Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/47d7f7-b019-42e9-bb08-d69c0134f5a8/1/POwGHF7VbcoHdT_ktbjAkNl60OE.mft
File: POwGHF7VbcoHdT_ktbjAkNl60OE.mft (raw, json)
Hash identifier: qpvQxgJCqVH+0U9mQhgOEIEBcrt1nFkxnuWIUZRonsY=
Subject key identifier: 4F:02:D4:C1:39:C1:1D:3E:C0:CF:4D:27:94:DA:A7:20:A7:98:EA:7A
Authority key identifier: 3C:EC:06:1C:5E:D5:6D:CA:07:75:3F:E4:B5:B8:C0:90:D9:7A:D0:E1
Certificate issuer: /CN=3cec061c5ed56dca07753fe4b5b8c090d97ad0e1
Certificate serial: 01987418C2324B7D3C24D666BCBA0218AAA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/POwGHF7VbcoHdT_ktbjAkNl60OE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/47d7f7-b019-42e9-bb08-d69c0134f5a8/1/POwGHF7VbcoHdT_ktbjAkNl60OE.mft
Manifest number: 05B9
Signing time: Mon 04 Aug 2025 08:00:36 +0000
Manifest this update: Mon 04 Aug 2025 08:00:36 +0000
Manifest next update: Tue 05 Aug 2025 08:00:36 +0000
Files and hashes: 1: J--9FTqyd7jwis3viXw5cnMN5-o.roa (hash: DC3T7Frr+GR57cEYLFoZVlKHfiR/SiiUWqjetZEXAWY=)
2: POwGHF7VbcoHdT_ktbjAkNl60OE.crl (hash: PkOkWTpKooqvVKWaT6Do/HQ2g8BfGEK02j2tM+amC1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/47d7f7-b019-42e9-bb08-d69c0134f5a8/1/POwGHF7VbcoHdT_ktbjAkNl60OE.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/47d7f7-b019-42e9-bb08-d69c0134f5a8/1/POwGHF7VbcoHdT_ktbjAkNl60OE.mft
rsync://rpki.ripe.net/repository/DEFAULT/POwGHF7VbcoHdT_ktbjAkNl60OE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:18:c2:32:4b:7d:3c:24:d6:66:bc:ba:02:18:aa:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cec061c5ed56dca07753fe4b5b8c090d97ad0e1
Validity
Not Before: Aug 4 08:00:36 2025 GMT
Not After : Aug 5 08:00:36 2025 GMT
Subject: CN=4f02d4c139c11d3ec0cf4d2794daa720a798ea7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ba:84:71:24:62:7e:cf:3a:b9:ce:f9:5a:48:
84:09:b5:2d:12:c1:83:b1:f7:19:07:47:a3:1c:fd:
cc:65:6c:f1:3f:a3:4a:e1:32:03:a3:af:a9:f9:13:
96:5a:ed:56:d7:f4:6a:ba:9d:b7:7f:90:79:06:6c:
c8:10:af:d6:d7:9d:61:98:aa:45:f7:dc:c9:eb:57:
11:58:79:27:22:1b:85:07:ca:bd:7a:52:10:6b:8e:
10:07:34:e3:5b:81:4d:71:dc:44:8d:37:29:06:c1:
68:60:d2:2a:75:6b:6f:5a:25:6a:12:5d:ea:26:f0:
9d:18:70:76:b6:61:c6:46:63:16:a0:c1:9e:f9:d5:
e2:d6:09:25:b3:23:a4:c1:5f:0f:9c:4c:80:96:8d:
01:34:39:a7:85:5a:7e:e4:5a:f2:de:22:da:a0:be:
ec:2a:7b:55:7e:7b:32:2f:2c:a7:36:f1:2c:46:03:
24:39:f2:a4:f1:d0:cd:00:bc:8e:bd:e3:b3:e5:4c:
0e:bd:63:7b:02:56:91:37:1a:66:47:a7:da:74:73:
0c:15:c4:88:38:8c:66:d0:82:d0:fe:cb:5d:2b:64:
3d:bc:56:f4:72:98:88:1e:96:b4:71:4e:6d:b7:ed:
ac:1f:c1:9e:24:49:1b:10:86:54:46:33:f9:ea:ae:
2a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:02:D4:C1:39:C1:1D:3E:C0:CF:4D:27:94:DA:A7:20:A7:98:EA:7A
X509v3 Authority Key Identifier:
keyid:3C:EC:06:1C:5E:D5:6D:CA:07:75:3F:E4:B5:B8:C0:90:D9:7A:D0:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/POwGHF7VbcoHdT_ktbjAkNl60OE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/47d7f7-b019-42e9-bb08-d69c0134f5a8/1/POwGHF7VbcoHdT_ktbjAkNl60OE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/47d7f7-b019-42e9-bb08-d69c0134f5a8/1/POwGHF7VbcoHdT_ktbjAkNl60OE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:6c:61:22:4d:21:71:7e:75:26:90:64:6d:f9:91:1f:54:1b:
e1:c5:b2:ed:be:9b:cc:fa:df:5e:d1:96:49:63:6c:5a:65:64:
0b:77:a4:4b:56:46:77:44:65:31:5d:ae:95:ed:01:33:b2:49:
a7:11:bd:e6:cb:a7:a4:04:95:32:ed:57:5c:11:4e:b8:b6:8e:
63:54:f2:e1:5b:d9:17:a0:55:f7:49:31:81:ee:c0:45:8a:a3:
aa:41:3f:1b:69:a8:e0:c5:e7:3f:f0:89:fa:58:56:04:01:65:
4d:dd:42:c0:1a:d7:e5:79:54:79:85:e2:20:5c:f1:19:af:0f:
de:19:fa:11:33:f2:30:d3:fc:74:c9:6e:85:5b:96:da:e7:18:
e2:40:99:ca:f9:0d:d5:f7:fd:42:55:f9:81:4a:f0:3e:ec:37:
a6:b7:79:8c:73:b7:2a:40:da:af:47:7e:c8:83:35:56:67:3b:
8d:9d:c3:d5:69:f8:08:45:b2:63:f4:74:69:36:a8:ec:5f:6d:
80:00:22:76:c0:95:93:ff:3f:54:61:7e:79:b6:83:1d:85:b2:
9d:7e:5b:ff:5a:77:5e:f5:cf:db:7c:fc:1f:ba:09:2d:6c:9f:
74:26:0c:35:3a:f1:0f:7c:2f:95:96:b0:ff:cb:82:84:fa:28:
06:6c:e9:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:07:11 2025 by rpki-client