Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/96c272-f746-4628-95bc-a6126b54094d/1/pOeg0vxXpnuyt-hcPo14GSvKDxg.mft
File: pOeg0vxXpnuyt-hcPo14GSvKDxg.mft (raw, json)
Hash identifier: IJtZGCTgl1SIKY5XKhBKeTdkLJI7WTr2JSBz+5/+SMQ=
Subject key identifier: 5E:F3:8B:F3:79:F3:46:A8:86:AC:AD:0B:E5:43:39:AA:3C:54:4C:55
Authority key identifier: A4:E7:A0:D2:FC:57:A6:7B:B2:B7:E8:5C:3E:8D:78:19:2B:CA:0F:18
Certificate issuer: /CN=a4e7a0d2fc57a67bb2b7e85c3e8d78192bca0f18
Certificate serial: 0199C1FB12F3F5A5DF68FE075BC65EFAEE05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOeg0vxXpnuyt-hcPo14GSvKDxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/96c272-f746-4628-95bc-a6126b54094d/1/pOeg0vxXpnuyt-hcPo14GSvKDxg.mft
Manifest number: 0B45
Signing time: Wed 08 Oct 2025 04:01:21 +0000
Manifest this update: Wed 08 Oct 2025 04:01:21 +0000
Manifest next update: Thu 09 Oct 2025 04:01:21 +0000
Files and hashes: 1: AdJqJvlWVSQ_2sjUlxPnhKVvXgE.roa (hash: rvwXexvACQ2KWhkVUmfkFIN6qH1hFBVmtLOZa/tj5cA=)
2: KJvnnNhFUTDBaAiTXmZylxAZWgo.roa (hash: st1kuzlQOffihqK5tkHfGz91GmZ0H30PPD1FGd+/4YY=)
3: LktV6JWikoIF232VjBQrp6HksI4.roa (hash: KgS7FsPzBvy4Emf2JVBB8x2vPupCGQ56pl16OI2UqbY=)
4: pOeg0vxXpnuyt-hcPo14GSvKDxg.crl (hash: Ifnfo7urn1NpXaT/KKbE+L37Qp+UYrjt5VhNeQRhxsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/96c272-f746-4628-95bc-a6126b54094d/1/pOeg0vxXpnuyt-hcPo14GSvKDxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/96c272-f746-4628-95bc-a6126b54094d/1/pOeg0vxXpnuyt-hcPo14GSvKDxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/pOeg0vxXpnuyt-hcPo14GSvKDxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 04:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c1:fb:12:f3:f5:a5:df:68:fe:07:5b:c6:5e:fa:ee:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4e7a0d2fc57a67bb2b7e85c3e8d78192bca0f18
Validity
Not Before: Oct 8 04:01:21 2025 GMT
Not After : Oct 9 04:01:21 2025 GMT
Subject: CN=5ef38bf379f346a886acad0be54339aa3c544c55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2a:b4:11:49:5a:7f:cc:cd:22:a0:74:57:ae:
26:12:d8:d8:d8:fe:34:52:48:92:d5:d8:8e:cd:7d:
c9:e6:31:75:8f:c4:d3:83:b8:7e:e3:8b:8b:1b:70:
3f:1a:2f:d8:51:a8:8d:4b:32:e1:d0:10:f5:c5:e2:
1c:57:01:c2:da:2d:29:9f:11:5e:25:0a:40:d9:8c:
1c:e6:17:79:f0:91:4c:39:ba:0b:be:a0:13:35:6e:
f0:a9:28:38:c8:6b:6a:59:09:f4:15:40:c0:64:98:
17:de:8e:b6:b7:4f:cf:41:8b:b6:de:df:7b:ee:2e:
41:14:48:98:74:56:42:19:8a:13:f3:ef:c1:40:aa:
99:5a:d6:fb:c4:2c:9d:f3:12:22:86:e0:56:62:be:
09:d2:53:8d:a3:72:c7:7e:2b:b8:3b:54:5c:15:3f:
3d:45:e2:4b:6c:35:50:8c:d2:bb:e9:f9:cf:09:08:
db:9e:7d:65:6a:09:78:ce:fd:62:15:4b:ca:dc:86:
5d:97:d1:c7:e3:91:26:57:c9:37:ea:2d:1e:f3:aa:
a7:c1:14:68:a2:07:93:a2:44:e7:a7:4f:11:61:3b:
a0:cf:5e:40:89:5f:f6:04:57:0c:13:6b:e2:da:1f:
da:c7:3b:39:de:87:d6:42:aa:d6:52:32:64:b7:3f:
58:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:F3:8B:F3:79:F3:46:A8:86:AC:AD:0B:E5:43:39:AA:3C:54:4C:55
X509v3 Authority Key Identifier:
keyid:A4:E7:A0:D2:FC:57:A6:7B:B2:B7:E8:5C:3E:8D:78:19:2B:CA:0F:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOeg0vxXpnuyt-hcPo14GSvKDxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/96c272-f746-4628-95bc-a6126b54094d/1/pOeg0vxXpnuyt-hcPo14GSvKDxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/96c272-f746-4628-95bc-a6126b54094d/1/pOeg0vxXpnuyt-hcPo14GSvKDxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:06:d3:0c:f7:b3:ac:7f:fa:a0:15:61:4e:e0:f9:05:5a:24:
08:c6:f1:94:33:64:56:7d:fa:6c:7d:08:81:a4:45:06:53:18:
1b:8a:16:96:92:73:06:33:2f:a9:e5:9d:f6:68:39:1a:13:9f:
55:15:ba:8f:c5:2a:62:42:52:59:a9:c9:a6:b5:33:3a:ec:7e:
da:ba:f1:cb:73:b5:65:c3:2b:17:ab:7c:85:8e:c3:17:5c:06:
3a:0d:12:8f:71:7e:56:d2:02:6b:14:5c:07:db:32:cb:42:d8:
92:60:1d:54:c5:88:c9:b6:17:ee:ec:0e:a5:cf:df:95:ce:ea:
10:22:64:1c:2a:cd:10:29:6f:4d:5f:e5:22:c4:5c:2f:14:be:
af:b4:44:b8:b6:68:6f:ca:e8:f7:da:29:e8:27:4f:ff:23:9e:
14:7b:72:19:fd:ac:31:86:54:71:f8:08:5b:df:98:9a:8a:c5:
31:67:55:f5:e7:bf:b0:92:fb:9d:b3:c9:d2:d4:46:da:f5:46:
68:59:ac:31:4d:b3:2b:81:26:15:35:87:c6:c1:33:82:37:23:
d5:67:53:22:83:3f:54:ea:26:af:b1:0c:95:70:0a:c6:9c:1b:
f2:ba:b4:e7:80:6e:ed:aa:8e:cd:fa:29:be:7b:6e:54:6d:29:
2a:4e:1f:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 13:40:06 2025 by rpki-client