Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft
File: POoeqIfc7-5hNhVbi9gzkpN8FnE.mft (raw, json)
Hash identifier: ABniZi2u91uNAIwd9EOqkUIA0fr6xtLHDzWvWF45YUk=
Subject key identifier: 8A:21:B8:D2:A6:E8:7C:75:69:C8:A6:03:ED:5B:41:4C:50:F5:1B:97
Authority key identifier: 3C:EA:1E:A8:87:DC:EF:EE:61:36:15:5B:8B:D8:33:92:93:7C:16:71
Certificate issuer: /CN=3cea1ea887dcefee6136155b8bd83392937c1671
Certificate serial: 0198D660257B2A1CE1CCE050170E1DFB6625
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/POoeqIfc7-5hNhVbi9gzkpN8FnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft
Manifest number: 0AF3
Signing time: Sat 23 Aug 2025 10:01:21 +0000
Manifest this update: Sat 23 Aug 2025 10:01:21 +0000
Manifest next update: Sun 24 Aug 2025 10:01:21 +0000
Files and hashes: 1: 5pbhFrbv6p0fxLITgiU8s5OQtVw.roa (hash: MoawBbuqETIT5X2tb8EXLXxGAQEcqFB39pjZprw8koc=)
2: POoeqIfc7-5hNhVbi9gzkpN8FnE.crl (hash: Gqgk29YJx47xpGT5Vu7PKYsZg4s0olu1jCG7i+tt/sw=)
3: aBfkfMsI6RfN5EaoDQWlcn2H95I.roa (hash: kUHTcNhwAMf+AKKhL303auY/4FQ8RuznlrI+X0c8dok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/POoeqIfc7-5hNhVbi9gzkpN8FnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:25:7b:2a:1c:e1:cc:e0:50:17:0e:1d:fb:66:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cea1ea887dcefee6136155b8bd83392937c1671
Validity
Not Before: Aug 23 10:01:21 2025 GMT
Not After : Aug 24 10:01:21 2025 GMT
Subject: CN=8a21b8d2a6e87c7569c8a603ed5b414c50f51b97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:56:6c:fd:56:86:f1:db:20:c4:49:fd:86:48:
c6:45:a3:10:58:5f:44:cf:05:36:29:4f:64:3b:26:
94:e2:b6:09:d5:d7:18:45:ab:bb:3f:c7:43:d2:c1:
7d:f1:f0:2a:84:b8:63:aa:84:ac:0e:f1:ef:b0:d6:
6c:f3:ed:96:0e:a0:e6:f8:80:6d:fb:ce:60:95:fd:
e3:03:0f:9a:b6:70:89:ce:a7:7c:c2:ac:65:2e:cd:
1f:93:a9:4d:80:6b:46:d1:a8:8d:1c:93:dc:12:c6:
1f:59:bd:8e:52:4b:cb:56:be:7b:e1:f7:f9:b7:5e:
da:27:58:de:16:09:d6:50:ef:ff:f5:43:46:db:15:
14:36:27:7f:db:c4:37:31:a6:e7:a7:54:6f:29:8a:
b4:84:01:1c:fe:21:d7:af:dd:d6:04:18:a5:2a:a8:
70:01:f3:14:9a:72:46:48:4e:5b:30:a7:1a:b9:81:
37:07:89:f1:35:55:34:53:8a:fa:76:f0:a9:33:50:
16:e8:16:91:3f:68:6d:15:46:5f:2e:29:1d:f6:9c:
8d:33:ce:6e:4e:38:38:6e:2e:89:6f:e1:e7:b5:4c:
78:3f:ff:05:38:be:d3:d9:6e:07:81:93:7c:9d:df:
67:90:ea:01:9b:e6:a5:50:e8:d2:80:6d:d4:18:c4:
03:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:21:B8:D2:A6:E8:7C:75:69:C8:A6:03:ED:5B:41:4C:50:F5:1B:97
X509v3 Authority Key Identifier:
keyid:3C:EA:1E:A8:87:DC:EF:EE:61:36:15:5B:8B:D8:33:92:93:7C:16:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/POoeqIfc7-5hNhVbi9gzkpN8FnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:78:9f:64:be:44:c0:6a:1a:bb:62:6e:24:ac:62:2d:86:6a:
f1:43:9c:39:f7:38:63:9e:f6:af:4b:22:ae:ec:67:ba:47:03:
c2:8c:68:73:a8:af:ac:d9:e3:ac:3f:b1:9e:cf:8f:ec:1d:ba:
80:7a:ce:c0:30:bc:a8:f9:51:c8:3e:1f:ff:e5:d6:36:68:43:
9d:15:75:c4:f0:98:dd:39:e4:56:4d:8d:1e:56:cc:81:df:32:
a8:3c:7e:75:a1:25:5a:fa:96:76:e5:44:d7:75:df:95:e6:a3:
e6:da:9f:fe:dd:31:f1:75:36:37:ea:a4:0d:c3:c4:ce:2a:35:
82:58:b3:dd:33:70:9c:65:e9:2f:08:de:93:b7:b6:87:97:99:
92:13:5f:e3:a6:3d:9c:3c:a4:d5:aa:dd:56:d4:72:55:8f:03:
28:7d:4d:df:97:f9:29:65:88:3b:bb:ac:fc:82:a0:39:97:af:
f2:11:4a:bd:7f:b2:d3:b0:53:59:6d:8a:53:c4:16:7c:b3:40:
ec:32:c1:e5:5e:2e:0c:3a:cf:c7:58:a3:c8:b4:9b:63:e6:fa:
ac:c5:b9:20:8f:14:61:2e:e1:17:dc:ff:fe:e5:99:af:17:36:
2a:c7:74:9d:6e:dd:d9:f6:b5:cb:67:c7:cc:ee:9b:aa:38:58:
51:2e:a6:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYCV7KhzhzOBQFw4d+2YlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjZWExZWE4ODdkY2VmZWU2MTM2MTU1YjhiZDgzMzkyOTM3
YzE2NzEwHhcNMjUwODIzMTAwMTIxWhcNMjUwODI0MTAwMTIxWjAzMTEwLwYDVQQD
Eyg4YTIxYjhkMmE2ZTg3Yzc1NjljOGE2MDNlZDViNDE0YzUwZjUxYjk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVZs/VaG8dsgxEn9hkjGRaMQWF9E
zwU2KU9kOyaU4rYJ1dcYRau7P8dD0sF98fAqhLhjqoSsDvHvsNZs8+2WDqDm+IBt
+85glf3jAw+atnCJzqd8wqxlLs0fk6lNgGtG0aiNHJPcEsYfWb2OUkvLVr574ff5
t17aJ1jeFgnWUO//9UNG2xUUNid/28Q3Mabnp1RvKYq0hAEc/iHXr93WBBilKqhw
AfMUmnJGSE5bMKcauYE3B4nxNVU0U4r6dvCpM1AW6BaRP2htFUZfLikd9pyNM85u
Tjg4bi6Jb+HntUx4P/8FOL7T2W4HgZN8nd9nkOoBm+alUOjSgG3UGMQDpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIohuNKm6Hx1acimA+1bQUxQ9RuXMB8GA1UdIwQY
MBaAFDzqHqiH3O/uYTYVW4vYM5KTfBZxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUE9vZXFJZmM3LTVoTmhWYmk5Z3prcE44Rm5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9jYTYxZWMtMDdiNi00OTJlLThjNDgt
YjY0Y2FiNGJiZGZmLzEvUE9vZXFJZmM3LTVoTmhWYmk5Z3prcE44Rm5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9jYTYxZWMtMDdiNi00OTJlLThjNDgtYjY0Y2FiNGJiZGZm
LzEvUE9vZXFJZmM3LTVoTmhWYmk5Z3prcE44Rm5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxXifZL5E
wGoau2JuJKxiLYZq8UOcOfc4Y572r0siruxnukcDwoxoc6ivrNnjrD+xns+P7B26
gHrOwDC8qPlRyD4f/+XWNmhDnRV1xPCY3TnkVk2NHlbMgd8yqDx+daElWvqWduVE
13Xfleaj5tqf/t0x8XU2N+qkDcPEzio1gliz3TNwnGXpLwjek7e2h5eZkhNf46Y9
nDyk1ardVtRyVY8DKH1N35f5KWWIO7us/IKgOZev8hFKvX+y07BTWW2KU8QWfLNA
7DLB5V4uDDrPx1ijyLSbY+b6rMW5II8UYS7hF9z//uWZrxc2Ksd0nW7d2fa1y2fH
zO6bqjhYUS6mLw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:19:07 2025 by rpki-client