Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft
File: po_5Ip79jRK0Jz80b4xkVOpYfsw.mft (raw, json)
Hash identifier: KbsVD+cIeXCq+ipM/K90wfs4DDzSIa12JFUgQkuBTRY=
Subject key identifier: BA:12:D4:53:7E:AD:16:C6:D9:83:41:0D:1D:CC:52:B5:9A:D2:4E:17
Authority key identifier: A6:8F:F9:22:9E:FD:8D:12:B4:27:3F:34:6F:8C:64:54:EA:58:7E:CC
Certificate issuer: /CN=a68ff9229efd8d12b4273f346f8c6454ea587ecc
Certificate serial: 019A4E18DC31493F865E416AEEF9BC07B304
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/po_5Ip79jRK0Jz80b4xkVOpYfsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 09:00:43 +0000
Manifest this update: Tue 04 Nov 2025 09:00:43 +0000
Manifest next update: Wed 05 Nov 2025 09:00:43 +0000
Files and hashes: 1: NvB3sbtKygBuV_bHy4ubiaP6jUc.roa (hash: QHR99wgFE0npSuCrsPzML6fCQB1JMr/5JCdaknSW7aY=)
2: mkpPO0iUB-Trjc2yot_MhVuYzeI.roa (hash: bl4jbnOxpRldBgzWUbIAjtNRBkTTSgb/YiMXDC223qY=)
3: po_5Ip79jRK0Jz80b4xkVOpYfsw.crl (hash: lQt+dgM5UypG8KWkCN4auEqPK3qN90uNFphTvc42DBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/po_5Ip79jRK0Jz80b4xkVOpYfsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:dc:31:49:3f:86:5e:41:6a:ee:f9:bc:07:b3:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a68ff9229efd8d12b4273f346f8c6454ea587ecc
Validity
Not Before: Nov 4 09:00:43 2025 GMT
Not After : Nov 5 09:00:43 2025 GMT
Subject: CN=ba12d4537ead16c6d983410d1dcc52b59ad24e17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a1:0b:c8:d1:da:97:46:30:2e:73:a7:06:59:
c7:0d:98:fb:d2:a1:96:1a:0d:25:74:a2:56:3f:f0:
cf:77:62:0a:4c:5e:18:d6:ea:ba:99:d3:4c:fa:a5:
cb:7f:9a:80:aa:ae:58:bf:3c:83:03:c4:a4:18:19:
be:56:35:35:26:fc:a5:82:a9:73:58:76:cb:c3:35:
f9:54:1c:f4:4b:dc:67:39:bd:34:32:51:b8:36:7f:
12:95:12:34:ed:55:d4:fc:06:0e:0a:98:0d:19:95:
5f:50:40:ea:f4:4b:4e:85:d4:86:cf:44:fd:0e:7c:
18:b9:2f:d2:c3:70:28:a0:62:19:f6:a9:b2:94:3f:
75:da:0d:74:cf:eb:e5:56:e5:cc:be:39:e3:21:98:
23:29:a9:ba:2b:1d:49:48:2a:d2:53:36:0b:e7:0d:
d6:05:be:bf:22:e8:84:fa:b3:03:fc:ab:6a:b3:a1:
9f:38:c3:6d:84:e8:00:63:97:b4:d7:b6:ee:19:6d:
02:6e:6d:8a:1a:fb:40:85:a3:3d:f8:ed:77:34:df:
df:17:3c:8b:ed:71:14:0c:be:ff:65:d6:79:54:ee:
9a:a6:aa:4d:6d:1b:90:4d:b2:69:6b:1f:2d:66:d0:
81:5c:6c:54:4b:cc:8e:89:27:e5:63:2e:36:77:75:
29:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:12:D4:53:7E:AD:16:C6:D9:83:41:0D:1D:CC:52:B5:9A:D2:4E:17
X509v3 Authority Key Identifier:
keyid:A6:8F:F9:22:9E:FD:8D:12:B4:27:3F:34:6F:8C:64:54:EA:58:7E:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/po_5Ip79jRK0Jz80b4xkVOpYfsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:8b:49:74:b2:5a:c4:1b:fc:d5:64:25:60:c6:24:fd:f1:4f:
fc:14:78:0c:fa:16:3f:17:19:0d:ad:f4:13:0d:9e:84:83:2b:
9a:46:6c:3a:40:7c:16:6b:53:4e:83:a1:26:a1:f5:07:dd:a5:
a7:8b:21:25:b5:ff:01:1d:62:d8:32:a3:51:5a:0f:85:97:ae:
4e:89:47:18:e9:8a:bf:78:ad:7d:12:ba:48:28:5e:93:7a:c5:
3c:54:04:2e:31:87:a8:c4:40:6d:49:2d:96:3a:64:2c:d6:f8:
6e:b6:f3:fc:cc:88:0e:f8:50:df:7b:23:b6:f2:30:64:91:dc:
67:d7:a6:d9:f2:fa:53:9d:95:f0:28:41:cd:bb:2a:a7:c4:ff:
4b:c2:bb:1c:df:1f:63:1a:9a:80:88:f1:28:09:20:ab:47:74:
f3:3b:98:33:49:f2:49:72:7b:70:3b:bf:04:0c:7f:70:ae:d1:
79:0d:d8:91:f8:4c:cd:ee:83:e4:b5:02:82:74:eb:1c:4f:9a:
9a:04:24:34:85:0c:4c:40:3e:9e:49:95:7a:6a:1c:14:32:76:
9f:ec:4d:f3:56:33:dc:0d:c5:fc:f0:3b:eb:0f:3c:1d:01:c1:
aa:18:d5:4e:98:17:0e:c4:7c:72:99:5a:e6:ca:8b:bb:a8:5a:
af:14:58:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:00:57 2025 by rpki-client