Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/9a4238-7d74-4edf-a4b1-25ed75046b01/1/POsgUJhzLLkIgjBF79XXQCUMayc.mft
File: POsgUJhzLLkIgjBF79XXQCUMayc.mft (raw, json)
Hash identifier: qMrJgsqDrWO7Gc4mSy//cCD9gWqT/2rrTv2CYy5zFyY=
Subject key identifier: 81:07:13:D5:DB:AC:C7:31:AE:2B:93:FD:1C:D5:AA:E3:ED:ED:BF:E3
Authority key identifier: 3C:EB:20:50:98:73:2C:B9:08:82:30:45:EF:D5:D7:40:25:0C:6B:27
Certificate issuer: /CN=3ceb205098732cb908823045efd5d740250c6b27
Certificate serial: 019A4F620233FB45FADD53F9973D5C146853
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/POsgUJhzLLkIgjBF79XXQCUMayc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/9a4238-7d74-4edf-a4b1-25ed75046b01/1/POsgUJhzLLkIgjBF79XXQCUMayc.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 15:00:14 +0000
Manifest this update: Tue 04 Nov 2025 15:00:14 +0000
Manifest next update: Wed 05 Nov 2025 15:00:14 +0000
Files and hashes: 1: POsgUJhzLLkIgjBF79XXQCUMayc.crl (hash: 4nqkGYhxblez1Ai39FCI5RwxtJXfuQMRwvNlhaVOrA0=)
2: glhaGjYvz9mGirczYGxMS81rRfI.roa (hash: cPBvD492Ea2g7PNrZgsOnSXH4CPshMieJYjaq9P+dD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/9a4238-7d74-4edf-a4b1-25ed75046b01/1/POsgUJhzLLkIgjBF79XXQCUMayc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/9a4238-7d74-4edf-a4b1-25ed75046b01/1/POsgUJhzLLkIgjBF79XXQCUMayc.mft
rsync://rpki.ripe.net/repository/DEFAULT/POsgUJhzLLkIgjBF79XXQCUMayc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:02:33:fb:45:fa:dd:53:f9:97:3d:5c:14:68:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ceb205098732cb908823045efd5d740250c6b27
Validity
Not Before: Nov 4 15:00:14 2025 GMT
Not After : Nov 5 15:00:14 2025 GMT
Subject: CN=810713d5dbacc731ae2b93fd1cd5aae3ededbfe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d8:28:22:bb:a5:ef:cc:73:8b:98:59:00:7a:
c7:8a:a8:38:04:69:bb:65:75:86:f0:da:ca:67:58:
18:06:f9:9b:1a:ff:0b:68:26:d1:41:72:4b:40:b1:
8c:a2:27:22:26:73:43:0e:6c:b2:42:99:c5:c1:72:
9e:a9:20:6c:58:b7:4b:4a:78:f6:c7:d3:c4:13:98:
fe:84:ec:78:77:ed:45:0a:68:8b:f2:9d:3b:13:7b:
d7:55:b5:a8:fb:3b:98:6f:26:1f:59:d7:ea:a4:63:
c2:55:e3:25:76:25:2b:09:95:62:8a:74:60:f6:55:
7e:ce:3a:1d:4b:c8:46:16:3f:ef:fc:ec:56:ed:f2:
26:be:be:03:3c:d6:13:c0:20:7d:60:36:fe:aa:56:
a5:9a:b9:36:3d:d4:b8:d6:f2:20:ba:73:0c:83:1a:
f8:86:78:c9:4c:32:7b:87:10:d3:b7:6b:8d:5e:90:
7f:0c:d5:88:a7:86:3a:b3:a1:85:e3:be:f3:a5:11:
72:be:7e:a3:19:c8:99:67:0d:32:73:c8:77:9d:58:
5a:b4:fb:1d:70:cd:e3:33:7b:34:00:d9:1a:1d:3c:
7f:e2:49:20:b9:b9:12:f2:8f:76:83:de:35:dd:a9:
42:14:6c:d9:cc:5b:12:0d:a7:bc:b7:bd:c7:66:0a:
b9:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:07:13:D5:DB:AC:C7:31:AE:2B:93:FD:1C:D5:AA:E3:ED:ED:BF:E3
X509v3 Authority Key Identifier:
keyid:3C:EB:20:50:98:73:2C:B9:08:82:30:45:EF:D5:D7:40:25:0C:6B:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/POsgUJhzLLkIgjBF79XXQCUMayc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9a4238-7d74-4edf-a4b1-25ed75046b01/1/POsgUJhzLLkIgjBF79XXQCUMayc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9a4238-7d74-4edf-a4b1-25ed75046b01/1/POsgUJhzLLkIgjBF79XXQCUMayc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:50:95:89:ee:05:4f:da:62:70:ef:8b:d3:80:ef:f7:8f:1d:
85:20:45:55:ba:23:8c:7d:6d:1c:fe:e4:ee:ec:ca:89:93:79:
77:7c:2b:42:c4:45:31:36:47:3f:cc:0c:ce:cc:a6:44:71:df:
00:ea:42:23:09:40:ef:c7:da:04:60:f7:43:aa:26:03:e8:d6:
18:35:7a:5b:d9:b4:4a:df:f2:67:53:1c:f5:86:ea:9b:1d:0b:
21:92:27:45:34:12:11:a0:49:17:cb:78:85:68:52:c2:bf:ea:
12:82:70:01:fb:85:7f:01:db:68:93:ed:11:c7:aa:88:f6:4b:
6a:8d:c4:ba:92:7b:ca:f5:72:65:73:35:fc:08:38:ae:ca:14:
33:a0:6a:c0:ab:7f:a8:77:28:94:e7:2b:1d:34:ac:a9:c6:6a:
6d:76:3d:e8:72:6b:87:5f:eb:b1:f0:0a:a4:cd:e3:1c:48:d7:
67:a8:e6:3f:93:47:09:fa:0b:8b:1c:f7:b5:3c:4d:5a:2c:33:
22:e2:03:e4:3d:43:3d:da:8c:2c:6e:6d:24:9d:1d:d4:11:a9:
be:cc:e4:9a:ce:8d:dd:eb:70:3e:54:ed:bb:6c:a9:36:f7:a4:
d0:06:b7:d2:49:c2:71:4e:60:17:01:3b:b0:34:27:d7:8b:38:
8c:e1:bf:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:01:43 2025 by rpki-client