Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft
File: po_5Ip79jRK0Jz80b4xkVOpYfsw.mft (raw, json)
Hash identifier: 2KLHtXHdhh5WC9mO6PbYD/OZMZtrc6YtEmtnSD9ThQg=
Subject key identifier: 45:A1:89:DF:45:46:AE:B8:A7:C5:A3:9A:DB:14:80:1B:14:AE:AF:F7
Authority key identifier: A6:8F:F9:22:9E:FD:8D:12:B4:27:3F:34:6F:8C:64:54:EA:58:7E:CC
Certificate issuer: /CN=a68ff9229efd8d12b4273f346f8c6454ea587ecc
Certificate serial: 0197C726200458F015ADE7E1980C8B0407F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/po_5Ip79jRK0Jz80b4xkVOpYfsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft
Manifest number: 15C1
Signing time: Tue 01 Jul 2025 18:00:53 +0000
Manifest this update: Tue 01 Jul 2025 18:00:53 +0000
Manifest next update: Wed 02 Jul 2025 18:00:53 +0000
Files and hashes: 1: NvB3sbtKygBuV_bHy4ubiaP6jUc.roa (hash: QHR99wgFE0npSuCrsPzML6fCQB1JMr/5JCdaknSW7aY=)
2: mkpPO0iUB-Trjc2yot_MhVuYzeI.roa (hash: bl4jbnOxpRldBgzWUbIAjtNRBkTTSgb/YiMXDC223qY=)
3: po_5Ip79jRK0Jz80b4xkVOpYfsw.crl (hash: bkOBS1wxMrPkO8NUIc32j2eCZSq++B9EGhATUGFJz00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/po_5Ip79jRK0Jz80b4xkVOpYfsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 16:57:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c7:26:20:04:58:f0:15:ad:e7:e1:98:0c:8b:04:07:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a68ff9229efd8d12b4273f346f8c6454ea587ecc
Validity
Not Before: Jul 1 18:00:53 2025 GMT
Not After : Jul 2 18:00:53 2025 GMT
Subject: CN=45a189df4546aeb8a7c5a39adb14801b14aeaff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4c:ed:04:2c:59:7c:b3:99:88:ac:9e:d4:91:
81:34:42:48:32:29:a7:bb:98:0d:6e:4f:0c:c4:fc:
7d:da:8d:d9:29:db:ed:2d:5a:57:06:3c:c1:f3:57:
48:48:d5:50:39:c4:e6:3a:10:10:2f:4b:b3:74:0c:
ee:d9:03:b8:50:90:24:e3:d9:e5:ff:9c:ea:74:5a:
38:df:dd:b2:45:fb:32:d7:c2:ab:a8:ae:14:44:a0:
5b:16:1a:c2:37:47:af:6a:cb:fb:f8:6a:47:bc:24:
ab:b1:5e:b7:fa:dc:15:d9:aa:12:0f:44:17:9b:30:
9a:97:d1:7b:2d:44:94:37:24:39:0f:ab:19:c5:bb:
9c:2d:86:e4:64:dd:e4:5a:f1:82:a5:09:73:f3:4a:
7a:ea:05:e3:ba:06:5a:bd:b1:ed:d5:bf:5a:d7:cd:
4b:73:04:a6:d4:3d:3b:3d:12:be:b2:1f:03:b4:64:
14:8b:e4:00:bc:38:d3:30:1c:6f:69:1b:d3:56:4d:
38:f3:04:ad:1f:50:95:88:f3:f7:e7:0b:47:2d:75:
31:dd:c6:3f:fa:a2:be:01:4d:e1:0b:27:78:e4:e7:
41:d8:6a:e3:96:ea:1a:0b:1e:62:1b:3b:70:c1:8a:
09:00:8d:88:bd:7d:fb:6e:4e:da:20:b6:81:7c:55:
5f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:A1:89:DF:45:46:AE:B8:A7:C5:A3:9A:DB:14:80:1B:14:AE:AF:F7
X509v3 Authority Key Identifier:
keyid:A6:8F:F9:22:9E:FD:8D:12:B4:27:3F:34:6F:8C:64:54:EA:58:7E:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/po_5Ip79jRK0Jz80b4xkVOpYfsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:5c:e5:b7:8c:ea:86:1d:73:e1:86:b0:76:4e:d4:fe:42:a4:
3e:28:81:0c:1f:28:61:13:54:d1:7c:74:1f:a3:26:5b:42:ce:
43:f2:99:5c:ad:dc:ae:03:a6:6b:7d:17:da:23:6e:07:8f:27:
ec:b4:34:2c:f8:7c:3e:7e:44:b5:aa:b5:10:c1:b8:31:db:1f:
c0:12:18:b4:a9:b0:24:36:dd:98:0c:43:60:22:4d:35:b5:34:
3c:80:7f:1b:79:31:2d:c3:36:7c:fb:62:0c:f9:94:17:ef:a9:
06:c3:01:10:45:e2:81:87:db:dc:c5:67:b6:eb:dc:ae:f4:5f:
e8:df:62:67:6f:28:13:e1:bd:df:8e:5c:c9:09:2d:a3:42:67:
4a:76:55:b5:7c:09:e6:80:48:96:b2:a4:73:6e:be:40:e1:41:
02:72:de:ae:6c:16:ec:fc:c4:e3:e3:6e:af:10:04:e8:17:d6:
21:5d:71:c8:0a:ba:9e:fe:5d:4e:7c:30:0f:91:0c:06:e3:b2:
53:f9:02:93:ac:06:c0:c1:d7:1f:f0:db:e8:08:47:a6:ae:f8:
c6:e6:a6:68:7e:1a:20:aa:55:d1:d3:79:bb:f4:ac:a5:c3:21:
16:e6:49:c4:0a:45:ba:04:0c:69:49:2b:61:4b:da:18:4a:8d:
5b:71:2e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 20:25:58 2025 by rpki-client