Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft
File: po_5Ip79jRK0Jz80b4xkVOpYfsw.mft (raw, json)
Hash identifier: jr3IYH5L31nMCcKnDGlEgww4y2BntLSnQJirjKH9sIM=
Subject key identifier: E5:5A:66:EC:5B:AE:37:EE:31:74:88:93:43:4F:8B:E2:0B:E3:4E:6A
Authority key identifier: A6:8F:F9:22:9E:FD:8D:12:B4:27:3F:34:6F:8C:64:54:EA:58:7E:CC
Certificate issuer: /CN=a68ff9229efd8d12b4273f346f8c6454ea587ecc
Certificate serial: 0198D5836823307685D64E287BB6932AB5F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/po_5Ip79jRK0Jz80b4xkVOpYfsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 06:00:15 +0000
Manifest this update: Sat 23 Aug 2025 06:00:15 +0000
Manifest next update: Sun 24 Aug 2025 06:00:15 +0000
Files and hashes: 1: NvB3sbtKygBuV_bHy4ubiaP6jUc.roa (hash: QHR99wgFE0npSuCrsPzML6fCQB1JMr/5JCdaknSW7aY=)
2: mkpPO0iUB-Trjc2yot_MhVuYzeI.roa (hash: bl4jbnOxpRldBgzWUbIAjtNRBkTTSgb/YiMXDC223qY=)
3: po_5Ip79jRK0Jz80b4xkVOpYfsw.crl (hash: VIlb+ePI7Xj3/2v8jLlRODMKkue2dtVbbmVLChRZFKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/po_5Ip79jRK0Jz80b4xkVOpYfsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:68:23:30:76:85:d6:4e:28:7b:b6:93:2a:b5:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a68ff9229efd8d12b4273f346f8c6454ea587ecc
Validity
Not Before: Aug 23 06:00:15 2025 GMT
Not After : Aug 24 06:00:15 2025 GMT
Subject: CN=e55a66ec5bae37ee31748893434f8be20be34e6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7c:b7:13:51:0d:dc:09:5a:59:2c:b2:4b:21:
07:d5:0a:c6:23:c7:49:ae:0b:28:09:a2:1a:95:e9:
67:fc:d8:fd:f2:b2:7a:aa:c9:9c:6e:f6:44:25:f5:
bd:12:f1:93:bc:8b:93:4b:a2:c3:86:cf:b7:2d:9a:
9b:3c:24:6f:aa:d6:ac:26:1c:75:75:b0:c6:d1:8a:
5d:66:27:0e:03:8f:37:d2:a2:eb:4a:08:9e:e6:5d:
9c:65:67:0a:aa:99:2d:9b:8d:0e:ea:d0:61:1d:13:
60:62:39:9b:d1:0e:0c:f5:2e:5c:41:b5:7c:e0:87:
0a:c1:75:36:1a:77:51:64:c0:eb:5e:e0:ef:6b:a4:
7d:8b:3d:33:72:80:50:0e:4f:08:da:b4:1a:07:7a:
d9:f3:d5:29:b8:3e:a6:47:b9:1e:b7:8a:2b:71:d4:
8d:6b:51:63:56:1f:7d:62:bb:cf:8c:b8:2e:2c:f2:
84:8f:12:75:48:37:dc:3b:59:4a:0e:b7:c4:bd:a5:
8f:ad:90:dc:24:fd:77:2e:12:3c:29:d8:0a:1c:3d:
7b:c4:b7:c7:c8:3c:a1:55:9f:87:37:6d:24:d4:68:
6e:f7:4a:ce:cc:04:d0:b7:f5:61:40:29:8c:2e:2c:
67:23:20:54:32:d0:0d:1e:4a:79:29:aa:20:91:84:
c4:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:5A:66:EC:5B:AE:37:EE:31:74:88:93:43:4F:8B:E2:0B:E3:4E:6A
X509v3 Authority Key Identifier:
keyid:A6:8F:F9:22:9E:FD:8D:12:B4:27:3F:34:6F:8C:64:54:EA:58:7E:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/po_5Ip79jRK0Jz80b4xkVOpYfsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:e1:11:9a:26:a5:9d:d0:4e:d8:f5:bf:c6:dd:e3:02:b3:88:
06:76:94:ff:e3:d3:a6:fc:72:31:38:56:75:0b:85:64:7d:db:
02:26:ac:aa:6d:81:b4:ad:d4:76:21:7f:1a:10:0a:4d:a2:df:
29:66:46:6a:70:eb:73:26:a4:f4:72:7f:b6:b6:e0:26:48:ac:
49:07:ea:aa:a8:90:e7:67:92:cc:74:96:40:c7:09:f0:85:aa:
84:97:fa:c4:d2:51:84:59:8e:ba:63:32:e3:ce:30:40:fa:e3:
92:bb:05:b8:df:37:5a:39:6e:32:97:4f:26:08:fd:32:e1:71:
34:f6:65:c5:1d:72:9c:fb:93:63:c1:bc:a6:3d:b9:c4:99:10:
d7:a9:67:2b:c1:78:b3:8f:ca:fd:0d:52:42:fc:8c:11:ac:b0:
9a:79:54:73:fd:5b:be:01:5b:43:01:6b:82:94:2e:34:e6:2f:
5a:e1:53:35:bb:31:8e:c9:c0:ac:d6:a6:02:7c:1a:c1:65:f0:
a3:98:bb:14:2d:2e:fe:2d:da:6d:63:5f:2e:a9:7c:ac:36:16:
32:9a:90:c3:61:94:08:80:9f:bd:81:bd:66:1e:6a:2e:ce:f5:
33:5f:32:ef:95:10:19:b7:31:ee:7c:75:cd:81:14:49:92:9b:
61:51:fb:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:20:51 2025 by rpki-client