Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/57ea8d-c680-40a7-8a29-f076a08e6003/1/PowYl2JPV7404PdguX8RCtW12jo.mft
File: PowYl2JPV7404PdguX8RCtW12jo.mft (raw, json)
Hash identifier: wWmXmJS3RTY88Raz+3qgHEZHdrLgxPTByyUJYVBKTjg=
Subject key identifier: D0:14:53:6A:48:B3:E4:C1:D7:D1:09:0C:60:9F:9F:EB:B9:6F:BB:CE
Authority key identifier: 3E:8C:18:97:62:4F:57:BE:34:E0:F7:60:B9:7F:11:0A:D5:B5:DA:3A
Certificate issuer: /CN=3e8c1897624f57be34e0f760b97f110ad5b5da3a
Certificate serial: 019A4EF40A47FAE38F66066733CE4FF41AF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PowYl2JPV7404PdguX8RCtW12jo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/57ea8d-c680-40a7-8a29-f076a08e6003/1/PowYl2JPV7404PdguX8RCtW12jo.mft
Manifest number: 1711
Signing time: Tue 04 Nov 2025 13:00:07 +0000
Manifest this update: Tue 04 Nov 2025 13:00:07 +0000
Manifest next update: Wed 05 Nov 2025 13:00:07 +0000
Files and hashes: 1: OVYlCjQ_Ro8WMpn3BJqI8X0cXxo.roa (hash: H6KoMJLLwg7EnqHTPVQLrBI8uOBDhlfqI6yQtfWr3zo=)
2: PowYl2JPV7404PdguX8RCtW12jo.crl (hash: B7NIp0B1uIVmSe5jZn7DaKIOvZUaDV59EfSulnnTEJA=)
3: lFNEbA4WXa1kqpPRAFp7E-A0l2E.roa (hash: RLdKaSl14tW7ZrRmULGs2dhO8FMuiohKtUpmaqgzRYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/57ea8d-c680-40a7-8a29-f076a08e6003/1/PowYl2JPV7404PdguX8RCtW12jo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/57ea8d-c680-40a7-8a29-f076a08e6003/1/PowYl2JPV7404PdguX8RCtW12jo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PowYl2JPV7404PdguX8RCtW12jo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:0a:47:fa:e3:8f:66:06:67:33:ce:4f:f4:1a:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e8c1897624f57be34e0f760b97f110ad5b5da3a
Validity
Not Before: Nov 4 13:00:07 2025 GMT
Not After : Nov 5 13:00:07 2025 GMT
Subject: CN=d014536a48b3e4c1d7d1090c609f9febb96fbbce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:6a:06:c4:66:72:2d:33:83:a2:5e:15:92:25:
d2:15:62:3e:c1:f1:61:7f:4f:e6:3b:65:5b:58:93:
e1:2b:38:04:f5:6b:fc:3c:4e:45:c4:88:9e:94:6f:
d7:e4:83:d2:3e:a7:47:61:eb:bb:d9:7c:72:da:50:
6a:9a:43:b5:4f:a3:c7:4c:22:b5:b3:64:09:eb:98:
11:c4:1a:ae:95:15:8b:3d:fb:df:55:92:16:c7:da:
50:32:07:ba:c5:ec:aa:75:8a:6d:73:35:f2:7f:bc:
63:c5:76:99:a6:5a:63:55:b7:c6:64:dd:05:a0:76:
ad:3d:fc:24:da:7f:a9:5c:aa:4e:8b:be:25:02:42:
3a:19:01:52:32:da:e6:81:93:89:3d:da:29:f4:d4:
0a:f4:4a:93:59:74:51:18:65:38:f6:df:34:7d:79:
e6:a7:d7:c9:b8:75:d3:60:3b:9d:41:40:d9:77:95:
1f:92:12:0d:a4:e9:82:01:3b:03:04:f1:13:15:f1:
4c:7a:c8:28:0c:aa:45:60:de:2c:3a:bd:89:f1:78:
8d:d6:26:fb:19:1a:9e:37:ae:4e:a4:3f:80:7e:f5:
0f:51:9d:b5:a6:35:94:82:7d:9f:af:23:ea:8c:ca:
c2:f8:10:f6:39:a8:c3:e5:55:a4:d6:98:b4:cd:aa:
e9:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:14:53:6A:48:B3:E4:C1:D7:D1:09:0C:60:9F:9F:EB:B9:6F:BB:CE
X509v3 Authority Key Identifier:
keyid:3E:8C:18:97:62:4F:57:BE:34:E0:F7:60:B9:7F:11:0A:D5:B5:DA:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PowYl2JPV7404PdguX8RCtW12jo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/57ea8d-c680-40a7-8a29-f076a08e6003/1/PowYl2JPV7404PdguX8RCtW12jo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/57ea8d-c680-40a7-8a29-f076a08e6003/1/PowYl2JPV7404PdguX8RCtW12jo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:80:b9:4b:10:3a:0d:74:5d:bc:a6:1a:df:c4:2a:82:f3:7f:
a3:d5:20:ea:2f:ae:f5:a8:b3:b8:8f:5b:38:66:27:a8:50:ab:
c7:6b:8f:9f:cf:47:7a:9e:2c:b4:52:65:7a:41:48:bb:48:2c:
22:4c:1b:ab:71:e7:32:ae:f7:8b:b7:2b:40:6b:6e:89:5d:a2:
b3:65:d2:df:47:9e:96:36:46:2e:ab:41:d6:f7:25:e4:87:b7:
0c:9a:02:1c:3b:06:eb:90:55:07:c9:e7:91:e0:ab:b0:f4:53:
60:3d:a1:1a:6d:e5:92:a7:fc:cb:33:45:77:1e:cd:e4:85:b1:
c2:ed:7a:e3:25:26:60:28:60:03:71:b2:75:9a:a0:28:91:f7:
b8:ab:0c:7a:38:6c:c9:07:31:a9:ab:66:5a:22:a1:06:7c:cb:
9c:31:25:a9:0f:2c:c8:4b:2a:7e:40:0a:0c:0b:4e:f6:8e:4b:
c4:b1:b2:fa:d0:b5:ca:ae:ad:21:f9:c5:e6:85:b5:08:05:42:
df:c6:03:10:1e:c6:a5:97:6f:fd:21:30:6d:fc:94:1b:9e:0f:
e7:c2:2b:ba:18:c9:29:f9:e7:0a:0a:3f:b8:fb:2f:1c:6c:81:
cd:30:0c:9d:49:e3:b7:29:2a:44:04:23:17:6a:48:e2:61:d4:
d0:1a:bc:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:05:22 2025 by rpki-client