Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft
File: POoeqIfc7-5hNhVbi9gzkpN8FnE.mft (raw, json)
Hash identifier: WDD+seAMB9DwZLYOgtoGeka6e3+yd5QRduoD6j4yIgY=
Subject key identifier: EA:CA:88:EA:ED:50:B8:74:72:62:45:B2:04:FE:50:27:5C:50:A8:42
Authority key identifier: 3C:EA:1E:A8:87:DC:EF:EE:61:36:15:5B:8B:D8:33:92:93:7C:16:71
Certificate issuer: /CN=3cea1ea887dcefee6136155b8bd83392937c1671
Certificate serial: 019887329B927BBA6E1E838679D2F18FF076
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/POoeqIfc7-5hNhVbi9gzkpN8FnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft
Manifest number: 0ACA
Signing time: Fri 08 Aug 2025 01:01:37 +0000
Manifest this update: Fri 08 Aug 2025 01:01:37 +0000
Manifest next update: Sat 09 Aug 2025 01:01:37 +0000
Files and hashes: 1: 5pbhFrbv6p0fxLITgiU8s5OQtVw.roa (hash: MoawBbuqETIT5X2tb8EXLXxGAQEcqFB39pjZprw8koc=)
2: POoeqIfc7-5hNhVbi9gzkpN8FnE.crl (hash: o4PeN2zrs2pa7ZmvgsNDOS18p0nw9Cc2o9uzr/Eb7ek=)
3: aBfkfMsI6RfN5EaoDQWlcn2H95I.roa (hash: kUHTcNhwAMf+AKKhL303auY/4FQ8RuznlrI+X0c8dok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/POoeqIfc7-5hNhVbi9gzkpN8FnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 01:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:87:32:9b:92:7b:ba:6e:1e:83:86:79:d2:f1:8f:f0:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cea1ea887dcefee6136155b8bd83392937c1671
Validity
Not Before: Aug 8 01:01:37 2025 GMT
Not After : Aug 9 01:01:37 2025 GMT
Subject: CN=eaca88eaed50b874726245b204fe50275c50a842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a0:4f:3f:f5:31:0b:1e:93:55:d2:f1:f1:41:
82:37:8a:8e:1b:4d:72:de:0c:3e:5b:b4:14:5e:30:
15:69:a4:54:de:3a:78:2f:c3:30:3a:ff:63:e1:6a:
00:e0:e0:11:97:b0:b6:15:fc:5e:3e:51:c1:ff:51:
0d:b4:f8:8d:44:22:12:d1:a3:df:6c:4b:51:7c:7e:
d8:f7:2b:7c:89:04:30:3e:e4:2c:ba:d0:f3:ec:80:
dc:2a:91:50:ea:58:91:15:ea:40:3b:92:03:0a:5e:
9a:87:3b:ba:1c:25:1e:5a:1b:0c:31:d1:5f:b5:2c:
8a:b6:d9:7c:de:1a:06:a8:2f:35:1b:54:0c:b9:0a:
34:04:3c:a6:3b:39:d5:2a:de:b7:8d:15:5e:00:02:
d4:46:1c:04:25:44:6c:ac:dc:d7:ba:72:56:76:f5:
56:dd:ca:1b:62:3d:2a:45:30:15:73:c7:92:2b:bf:
61:9d:42:89:43:b4:9c:b8:ca:d2:54:e8:68:1c:ee:
3e:89:3d:87:a4:10:85:b4:e7:96:be:7c:50:ef:af:
e6:39:43:b2:44:43:fb:68:4f:eb:11:65:f7:12:ef:
b3:79:b9:8c:4a:38:04:53:f1:f6:b5:00:22:0d:83:
e7:56:98:5a:0d:ed:f0:77:31:99:cd:b2:8f:80:2d:
8e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:CA:88:EA:ED:50:B8:74:72:62:45:B2:04:FE:50:27:5C:50:A8:42
X509v3 Authority Key Identifier:
keyid:3C:EA:1E:A8:87:DC:EF:EE:61:36:15:5B:8B:D8:33:92:93:7C:16:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/POoeqIfc7-5hNhVbi9gzkpN8FnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:21:34:1d:f9:17:b1:94:25:02:5b:25:ac:23:f6:fa:2f:43:
f2:19:1a:ac:66:ae:21:2c:7a:18:5c:02:b7:09:79:2b:a3:52:
9b:24:25:e7:aa:ce:3f:74:82:69:a1:8e:fe:ad:10:aa:f5:52:
73:a1:92:83:2c:f6:f6:27:63:05:40:4a:9b:3d:7e:20:e9:44:
2a:e3:3a:ea:a8:29:d2:82:b9:5a:d5:10:5b:64:11:b5:61:9f:
43:6e:ab:84:4f:2b:db:dc:f6:b9:1f:e4:11:4e:da:33:5f:af:
1c:73:dd:08:6d:30:94:12:1f:3b:90:d6:94:9b:8a:8a:7e:7b:
22:73:86:6d:e7:f3:ba:e8:35:af:a5:ef:d1:be:46:a9:bd:62:
b8:0c:d5:79:4c:a4:a7:65:2a:ed:1d:ae:dd:54:d7:f0:99:51:
ea:6d:85:42:17:20:58:78:d1:49:19:83:12:df:20:03:cd:63:
ad:86:bf:20:cd:30:2a:5f:55:1c:d0:dd:d6:ac:4f:76:24:5f:
b4:fd:b0:9b:61:d5:ac:ff:70:59:6e:aa:d5:38:b2:c9:0f:f4:
20:99:12:ed:4e:c0:8b:b1:27:bd:78:c4:c3:2d:b5:c9:96:59:
04:e7:a9:f1:b7:8f:6a:45:04:bc:90:3e:7e:33:8e:f7:9f:a2:
4d:ea:88:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiHMpuSe7puHoOGedLxj/B2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjZWExZWE4ODdkY2VmZWU2MTM2MTU1YjhiZDgzMzkyOTM3
YzE2NzEwHhcNMjUwODA4MDEwMTM3WhcNMjUwODA5MDEwMTM3WjAzMTEwLwYDVQQD
EyhlYWNhODhlYWVkNTBiODc0NzI2MjQ1YjIwNGZlNTAyNzVjNTBhODQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqBPP/UxCx6TVdLx8UGCN4qOG01y
3gw+W7QUXjAVaaRU3jp4L8MwOv9j4WoA4OARl7C2FfxePlHB/1ENtPiNRCIS0aPf
bEtRfH7Y9yt8iQQwPuQsutDz7IDcKpFQ6liRFepAO5IDCl6ahzu6HCUeWhsMMdFf
tSyKttl83hoGqC81G1QMuQo0BDymOznVKt63jRVeAALURhwEJURsrNzXunJWdvVW
3cobYj0qRTAVc8eSK79hnUKJQ7ScuMrSVOhoHO4+iT2HpBCFtOeWvnxQ76/mOUOy
REP7aE/rEWX3Eu+zebmMSjgEU/H2tQAiDYPnVphaDe3wdzGZzbKPgC2OLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOrKiOrtULh0cmJFsgT+UCdcUKhCMB8GA1UdIwQY
MBaAFDzqHqiH3O/uYTYVW4vYM5KTfBZxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUE9vZXFJZmM3LTVoTmhWYmk5Z3prcE44Rm5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9jYTYxZWMtMDdiNi00OTJlLThjNDgt
YjY0Y2FiNGJiZGZmLzEvUE9vZXFJZmM3LTVoTmhWYmk5Z3prcE44Rm5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9jYTYxZWMtMDdiNi00OTJlLThjNDgtYjY0Y2FiNGJiZGZm
LzEvUE9vZXFJZmM3LTVoTmhWYmk5Z3prcE44Rm5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsiE0HfkX
sZQlAlslrCP2+i9D8hkarGauISx6GFwCtwl5K6NSmyQl56rOP3SCaaGO/q0QqvVS
c6GSgyz29idjBUBKmz1+IOlEKuM66qgp0oK5WtUQW2QRtWGfQ26rhE8r29z2uR/k
EU7aM1+vHHPdCG0wlBIfO5DWlJuKin57InOGbefzuug1r6Xv0b5Gqb1iuAzVeUyk
p2Uq7R2u3VTX8JlR6m2FQhcgWHjRSRmDEt8gA81jrYa/IM0wKl9VHNDd1qxPdiRf
tP2wm2HVrP9wWW6q1TiyyQ/0IJkS7U7Ai7EnvXjEwy21yZZZBOep8bePakUEvJA+
fjOO95+iTeqIvA==
-----END CERTIFICATE-----
Generated at Fri Aug 8 10:08:39 2025 by rpki-client