Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.mft
File: POdWa7WxnnAPSOJeB1BsLyIt84Q.mft (raw, json)
Hash identifier: 0FaolSKCYFB7mItafMXp7Owj4V4hO+3oXxa7dOQrSw8=
Subject key identifier: FF:7A:76:72:F0:2F:AB:99:52:52:B9:3C:4C:DC:48:F3:1A:BB:C1:8A
Authority key identifier: 3C:E7:56:6B:B5:B1:9E:70:0F:48:E2:5E:07:50:6C:2F:22:2D:F3:84
Certificate issuer: /CN=3ce7566bb5b19e700f48e25e07506c2f222df384
Certificate serial: 01978B1157A87712B1A30EF9F5464AA6133A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/POdWa7WxnnAPSOJeB1BsLyIt84Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.mft
Manifest number: 0DFA
Signing time: Fri 20 Jun 2025 02:00:58 +0000
Manifest this update: Fri 20 Jun 2025 02:00:58 +0000
Manifest next update: Sat 21 Jun 2025 02:00:58 +0000
Files and hashes: 1: LnOKhHlXHgf9Bc7By8RdD87CENc.roa (hash: SBq8tD3nAGx2l0m6YmZ4sb5xKbi6vLmOJJ/u4lHDzyQ=)
2: MtOebLSNSemLqQH1Qdt6lKbCdQU.roa (hash: p2mZ95DJo3RCkhalV7XQwJkDag3/z20BD18MDcr1SRU=)
3: POdWa7WxnnAPSOJeB1BsLyIt84Q.crl (hash: O9uwqGLUZd+VXp0yY1RJF0t51CQIHmh5S6W4fskX53Q=)
4: qQRcQNcowo3kCSFmxOhnd54Y8jY.roa (hash: raMUt5t5W5lynqzBwroXOMjtxQgLkjALLNPiIADIJEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/POdWa7WxnnAPSOJeB1BsLyIt84Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Jun 2025 02:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8b:11:57:a8:77:12:b1:a3:0e:f9:f5:46:4a:a6:13:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ce7566bb5b19e700f48e25e07506c2f222df384
Validity
Not Before: Jun 20 02:00:58 2025 GMT
Not After : Jun 21 02:00:58 2025 GMT
Subject: CN=ff7a7672f02fab995252b93c4cdc48f31abbc18a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d6:e5:c1:3a:30:c9:9a:45:cc:1b:0c:4c:75:
7a:db:3e:67:e9:ae:c3:78:29:6b:bd:79:fb:3b:74:
9e:03:e3:df:78:e0:19:b8:d2:68:39:06:a1:4e:37:
c7:be:b1:c4:51:39:d5:fd:e6:91:fd:47:1b:10:57:
66:0d:16:2f:69:9f:6d:7d:82:5b:74:6e:23:5f:d7:
9f:5c:9b:7b:5e:6e:9f:73:8a:68:6d:cb:1f:0c:21:
30:05:b9:c7:95:7e:06:f8:d0:5d:c2:ae:3c:f9:de:
4d:53:fd:80:8c:e0:67:cc:a4:ee:9b:54:db:50:cb:
56:cc:05:13:82:75:d5:77:d0:ac:d9:eb:81:0d:be:
87:15:dd:3d:75:7f:d0:89:c9:8c:f1:7b:2f:d0:72:
4a:6f:c4:ef:b7:8b:16:58:c6:23:b1:3b:92:c5:2c:
1b:01:9f:72:58:f4:bb:34:e4:2a:cc:fd:ac:9b:3c:
90:83:d3:97:40:d1:4d:85:85:98:b3:24:85:7c:e9:
87:0a:3e:15:05:34:a2:61:71:52:d9:54:5d:86:ac:
6d:8e:1f:ed:c7:88:69:7c:c5:b1:f7:81:c8:e9:f8:
f7:54:fd:f6:32:3f:7d:82:00:67:43:dc:d1:75:34:
84:4c:7c:6e:a4:a1:b8:c1:d7:ed:63:48:fa:e8:b9:
e1:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:7A:76:72:F0:2F:AB:99:52:52:B9:3C:4C:DC:48:F3:1A:BB:C1:8A
X509v3 Authority Key Identifier:
keyid:3C:E7:56:6B:B5:B1:9E:70:0F:48:E2:5E:07:50:6C:2F:22:2D:F3:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/POdWa7WxnnAPSOJeB1BsLyIt84Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:26:0e:a9:70:61:67:55:76:07:d2:51:d1:d4:52:bd:bb:a9:
4b:01:9f:b3:14:68:9c:7b:54:67:b8:20:a6:0d:79:e0:ff:42:
6a:9f:53:69:17:16:5b:b4:f5:e2:bb:d3:ce:6d:89:e3:84:c5:
f5:ca:2c:0c:19:79:4f:5b:0e:5c:ed:48:a7:9f:d2:e1:7e:68:
c0:b3:57:52:4c:38:aa:d3:c9:fe:51:a5:a7:b2:9b:e8:fb:9e:
ac:1b:00:dc:66:1c:93:76:f2:6b:d9:8e:c0:bf:28:3b:7a:45:
a6:a5:7c:1f:e8:e8:e5:35:5f:b1:1f:34:7e:0b:15:ec:f5:5f:
43:aa:8d:53:58:af:71:9b:87:66:0a:49:82:b9:08:28:11:d5:
d7:b3:0b:e3:22:21:25:34:3f:30:88:bf:13:13:a0:db:4a:19:
96:d2:3a:40:87:0d:c0:eb:64:10:ad:02:03:9b:08:21:d0:aa:
3d:fa:5b:27:8d:e5:be:3c:71:92:c0:ff:d4:64:b1:73:bf:c0:
73:29:69:38:28:36:ea:79:a6:a6:4d:c3:15:64:4c:51:c9:43:
cb:59:3e:69:3b:3c:37:ba:af:88:ae:e1:cb:4a:86:d3:23:3a:
17:d7:2d:8d:cc:2a:66:38:80:99:6b:c9:7a:9b:e5:f2:61:7f:
6a:4d:97:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 10:35:32 2025 by rpki-client