Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/19862c-f7d4-4f4f-a8dd-1ebc50dced49/1/poXxkUzrGSIcVjGTAn1FNFAzrV8.mft
File: poXxkUzrGSIcVjGTAn1FNFAzrV8.mft (raw, json)
Hash identifier: PuFpRBhHVp9IzKOEQ7TzgNY+PRaQvfNh3UUuPMOcQLs=
Subject key identifier: E0:C6:14:45:11:21:79:FC:A9:BA:08:B6:F8:DF:70:CA:59:F9:AD:7F
Authority key identifier: A6:85:F1:91:4C:EB:19:22:1C:56:31:93:02:7D:45:34:50:33:AD:5F
Certificate issuer: /CN=a685f1914ceb19221c563193027d45345033ad5f
Certificate serial: 0198D6986449F7FC78E61F6FBD072789E2A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/poXxkUzrGSIcVjGTAn1FNFAzrV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/19862c-f7d4-4f4f-a8dd-1ebc50dced49/1/poXxkUzrGSIcVjGTAn1FNFAzrV8.mft
Manifest number: 028D
Signing time: Sat 23 Aug 2025 11:02:48 +0000
Manifest this update: Sat 23 Aug 2025 11:02:48 +0000
Manifest next update: Sun 24 Aug 2025 11:02:48 +0000
Files and hashes: 1: TCiOUS2lOe-d-inEeAtaNF22X3k.roa (hash: H5jxU1+mIYAsjzlbjYeTvSFiOWLCAxpo86ZAHMuzEhY=)
2: poXxkUzrGSIcVjGTAn1FNFAzrV8.crl (hash: K9SsQLbt3YaPFb6U6gEDdisyCXlphUMgJ7DC1Y8r6Eo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/19862c-f7d4-4f4f-a8dd-1ebc50dced49/1/poXxkUzrGSIcVjGTAn1FNFAzrV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/19862c-f7d4-4f4f-a8dd-1ebc50dced49/1/poXxkUzrGSIcVjGTAn1FNFAzrV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/poXxkUzrGSIcVjGTAn1FNFAzrV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:64:49:f7:fc:78:e6:1f:6f:bd:07:27:89:e2:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a685f1914ceb19221c563193027d45345033ad5f
Validity
Not Before: Aug 23 11:02:48 2025 GMT
Not After : Aug 24 11:02:48 2025 GMT
Subject: CN=e0c61445112179fca9ba08b6f8df70ca59f9ad7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cc:31:18:3a:e0:e8:15:cf:d0:8a:57:61:00:
8c:d4:45:1d:de:35:66:e0:1e:e4:9b:a8:73:88:77:
19:96:01:8a:b5:92:65:d4:31:26:d3:23:89:15:42:
59:5d:b6:7a:c9:1a:30:ff:6a:ba:ec:89:df:f9:0f:
c8:a6:b9:7c:85:7a:66:c7:3a:f2:dc:51:e4:9a:98:
aa:5e:ff:94:59:d3:1d:c7:bc:a5:30:ec:c7:50:73:
86:c5:47:67:56:25:81:04:e8:53:de:c1:6f:32:53:
e5:c3:bf:d1:68:57:74:9e:cc:7a:4c:ac:35:11:fb:
cd:92:f6:a0:c4:ea:1b:4e:af:de:22:c3:1b:48:6e:
6b:85:56:c9:e5:35:db:0b:c4:3c:d2:0f:ee:40:8e:
e0:34:bd:8c:39:6f:7d:88:cf:63:a8:b7:9c:a6:a4:
89:91:e3:f2:4e:62:7b:0c:2b:32:13:c1:b4:29:8a:
3a:fa:f0:99:a6:8a:a8:e5:0a:13:56:6c:0e:1f:44:
0e:f7:c0:0b:4b:34:e5:9b:0b:fb:77:b7:a2:69:97:
5a:92:0b:40:bb:23:0d:37:44:e5:68:74:d7:9e:68:
02:6f:03:c6:34:fe:24:d8:08:56:81:e0:25:8d:2d:
b0:fa:6a:24:a2:6b:19:5f:62:7f:52:db:3f:e1:d1:
99:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:C6:14:45:11:21:79:FC:A9:BA:08:B6:F8:DF:70:CA:59:F9:AD:7F
X509v3 Authority Key Identifier:
keyid:A6:85:F1:91:4C:EB:19:22:1C:56:31:93:02:7D:45:34:50:33:AD:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/poXxkUzrGSIcVjGTAn1FNFAzrV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/19862c-f7d4-4f4f-a8dd-1ebc50dced49/1/poXxkUzrGSIcVjGTAn1FNFAzrV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/19862c-f7d4-4f4f-a8dd-1ebc50dced49/1/poXxkUzrGSIcVjGTAn1FNFAzrV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:86:18:49:53:d3:63:4a:7a:09:fe:c3:94:c7:27:d1:63:e0:
55:7e:5c:e7:3e:af:11:b4:28:1b:cb:9a:e3:28:76:19:b9:4a:
de:dd:8b:0f:f9:85:56:01:8e:1b:a1:93:83:99:66:68:8d:d6:
2b:01:be:bb:41:92:f0:56:03:03:91:75:99:04:2e:0c:2e:3d:
c9:58:b1:d2:82:3e:1a:b1:35:e1:a2:91:0e:aa:b0:5a:25:22:
e3:3e:61:5e:0f:cc:8c:a2:8e:2a:f6:e6:05:65:c2:5e:ef:a9:
70:f4:90:f6:1d:de:2e:7f:4e:db:01:e1:64:de:e4:0f:a7:32:
30:54:44:28:8c:fa:65:6b:cb:09:cf:a1:7e:00:d2:7f:d0:e0:
57:66:e6:df:eb:59:58:8a:aa:1c:59:9b:00:64:ea:36:7a:4a:
f6:68:97:3f:20:1d:18:10:40:aa:aa:77:fb:38:b4:45:4f:94:
43:24:7f:91:2f:b5:2c:be:57:e4:00:2f:61:85:8b:ec:e3:3b:
43:66:59:2a:62:05:14:a1:27:3f:23:f0:1f:56:2e:ee:3f:ab:
99:d6:fe:18:08:73:e1:61:a5:cc:41:b8:be:f0:43:9d:67:60:
5c:8d:e7:3c:c8:0e:db:d3:3c:a7:f4:e1:6f:7f:7c:f9:b3:a9:
cb:ad:07:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWmGRJ9/x45h9vvQcnieKlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2ODVmMTkxNGNlYjE5MjIxYzU2MzE5MzAyN2Q0NTM0NTAz
M2FkNWYwHhcNMjUwODIzMTEwMjQ4WhcNMjUwODI0MTEwMjQ4WjAzMTEwLwYDVQQD
EyhlMGM2MTQ0NTExMjE3OWZjYTliYTA4YjZmOGRmNzBjYTU5ZjlhZDdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucwxGDrg6BXP0IpXYQCM1EUd3jVm
4B7km6hziHcZlgGKtZJl1DEm0yOJFUJZXbZ6yRow/2q67Inf+Q/Iprl8hXpmxzry
3FHkmpiqXv+UWdMdx7ylMOzHUHOGxUdnViWBBOhT3sFvMlPlw7/RaFd0nsx6TKw1
EfvNkvagxOobTq/eIsMbSG5rhVbJ5TXbC8Q80g/uQI7gNL2MOW99iM9jqLecpqSJ
kePyTmJ7DCsyE8G0KYo6+vCZpoqo5QoTVmwOH0QO98ALSzTlmwv7d7eiaZdakgtA
uyMNN0TlaHTXnmgCbwPGNP4k2AhWgeAljS2w+mokomsZX2J/Uts/4dGZCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFODGFEURIXn8qboItvjfcMpZ+a1/MB8GA1UdIwQY
MBaAFKaF8ZFM6xkiHFYxkwJ9RTRQM61fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcG9YeGtVenJHU0ljVmpHVEFuMUZORkF6clY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8xOTg2MmMtZjdkNC00ZjRmLWE4ZGQt
MWViYzUwZGNlZDQ5LzEvcG9YeGtVenJHU0ljVmpHVEFuMUZORkF6clY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi8xOTg2MmMtZjdkNC00ZjRmLWE4ZGQtMWViYzUwZGNlZDQ5
LzEvcG9YeGtVenJHU0ljVmpHVEFuMUZORkF6clY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbIYYSVPT
Y0p6Cf7DlMcn0WPgVX5c5z6vEbQoG8ua4yh2GblK3t2LD/mFVgGOG6GTg5lmaI3W
KwG+u0GS8FYDA5F1mQQuDC49yVix0oI+GrE14aKRDqqwWiUi4z5hXg/MjKKOKvbm
BWXCXu+pcPSQ9h3eLn9O2wHhZN7kD6cyMFREKIz6ZWvLCc+hfgDSf9DgV2bm3+tZ
WIqqHFmbAGTqNnpK9miXPyAdGBBAqqp3+zi0RU+UQyR/kS+1LL5X5AAvYYWL7OM7
Q2ZZKmIFFKEnPyPwH1Yu7j+rmdb+GAhz4WGlzEG4vvBDnWdgXI3nPMgO29M8p/Th
b398+bOpy60Hyg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:10:30 2025 by rpki-client