Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/57ea8d-c680-40a7-8a29-f076a08e6003/1/PowYl2JPV7404PdguX8RCtW12jo.mft
File: PowYl2JPV7404PdguX8RCtW12jo.mft (raw, json)
Hash identifier: 8PJqwxGrkmh49V1CJxk2oyXkt1qPtbhgq1+A4CMn9z4=
Subject key identifier: BB:64:D1:8B:24:B7:C4:21:9E:C1:27:72:26:08:99:9F:A9:B0:46:26
Authority key identifier: 3E:8C:18:97:62:4F:57:BE:34:E0:F7:60:B9:7F:11:0A:D5:B5:DA:3A
Certificate issuer: /CN=3e8c1897624f57be34e0f760b97f110ad5b5da3a
Certificate serial: 0197B6A18697C1CB07BC41B7B4FFACE946A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PowYl2JPV7404PdguX8RCtW12jo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/57ea8d-c680-40a7-8a29-f076a08e6003/1/PowYl2JPV7404PdguX8RCtW12jo.mft
Manifest number: 15B9
Signing time: Sat 28 Jun 2025 13:02:08 +0000
Manifest this update: Sat 28 Jun 2025 13:02:08 +0000
Manifest next update: Sun 29 Jun 2025 13:02:08 +0000
Files and hashes: 1: OVYlCjQ_Ro8WMpn3BJqI8X0cXxo.roa (hash: H6KoMJLLwg7EnqHTPVQLrBI8uOBDhlfqI6yQtfWr3zo=)
2: PowYl2JPV7404PdguX8RCtW12jo.crl (hash: s6xQhBM3+Qzt0hIU6myv8B9g2JRqRNQVPKjJ2ITN828=)
3: lFNEbA4WXa1kqpPRAFp7E-A0l2E.roa (hash: RLdKaSl14tW7ZrRmULGs2dhO8FMuiohKtUpmaqgzRYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/57ea8d-c680-40a7-8a29-f076a08e6003/1/PowYl2JPV7404PdguX8RCtW12jo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/57ea8d-c680-40a7-8a29-f076a08e6003/1/PowYl2JPV7404PdguX8RCtW12jo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PowYl2JPV7404PdguX8RCtW12jo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:86:97:c1:cb:07:bc:41:b7:b4:ff:ac:e9:46:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e8c1897624f57be34e0f760b97f110ad5b5da3a
Validity
Not Before: Jun 28 13:02:08 2025 GMT
Not After : Jun 29 13:02:08 2025 GMT
Subject: CN=bb64d18b24b7c4219ec127722608999fa9b04626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ae:76:af:69:db:a4:32:da:ea:69:7e:8f:7d:
a1:86:11:6d:1f:15:e3:c3:02:8f:c3:2f:f1:74:66:
ec:c9:71:bd:71:ed:94:3f:55:a9:9e:da:14:fa:48:
a5:fa:6d:36:bb:8e:23:82:0c:4a:33:5e:d1:f4:22:
4e:d6:00:ab:4d:20:86:65:7b:37:e0:ee:f3:3c:50:
cc:90:19:88:ce:1d:82:48:05:80:f6:15:e9:48:ea:
da:81:33:41:bd:44:8e:6b:75:63:61:ea:40:67:76:
1a:ea:0c:cf:97:b3:88:dd:79:2b:c5:76:30:57:83:
42:10:a0:8d:59:c2:e6:ed:5a:3b:70:5d:16:25:65:
51:d1:38:05:01:94:be:1b:8b:a1:ff:06:a3:23:6d:
cb:90:f3:29:20:93:6a:6a:4e:57:fd:e1:6e:2a:a5:
f8:52:f6:6c:4c:41:f0:d4:4c:da:82:07:29:51:17:
de:3e:5d:da:2f:a0:41:b5:40:65:46:71:35:26:d5:
b0:7a:46:b4:dd:45:80:a0:09:33:d0:dd:cc:a3:68:
4e:06:fc:c1:64:e5:c3:52:e3:24:73:53:dd:a7:90:
42:5e:6b:4d:02:7d:8b:74:39:fa:ad:7d:bb:c3:c1:
c8:87:38:7f:3a:f1:71:ad:27:b4:70:8c:c6:bf:61:
2e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:64:D1:8B:24:B7:C4:21:9E:C1:27:72:26:08:99:9F:A9:B0:46:26
X509v3 Authority Key Identifier:
keyid:3E:8C:18:97:62:4F:57:BE:34:E0:F7:60:B9:7F:11:0A:D5:B5:DA:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PowYl2JPV7404PdguX8RCtW12jo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/57ea8d-c680-40a7-8a29-f076a08e6003/1/PowYl2JPV7404PdguX8RCtW12jo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/57ea8d-c680-40a7-8a29-f076a08e6003/1/PowYl2JPV7404PdguX8RCtW12jo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:ea:6d:70:d9:eb:8a:9c:45:9f:d1:55:89:38:a3:b2:50:31:
41:7f:53:3f:14:e3:0b:14:17:9c:fb:9b:e8:6d:af:e6:64:25:
1b:f4:c8:1e:8a:cc:42:f5:da:fd:96:84:71:f1:4a:06:04:11:
d8:35:fe:ad:89:7c:1b:41:c5:0d:d8:1c:88:67:81:1d:20:02:
7f:a3:58:8e:02:22:4c:6a:89:2b:77:d4:55:fa:f9:61:e6:cf:
51:3f:58:c8:73:92:8b:c2:61:97:80:4b:82:92:fc:09:6a:b9:
e5:9e:64:16:af:97:49:a2:8d:43:29:d4:29:e4:ef:bf:56:01:
52:92:cf:6c:b1:52:bc:bc:a9:02:0c:6b:a5:ee:91:c7:dd:94:
6e:d2:80:37:a6:56:72:6c:b3:77:4f:56:8a:2d:3b:9f:7d:21:
c3:a0:c2:41:31:57:cc:eb:cb:32:f4:98:13:77:7a:9b:37:40:
3d:15:e6:23:fa:3f:39:5a:3b:9b:16:d8:54:5c:d4:c3:99:6b:
40:4e:9a:0f:34:18:ac:c5:14:c5:75:54:ad:da:a4:fe:2c:2a:
2a:65:17:8d:86:b0:72:79:73:d7:03:dc:28:db:78:8c:43:9e:
04:e9:be:32:ad:1f:a4:99:19:f8:d7:20:c0:75:27:dd:81:35:
45:c0:28:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:59:39 2025 by rpki-client