Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/47d7f7-b019-42e9-bb08-d69c0134f5a8/1/POwGHF7VbcoHdT_ktbjAkNl60OE.mft
File: POwGHF7VbcoHdT_ktbjAkNl60OE.mft (raw, json)
Hash identifier: kgK4I5jqvt0VghVG89PsU5c0rH+on+PmsP7hhkapgZk=
Subject key identifier: 55:BD:34:AA:64:1F:50:FE:91:CA:0F:05:63:1E:D6:BF:25:8F:44:92
Authority key identifier: 3C:EC:06:1C:5E:D5:6D:CA:07:75:3F:E4:B5:B8:C0:90:D9:7A:D0:E1
Certificate issuer: /CN=3cec061c5ed56dca07753fe4b5b8c090d97ad0e1
Certificate serial: 019A4D3D15A0463480EEB77947C989CD5606
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/POwGHF7VbcoHdT_ktbjAkNl60OE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/47d7f7-b019-42e9-bb08-d69c0134f5a8/1/POwGHF7VbcoHdT_ktbjAkNl60OE.mft
Manifest number: 06AE
Signing time: Tue 04 Nov 2025 05:00:40 +0000
Manifest this update: Tue 04 Nov 2025 05:00:40 +0000
Manifest next update: Wed 05 Nov 2025 05:00:40 +0000
Files and hashes: 1: J--9FTqyd7jwis3viXw5cnMN5-o.roa (hash: DC3T7Frr+GR57cEYLFoZVlKHfiR/SiiUWqjetZEXAWY=)
2: POwGHF7VbcoHdT_ktbjAkNl60OE.crl (hash: yCIpinacHyOEmr0Z1c4etaBc8dz5dD/ugIEubCaAwY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/47d7f7-b019-42e9-bb08-d69c0134f5a8/1/POwGHF7VbcoHdT_ktbjAkNl60OE.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/47d7f7-b019-42e9-bb08-d69c0134f5a8/1/POwGHF7VbcoHdT_ktbjAkNl60OE.mft
rsync://rpki.ripe.net/repository/DEFAULT/POwGHF7VbcoHdT_ktbjAkNl60OE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:15:a0:46:34:80:ee:b7:79:47:c9:89:cd:56:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cec061c5ed56dca07753fe4b5b8c090d97ad0e1
Validity
Not Before: Nov 4 05:00:40 2025 GMT
Not After : Nov 5 05:00:40 2025 GMT
Subject: CN=55bd34aa641f50fe91ca0f05631ed6bf258f4492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:aa:ec:74:ce:78:32:ec:65:0f:ad:71:4a:a1:
63:68:75:1f:09:b9:9d:fa:07:97:f5:6d:6e:12:bb:
c5:72:1b:ac:29:91:46:71:83:2b:82:8c:e5:e4:86:
76:87:55:60:de:64:04:d5:41:76:4b:54:c0:9b:52:
a4:81:34:d5:27:da:8f:3d:44:2e:d2:04:f1:79:02:
aa:9c:87:ae:d4:30:1d:22:c3:60:55:8a:90:11:93:
6c:2c:cb:b3:b7:ef:db:f4:06:13:1c:59:14:a5:a9:
b2:23:41:b8:ac:95:47:05:9b:aa:55:d6:e4:b2:0f:
b7:02:3c:e1:9e:bb:c3:1f:70:77:25:b5:65:49:07:
2d:05:fc:a7:01:81:1d:2d:02:97:21:d1:2b:ae:7b:
fb:05:0d:4c:9e:01:f0:9f:32:d5:60:af:b5:e7:f8:
b2:c1:4b:53:0f:d7:6e:a7:46:dc:22:20:d3:c5:11:
00:e9:fc:7c:fe:b0:c2:e8:74:27:74:e8:d0:ea:4a:
49:00:6b:59:d3:9c:ce:6d:4c:98:80:cb:9c:62:82:
63:6c:63:15:0e:5d:f3:bd:1c:cf:13:bf:4f:f6:a2:
fe:3c:aa:a8:c2:f4:93:77:ce:2f:26:d7:21:51:00:
a3:b8:1c:da:8a:c6:ab:2c:7b:ba:77:0f:0d:27:7d:
3a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:BD:34:AA:64:1F:50:FE:91:CA:0F:05:63:1E:D6:BF:25:8F:44:92
X509v3 Authority Key Identifier:
keyid:3C:EC:06:1C:5E:D5:6D:CA:07:75:3F:E4:B5:B8:C0:90:D9:7A:D0:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/POwGHF7VbcoHdT_ktbjAkNl60OE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/47d7f7-b019-42e9-bb08-d69c0134f5a8/1/POwGHF7VbcoHdT_ktbjAkNl60OE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/47d7f7-b019-42e9-bb08-d69c0134f5a8/1/POwGHF7VbcoHdT_ktbjAkNl60OE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:af:6c:60:64:5c:31:b1:8a:44:8c:04:51:cc:ec:d4:99:74:
55:d1:7c:15:80:53:47:52:62:92:b7:76:48:85:96:0e:66:1b:
42:d5:2d:cf:fa:92:4c:23:6e:14:16:00:5b:2b:2e:23:41:25:
62:99:81:af:bd:19:6d:03:3d:01:23:85:05:6a:6e:49:82:ee:
5f:01:3f:03:e3:b2:b4:3b:27:c1:83:bd:14:00:f4:7f:c1:27:
9c:79:e8:9e:4e:fe:e1:37:15:61:be:e2:fd:fb:6d:34:a0:51:
15:be:66:13:5b:b6:bf:c2:e4:5f:77:d0:6f:fc:55:68:db:45:
b8:e8:45:ee:41:73:fe:33:48:49:c5:85:37:7f:25:1f:84:a5:
07:68:91:f7:64:c0:56:c6:0f:33:a6:9c:9a:b7:a6:1b:9e:d6:
4a:1d:ae:0f:ff:5a:87:04:2f:31:22:3f:48:c9:72:96:94:89:
4d:cf:1a:0e:8f:c3:0e:38:f9:40:48:35:91:33:f0:d3:0a:a5:
bc:14:19:31:9c:50:16:50:81:f0:f2:82:c7:46:64:a1:d6:26:
f7:53:dc:29:c7:8d:74:e0:41:16:c6:6c:64:39:06:cf:a9:0d:
60:5e:27:87:df:3a:d3:23:c3:77:02:97:ad:65:4d:df:76:b9:
bd:65:d5:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:52:26 2025 by rpki-client