Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft
File: POoeqIfc7-5hNhVbi9gzkpN8FnE.mft (raw, json)
Hash identifier: fYMnCA50uYXWoH+llTHifMGZe0GJcrYNgehavkpXRMY=
Subject key identifier: 73:CB:EF:37:DE:72:04:0F:5C:E9:C2:50:46:B4:8E:C3:02:3D:D8:0D
Authority key identifier: 3C:EA:1E:A8:87:DC:EF:EE:61:36:15:5B:8B:D8:33:92:93:7C:16:71
Certificate issuer: /CN=3cea1ea887dcefee6136155b8bd83392937c1671
Certificate serial: 01993313F2C7CC28353B4CA8707473523B85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/POoeqIfc7-5hNhVbi9gzkpN8FnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft
Manifest number: 0B23
Signing time: Wed 10 Sep 2025 10:02:49 +0000
Manifest this update: Wed 10 Sep 2025 10:02:49 +0000
Manifest next update: Thu 11 Sep 2025 10:02:49 +0000
Files and hashes: 1: 5pbhFrbv6p0fxLITgiU8s5OQtVw.roa (hash: MoawBbuqETIT5X2tb8EXLXxGAQEcqFB39pjZprw8koc=)
2: POoeqIfc7-5hNhVbi9gzkpN8FnE.crl (hash: uVRu1YcGdsKfUS3BU2INIrSULgn/vULZMMnNuEQEBs0=)
3: aBfkfMsI6RfN5EaoDQWlcn2H95I.roa (hash: kUHTcNhwAMf+AKKhL303auY/4FQ8RuznlrI+X0c8dok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/POoeqIfc7-5hNhVbi9gzkpN8FnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 10:02:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:13:f2:c7:cc:28:35:3b:4c:a8:70:74:73:52:3b:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cea1ea887dcefee6136155b8bd83392937c1671
Validity
Not Before: Sep 10 10:02:49 2025 GMT
Not After : Sep 11 10:02:49 2025 GMT
Subject: CN=73cbef37de72040f5ce9c25046b48ec3023dd80d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e2:df:9b:a1:01:44:a8:2b:28:b7:f4:0f:f8:
1d:36:32:9b:b0:bf:3b:c0:12:63:85:4e:67:e6:ba:
4e:77:28:f0:e6:7a:d9:05:63:91:0b:ff:51:28:1f:
3a:1f:6a:d7:ab:3b:ef:9c:54:d7:42:f1:ff:97:9c:
44:b3:20:55:8c:de:0a:a7:cf:37:09:79:f5:60:3b:
3a:0d:bd:57:56:dc:34:ef:f8:df:03:4c:e3:7c:06:
8e:e8:67:63:10:3e:27:3e:b2:fc:f9:50:94:93:53:
91:f1:b8:4e:ca:44:ff:e8:d8:f4:a4:42:89:f2:b3:
70:3f:47:60:72:e0:d0:5e:ca:01:72:0a:4c:79:8e:
6a:a1:52:d0:4b:d9:de:d9:fd:8e:66:4a:5a:b7:9e:
b5:07:fe:6a:11:15:fc:90:3b:3f:b7:24:0d:49:3d:
37:eb:29:9d:2b:f3:5f:1b:59:c5:00:90:72:c8:50:
5c:6a:c9:9d:75:f0:bc:ac:00:d4:0c:9c:ea:ba:df:
f9:ed:eb:5e:4a:7b:a5:79:cc:17:24:e9:2c:f5:19:
91:e7:37:0c:b3:07:d8:70:29:69:d2:a6:2a:8a:44:
a9:df:ea:a5:1b:9b:38:d4:4a:29:6a:d9:5b:7e:b7:
3e:38:13:6b:38:bd:51:a0:cf:6a:ba:d6:f1:36:c6:
39:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:CB:EF:37:DE:72:04:0F:5C:E9:C2:50:46:B4:8E:C3:02:3D:D8:0D
X509v3 Authority Key Identifier:
keyid:3C:EA:1E:A8:87:DC:EF:EE:61:36:15:5B:8B:D8:33:92:93:7C:16:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/POoeqIfc7-5hNhVbi9gzkpN8FnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:ba:f2:ba:01:81:5c:94:c3:09:1a:c5:2c:48:e4:24:40:c5:
55:e7:b7:9f:38:e6:35:c4:eb:5f:a4:a7:04:c8:19:09:ed:7f:
f4:4d:cb:1e:25:8b:80:68:a8:f0:42:9c:02:6b:d0:7c:74:cc:
11:c6:77:5a:aa:3a:ab:d6:93:6f:60:bf:e5:1e:b4:0d:b3:86:
7b:b7:f4:90:39:68:1e:99:db:9d:e0:32:7d:10:68:a0:a1:58:
3f:91:df:11:91:6d:3e:9d:f8:8a:85:ee:6e:8d:1a:8e:a7:be:
c0:09:ae:36:86:b1:06:46:ac:47:c2:d1:84:a7:11:af:36:3d:
70:9f:e0:f5:ed:74:69:77:00:77:fd:77:7e:66:37:7d:ce:56:
e3:04:cc:68:bd:94:bf:40:20:37:d8:e6:33:5d:50:41:c6:28:
3c:bf:a5:a2:1f:e9:63:76:c8:c5:d8:58:8c:96:58:2e:55:c4:
2c:f9:97:f2:1a:80:9d:af:09:04:f3:81:93:f5:32:66:03:90:
27:d6:65:2c:29:b7:ab:08:d9:fd:86:58:6e:45:13:18:b7:14:
f2:a7:b0:2c:2b:93:a2:84:c7:40:85:81:5a:ea:51:f6:f5:85:
24:95:a7:51:52:54:2d:d7:07:4a:ac:3c:83:4b:72:a3:9d:03:
10:89:ec:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 17:33:22 2025 by rpki-client