Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft
File: POoeqIfc7-5hNhVbi9gzkpN8FnE.mft (raw, json)
Hash identifier: HF+opcCX0awP/1tNfiqnSCE7KFjd3YKMdnZ7VQTGHTA=
Subject key identifier: 17:B6:8B:E8:A3:1A:D0:3E:1E:84:2C:58:39:4D:27:A3:07:87:7A:C5
Authority key identifier: 3C:EA:1E:A8:87:DC:EF:EE:61:36:15:5B:8B:D8:33:92:93:7C:16:71
Certificate issuer: /CN=3cea1ea887dcefee6136155b8bd83392937c1671
Certificate serial: 0199FBEB5D290A1F0B991B635B4AB39D99A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/POoeqIfc7-5hNhVbi9gzkpN8FnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft
Manifest number: 0B8B
Signing time: Sun 19 Oct 2025 10:02:10 +0000
Manifest this update: Sun 19 Oct 2025 10:02:10 +0000
Manifest next update: Mon 20 Oct 2025 10:02:10 +0000
Files and hashes: 1: 5pbhFrbv6p0fxLITgiU8s5OQtVw.roa (hash: MoawBbuqETIT5X2tb8EXLXxGAQEcqFB39pjZprw8koc=)
2: POoeqIfc7-5hNhVbi9gzkpN8FnE.crl (hash: 1wqHpBZKGVlBBQ0F72/0d+Er/PaJjOzinWu7q5d3wIY=)
3: aBfkfMsI6RfN5EaoDQWlcn2H95I.roa (hash: kUHTcNhwAMf+AKKhL303auY/4FQ8RuznlrI+X0c8dok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/POoeqIfc7-5hNhVbi9gzkpN8FnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:5d:29:0a:1f:0b:99:1b:63:5b:4a:b3:9d:99:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cea1ea887dcefee6136155b8bd83392937c1671
Validity
Not Before: Oct 19 10:02:10 2025 GMT
Not After : Oct 20 10:02:10 2025 GMT
Subject: CN=17b68be8a31ad03e1e842c58394d27a307877ac5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:aa:b5:ec:1d:9b:bf:1e:74:ed:eb:7c:71:0a:
55:6c:64:3b:0f:8c:c2:c5:df:25:b6:0a:b2:02:6c:
21:21:9a:2f:b2:c7:df:86:36:e8:7b:aa:3f:4b:64:
fc:c9:54:5d:ce:cc:7a:65:7f:96:0b:27:8e:7c:2b:
2f:78:dc:07:8d:17:5e:e8:92:20:18:cc:75:38:74:
7f:60:c0:9c:39:d5:1c:c7:65:01:9e:78:4d:c6:3f:
a7:aa:f8:6f:a4:ed:54:e9:f3:5f:1e:21:c3:77:69:
89:f1:5b:fa:37:df:97:bb:13:83:4c:a8:45:9a:57:
49:36:f7:77:ee:8c:0e:35:c7:2f:e2:c0:00:8c:2f:
97:6d:19:1f:71:55:3a:12:71:c7:d3:fc:8a:5b:5d:
e8:85:1f:66:4c:e4:1f:c3:6f:bb:84:f2:9b:82:c7:
57:80:0f:94:66:74:67:d3:fc:49:5c:21:1f:9d:f6:
5b:26:dc:3e:b3:1a:a1:da:80:ad:d3:bd:b5:4e:3e:
c7:9d:a1:86:56:e5:e2:14:f9:9f:da:64:80:cd:99:
27:e2:5f:d4:80:a5:66:11:71:78:c0:12:e9:7a:25:
1f:8b:78:2e:60:2e:2c:5c:21:0c:65:d5:42:7f:a0:
ca:dc:5c:96:72:95:61:90:5e:f5:c1:95:66:43:38:
3d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:B6:8B:E8:A3:1A:D0:3E:1E:84:2C:58:39:4D:27:A3:07:87:7A:C5
X509v3 Authority Key Identifier:
keyid:3C:EA:1E:A8:87:DC:EF:EE:61:36:15:5B:8B:D8:33:92:93:7C:16:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/POoeqIfc7-5hNhVbi9gzkpN8FnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:f7:75:06:84:df:84:cc:c8:e3:68:f8:52:5f:7f:83:7f:f0:
24:21:be:dd:b0:92:e9:8f:bd:1d:fc:6b:8d:8f:60:d3:d6:f4:
28:ff:e8:f4:dc:8c:b3:09:87:21:10:0e:fd:79:0e:24:7c:02:
06:38:c5:59:40:93:17:86:a8:db:ee:53:95:14:89:9e:f5:27:
7b:29:2a:41:86:45:89:8b:25:2c:13:45:c9:26:3c:23:4c:91:
4e:3a:db:0a:50:da:ae:85:7d:9a:ab:69:54:87:19:36:0e:f8:
23:38:63:cb:31:4b:09:e4:16:09:0f:d9:2b:a9:1f:be:80:3e:
eb:49:fc:d0:b0:1b:c1:d5:30:d4:65:c5:a8:3e:83:ad:30:30:
bb:55:8b:a8:31:68:6f:55:27:d5:99:33:47:2f:13:f7:48:5a:
09:d4:47:0e:86:2b:96:09:54:da:e4:90:cc:c8:43:6e:62:a5:
c6:3e:4d:01:5a:db:82:3d:c4:46:0b:78:30:38:81:5c:83:4f:
4e:0f:8d:d1:82:59:02:2a:c1:06:e7:02:c1:7c:ba:67:22:ec:
47:80:bb:02:97:1a:5a:ab:a0:58:38:d0:bc:c5:2d:23:81:00:
92:0b:2a:e0:27:a1:a7:13:72:c9:57:97:d8:8e:e3:5f:4e:d6:
1e:88:74:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:52 2025 by rpki-client