Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft
File: PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft (raw, json)
Hash identifier: v1vCJn1vvpcOYQvUbE2uUGxj13MfM2JnU7JuEPJ2oio=
Subject key identifier: D7:99:5B:53:8F:5C:37:F8:E0:24:3D:21:91:7F:9C:29:E1:2D:36:42
Authority key identifier: 3E:8C:6C:C4:48:F9:63:5C:56:FF:22:B1:1C:D8:0C:1A:A9:C5:2D:4F
Certificate issuer: /CN=3e8c6cc448f9635c56ff22b11cd80c1aa9c52d4f
Certificate serial: 019787A29A85BF0A7183D8DFDB129D473456
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft
Manifest number: 0BA2
Signing time: Thu 19 Jun 2025 10:01:09 +0000
Manifest this update: Thu 19 Jun 2025 10:01:09 +0000
Manifest next update: Fri 20 Jun 2025 10:01:09 +0000
Files and hashes: 1: Ag4vdPGKqSYWGm9dLWjLCYFXITs.roa (hash: K8PordojpOIplsR6Jg7NEy3mCM9e/c8OLgPeQ2xQz6M=)
2: PoxsxEj5Y1xW_yKxHNgMGqnFLU8.crl (hash: Xi24AeWux3Uj68cupUNPL9YBaKP7TtnVGfcRxhImFJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 10:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:87:a2:9a:85:bf:0a:71:83:d8:df:db:12:9d:47:34:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e8c6cc448f9635c56ff22b11cd80c1aa9c52d4f
Validity
Not Before: Jun 19 10:01:09 2025 GMT
Not After : Jun 20 10:01:09 2025 GMT
Subject: CN=d7995b538f5c37f8e0243d21917f9c29e12d3642
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f8:66:54:94:90:58:49:89:e4:64:1a:ba:ab:
d4:1c:15:92:25:b8:50:c5:5e:8f:cd:79:97:a2:ed:
0c:86:48:2d:0f:3f:1f:9e:da:56:96:0d:d2:80:aa:
ab:e2:40:8e:6b:d7:3b:ca:79:ba:58:9c:17:78:1f:
80:37:15:d6:51:bf:52:13:9e:58:b9:87:26:90:ca:
59:77:c4:bd:4c:46:ca:4f:5b:42:a1:4a:7a:1c:da:
69:a3:1f:f5:3b:02:38:2e:75:93:64:88:a2:de:fa:
c9:ce:32:24:03:f0:4b:0b:37:0e:f2:a7:12:93:cf:
98:f4:78:f3:05:42:c1:b6:9a:85:6b:8b:02:18:b7:
8d:a3:cc:ca:fe:64:63:1d:e6:40:39:5d:b1:71:5a:
fa:0f:32:4c:a9:e5:17:57:17:80:a0:72:f8:4c:cc:
ad:a7:99:7d:52:fc:5e:36:29:e0:56:ff:c0:51:26:
66:2b:e4:1a:41:a0:1d:60:8b:4f:2b:60:22:89:d2:
10:d8:72:a5:79:10:63:56:04:1b:ea:15:b2:79:d7:
8a:6a:69:45:53:dc:fd:93:78:a8:20:89:d9:ad:1f:
f4:35:29:55:32:02:a5:b8:15:0b:4a:b6:0c:04:43:
2e:24:bd:c6:81:99:4d:75:77:d1:d2:63:27:64:8c:
73:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:99:5B:53:8F:5C:37:F8:E0:24:3D:21:91:7F:9C:29:E1:2D:36:42
X509v3 Authority Key Identifier:
keyid:3E:8C:6C:C4:48:F9:63:5C:56:FF:22:B1:1C:D8:0C:1A:A9:C5:2D:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:6b:a2:b3:67:16:ee:6b:8f:4f:da:57:5b:23:38:d5:3f:03:
83:4e:7e:a6:5f:b6:96:ba:e3:ac:40:49:e7:86:03:dc:f4:e0:
ab:90:10:aa:d5:5d:65:76:19:3f:1b:b7:c0:9d:b1:e8:f2:aa:
a9:a1:e9:12:24:74:03:e2:14:cf:19:5d:42:61:3f:36:e4:c5:
68:d2:48:41:aa:33:25:b4:b6:83:d4:a2:e0:d2:52:ac:36:92:
6f:ca:80:a8:97:71:aa:9c:1e:a5:39:78:2d:73:81:36:01:65:
82:f0:ac:7f:a0:2d:82:2a:8f:23:ea:51:f0:72:2e:4d:a1:d8:
17:a1:da:20:93:bf:23:b8:d8:65:bd:0a:0c:b0:76:1f:b7:9a:
2b:f3:e2:e6:4f:1c:63:65:fb:73:9a:19:46:5a:91:50:ee:0c:
5c:d3:0e:13:92:8e:f5:ed:ad:de:fe:e5:b7:1c:7b:de:03:73:
8c:b2:9d:9d:59:c7:0c:46:c6:fa:58:f3:b3:4d:19:b6:57:6d:
05:3a:2b:53:37:36:7e:b6:59:70:65:50:c7:a4:c0:ee:e3:40:
e2:84:51:00:2f:dd:8f:71:02:52:b3:9b:d8:da:d9:e7:ba:dd:
e2:99:ea:f9:96:bd:11:63:eb:b2:62:da:8d:81:c0:9e:f0:46:
ff:42:4f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 13:20:03 2025 by rpki-client