Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/9a4238-7d74-4edf-a4b1-25ed75046b01/1/POsgUJhzLLkIgjBF79XXQCUMayc.mft
File: POsgUJhzLLkIgjBF79XXQCUMayc.mft (raw, json)
Hash identifier: rUB3z8fMxX/qzdPeNaE8chJS7SxUOMfMwXP6MU2znrg=
Subject key identifier: 84:0C:4E:D6:F1:36:C0:D2:76:F5:DB:A5:34:5C:31:9B:A6:D4:AA:81
Authority key identifier: 3C:EB:20:50:98:73:2C:B9:08:82:30:45:EF:D5:D7:40:25:0C:6B:27
Certificate issuer: /CN=3ceb205098732cb908823045efd5d740250c6b27
Certificate serial: 0199FC587A9F2BB0B2BA7038E96E1159C2B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/POsgUJhzLLkIgjBF79XXQCUMayc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/9a4238-7d74-4edf-a4b1-25ed75046b01/1/POsgUJhzLLkIgjBF79XXQCUMayc.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 12:01:20 +0000
Manifest this update: Sun 19 Oct 2025 12:01:20 +0000
Manifest next update: Mon 20 Oct 2025 12:01:20 +0000
Files and hashes: 1: POsgUJhzLLkIgjBF79XXQCUMayc.crl (hash: jBgVXu0MFfXeJTdT6gCVC5Xl+TDefGzHQJY4Wr9lR3I=)
2: glhaGjYvz9mGirczYGxMS81rRfI.roa (hash: cPBvD492Ea2g7PNrZgsOnSXH4CPshMieJYjaq9P+dD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/9a4238-7d74-4edf-a4b1-25ed75046b01/1/POsgUJhzLLkIgjBF79XXQCUMayc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/9a4238-7d74-4edf-a4b1-25ed75046b01/1/POsgUJhzLLkIgjBF79XXQCUMayc.mft
rsync://rpki.ripe.net/repository/DEFAULT/POsgUJhzLLkIgjBF79XXQCUMayc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:7a:9f:2b:b0:b2:ba:70:38:e9:6e:11:59:c2:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ceb205098732cb908823045efd5d740250c6b27
Validity
Not Before: Oct 19 12:01:20 2025 GMT
Not After : Oct 20 12:01:20 2025 GMT
Subject: CN=840c4ed6f136c0d276f5dba5345c319ba6d4aa81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7f:8a:c4:ad:28:bf:42:f2:0d:13:18:08:de:
e7:47:ae:5f:fb:bb:22:aa:a4:fb:84:7f:73:e8:ad:
48:b2:67:25:c0:1d:5a:29:cc:45:18:86:73:b0:bc:
09:d9:18:9e:49:85:dc:e4:f8:75:2f:0f:81:ca:e9:
9c:80:1e:27:9a:6c:ba:30:8b:87:f7:bb:97:3a:98:
14:86:23:4f:ab:62:c7:cd:2c:d5:8f:f4:b4:8e:ea:
a8:89:06:29:66:81:12:cd:39:c2:f8:e7:0e:bd:0b:
21:35:09:a2:bb:95:95:0a:7f:5f:df:33:b4:d9:e9:
e6:bd:f6:cd:d8:41:a3:22:cc:47:24:b6:3e:a2:88:
85:3c:7d:33:fb:ac:5d:55:39:db:22:6d:9e:c9:96:
f3:3f:89:a8:8b:8a:f2:3f:2f:ce:38:de:1b:de:07:
d3:60:a8:b3:5f:d9:11:ea:3e:b4:ad:9d:4b:21:a2:
15:2d:cf:b5:bb:d1:82:f1:75:e6:b0:e3:93:5f:a0:
68:11:04:a5:c3:3a:b9:87:4a:41:ae:cc:28:0c:26:
e5:09:27:36:f7:fd:76:24:9c:5f:a1:a2:45:50:67:
ec:44:73:38:a9:a7:96:bf:91:b9:20:18:69:1c:5f:
c3:df:c5:5b:c8:bc:da:2b:37:70:99:5d:8e:15:ea:
6c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:0C:4E:D6:F1:36:C0:D2:76:F5:DB:A5:34:5C:31:9B:A6:D4:AA:81
X509v3 Authority Key Identifier:
keyid:3C:EB:20:50:98:73:2C:B9:08:82:30:45:EF:D5:D7:40:25:0C:6B:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/POsgUJhzLLkIgjBF79XXQCUMayc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9a4238-7d74-4edf-a4b1-25ed75046b01/1/POsgUJhzLLkIgjBF79XXQCUMayc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9a4238-7d74-4edf-a4b1-25ed75046b01/1/POsgUJhzLLkIgjBF79XXQCUMayc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:c6:0b:8a:d3:9d:9d:6d:13:5b:4f:37:2f:a6:2d:50:97:b1:
4a:0e:bd:c2:12:13:62:55:8b:d5:8c:79:c9:27:39:96:a0:ac:
3c:82:3c:bd:61:3d:1a:70:b7:da:87:fa:79:c7:8b:08:94:f5:
c1:b7:12:e9:da:da:e9:e9:4d:08:d4:31:2c:9e:20:cc:4a:67:
b3:47:51:2e:01:2d:db:6e:89:01:3c:93:33:86:cc:4e:61:4c:
66:65:e1:15:e3:bd:0f:60:7f:79:d5:9d:68:77:1c:88:df:bc:
14:48:f4:bd:19:c7:3d:72:29:e2:40:38:86:93:05:ab:64:91:
3e:6d:26:3d:d0:8c:17:ce:62:37:a3:35:94:88:12:bb:bf:62:
5e:ee:98:ee:1d:02:46:75:ca:50:fe:7f:89:7e:12:a1:ed:bd:
7e:61:10:7f:37:48:d0:c4:81:d3:08:30:4f:ba:fb:b1:52:64:
32:4a:a2:f5:3d:aa:d6:20:a8:99:4f:48:b3:47:45:36:9b:5d:
df:9e:80:20:95:1f:f7:f1:2d:dd:ff:a4:ff:94:a6:40:b4:5d:
a7:05:0d:9e:a7:01:0e:2a:b3:be:d7:3e:d3:cb:5b:ff:89:b8:
a1:68:9d:23:ae:62:cb:1e:49:94:7f:ef:03:42:54:ee:4f:a9:
8b:1c:67:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:32:08 2025 by rpki-client