Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/9a4238-7d74-4edf-a4b1-25ed75046b01/1/POsgUJhzLLkIgjBF79XXQCUMayc.mft
File: POsgUJhzLLkIgjBF79XXQCUMayc.mft (raw, json)
Hash identifier: xtkk4raY4DqRRx/oCErCndsHREmJMzLgRvjRJuLaFjM=
Subject key identifier: 65:95:B7:38:6E:F6:FB:6F:72:EF:D9:7B:DE:3D:A9:86:BD:8E:26:9E
Authority key identifier: 3C:EB:20:50:98:73:2C:B9:08:82:30:45:EF:D5:D7:40:25:0C:6B:27
Certificate issuer: /CN=3ceb205098732cb908823045efd5d740250c6b27
Certificate serial: 01988F59B3588622FBC214DAADA511AB1D30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/POsgUJhzLLkIgjBF79XXQCUMayc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/9a4238-7d74-4edf-a4b1-25ed75046b01/1/POsgUJhzLLkIgjBF79XXQCUMayc.mft
Manifest number: 1625
Signing time: Sat 09 Aug 2025 15:01:17 +0000
Manifest this update: Sat 09 Aug 2025 15:01:17 +0000
Manifest next update: Sun 10 Aug 2025 15:01:17 +0000
Files and hashes: 1: POsgUJhzLLkIgjBF79XXQCUMayc.crl (hash: nEDmt70bM+adCMoZIl74kCboZRu7sXq7TZOdnD4V6V8=)
2: glhaGjYvz9mGirczYGxMS81rRfI.roa (hash: cPBvD492Ea2g7PNrZgsOnSXH4CPshMieJYjaq9P+dD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/9a4238-7d74-4edf-a4b1-25ed75046b01/1/POsgUJhzLLkIgjBF79XXQCUMayc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/9a4238-7d74-4edf-a4b1-25ed75046b01/1/POsgUJhzLLkIgjBF79XXQCUMayc.mft
rsync://rpki.ripe.net/repository/DEFAULT/POsgUJhzLLkIgjBF79XXQCUMayc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:59:b3:58:86:22:fb:c2:14:da:ad:a5:11:ab:1d:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ceb205098732cb908823045efd5d740250c6b27
Validity
Not Before: Aug 9 15:01:17 2025 GMT
Not After : Aug 10 15:01:17 2025 GMT
Subject: CN=6595b7386ef6fb6f72efd97bde3da986bd8e269e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f3:f8:5e:5b:9e:18:72:80:05:48:46:73:c6:
a8:0e:e2:a7:ed:a2:58:b5:9e:d5:1f:98:3f:93:8c:
d4:c8:6c:df:60:00:c0:ac:80:50:22:64:4f:00:31:
90:2e:70:12:3d:70:d4:1a:75:c9:ef:ce:ec:fd:af:
31:d9:8a:f9:ac:93:89:f9:51:0b:e5:6f:b5:25:d8:
57:8c:c8:bb:6e:d6:1c:e2:b4:19:07:c3:12:d2:96:
59:ae:37:58:d4:db:ca:56:19:97:12:a4:3f:8f:ec:
24:e5:35:b3:09:a8:21:5b:42:d6:b2:1f:45:a8:be:
20:51:4f:96:3f:ba:e8:c6:d7:e2:ed:dc:b4:85:c8:
be:dd:b3:97:5e:38:92:72:95:54:3c:14:9c:bf:a8:
d8:f0:d7:72:6a:21:18:79:fb:8a:ad:de:97:21:fa:
ac:98:f5:2a:dd:ce:9f:e8:3c:51:07:82:7e:62:40:
45:56:a2:cb:b1:7d:66:5d:ba:ac:dd:98:39:f6:a8:
b6:df:29:c4:6e:19:e7:56:65:01:f2:df:f1:df:23:
5b:0e:94:ca:52:ae:19:04:07:48:6d:ed:36:4b:35:
15:66:8c:e0:df:7b:a8:20:32:6b:db:3c:d1:41:77:
38:f9:f6:4a:ac:f2:30:f5:88:f0:37:e4:18:1e:84:
fc:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:95:B7:38:6E:F6:FB:6F:72:EF:D9:7B:DE:3D:A9:86:BD:8E:26:9E
X509v3 Authority Key Identifier:
keyid:3C:EB:20:50:98:73:2C:B9:08:82:30:45:EF:D5:D7:40:25:0C:6B:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/POsgUJhzLLkIgjBF79XXQCUMayc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9a4238-7d74-4edf-a4b1-25ed75046b01/1/POsgUJhzLLkIgjBF79XXQCUMayc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9a4238-7d74-4edf-a4b1-25ed75046b01/1/POsgUJhzLLkIgjBF79XXQCUMayc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:46:c2:f1:24:82:15:e5:67:d0:26:88:bb:f9:ea:84:b2:4a:
20:28:52:23:b5:cc:26:29:1a:31:b6:b7:65:40:52:af:e4:ef:
5f:f4:32:93:e3:f0:e5:89:74:e2:97:3f:1c:89:73:bf:e9:f5:
c5:92:15:07:83:1f:ad:f8:00:a1:71:f0:f5:37:19:4d:ed:9e:
fe:f9:6d:56:43:ad:4d:3a:6c:d7:ef:ad:af:c5:4e:45:7e:09:
05:7c:b1:47:e7:e3:df:fa:2a:f4:56:79:93:bc:e7:c8:bc:0a:
d0:fb:93:55:57:4b:fa:d9:12:de:a6:25:fb:dd:84:69:eb:d3:
8b:82:96:c2:26:a7:d4:ce:ab:ea:be:68:f5:29:6a:83:e9:75:
1d:27:9a:c7:58:79:ee:ec:f7:56:32:c0:07:1f:ee:2e:1b:46:
bf:a8:be:7b:3b:c2:48:36:09:3f:40:98:ee:8c:2e:d1:ca:ed:
08:b3:4b:f7:d0:04:98:3e:ac:9f:e6:d6:1e:59:b0:e3:cc:b2:
6d:11:6d:96:40:26:d8:12:9d:ea:d9:a6:64:04:10:8a:b7:a0:
e3:fc:48:28:10:70:c5:61:e3:fb:53:5b:f2:ab:fc:02:33:a9:
fb:48:7b:63:c7:1e:36:d7:8e:cc:d3:cf:67:eb:a7:ea:14:5a:
ad:ff:c4:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiPWbNYhiL7whTaraURqx0wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjZWIyMDUwOTg3MzJjYjkwODgyMzA0NWVmZDVkNzQwMjUw
YzZiMjcwHhcNMjUwODA5MTUwMTE3WhcNMjUwODEwMTUwMTE3WjAzMTEwLwYDVQQD
Eyg2NTk1YjczODZlZjZmYjZmNzJlZmQ5N2JkZTNkYTk4NmJkOGUyNjllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/P4XlueGHKABUhGc8aoDuKn7aJY
tZ7VH5g/k4zUyGzfYADArIBQImRPADGQLnASPXDUGnXJ787s/a8x2Yr5rJOJ+VEL
5W+1JdhXjMi7btYc4rQZB8MS0pZZrjdY1NvKVhmXEqQ/j+wk5TWzCaghW0LWsh9F
qL4gUU+WP7roxtfi7dy0hci+3bOXXjiScpVUPBScv6jY8NdyaiEYefuKrd6XIfqs
mPUq3c6f6DxRB4J+YkBFVqLLsX1mXbqs3Zg59qi23ynEbhnnVmUB8t/x3yNbDpTK
Uq4ZBAdIbe02SzUVZozg33uoIDJr2zzRQXc4+fZKrPIw9YjwN+QYHoT8cwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGWVtzhu9vtvcu/Ze949qYa9jiaeMB8GA1UdIwQY
MBaAFDzrIFCYcyy5CIIwRe/V10AlDGsnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUE9zZ1VKaHpMTGtJZ2pCRjc5WFhRQ1VNYXljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC85YTQyMzgtN2Q3NC00ZWRmLWE0YjEt
MjVlZDc1MDQ2YjAxLzEvUE9zZ1VKaHpMTGtJZ2pCRjc5WFhRQ1VNYXljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC85YTQyMzgtN2Q3NC00ZWRmLWE0YjEtMjVlZDc1MDQ2YjAx
LzEvUE9zZ1VKaHpMTGtJZ2pCRjc5WFhRQ1VNYXljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANUbC8SSC
FeVn0CaIu/nqhLJKIChSI7XMJikaMba3ZUBSr+TvX/Qyk+Pw5Yl04pc/HIlzv+n1
xZIVB4MfrfgAoXHw9TcZTe2e/vltVkOtTTps1++tr8VORX4JBXyxR+fj3/oq9FZ5
k7znyLwK0PuTVVdL+tkS3qYl+92EaevTi4KWwian1M6r6r5o9Slqg+l1HSeax1h5
7uz3VjLABx/uLhtGv6i+ezvCSDYJP0CY7owu0crtCLNL99AEmD6sn+bWHlmw48yy
bRFtlkAm2BKd6tmmZAQQireg4/xIKBBwxWHj+1Nb8qv8AjOp+0h7Y8ceNteOzNPP
Z+un6hRarf/Ekg==
-----END CERTIFICATE-----
Generated at Sat Aug 9 22:39:11 2025 by rpki-client