Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.mft
File: POdWa7WxnnAPSOJeB1BsLyIt84Q.mft (raw, json)
Hash identifier: 97ofswvb4eOM3Hq6I0Bn+aV+kGNRrkDlx8y44aSosYM=
Subject key identifier: 73:55:84:D2:D1:35:09:86:06:18:04:B4:A7:B2:A6:2E:0F:4F:EB:E7
Authority key identifier: 3C:E7:56:6B:B5:B1:9E:70:0F:48:E2:5E:07:50:6C:2F:22:2D:F3:84
Certificate issuer: /CN=3ce7566bb5b19e700f48e25e07506c2f222df384
Certificate serial: 0199FAD85D0F6492CF36660138E849AC3C71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/POdWa7WxnnAPSOJeB1BsLyIt84Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.mft
Manifest number: 0F3D
Signing time: Sun 19 Oct 2025 05:01:47 +0000
Manifest this update: Sun 19 Oct 2025 05:01:47 +0000
Manifest next update: Mon 20 Oct 2025 05:01:47 +0000
Files and hashes: 1: LnOKhHlXHgf9Bc7By8RdD87CENc.roa (hash: SBq8tD3nAGx2l0m6YmZ4sb5xKbi6vLmOJJ/u4lHDzyQ=)
2: MtOebLSNSemLqQH1Qdt6lKbCdQU.roa (hash: p2mZ95DJo3RCkhalV7XQwJkDag3/z20BD18MDcr1SRU=)
3: POdWa7WxnnAPSOJeB1BsLyIt84Q.crl (hash: YC9uYlw/PJozlVUgurUiOpQt8Crtlami2xnpUMD6+y4=)
4: qQRcQNcowo3kCSFmxOhnd54Y8jY.roa (hash: raMUt5t5W5lynqzBwroXOMjtxQgLkjALLNPiIADIJEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/POdWa7WxnnAPSOJeB1BsLyIt84Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:5d:0f:64:92:cf:36:66:01:38:e8:49:ac:3c:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ce7566bb5b19e700f48e25e07506c2f222df384
Validity
Not Before: Oct 19 05:01:47 2025 GMT
Not After : Oct 20 05:01:47 2025 GMT
Subject: CN=735584d2d1350986061804b4a7b2a62e0f4febe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f3:b1:dd:77:4d:ab:bf:f8:18:30:85:8f:3e:
49:cb:b5:a7:35:17:e6:75:ad:39:0d:b9:bc:d8:e7:
41:d7:fa:51:c4:3d:83:ed:9b:45:39:bd:68:00:c9:
1b:87:7d:03:8c:fb:4d:e3:17:72:2f:d7:8e:91:ea:
6c:b9:74:ea:2f:48:6c:72:9b:ee:54:25:39:ed:15:
a0:a9:d5:fb:d5:e1:d6:d9:af:c3:54:ac:e7:c1:de:
cc:b2:7f:ea:82:99:a5:e0:8d:68:15:94:7d:ad:bf:
04:70:71:7b:60:fe:f9:22:a1:84:9f:ad:13:f0:aa:
01:6a:b9:2f:3d:2b:4a:7a:06:c4:c2:58:f0:65:0d:
ac:2d:ff:c1:1e:4d:fd:f1:b0:ba:5a:02:ed:df:ff:
32:be:5b:f0:4d:d8:8c:8e:77:5b:1d:4f:1f:6a:cf:
00:c6:bb:23:d3:97:8a:0c:37:07:6c:6f:98:6c:c2:
7c:36:2f:53:ab:ea:a7:84:e3:f3:a4:af:30:da:3e:
13:ef:6c:2b:50:b7:f5:26:bf:7d:c0:51:32:67:5a:
bd:16:fa:20:77:18:9e:2a:26:a7:d1:e5:78:c2:70:
15:82:88:63:f9:9e:a2:1c:db:4f:11:27:ea:85:0e:
76:20:aa:27:8f:ce:9e:dd:65:f9:7c:fb:29:f4:ca:
af:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:55:84:D2:D1:35:09:86:06:18:04:B4:A7:B2:A6:2E:0F:4F:EB:E7
X509v3 Authority Key Identifier:
keyid:3C:E7:56:6B:B5:B1:9E:70:0F:48:E2:5E:07:50:6C:2F:22:2D:F3:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/POdWa7WxnnAPSOJeB1BsLyIt84Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:a9:72:7b:35:0b:19:15:d2:09:bb:29:37:ea:62:39:78:a5:
df:19:13:53:ae:e1:33:2c:56:89:d9:40:e6:4a:b6:a5:b8:54:
07:23:2d:60:c8:65:bd:03:ce:10:87:0e:80:36:92:9c:d3:c3:
63:c1:29:7a:35:07:9b:4f:ed:90:3c:4d:eb:da:83:53:b9:5b:
64:80:23:a1:7b:c9:fd:9b:00:e2:c6:c4:05:d7:d3:d1:e4:e8:
f1:d0:3f:f0:03:71:3c:70:92:a2:ac:5d:94:55:ce:ad:cd:50:
7e:81:fc:e7:0a:d7:65:f3:48:1a:df:30:1f:d4:42:5b:e4:1d:
e9:9e:e1:e4:00:1c:72:d3:52:5f:07:72:50:4d:a5:de:5a:90:
61:18:86:71:12:47:8f:d6:45:8b:bc:1b:cc:83:28:6a:28:98:
95:f9:bf:ed:1f:d1:69:f4:66:7b:84:ca:2e:6c:7a:2b:13:7f:
8c:9c:de:05:30:75:67:90:fe:48:47:08:89:31:c6:92:6f:3d:
da:40:a5:6f:f6:72:95:d4:06:94:66:76:38:66:a7:55:92:fa:
60:98:e0:01:e3:b6:87:50:c9:60:2b:b7:30:e8:fc:44:64:4f:
26:60:a6:30:31:94:7b:c9:3a:a8:26:1e:18:9d:16:ff:11:2b:
52:aa:0b:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:10:25 2025 by rpki-client