Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft
File: PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft (raw, json)
Hash identifier: hMXTBrzr/H2XKgNASh/p5W+h3xAMuZpkdniOVevQE3Q=
Subject key identifier: CA:89:CE:8E:4B:84:A2:32:09:47:69:26:A4:92:94:90:C2:2C:A9:73
Authority key identifier: 3E:8C:6C:C4:48:F9:63:5C:56:FF:22:B1:1C:D8:0C:1A:A9:C5:2D:4F
Certificate issuer: /CN=3e8c6cc448f9635c56ff22b11cd80c1aa9c52d4f
Certificate serial: 019897EEBB6AC7F84A85EA54B2C022D43B95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft
Manifest number: 0C2F
Signing time: Mon 11 Aug 2025 07:01:01 +0000
Manifest this update: Mon 11 Aug 2025 07:01:01 +0000
Manifest next update: Tue 12 Aug 2025 07:01:01 +0000
Files and hashes: 1: Ag4vdPGKqSYWGm9dLWjLCYFXITs.roa (hash: K8PordojpOIplsR6Jg7NEy3mCM9e/c8OLgPeQ2xQz6M=)
2: PoxsxEj5Y1xW_yKxHNgMGqnFLU8.crl (hash: FD2RrxX2KO38qX6u0OLY/hIGM0lT1kq5lgPUyUx2LbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:ee:bb:6a:c7:f8:4a:85:ea:54:b2:c0:22:d4:3b:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e8c6cc448f9635c56ff22b11cd80c1aa9c52d4f
Validity
Not Before: Aug 11 07:01:01 2025 GMT
Not After : Aug 12 07:01:01 2025 GMT
Subject: CN=ca89ce8e4b84a23209476926a4929490c22ca973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:dd:20:8e:66:d0:73:c5:df:6f:17:e7:6a:45:
4f:8c:7e:13:24:8c:4b:40:ec:37:0c:9c:78:e1:bb:
d0:4b:8d:f1:72:ff:4a:e0:2f:aa:ff:ef:b1:d8:a6:
5d:7c:a0:9b:46:49:02:b3:58:e0:3b:b5:67:a4:30:
3a:e0:5a:2a:2f:73:d4:49:45:5c:05:ac:ae:8c:63:
84:1d:35:6c:2c:f0:e5:94:85:06:9a:17:6f:6c:94:
00:02:c4:57:25:7c:f3:cc:72:31:76:85:8c:cc:c2:
2e:cf:a8:07:f7:41:b3:d4:de:df:a3:86:43:74:f3:
ff:3d:27:8a:48:d7:bc:36:36:30:96:c8:4d:df:b8:
25:1b:9f:9f:7a:65:bf:b3:d6:98:b2:62:7a:41:6b:
e1:4e:2d:8f:b8:b0:37:4c:c3:32:0a:5a:bc:31:20:
a9:7d:eb:8f:b4:73:68:14:79:31:81:40:a2:ac:60:
dd:00:82:2f:c0:c1:d7:d0:fa:ac:d1:b0:86:d6:32:
34:ae:a1:1b:71:1d:05:48:eb:6a:62:a7:ff:cb:a5:
db:00:40:42:f0:c1:ce:b8:a2:89:f1:4c:5c:1e:7d:
89:8e:44:91:10:59:86:31:a3:78:31:51:20:87:93:
18:c7:0a:fe:2d:62:72:61:6d:63:53:bc:8a:3b:69:
26:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:89:CE:8E:4B:84:A2:32:09:47:69:26:A4:92:94:90:C2:2C:A9:73
X509v3 Authority Key Identifier:
keyid:3E:8C:6C:C4:48:F9:63:5C:56:FF:22:B1:1C:D8:0C:1A:A9:C5:2D:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:99:8c:8b:b8:d1:ab:24:99:1c:78:83:28:58:6c:78:37:ab:
fc:13:17:97:2d:1e:9f:a7:fe:4d:49:13:20:9f:db:ee:b0:ee:
80:50:94:e8:72:3f:9f:9c:98:b6:ae:da:1d:52:2f:1d:ec:e0:
10:e1:c0:ce:b7:af:5c:04:ac:33:5e:21:1f:d2:81:1c:23:30:
cd:7a:29:ad:f7:36:16:70:65:7c:c9:5d:22:fb:5f:c5:31:39:
29:9f:62:09:ef:30:53:35:93:ed:c5:ff:09:01:9a:88:63:04:
a7:38:a8:25:2a:e6:38:3f:46:f4:47:5b:ab:8b:7e:8f:84:da:
8b:65:a1:25:39:58:0b:e2:34:70:5e:0d:9d:3c:c6:47:01:12:
7b:c5:c6:a5:39:63:91:1c:94:29:8a:e4:17:29:bf:c2:c8:2f:
2a:8b:ba:a6:96:72:bb:e9:59:7c:b7:99:1e:28:54:33:a2:57:
7d:68:9f:48:1a:11:4b:05:18:26:29:af:a2:23:83:a7:d8:09:
c3:75:2a:49:cc:0f:6c:d8:01:fd:5d:99:00:90:d1:9a:b8:a0:
e7:cf:76:a5:4a:9b:37:76:be:aa:24:9e:a6:38:ad:9e:95:3e:
df:b3:c0:00:e7:01:f2:b9:cf:39:cb:cb:ed:b2:f5:3a:0c:61:
de:d3:6f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:30:56 2025 by rpki-client