Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft
File: POoeqIfc7-5hNhVbi9gzkpN8FnE.mft (raw, json)
Hash identifier: kzdXgVcRzE/7clWLNGsGmxSlqznxXgpLgT8sZQonOgY=
Subject key identifier: 35:17:6F:74:72:B2:B6:32:D5:6B:E0:95:04:7C:D3:84:89:19:17:2C
Authority key identifier: 3C:EA:1E:A8:87:DC:EF:EE:61:36:15:5B:8B:D8:33:92:93:7C:16:71
Certificate issuer: /CN=3cea1ea887dcefee6136155b8bd83392937c1671
Certificate serial: 01976F2C645A81667874BD90FA802DC72DBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/POoeqIfc7-5hNhVbi9gzkpN8FnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft
Manifest number: 0A39
Signing time: Sat 14 Jun 2025 16:01:09 +0000
Manifest this update: Sat 14 Jun 2025 16:01:09 +0000
Manifest next update: Sun 15 Jun 2025 16:01:09 +0000
Files and hashes: 1: 5pbhFrbv6p0fxLITgiU8s5OQtVw.roa (hash: MoawBbuqETIT5X2tb8EXLXxGAQEcqFB39pjZprw8koc=)
2: POoeqIfc7-5hNhVbi9gzkpN8FnE.crl (hash: dpol4F8aIozLN2AiBu5P3b3aLvT/B00j2lLzcd0b7DY=)
3: aBfkfMsI6RfN5EaoDQWlcn2H95I.roa (hash: kUHTcNhwAMf+AKKhL303auY/4FQ8RuznlrI+X0c8dok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/POoeqIfc7-5hNhVbi9gzkpN8FnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:64:5a:81:66:78:74:bd:90:fa:80:2d:c7:2d:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cea1ea887dcefee6136155b8bd83392937c1671
Validity
Not Before: Jun 14 16:01:09 2025 GMT
Not After : Jun 15 16:01:09 2025 GMT
Subject: CN=35176f7472b2b632d56be095047cd3848919172c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cd:50:5a:72:99:98:72:70:5a:9c:31:0f:11:
2c:0a:fd:5c:b3:0a:f1:2d:66:a0:63:b2:45:d9:cc:
6a:10:76:ce:bc:70:8c:b2:17:93:c8:31:bc:85:fe:
05:ea:6b:36:d4:91:10:5e:1f:92:63:ad:97:c9:79:
df:35:f4:f8:7d:c2:99:af:0b:b4:b6:32:a3:66:1c:
86:2a:07:72:98:48:ec:ce:85:63:8d:a1:06:bc:ab:
85:d4:ba:38:f2:7d:10:ef:bb:21:60:87:0e:8c:56:
81:17:f0:90:5e:66:41:b6:c2:7b:52:3f:39:74:1d:
5a:b5:a3:14:f3:b0:50:1f:72:e2:ff:cc:7d:55:27:
3f:b1:bd:1a:65:8d:55:e4:48:ad:2b:68:63:13:a7:
0d:ee:f2:28:06:e2:66:ac:42:9e:32:2d:4d:d2:52:
e1:9b:d5:20:fd:7e:97:73:3c:43:0e:73:75:01:be:
40:19:82:08:fe:44:9c:d3:10:f0:2c:95:72:a7:cd:
3a:cb:e9:fb:42:47:27:a2:ff:7f:21:eb:9c:30:7e:
a9:a7:37:3a:71:a5:12:73:63:ab:37:e6:a2:1d:3d:
8d:6b:33:b0:39:bd:e7:ec:18:ee:60:25:bb:94:b2:
3b:20:f9:66:7a:60:dd:b5:99:65:8c:2d:6a:8c:d9:
0f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:17:6F:74:72:B2:B6:32:D5:6B:E0:95:04:7C:D3:84:89:19:17:2C
X509v3 Authority Key Identifier:
keyid:3C:EA:1E:A8:87:DC:EF:EE:61:36:15:5B:8B:D8:33:92:93:7C:16:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/POoeqIfc7-5hNhVbi9gzkpN8FnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:81:94:ca:71:8a:84:5d:62:78:54:8b:d0:dc:b4:34:52:6e:
ae:be:11:1f:bf:d6:ed:8e:cc:d7:3f:89:a4:d4:83:6d:bf:ab:
ee:b1:f8:a9:b5:d8:28:0a:90:0b:16:58:43:98:ec:a3:30:e9:
87:41:86:33:8c:5c:57:bf:90:b1:10:dd:a5:56:22:94:90:0e:
d5:fd:63:c0:e2:93:13:89:27:8a:b1:ce:f8:2f:9f:ea:bb:7c:
92:68:bf:1e:f2:68:0b:d2:f2:aa:51:db:bc:5d:7e:30:d1:0d:
82:14:a3:01:2f:13:80:4a:5d:88:02:d0:61:dd:e2:11:f6:81:
d2:74:9b:d9:dc:19:9f:c2:21:d9:78:d0:1f:05:27:cf:6f:cd:
16:63:55:48:54:9a:14:b9:f2:8c:88:de:3f:91:bd:3c:4b:8e:
a4:70:4c:dd:1a:5d:c8:44:b9:63:4f:71:a0:f1:97:3f:49:c7:
96:5f:cd:cf:27:19:3f:9b:4c:00:ae:46:c1:7f:d7:9f:de:38:
f7:4b:50:ab:b5:2e:a4:c7:11:98:32:27:55:ff:be:0c:2f:4a:
d0:4c:d8:ac:ab:fb:eb:98:52:87:2a:b8:34:0b:ba:c2:1b:bd:
c6:b4:c3:b3:3b:c7:16:de:23:4e:ca:a1:fb:f7:58:ac:5a:5c:
b3:cc:e0:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:27:16 2025 by rpki-client