Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft
File: POoeqIfc7-5hNhVbi9gzkpN8FnE.mft (raw, json)
Hash identifier: TcRvweQcFC2z9ALhp448ULepeg/kSIW29OZiW59xp5g=
Subject key identifier: 85:72:66:1A:F6:6A:CF:C0:A4:82:DE:CC:A5:0C:1C:9C:4D:2D:DA:A0
Authority key identifier: 3C:EA:1E:A8:87:DC:EF:EE:61:36:15:5B:8B:D8:33:92:93:7C:16:71
Certificate issuer: /CN=3cea1ea887dcefee6136155b8bd83392937c1671
Certificate serial: 019A4EF47B415E3BA4EA84448C370A39D2B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/POoeqIfc7-5hNhVbi9gzkpN8FnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft
Manifest number: 0BB6
Signing time: Tue 04 Nov 2025 13:00:36 +0000
Manifest this update: Tue 04 Nov 2025 13:00:36 +0000
Manifest next update: Wed 05 Nov 2025 13:00:36 +0000
Files and hashes: 1: 5pbhFrbv6p0fxLITgiU8s5OQtVw.roa (hash: MoawBbuqETIT5X2tb8EXLXxGAQEcqFB39pjZprw8koc=)
2: POoeqIfc7-5hNhVbi9gzkpN8FnE.crl (hash: hVG0yCTBtLMYNk0bJM1iPhhUGpxquFFu1dbZJyltAxk=)
3: aBfkfMsI6RfN5EaoDQWlcn2H95I.roa (hash: kUHTcNhwAMf+AKKhL303auY/4FQ8RuznlrI+X0c8dok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/POoeqIfc7-5hNhVbi9gzkpN8FnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:7b:41:5e:3b:a4:ea:84:44:8c:37:0a:39:d2:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cea1ea887dcefee6136155b8bd83392937c1671
Validity
Not Before: Nov 4 13:00:36 2025 GMT
Not After : Nov 5 13:00:36 2025 GMT
Subject: CN=8572661af66acfc0a482decca50c1c9c4d2ddaa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5d:15:ce:58:6e:2e:6f:02:66:15:f7:99:08:
3a:e4:03:6e:a3:fe:ec:be:7e:ad:43:8e:cb:84:48:
35:a8:07:d1:3f:a1:0f:51:ed:fe:27:13:c8:24:a7:
a2:a8:ee:de:ae:3b:ff:bc:ab:e4:6a:e9:88:b0:67:
b2:24:c4:f7:4b:d5:af:23:af:27:8a:87:42:44:6d:
eb:48:98:fa:a5:02:5b:44:7b:0d:0e:fd:bf:3b:d5:
5a:11:8d:bb:07:84:f0:50:b0:f1:26:5e:3e:fe:55:
08:c2:10:b7:1f:3b:12:fc:03:20:04:89:c5:a9:36:
6a:ae:af:14:b9:9c:c2:12:6c:87:ab:41:a6:ee:0c:
9e:51:df:2c:f1:45:f8:65:21:8e:d6:c0:c5:0b:27:
ec:17:37:fe:c3:38:82:86:73:74:26:4c:56:98:46:
29:a4:1f:75:40:0f:74:50:a5:d4:0b:fd:2b:58:0a:
1a:8d:be:65:91:2a:5f:6d:cd:d1:d4:bb:2a:22:6f:
02:20:57:41:34:ee:9b:08:4d:6f:80:e6:6f:50:35:
e8:cb:9c:06:1a:9f:ef:3d:86:2e:ce:7c:16:dd:30:
3b:7d:ab:25:e8:cd:dc:c3:44:9c:a3:64:13:85:22:
3f:3d:ad:61:ee:87:77:78:a8:2e:95:06:ee:0a:9a:
7c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:72:66:1A:F6:6A:CF:C0:A4:82:DE:CC:A5:0C:1C:9C:4D:2D:DA:A0
X509v3 Authority Key Identifier:
keyid:3C:EA:1E:A8:87:DC:EF:EE:61:36:15:5B:8B:D8:33:92:93:7C:16:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/POoeqIfc7-5hNhVbi9gzkpN8FnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:47:25:b9:fd:57:09:81:32:a1:12:98:21:5c:3f:2c:b5:10:
21:d5:dc:f4:e9:41:68:26:f5:34:ab:1a:fd:2b:61:06:81:be:
09:5f:12:f7:3c:24:75:a3:ca:aa:31:26:50:55:c3:4b:88:02:
f3:d2:bd:de:54:c3:0d:25:c4:91:c3:53:d7:a9:0e:d1:3a:93:
d8:63:76:6e:06:26:0d:d7:7a:a1:0f:18:6e:7d:e5:51:2e:cc:
9c:cf:fe:c4:1a:4d:7b:c2:b4:63:1a:76:ca:02:28:e9:60:bd:
16:99:d0:c9:99:44:cf:a8:6a:b2:fd:c7:53:de:f7:23:02:34:
58:3d:f9:90:5a:48:40:e2:5e:d9:34:b3:02:33:4e:0b:a3:0b:
83:f4:84:4c:5d:ad:d8:6b:f7:f8:4c:3c:aa:1b:8d:cf:f1:da:
56:cc:86:9d:b7:bf:49:53:66:b2:01:0b:57:dc:7b:45:78:66:
22:b1:97:ea:96:98:a8:10:03:4b:34:84:f8:03:64:99:4f:54:
bc:37:d0:3a:f3:2f:ac:ed:72:17:c8:c6:e9:1e:3c:75:97:25:
1a:2e:be:a6:87:3c:58:9b:24:b2:6c:f1:24:07:60:fc:14:ed:
bd:2c:92:4c:cf:7d:60:65:1c:43:00:ed:b1:fb:6d:ad:f3:c3:
d2:c2:6e:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:40:56 2025 by rpki-client