Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft
File: po_5Ip79jRK0Jz80b4xkVOpYfsw.mft (raw, json)
Hash identifier: rWKmbzjlcVVbgBm5t9yXEFkVdo2J4fBcnXtdJIQTNvo=
Subject key identifier: 84:22:1B:D4:D7:D3:0F:F2:91:85:EA:53:C9:10:2F:87:A2:40:EE:93
Authority key identifier: A6:8F:F9:22:9E:FD:8D:12:B4:27:3F:34:6F:8C:64:54:EA:58:7E:CC
Certificate issuer: /CN=a68ff9229efd8d12b4273f346f8c6454ea587ecc
Certificate serial: 0196BCA4D44728884593D8F2FF4563469B23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/po_5Ip79jRK0Jz80b4xkVOpYfsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft
Manifest number: 1537
Signing time: Sun 11 May 2025 00:00:40 +0000
Manifest this update: Sun 11 May 2025 00:00:40 +0000
Manifest next update: Mon 12 May 2025 00:00:40 +0000
Files and hashes: 1: NvB3sbtKygBuV_bHy4ubiaP6jUc.roa (hash: QHR99wgFE0npSuCrsPzML6fCQB1JMr/5JCdaknSW7aY=)
2: mkpPO0iUB-Trjc2yot_MhVuYzeI.roa (hash: bl4jbnOxpRldBgzWUbIAjtNRBkTTSgb/YiMXDC223qY=)
3: po_5Ip79jRK0Jz80b4xkVOpYfsw.crl (hash: Jd5nG+khW2bfpx5gWiAIytkXWnQjudUHTju/hzi4JkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/po_5Ip79jRK0Jz80b4xkVOpYfsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:a4:d4:47:28:88:45:93:d8:f2:ff:45:63:46:9b:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a68ff9229efd8d12b4273f346f8c6454ea587ecc
Validity
Not Before: May 11 00:00:40 2025 GMT
Not After : May 12 00:00:40 2025 GMT
Subject: CN=84221bd4d7d30ff29185ea53c9102f87a240ee93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a0:4e:f2:61:cd:d2:1c:57:a2:c6:1a:f5:10:
ac:b1:d7:62:92:f1:94:55:fc:c5:ef:70:3b:b4:72:
13:97:65:2c:61:49:bc:c5:de:c3:9a:18:94:b6:7a:
8a:52:01:88:4f:44:e0:3a:56:bc:ed:24:27:bc:e7:
ef:a6:7b:e8:a6:77:0b:ab:45:e2:91:74:e5:23:18:
5b:65:56:57:8b:20:47:d7:62:c6:18:63:bf:25:4e:
4f:08:a5:1b:5f:23:10:ea:a2:6e:46:bc:c6:24:2b:
18:25:e8:ac:67:c9:0f:41:1c:23:40:f1:91:ea:c3:
99:1b:37:c4:4e:c5:71:ce:26:c7:92:59:dd:a0:13:
c5:2e:7c:23:f1:ca:8a:8d:89:9b:1b:4b:39:2b:da:
da:7e:83:c6:6d:b8:d2:2a:81:a3:98:51:dd:44:f9:
0e:31:4b:ee:34:3d:ad:cf:75:47:da:52:4b:e1:14:
23:60:8e:76:e7:7f:1a:c5:c8:28:51:7d:18:c0:b7:
52:2f:06:d8:f7:d2:6a:ac:e8:0e:2c:ec:36:ff:54:
02:83:63:e3:94:a4:d3:56:a6:de:07:ea:42:d7:18:
5d:89:3f:b7:16:13:50:f1:b8:c2:df:c4:b5:af:2e:
c1:3d:45:c4:b9:ca:cd:65:bf:f2:a3:39:35:16:8a:
9f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:22:1B:D4:D7:D3:0F:F2:91:85:EA:53:C9:10:2F:87:A2:40:EE:93
X509v3 Authority Key Identifier:
keyid:A6:8F:F9:22:9E:FD:8D:12:B4:27:3F:34:6F:8C:64:54:EA:58:7E:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/po_5Ip79jRK0Jz80b4xkVOpYfsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:4e:94:b2:40:3a:17:61:2e:24:4e:bf:67:cc:00:e5:b5:63:
67:18:df:cb:2b:d2:64:99:a9:1f:ef:0e:03:31:b8:e3:35:19:
66:bf:4a:79:06:35:81:70:20:12:95:95:55:e7:a6:01:86:48:
5e:db:cb:8f:c9:07:a8:21:c4:14:fd:fe:90:03:e2:27:04:15:
73:ee:ef:b1:26:87:c4:a3:10:80:4a:4d:0f:e7:b9:04:df:35:
3a:7b:a0:7d:42:19:75:7a:c6:ca:30:77:f2:97:4e:67:db:6f:
c9:2c:a9:f1:2d:1d:b6:04:6a:91:cb:f8:9a:02:ea:b1:2b:97:
08:9d:e3:78:c8:14:67:57:0e:1d:91:13:82:3e:57:b2:30:31:
a5:68:3b:c1:99:a3:a2:ae:91:2f:e9:3e:08:e6:82:8f:c7:a0:
94:d6:0c:ee:d4:79:3e:b7:08:92:bc:47:16:ac:e2:8b:52:99:
80:d2:b4:70:19:ee:bc:62:78:fb:d9:07:28:86:f4:9a:58:64:
1c:c8:4b:c7:63:f9:bd:f1:e4:31:fd:3d:a3:07:8f:42:f4:43:
a7:50:9d:af:73:df:4b:34:0c:18:17:d4:54:16:a2:ce:1d:a2:
10:05:a0:3b:40:fa:60:e6:9f:fe:5f:c5:ac:de:80:f7:b3:df:
4c:60:2c:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:29:47 2025 by rpki-client