Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/9a4238-7d74-4edf-a4b1-25ed75046b01/1/POsgUJhzLLkIgjBF79XXQCUMayc.mft
File: POsgUJhzLLkIgjBF79XXQCUMayc.mft (raw, json)
Hash identifier: NOsl+0QDGsdxb2u8h7HyAxLc+rG6vGwSHHqpyRVkOQI=
Subject key identifier: FA:18:23:85:91:3F:48:F6:6D:76:C5:75:3F:54:40:71:A5:3C:26:18
Authority key identifier: 3C:EB:20:50:98:73:2C:B9:08:82:30:45:EF:D5:D7:40:25:0C:6B:27
Certificate issuer: /CN=3ceb205098732cb908823045efd5d740250c6b27
Certificate serial: 019845F6C355B5BE4C3CCDA7B175588F6026
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/POsgUJhzLLkIgjBF79XXQCUMayc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/9a4238-7d74-4edf-a4b1-25ed75046b01/1/POsgUJhzLLkIgjBF79XXQCUMayc.mft
Manifest number: 15FF
Signing time: Sat 26 Jul 2025 09:00:56 +0000
Manifest this update: Sat 26 Jul 2025 09:00:56 +0000
Manifest next update: Sun 27 Jul 2025 09:00:56 +0000
Files and hashes: 1: POsgUJhzLLkIgjBF79XXQCUMayc.crl (hash: 55nk3bKwQSFOj6M9+IBP6KWFwtE3N7CH1VpGgNhIsOc=)
2: glhaGjYvz9mGirczYGxMS81rRfI.roa (hash: cPBvD492Ea2g7PNrZgsOnSXH4CPshMieJYjaq9P+dD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/9a4238-7d74-4edf-a4b1-25ed75046b01/1/POsgUJhzLLkIgjBF79XXQCUMayc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/9a4238-7d74-4edf-a4b1-25ed75046b01/1/POsgUJhzLLkIgjBF79XXQCUMayc.mft
rsync://rpki.ripe.net/repository/DEFAULT/POsgUJhzLLkIgjBF79XXQCUMayc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:f6:c3:55:b5:be:4c:3c:cd:a7:b1:75:58:8f:60:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ceb205098732cb908823045efd5d740250c6b27
Validity
Not Before: Jul 26 09:00:56 2025 GMT
Not After : Jul 27 09:00:56 2025 GMT
Subject: CN=fa182385913f48f66d76c5753f544071a53c2618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:81:28:03:bf:e2:b8:d7:cc:7e:f6:77:e0:e7:
56:07:ae:87:59:9d:c9:c3:83:d2:fe:a0:33:c4:51:
34:7d:d7:57:78:12:da:c6:9f:3e:1b:a7:6f:ef:7e:
08:e2:fb:e3:6d:b0:de:9b:f2:8f:e6:2b:7d:67:5a:
6e:f9:f9:4a:7e:21:ab:2a:e3:21:05:1f:bc:d5:66:
f4:d8:36:85:39:03:96:fc:86:63:47:64:e7:c4:dd:
0f:a7:f3:7c:fb:c1:a6:bf:14:e5:ca:f8:d5:59:2e:
49:ae:56:69:2f:3d:08:d8:2a:29:ba:76:d5:4b:de:
10:83:75:a2:6f:45:cd:57:fe:ac:be:bf:37:25:8c:
db:90:da:16:f5:0d:99:f5:50:8a:4c:a5:1f:74:52:
a4:a8:f9:0f:dd:45:f8:8e:2f:5c:ae:cc:c2:c7:e2:
ea:36:a7:27:42:fd:19:ea:4a:c6:e6:82:79:98:60:
cb:89:a8:ae:6d:4b:6a:8a:e1:82:a1:fa:3b:52:be:
05:cc:2d:25:e2:a4:1f:f3:5f:df:d8:aa:ae:e4:bb:
1e:ec:35:13:20:1b:8e:29:e3:e2:75:35:4d:ab:35:
37:44:bb:1a:40:cd:12:29:33:f1:86:3b:19:c6:68:
c7:3a:d6:72:e6:4e:b6:39:46:78:14:c9:0c:d2:0d:
f6:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:18:23:85:91:3F:48:F6:6D:76:C5:75:3F:54:40:71:A5:3C:26:18
X509v3 Authority Key Identifier:
keyid:3C:EB:20:50:98:73:2C:B9:08:82:30:45:EF:D5:D7:40:25:0C:6B:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/POsgUJhzLLkIgjBF79XXQCUMayc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9a4238-7d74-4edf-a4b1-25ed75046b01/1/POsgUJhzLLkIgjBF79XXQCUMayc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9a4238-7d74-4edf-a4b1-25ed75046b01/1/POsgUJhzLLkIgjBF79XXQCUMayc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:9d:56:ab:b8:64:80:1b:b4:e3:8a:a4:69:02:ab:2e:93:7d:
0f:12:93:69:18:68:78:b5:07:13:26:69:9d:64:bb:1a:a3:c3:
38:2f:de:e7:72:ed:a4:7a:2a:28:14:67:c0:53:84:68:c0:1f:
dd:af:be:42:84:07:a0:6a:83:ad:ee:19:62:b6:d6:5f:29:03:
bf:d1:c4:5d:0a:c5:1f:d0:61:e7:c3:e9:96:15:b5:c2:6b:53:
58:90:d8:38:0c:09:ad:8d:5d:ec:4f:26:78:08:43:88:cb:83:
9d:91:b8:1c:4a:cd:f4:57:3b:13:73:b0:fb:09:c4:2f:ac:cc:
46:61:c9:43:45:78:53:8d:02:90:a3:53:52:12:dd:bd:42:ff:
b1:59:0a:45:02:f2:38:ab:90:48:17:2e:4a:0a:43:f5:5e:98:
2a:51:2b:a4:e8:ce:1b:46:b0:19:03:00:aa:51:7e:2c:80:64:
44:39:9b:57:99:68:e0:71:24:7a:3d:ec:95:3b:64:95:f0:81:
91:b9:c9:8f:a6:41:f1:d3:6a:e7:e5:a6:c4:1f:61:f9:98:4f:
a4:d4:38:c7:e2:e1:b3:fb:4e:1f:72:1e:68:3a:bb:35:16:4d:
e5:c3:56:3f:ac:f7:75:19:1f:10:07:35:c4:08:d8:30:a1:ad:
d7:ca:f0:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:58:11 2025 by rpki-client