Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/57ea8d-c680-40a7-8a29-f076a08e6003/1/PowYl2JPV7404PdguX8RCtW12jo.mft
File: PowYl2JPV7404PdguX8RCtW12jo.mft (raw, json)
Hash identifier: uznz2IQCj3nJolkRZDExxNd9dItaqh/dkycURw2pEjQ=
Subject key identifier: D0:9E:2D:AC:F3:78:BE:54:54:26:FF:40:03:43:B7:FA:4E:E1:0A:A6
Authority key identifier: 3E:8C:18:97:62:4F:57:BE:34:E0:F7:60:B9:7F:11:0A:D5:B5:DA:3A
Certificate issuer: /CN=3e8c1897624f57be34e0f760b97f110ad5b5da3a
Certificate serial: 0198496646D783F90870A72D377D58D69B34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PowYl2JPV7404PdguX8RCtW12jo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/57ea8d-c680-40a7-8a29-f076a08e6003/1/PowYl2JPV7404PdguX8RCtW12jo.mft
Manifest number: 1605
Signing time: Sun 27 Jul 2025 01:01:36 +0000
Manifest this update: Sun 27 Jul 2025 01:01:36 +0000
Manifest next update: Mon 28 Jul 2025 01:01:36 +0000
Files and hashes: 1: OVYlCjQ_Ro8WMpn3BJqI8X0cXxo.roa (hash: H6KoMJLLwg7EnqHTPVQLrBI8uOBDhlfqI6yQtfWr3zo=)
2: PowYl2JPV7404PdguX8RCtW12jo.crl (hash: 68HMIlDm2nZ3QsUr+dxpPIjvRkIhWVZYGSm+8sQPS5w=)
3: lFNEbA4WXa1kqpPRAFp7E-A0l2E.roa (hash: RLdKaSl14tW7ZrRmULGs2dhO8FMuiohKtUpmaqgzRYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/57ea8d-c680-40a7-8a29-f076a08e6003/1/PowYl2JPV7404PdguX8RCtW12jo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/57ea8d-c680-40a7-8a29-f076a08e6003/1/PowYl2JPV7404PdguX8RCtW12jo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PowYl2JPV7404PdguX8RCtW12jo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:46:d7:83:f9:08:70:a7:2d:37:7d:58:d6:9b:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e8c1897624f57be34e0f760b97f110ad5b5da3a
Validity
Not Before: Jul 27 01:01:36 2025 GMT
Not After : Jul 28 01:01:36 2025 GMT
Subject: CN=d09e2dacf378be545426ff400343b7fa4ee10aa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d8:f3:20:bf:8a:ea:42:bd:2e:37:f2:7b:a1:
a3:ee:ae:6f:70:1d:21:d4:fe:b6:06:69:19:49:39:
e9:74:0b:01:a9:a7:3f:6c:0b:69:8a:7b:ad:70:f8:
b2:25:49:31:8e:4e:bf:26:66:f3:a8:d5:19:cb:38:
76:8d:12:1e:d8:7f:32:cb:e1:a9:b5:cd:0f:e6:f3:
e5:c0:6e:40:1c:4e:29:61:3c:a5:e1:b6:5e:92:f5:
bf:71:fd:0d:1c:f3:43:80:eb:01:cd:11:12:6d:cf:
28:37:77:cb:47:a0:18:56:a4:40:f3:a9:45:b3:18:
d8:df:8d:f9:06:98:37:4f:93:74:f7:d8:ec:c4:38:
8b:80:f5:d5:93:f2:ef:18:e4:9a:5f:32:30:c8:e5:
76:25:3e:11:94:0b:9d:b7:9f:d6:d0:4e:c5:94:1b:
d7:02:af:d9:68:d9:60:a3:ad:89:14:62:4e:b8:5f:
ae:6c:f6:7b:bc:5e:ff:22:07:05:88:72:a4:d0:34:
75:37:b8:f3:7d:16:bc:da:f2:4e:2c:de:15:a6:6f:
9e:93:59:17:66:83:83:db:0f:42:a0:25:2b:b2:1d:
b4:e9:db:2e:63:57:e1:32:d3:65:e4:e2:6c:46:9c:
df:01:56:dd:e6:7f:9b:81:ae:e3:d6:84:b1:45:40:
ad:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:9E:2D:AC:F3:78:BE:54:54:26:FF:40:03:43:B7:FA:4E:E1:0A:A6
X509v3 Authority Key Identifier:
keyid:3E:8C:18:97:62:4F:57:BE:34:E0:F7:60:B9:7F:11:0A:D5:B5:DA:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PowYl2JPV7404PdguX8RCtW12jo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/57ea8d-c680-40a7-8a29-f076a08e6003/1/PowYl2JPV7404PdguX8RCtW12jo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/57ea8d-c680-40a7-8a29-f076a08e6003/1/PowYl2JPV7404PdguX8RCtW12jo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:b4:0e:3e:70:bd:16:43:a6:4b:ae:ef:32:40:2a:2e:f4:3a:
47:c5:f0:0f:0e:9b:89:89:24:3a:8a:b8:53:75:2e:94:29:05:
66:c2:71:78:e0:5f:f5:4d:80:c2:b4:1c:f2:08:1e:c9:a0:41:
67:b8:93:f9:2a:9b:98:05:c2:ec:1f:6b:72:83:a3:e0:18:43:
36:a7:83:25:86:b1:84:05:d3:47:31:ff:99:53:d2:f6:75:cb:
25:bc:b9:6d:f8:ef:61:98:cd:73:62:38:77:09:a7:42:6a:e8:
9c:cd:c5:d0:24:26:15:39:f8:14:e8:e2:62:d4:70:9d:58:d9:
31:34:c8:d4:0e:64:db:15:4a:4f:f8:ae:22:76:e1:c5:52:6c:
ac:f2:67:ae:d1:fd:d0:35:d2:70:38:0a:a9:ed:29:a7:3f:a8:
e4:79:cd:41:bc:6d:fd:69:75:db:91:25:78:f9:60:33:28:7c:
84:39:49:1f:c3:b5:81:8c:d9:0c:65:d3:23:57:90:7a:57:ab:
83:d0:4d:6b:ac:24:f7:db:3a:67:82:77:a6:79:d4:17:94:8f:
7d:d9:db:8b:1b:ab:df:ab:23:f2:4f:06:c3:09:bb:95:69:1c:
42:e3:c2:e3:5f:af:b0:9f:9b:11:bf:e8:8f:a4:cd:d7:e8:42:
8a:44:fd:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZkbXg/kIcKctN31Y1ps0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlOGMxODk3NjI0ZjU3YmUzNGUwZjc2MGI5N2YxMTBhZDVi
NWRhM2EwHhcNMjUwNzI3MDEwMTM2WhcNMjUwNzI4MDEwMTM2WjAzMTEwLwYDVQQD
EyhkMDllMmRhY2YzNzhiZTU0NTQyNmZmNDAwMzQzYjdmYTRlZTEwYWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9jzIL+K6kK9Ljfye6Gj7q5vcB0h
1P62BmkZSTnpdAsBqac/bAtpinutcPiyJUkxjk6/JmbzqNUZyzh2jRIe2H8yy+Gp
tc0P5vPlwG5AHE4pYTyl4bZekvW/cf0NHPNDgOsBzRESbc8oN3fLR6AYVqRA86lF
sxjY3435Bpg3T5N099jsxDiLgPXVk/LvGOSaXzIwyOV2JT4RlAudt5/W0E7FlBvX
Aq/ZaNlgo62JFGJOuF+ubPZ7vF7/IgcFiHKk0DR1N7jzfRa82vJOLN4Vpm+ek1kX
ZoOD2w9CoCUrsh206dsuY1fhMtNl5OJsRpzfAVbd5n+bga7j1oSxRUCt4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNCeLazzeL5UVCb/QANDt/pO4QqmMB8GA1UdIwQY
MBaAFD6MGJdiT1e+NOD3YLl/EQrVtdo6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG93WWwySlBWNzQwNFBkZ3VYOFJDdFcxMmpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy81N2VhOGQtYzY4MC00MGE3LThhMjkt
ZjA3NmEwOGU2MDAzLzEvUG93WWwySlBWNzQwNFBkZ3VYOFJDdFcxMmpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy81N2VhOGQtYzY4MC00MGE3LThhMjktZjA3NmEwOGU2MDAz
LzEvUG93WWwySlBWNzQwNFBkZ3VYOFJDdFcxMmpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkrQOPnC9
FkOmS67vMkAqLvQ6R8XwDw6biYkkOoq4U3UulCkFZsJxeOBf9U2AwrQc8ggeyaBB
Z7iT+SqbmAXC7B9rcoOj4BhDNqeDJYaxhAXTRzH/mVPS9nXLJby5bfjvYZjNc2I4
dwmnQmronM3F0CQmFTn4FOjiYtRwnVjZMTTI1A5k2xVKT/iuInbhxVJsrPJnrtH9
0DXScDgKqe0ppz+o5HnNQbxt/Wl125ElePlgMyh8hDlJH8O1gYzZDGXTI1eQeler
g9BNa6wk99s6Z4J3pnnUF5SPfdnbixur36sj8k8Gwwm7lWkcQuPC41+vsJ+bEb/o
j6TN1+hCikT9TA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 09:55:37 2025 by rpki-client