Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft
File: PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft (raw, json)
Hash identifier: g4aUt3erGQClDv3HReE/2bHISaFGZnwfvIr16FXt1RU=
Subject key identifier: 19:86:08:61:12:C2:6A:67:3C:E3:3D:CD:48:DC:F1:CF:34:1B:5B:B2
Authority key identifier: 3E:8C:6C:C4:48:F9:63:5C:56:FF:22:B1:1C:D8:0C:1A:A9:C5:2D:4F
Certificate issuer: /CN=3e8c6cc448f9635c56ff22b11cd80c1aa9c52d4f
Certificate serial: 0197DC9BA455CCD2462B355E35A7BC74E115
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft
Manifest number: 0BCE
Signing time: Sat 05 Jul 2025 22:01:16 +0000
Manifest this update: Sat 05 Jul 2025 22:01:16 +0000
Manifest next update: Sun 06 Jul 2025 22:01:16 +0000
Files and hashes: 1: Ag4vdPGKqSYWGm9dLWjLCYFXITs.roa (hash: K8PordojpOIplsR6Jg7NEy3mCM9e/c8OLgPeQ2xQz6M=)
2: PoxsxEj5Y1xW_yKxHNgMGqnFLU8.crl (hash: +eFtpeE8o7kqeGc+pzZK2zCBZya39bpYZ1t6+0UUoZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Jul 2025 16:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:dc:9b:a4:55:cc:d2:46:2b:35:5e:35:a7:bc:74:e1:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e8c6cc448f9635c56ff22b11cd80c1aa9c52d4f
Validity
Not Before: Jul 5 22:01:16 2025 GMT
Not After : Jul 6 22:01:16 2025 GMT
Subject: CN=1986086112c26a673ce33dcd48dcf1cf341b5bb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:8f:53:4e:df:cc:46:c9:5d:46:04:b3:42:d7:
d0:30:23:54:80:b3:78:f1:91:45:63:ec:40:c8:e1:
b1:10:2e:e3:c7:ae:2f:98:85:c6:7a:92:ee:68:76:
70:ac:89:da:d5:11:fa:f1:4c:31:91:4b:2f:22:15:
b0:b0:ff:0a:f0:75:d4:f6:a1:0f:a7:74:e1:08:95:
31:37:54:77:d3:0a:8f:18:44:83:00:6a:08:00:2a:
d2:49:11:c6:37:fe:cf:c7:0b:6f:c0:56:f6:0c:e4:
8b:1c:25:ef:4e:ec:22:13:c0:64:4a:2d:fb:db:a0:
a3:80:54:30:20:f3:47:3b:80:86:6e:e3:0f:d5:39:
c3:30:b0:71:88:20:4e:b6:5f:b8:3c:d7:6f:82:a7:
41:ae:8a:45:f1:56:22:c7:ed:0d:8d:91:18:e1:32:
87:7e:1c:1e:65:34:0a:8c:7d:0c:cb:cc:7d:fc:e6:
66:5a:d9:23:16:7a:4b:d5:78:27:e9:eb:0a:33:c0:
eb:85:8c:2a:c5:01:ad:d3:02:ae:bb:9c:f6:b6:1e:
9a:c3:21:09:02:d7:07:c5:41:ef:fa:32:01:3b:37:
04:34:c3:1e:34:61:72:ce:de:04:e6:f0:a3:3e:2a:
42:39:42:51:4f:c3:83:fa:4f:a0:74:1a:3a:02:88:
45:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:86:08:61:12:C2:6A:67:3C:E3:3D:CD:48:DC:F1:CF:34:1B:5B:B2
X509v3 Authority Key Identifier:
keyid:3E:8C:6C:C4:48:F9:63:5C:56:FF:22:B1:1C:D8:0C:1A:A9:C5:2D:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:8b:85:f8:3c:2b:54:f9:f1:ad:47:d8:76:ec:7d:ab:95:4e:
a6:2f:81:8a:f0:83:82:f8:22:2c:6d:db:a5:db:8c:d1:bb:51:
14:c0:d7:fd:fd:7d:8d:0d:64:b7:d7:6b:ab:dd:68:22:e1:4e:
7f:37:14:be:eb:5a:18:00:33:b2:23:d2:73:a1:21:d8:06:e3:
84:5b:d0:0f:17:7a:f5:e6:4b:62:4e:67:4c:7b:4d:20:3a:c3:
f6:5f:ca:e9:cf:b8:c3:58:55:36:12:8f:03:6e:5d:f1:74:60:
9c:34:4a:ce:5e:84:83:bf:37:4d:79:1c:65:73:d3:2d:8b:5e:
59:be:bf:b9:44:5c:7b:94:79:6c:21:a1:bc:d1:b5:67:46:0d:
b7:32:16:fb:ad:96:3a:c3:96:b0:67:93:21:9d:3b:27:a0:3b:
9d:8d:48:99:96:ca:23:14:99:bf:5c:d3:05:3d:50:91:c0:8e:
37:21:cf:60:69:51:c4:24:c2:7e:17:89:25:80:bc:af:29:dc:
f9:ab:6a:d1:41:64:ca:ff:ad:fc:75:71:79:25:3d:b2:6f:37:
16:94:a8:92:a0:93:85:ec:b1:b6:e2:d2:14:31:7d:1d:61:a5:
da:a0:9a:ac:22:50:0c:a1:38:1d:6a:e8:f3:2d:53:b3:c6:57:
42:ab:d8:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 6 00:32:08 2025 by rpki-client