25:f6:ba:ad:1d:97:6f:12:0b:5d:12:
56:fb:d8:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:53:27 2025 by rpki-client