Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft
File: po_5Ip79jRK0Jz80b4xkVOpYfsw.mft (raw, json)
Hash identifier: uojZqsUKT7wBZU3hUTE3ovgJtZ8IbUsKmHfuLYjVgBs=
Subject key identifier: 85:90:11:64:EC:26:2E:DC:8C:9A:99:3A:C9:7D:3F:EA:80:CC:BF:1B
Authority key identifier: A6:8F:F9:22:9E:FD:8D:12:B4:27:3F:34:6F:8C:64:54:EA:58:7E:CC
Certificate issuer: /CN=a68ff9229efd8d12b4273f346f8c6454ea587ecc
Certificate serial: 0198808B6ABAFD4433B4BA11A180E3567164
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/po_5Ip79jRK0Jz80b4xkVOpYfsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft
Manifest number: 1621
Signing time: Wed 06 Aug 2025 18:01:17 +0000
Manifest this update: Wed 06 Aug 2025 18:01:17 +0000
Manifest next update: Thu 07 Aug 2025 18:01:17 +0000
Files and hashes: 1: NvB3sbtKygBuV_bHy4ubiaP6jUc.roa (hash: QHR99wgFE0npSuCrsPzML6fCQB1JMr/5JCdaknSW7aY=)
2: mkpPO0iUB-Trjc2yot_MhVuYzeI.roa (hash: bl4jbnOxpRldBgzWUbIAjtNRBkTTSgb/YiMXDC223qY=)
3: po_5Ip79jRK0Jz80b4xkVOpYfsw.crl (hash: k6A91Neaj6B06FUNoARE8bQDW4pg0ePdJSeH9923Lx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/po_5Ip79jRK0Jz80b4xkVOpYfsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 18:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:8b:6a:ba:fd:44:33:b4:ba:11:a1:80:e3:56:71:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a68ff9229efd8d12b4273f346f8c6454ea587ecc
Validity
Not Before: Aug 6 18:01:17 2025 GMT
Not After : Aug 7 18:01:17 2025 GMT
Subject: CN=85901164ec262edc8c9a993ac97d3fea80ccbf1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:fd:65:30:26:06:4d:a8:64:66:de:f1:1d:bc:
54:64:8b:55:da:3c:b1:ff:bc:d4:0c:7c:c2:18:f7:
99:9e:ed:42:cd:42:14:f2:58:b1:a4:1a:d4:98:eb:
83:90:ed:db:cc:a4:ae:c9:e0:dc:ba:e8:a6:00:ef:
d1:f4:49:95:84:05:25:fb:64:f7:5e:af:76:5a:36:
79:5b:c0:37:fd:2e:b0:33:03:32:8d:4f:66:29:9d:
18:b1:4b:db:8d:41:8b:0b:2e:1a:39:d5:30:8d:fd:
a2:68:14:7c:e1:cc:8a:9d:c8:bf:75:06:b3:17:91:
87:b0:65:c7:9b:70:e9:5c:57:fe:a6:2a:a0:0a:b8:
8f:75:b6:dc:51:75:2f:26:0a:04:0c:27:c7:44:c9:
ba:9b:7b:d6:a0:78:30:22:29:96:ce:08:2c:5b:5b:
cf:88:ff:a8:79:a6:42:da:a8:a4:e6:6f:80:5f:ca:
42:fc:dd:aa:14:a1:7c:74:cc:7d:21:3d:91:8a:63:
25:93:69:b2:50:6f:07:ab:db:8b:05:76:88:e5:d1:
db:f0:4a:28:73:26:f0:88:66:a6:19:84:98:22:d4:
11:ad:c6:83:5e:c3:d1:a8:73:59:78:2f:ba:3c:5f:
88:2f:7c:3d:93:8b:4c:14:b0:2b:d3:7c:b2:9d:b5:
49:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:90:11:64:EC:26:2E:DC:8C:9A:99:3A:C9:7D:3F:EA:80:CC:BF:1B
X509v3 Authority Key Identifier:
keyid:A6:8F:F9:22:9E:FD:8D:12:B4:27:3F:34:6F:8C:64:54:EA:58:7E:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/po_5Ip79jRK0Jz80b4xkVOpYfsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:e4:fb:6e:53:7b:54:0e:3b:18:92:e2:38:92:1c:4b:b5:25:
8e:de:3d:f4:c8:2e:75:36:96:30:c2:56:6c:28:dc:7b:cf:00:
66:f1:9a:a0:5c:b1:a9:c8:35:6a:03:b1:ee:29:b1:e1:be:6a:
4a:60:6c:e9:ba:0d:e3:d1:01:59:84:dc:25:35:6b:98:12:97:
a5:e0:f8:a1:dc:36:98:4d:70:90:01:c1:cc:18:27:e1:04:c0:
4c:b6:61:f3:b9:ed:05:0f:a4:af:fb:02:13:6c:34:9d:0e:ea:
2b:fe:28:fc:83:eb:b0:e4:8a:0d:0d:09:80:8a:82:0f:aa:16:
58:c9:36:79:27:c7:cf:7b:c4:d2:a3:a8:00:08:6d:0c:d6:2e:
57:f2:ac:f8:a7:e5:56:23:3d:72:a6:02:d0:52:20:62:99:b1:
73:78:37:cd:3c:bd:d7:e2:81:35:a3:bd:dc:d9:ef:cd:ad:96:
36:da:50:26:02:00:4e:fd:d2:09:0c:dc:ad:4b:f6:b6:f4:4a:
c4:24:4c:39:75:48:1f:51:dd:db:80:75:8b:28:fb:0e:18:71:
11:66:6a:8d:f3:38:39:20:8a:fb:ee:5d:f2:a8:a2:e9:95:46:
92:59:d5:e1:40:dd:a0:b1:0b:ad:cf:e7:51:c6:b1:40:9f:e3:
e3:c3:c4:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:01:55 2025 by rpki-client