Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft
File: po_5Ip79jRK0Jz80b4xkVOpYfsw.mft (raw, json)
Hash identifier: 2yrJ9CFUnqwV2h7qhpMrDBYZP/YTUjF+L395G0cA3cw=
Subject key identifier: 65:B8:D5:AD:BC:1A:80:3E:4E:7F:62:20:78:17:35:26:1B:74:97:7F
Authority key identifier: A6:8F:F9:22:9E:FD:8D:12:B4:27:3F:34:6F:8C:64:54:EA:58:7E:CC
Certificate issuer: /CN=a68ff9229efd8d12b4273f346f8c6454ea587ecc
Certificate serial: 0199FCFDB2B0C3C8B805FE71B66105395B4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/po_5Ip79jRK0Jz80b4xkVOpYfsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 15:01:48 +0000
Manifest this update: Sun 19 Oct 2025 15:01:48 +0000
Manifest next update: Mon 20 Oct 2025 15:01:48 +0000
Files and hashes: 1: NvB3sbtKygBuV_bHy4ubiaP6jUc.roa (hash: QHR99wgFE0npSuCrsPzML6fCQB1JMr/5JCdaknSW7aY=)
2: mkpPO0iUB-Trjc2yot_MhVuYzeI.roa (hash: bl4jbnOxpRldBgzWUbIAjtNRBkTTSgb/YiMXDC223qY=)
3: po_5Ip79jRK0Jz80b4xkVOpYfsw.crl (hash: hXyeyHQR3z78MxfVYYNNQvhoXlXkMQKT6V1rfh5gLB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/po_5Ip79jRK0Jz80b4xkVOpYfsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:b2:b0:c3:c8:b8:05:fe:71:b6:61:05:39:5b:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a68ff9229efd8d12b4273f346f8c6454ea587ecc
Validity
Not Before: Oct 19 15:01:48 2025 GMT
Not After : Oct 20 15:01:48 2025 GMT
Subject: CN=65b8d5adbc1a803e4e7f6220781735261b74977f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:17:ef:57:9d:ee:e1:e1:6c:56:46:ae:be:0e:
5d:9f:f7:c4:f4:3b:7e:d3:ba:8a:92:8d:38:99:98:
a8:43:fc:84:e9:06:fc:4d:7b:d3:fa:f6:b1:54:ac:
50:af:17:ac:dd:92:4e:2e:e2:fe:3f:04:9f:c6:06:
fe:1f:f8:69:5c:fb:de:d5:3f:16:2b:98:26:51:74:
30:5d:7e:72:c0:9c:5d:0f:71:57:c0:e2:f9:dd:33:
06:e6:75:6f:78:d6:5e:63:6f:a9:90:f6:49:ef:1f:
a5:a4:cd:45:89:7c:08:2d:2a:38:b2:2a:7e:88:19:
27:0b:90:08:eb:9a:6e:94:67:23:e3:c3:e8:da:45:
c9:ef:61:65:8a:06:ed:5b:93:04:c3:34:e9:b1:ee:
63:2a:e4:f5:24:d2:86:f1:ca:d2:6f:ee:e7:df:52:
cc:00:59:b7:1b:82:99:38:ef:50:76:1a:76:8f:ca:
09:cc:1e:1e:63:6d:8e:2f:08:de:36:65:79:6d:59:
c9:8f:81:dc:f8:31:e6:90:b2:08:fa:ad:e4:b7:c1:
0c:ba:88:5f:52:57:34:b3:32:5f:69:e3:d0:ca:77:
3d:db:11:6a:a6:54:c7:64:b0:b1:70:cf:30:c9:41:
4b:ed:39:ad:30:1a:72:77:63:7a:43:10:6d:35:b8:
48:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:B8:D5:AD:BC:1A:80:3E:4E:7F:62:20:78:17:35:26:1B:74:97:7F
X509v3 Authority Key Identifier:
keyid:A6:8F:F9:22:9E:FD:8D:12:B4:27:3F:34:6F:8C:64:54:EA:58:7E:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/po_5Ip79jRK0Jz80b4xkVOpYfsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:d7:d2:6e:a1:29:12:86:70:94:f5:18:aa:fd:5c:a0:54:67:
76:40:9c:79:c2:17:0c:0a:78:c8:86:9a:8a:19:d4:23:16:e9:
cc:91:dc:fd:ac:69:aa:27:66:23:d0:90:1e:8c:7f:d5:c7:1e:
9e:41:80:7a:7c:26:d2:f2:5e:92:db:0c:bb:10:37:71:09:07:
46:41:a6:03:f6:28:26:9a:09:3c:9e:dc:35:ac:e6:06:94:5b:
25:45:60:a1:5c:fb:a0:a2:34:1e:7a:b9:c6:4c:05:b1:b6:f3:
b3:4e:84:f7:5c:4d:ba:d0:7d:c0:c4:6a:7e:50:15:78:91:e2:
81:41:e2:cd:ac:20:54:d8:0e:dd:ec:51:c8:08:4a:d6:19:52:
65:37:56:84:f9:23:80:3d:e9:b9:be:b4:77:bd:28:6a:ae:12:
44:34:9a:b4:a1:96:83:12:5b:e0:fa:70:fe:14:78:48:ef:da:
3f:cf:e2:09:45:59:ec:6b:02:67:81:a5:14:7a:60:d1:bd:34:
c2:9e:53:ea:ee:d8:54:75:f3:b9:0e:73:08:37:6c:a2:20:a4:
5f:c7:b7:12:6d:cf:d6:50:b0:fe:21:45:a1:93:a1:64:b7:04:
85:7a:c8:6c:6a:85:cb:0b:72:b0:90:a9:54:d1:2f:9c:d1:0c:
de:5b:3c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:43:35 2025 by rpki-client