Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft
File: POoeqIfc7-5hNhVbi9gzkpN8FnE.mft (raw, json)
Hash identifier: HWEFoLzw9+1pDJ+qsNf5uYv42+gEDgPgJbTyZK2hb+o=
Subject key identifier: 25:43:C3:DA:24:E6:CB:06:7C:65:74:87:D1:A6:2D:81:EF:EF:60:3C
Authority key identifier: 3C:EA:1E:A8:87:DC:EF:EE:61:36:15:5B:8B:D8:33:92:93:7C:16:71
Certificate issuer: /CN=3cea1ea887dcefee6136155b8bd83392937c1671
Certificate serial: 019A2855198F3543F19CE79B9360B04AECE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/POoeqIfc7-5hNhVbi9gzkpN8FnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft
Manifest number: 0BA2
Signing time: Tue 28 Oct 2025 01:00:57 +0000
Manifest this update: Tue 28 Oct 2025 01:00:57 +0000
Manifest next update: Wed 29 Oct 2025 01:00:57 +0000
Files and hashes: 1: 5pbhFrbv6p0fxLITgiU8s5OQtVw.roa (hash: MoawBbuqETIT5X2tb8EXLXxGAQEcqFB39pjZprw8koc=)
2: POoeqIfc7-5hNhVbi9gzkpN8FnE.crl (hash: jRnpB3W0tMehBluKK3xxplyLPZn6I4HfR9B0HSSOIns=)
3: aBfkfMsI6RfN5EaoDQWlcn2H95I.roa (hash: kUHTcNhwAMf+AKKhL303auY/4FQ8RuznlrI+X0c8dok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/POoeqIfc7-5hNhVbi9gzkpN8FnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:55:19:8f:35:43:f1:9c:e7:9b:93:60:b0:4a:ec:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cea1ea887dcefee6136155b8bd83392937c1671
Validity
Not Before: Oct 28 01:00:57 2025 GMT
Not After : Oct 29 01:00:57 2025 GMT
Subject: CN=2543c3da24e6cb067c657487d1a62d81efef603c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:aa:3e:4b:49:5a:90:cd:66:6e:43:c2:64:39:
aa:46:83:e9:f2:a1:5d:5f:e5:93:20:46:3e:1f:2f:
6a:2f:66:7c:3c:7f:5d:ac:47:ba:0c:2b:03:62:89:
ec:f6:cf:ce:b0:a1:21:cb:01:55:3b:d6:28:32:31:
4a:6c:d5:27:23:ef:62:00:f7:cb:03:32:13:61:73:
0f:6e:c9:b7:14:93:66:06:a4:52:1b:8a:e9:c9:c3:
4a:33:8b:7f:67:2d:09:a4:9a:d7:c7:90:8a:b1:57:
68:6a:d9:37:9d:a5:1d:2e:6e:3e:33:05:39:0d:ed:
55:1c:49:28:74:4e:14:3a:8e:76:9d:74:37:e3:82:
94:13:49:0e:71:2a:18:cc:c2:05:60:13:1e:53:f2:
9f:83:57:db:f3:44:5c:e5:62:50:56:2d:69:2a:62:
8b:8f:bc:96:62:51:32:13:ed:60:d7:aa:26:e1:a2:
8a:23:87:b6:f3:4e:a0:2d:e1:90:d1:a3:c0:d1:68:
da:83:1f:69:94:70:ad:28:5e:ee:bc:61:a7:50:e7:
2b:22:0c:60:65:81:ef:3b:7a:f9:8b:12:11:d2:7e:
95:97:bd:31:26:17:1d:9d:db:c9:5f:3c:09:2d:98:
ff:a6:b0:30:b5:54:29:3f:03:32:48:5c:73:0b:2f:
7f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:43:C3:DA:24:E6:CB:06:7C:65:74:87:D1:A6:2D:81:EF:EF:60:3C
X509v3 Authority Key Identifier:
keyid:3C:EA:1E:A8:87:DC:EF:EE:61:36:15:5B:8B:D8:33:92:93:7C:16:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/POoeqIfc7-5hNhVbi9gzkpN8FnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:07:ba:a6:01:81:81:75:04:d4:e0:6e:6b:39:50:56:29:fc:
f9:cd:60:97:53:5f:2e:7a:b2:09:ee:a3:6b:c6:7b:76:ba:a7:
14:c1:71:54:3c:66:be:4d:15:a0:cf:78:fa:53:0f:51:e6:dd:
a6:d2:c8:06:ce:55:07:8c:5a:39:95:89:66:87:2f:08:48:79:
b0:b0:c9:af:51:93:f0:35:ae:54:c0:72:1d:8b:c0:d8:6d:d2:
7f:a9:e0:4a:4b:e9:dc:ff:c7:ea:9d:ad:d9:eb:9a:cc:1f:63:
2a:d4:08:5c:5f:b2:64:00:dc:f2:1a:73:4c:19:07:24:e4:a7:
1f:13:fd:f1:ec:d5:8d:dc:b4:d5:c3:8c:d4:75:25:62:9c:34:
bc:7b:08:00:e5:2d:65:93:be:df:f9:d8:6c:fe:f0:42:dc:c8:
4f:e8:46:21:f8:99:b9:ba:11:58:8d:40:7e:e5:b7:2f:2f:47:
d0:4a:85:7e:c7:7b:1f:db:49:55:95:ee:bc:5b:82:d1:32:7d:
ac:21:ae:bf:3b:b1:57:d5:02:37:c9:e7:2d:ae:74:54:35:6e:
ad:be:6b:b1:96:d4:ed:9d:e3:37:62:49:92:3d:62:90:bf:84:
96:a3:2f:66:c7:c5:16:f2:a3:c3:c9:78:fd:15:12:e3:18:0a:
7c:3f:27:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 05:15:43 2025 by rpki-client