Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/9a4238-7d74-4edf-a4b1-25ed75046b01/1/POsgUJhzLLkIgjBF79XXQCUMayc.mft
File: POsgUJhzLLkIgjBF79XXQCUMayc.mft (raw, json)
Hash identifier: HSlCnoV1ERYH81m4UuiCwBoTasj5zMQg8HveSPbryZA=
Subject key identifier: 17:54:F9:C8:87:95:DD:44:28:00:90:AD:D0:46:D6:5A:1D:65:60:6B
Authority key identifier: 3C:EB:20:50:98:73:2C:B9:08:82:30:45:EF:D5:D7:40:25:0C:6B:27
Certificate issuer: /CN=3ceb205098732cb908823045efd5d740250c6b27
Certificate serial: 0198D4E06EC8649F9F29444F8083506D7127
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/POsgUJhzLLkIgjBF79XXQCUMayc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/9a4238-7d74-4edf-a4b1-25ed75046b01/1/POsgUJhzLLkIgjBF79XXQCUMayc.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 03:02:14 +0000
Manifest this update: Sat 23 Aug 2025 03:02:14 +0000
Manifest next update: Sun 24 Aug 2025 03:02:14 +0000
Files and hashes: 1: POsgUJhzLLkIgjBF79XXQCUMayc.crl (hash: 4S8fCM3O2rROZik5ppIMzIEyGi36RoYM196TzD37z0o=)
2: glhaGjYvz9mGirczYGxMS81rRfI.roa (hash: cPBvD492Ea2g7PNrZgsOnSXH4CPshMieJYjaq9P+dD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/9a4238-7d74-4edf-a4b1-25ed75046b01/1/POsgUJhzLLkIgjBF79XXQCUMayc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/9a4238-7d74-4edf-a4b1-25ed75046b01/1/POsgUJhzLLkIgjBF79XXQCUMayc.mft
rsync://rpki.ripe.net/repository/DEFAULT/POsgUJhzLLkIgjBF79XXQCUMayc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:6e:c8:64:9f:9f:29:44:4f:80:83:50:6d:71:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ceb205098732cb908823045efd5d740250c6b27
Validity
Not Before: Aug 23 03:02:14 2025 GMT
Not After : Aug 24 03:02:14 2025 GMT
Subject: CN=1754f9c88795dd44280090add046d65a1d65606b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6b:4f:88:fa:34:2a:4c:09:88:c5:15:14:d7:
21:78:40:38:32:ab:c9:8a:59:72:94:3a:19:ec:58:
fd:27:e1:ff:e0:68:8f:f4:bb:20:b3:c9:71:8a:08:
f1:3d:63:90:2b:e6:68:78:05:78:25:5b:b0:d2:f2:
40:9e:c0:c2:d0:e5:9e:2a:96:0e:54:ce:4d:77:c0:
97:55:8c:0d:9f:de:5f:4a:0d:e8:33:07:a2:35:50:
2f:dd:4e:10:c6:55:24:19:a2:e4:3e:25:ef:62:b6:
2c:39:74:f5:13:d3:72:d9:66:be:98:d6:15:b7:a3:
c3:7e:4d:98:29:af:e9:46:58:d8:0f:f3:01:61:e3:
7b:76:a9:8b:ee:7b:1c:db:8a:0d:5c:9e:61:a3:0b:
18:ed:df:17:67:1f:06:0c:f4:c0:00:e5:1d:8a:4c:
bc:b9:07:a5:b8:15:ed:59:4d:7f:b5:8f:0e:5f:73:
65:b7:c4:6b:f0:b0:5e:f2:0c:3b:52:ef:cb:d5:6d:
87:b2:91:34:cf:f8:2b:02:db:22:1f:72:24:aa:b0:
af:12:2f:14:2d:ba:6c:4b:b8:26:fc:d8:c5:59:69:
5b:00:cc:69:07:0d:36:9d:54:99:38:2d:73:ab:7b:
ee:1f:a5:6f:01:51:8a:f9:0c:e1:36:5e:2f:52:05:
78:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:54:F9:C8:87:95:DD:44:28:00:90:AD:D0:46:D6:5A:1D:65:60:6B
X509v3 Authority Key Identifier:
keyid:3C:EB:20:50:98:73:2C:B9:08:82:30:45:EF:D5:D7:40:25:0C:6B:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/POsgUJhzLLkIgjBF79XXQCUMayc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9a4238-7d74-4edf-a4b1-25ed75046b01/1/POsgUJhzLLkIgjBF79XXQCUMayc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9a4238-7d74-4edf-a4b1-25ed75046b01/1/POsgUJhzLLkIgjBF79XXQCUMayc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:39:75:71:cb:7c:b8:af:cf:9d:10:3a:ed:44:79:b0:0c:28:
9a:c2:22:57:09:54:b2:10:81:e7:17:82:78:99:9e:e9:d4:5d:
09:a0:ca:b4:c5:65:f3:f1:f7:55:c4:1d:58:bf:ce:d8:63:f6:
72:93:27:02:fc:e6:2e:71:74:c4:d2:60:7b:63:77:49:98:c4:
e1:ab:2f:4a:9a:c5:cb:3e:3b:98:06:24:63:fa:17:b6:af:65:
07:1a:8a:94:07:30:53:d9:cc:5b:29:6f:31:b8:f3:f5:60:71:
bf:67:9c:de:0b:e4:a7:66:e3:4c:34:a2:6c:3b:bb:f2:1d:d7:
c1:86:ff:ec:5a:d0:cf:e3:c9:cd:6d:ea:cf:19:a6:82:10:e5:
ed:99:56:62:70:e3:8c:b2:f4:7e:65:a1:3b:17:89:dd:a6:5e:
7e:6f:65:55:52:3d:d8:6b:fe:4f:cc:60:c4:b9:6c:c2:cd:b2:
68:59:e1:a5:b8:94:1e:ac:f0:a3:78:32:2c:52:e5:c5:87:b1:
ac:86:ae:88:43:87:93:56:1c:c0:e4:46:e8:cb:26:d9:20:8c:
57:34:04:f9:f9:8b:04:88:33:b4:b2:02:87:49:0e:69:09:60:
06:fe:b2:b2:4a:ae:26:f6:1c:0c:20:92:44:80:a0:4d:24:3a:
cf:d4:34:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4G7IZJ+fKURPgINQbXEnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjZWIyMDUwOTg3MzJjYjkwODgyMzA0NWVmZDVkNzQwMjUw
YzZiMjcwHhcNMjUwODIzMDMwMjE0WhcNMjUwODI0MDMwMjE0WjAzMTEwLwYDVQQD
EygxNzU0ZjljODg3OTVkZDQ0MjgwMDkwYWRkMDQ2ZDY1YTFkNjU2MDZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGtPiPo0KkwJiMUVFNcheEA4MqvJ
illylDoZ7Fj9J+H/4GiP9Lsgs8lxigjxPWOQK+ZoeAV4JVuw0vJAnsDC0OWeKpYO
VM5Nd8CXVYwNn95fSg3oMweiNVAv3U4QxlUkGaLkPiXvYrYsOXT1E9Ny2Wa+mNYV
t6PDfk2YKa/pRljYD/MBYeN7dqmL7nsc24oNXJ5howsY7d8XZx8GDPTAAOUdiky8
uQeluBXtWU1/tY8OX3Nlt8Rr8LBe8gw7Uu/L1W2HspE0z/grAtsiH3IkqrCvEi8U
LbpsS7gm/NjFWWlbAMxpBw02nVSZOC1zq3vuH6VvAVGK+QzhNl4vUgV4kQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBdU+ciHld1EKACQrdBG1lodZWBrMB8GA1UdIwQY
MBaAFDzrIFCYcyy5CIIwRe/V10AlDGsnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUE9zZ1VKaHpMTGtJZ2pCRjc5WFhRQ1VNYXljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC85YTQyMzgtN2Q3NC00ZWRmLWE0YjEt
MjVlZDc1MDQ2YjAxLzEvUE9zZ1VKaHpMTGtJZ2pCRjc5WFhRQ1VNYXljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC85YTQyMzgtN2Q3NC00ZWRmLWE0YjEtMjVlZDc1MDQ2YjAx
LzEvUE9zZ1VKaHpMTGtJZ2pCRjc5WFhRQ1VNYXljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnDl1cct8
uK/PnRA67UR5sAwomsIiVwlUshCB5xeCeJme6dRdCaDKtMVl8/H3VcQdWL/O2GP2
cpMnAvzmLnF0xNJge2N3SZjE4asvSprFyz47mAYkY/oXtq9lBxqKlAcwU9nMWylv
Mbjz9WBxv2ec3gvkp2bjTDSibDu78h3XwYb/7FrQz+PJzW3qzxmmghDl7ZlWYnDj
jLL0fmWhOxeJ3aZefm9lVVI92Gv+T8xgxLlsws2yaFnhpbiUHqzwo3gyLFLlxYex
rIauiEOHk1YcwORG6Msm2SCMVzQE+fmLBIgztLICh0kOaQlgBv6yskquJvYcDCCS
RICgTSQ6z9Q07Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:10:02 2025 by rpki-client