Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft
File: POoeqIfc7-5hNhVbi9gzkpN8FnE.mft (raw, json)
Hash identifier: k21kkG06Vlc5RJwSRziGmxWAcsyHZI3tlkYKWJqmo8k=
Subject key identifier: 6F:AA:17:1F:F5:82:F7:01:E9:27:DB:EF:37:02:E7:C2:FD:18:BC:77
Authority key identifier: 3C:EA:1E:A8:87:DC:EF:EE:61:36:15:5B:8B:D8:33:92:93:7C:16:71
Certificate issuer: /CN=3cea1ea887dcefee6136155b8bd83392937c1671
Certificate serial: 0197469DEEAA5D930373B97F98C8B2DC6CE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/POoeqIfc7-5hNhVbi9gzkpN8FnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft
Manifest number: 0A24
Signing time: Fri 06 Jun 2025 19:00:44 +0000
Manifest this update: Fri 06 Jun 2025 19:00:44 +0000
Manifest next update: Sat 07 Jun 2025 19:00:44 +0000
Files and hashes: 1: 5pbhFrbv6p0fxLITgiU8s5OQtVw.roa (hash: MoawBbuqETIT5X2tb8EXLXxGAQEcqFB39pjZprw8koc=)
2: POoeqIfc7-5hNhVbi9gzkpN8FnE.crl (hash: mcZixgvNbTByTzMcS0d6miFpPdo+ADnlaPjoTwsyDis=)
3: aBfkfMsI6RfN5EaoDQWlcn2H95I.roa (hash: kUHTcNhwAMf+AKKhL303auY/4FQ8RuznlrI+X0c8dok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/POoeqIfc7-5hNhVbi9gzkpN8FnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 19:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9d:ee:aa:5d:93:03:73:b9:7f:98:c8:b2:dc:6c:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cea1ea887dcefee6136155b8bd83392937c1671
Validity
Not Before: Jun 6 19:00:44 2025 GMT
Not After : Jun 7 19:00:44 2025 GMT
Subject: CN=6faa171ff582f701e927dbef3702e7c2fd18bc77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:66:6f:0e:42:90:4a:70:20:76:5e:0d:e6:c9:
83:90:c5:32:4e:91:b5:b0:15:36:87:e1:a0:28:ab:
17:29:4d:9e:1e:cd:f9:7d:5e:97:7f:e2:62:9f:ca:
57:17:04:8f:51:8e:d0:63:86:fb:6e:d4:67:d2:93:
ec:f7:fe:71:c3:17:95:44:84:61:be:db:0e:0a:3e:
dd:be:e9:70:20:b2:1a:ae:8d:44:00:55:c8:f6:46:
cd:8c:c3:c2:55:25:39:e3:11:f1:ff:4a:7c:53:6c:
c4:3f:af:04:d7:74:56:a5:79:23:96:9b:d8:52:72:
63:ce:88:2f:aa:d0:22:de:36:5a:12:d9:47:fc:9b:
63:59:4b:78:c7:bc:94:cf:21:37:c0:7c:8e:40:30:
f8:3b:e5:77:34:f0:6b:27:3f:2f:3b:c6:d7:ad:5d:
59:73:6a:9d:17:05:24:93:ad:6b:40:df:62:af:4a:
a4:fe:3b:6f:84:d1:48:49:32:75:5c:16:93:fa:01:
5a:2c:9f:7b:69:f4:c9:d6:d1:5f:26:5f:d5:3c:b6:
16:7a:aa:00:c1:69:e3:44:de:ad:c0:b8:ff:45:e3:
43:8b:87:4c:c9:8c:f9:3d:38:d8:80:8d:c2:26:fa:
fe:32:1a:c0:ba:da:0a:b4:89:0d:0a:af:ef:ff:f1:
d3:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:AA:17:1F:F5:82:F7:01:E9:27:DB:EF:37:02:E7:C2:FD:18:BC:77
X509v3 Authority Key Identifier:
keyid:3C:EA:1E:A8:87:DC:EF:EE:61:36:15:5B:8B:D8:33:92:93:7C:16:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/POoeqIfc7-5hNhVbi9gzkpN8FnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ca61ec-07b6-492e-8c48-b64cab4bbdff/1/POoeqIfc7-5hNhVbi9gzkpN8FnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:cf:5a:cf:d2:e2:4e:d4:ae:70:dc:ec:3e:b0:32:38:73:83:
4f:6f:46:aa:ee:8b:f6:27:39:f7:7d:d6:dc:ac:ed:78:98:76:
46:34:6c:da:53:a6:7f:cd:23:e9:2c:39:61:e6:d4:30:b2:dd:
cf:91:3d:2c:02:e8:c1:e1:a6:c9:ba:5a:7c:4f:ea:ed:04:bd:
da:6c:31:90:38:07:98:16:ef:40:cf:79:e3:f8:81:78:07:9d:
9e:18:ed:82:da:ea:93:e4:41:e3:e3:29:cd:d3:bf:cd:d8:d7:
3d:6f:e3:03:00:c3:36:ae:36:13:f4:34:46:46:d3:55:70:77:
dc:36:53:37:fa:c6:c6:1e:9b:3c:e2:d8:a8:e9:b7:db:32:62:
eb:c7:35:5a:87:4c:57:78:f7:87:d0:fa:48:f9:c0:55:a9:67:
f0:74:92:4e:fc:e8:30:b3:43:84:a8:25:6f:98:d2:90:ca:89:
31:38:99:84:d3:c0:ce:10:c3:0a:7c:56:f4:08:02:88:90:8f:
78:cb:48:0f:f4:b7:c5:79:72:1f:91:6e:7b:d1:99:a9:ef:24:
33:5b:59:d7:01:96:16:ce:67:6c:9b:10:2f:67:ae:a2:42:bb:
d5:b1:b2:31:e7:6a:00:c4:fc:9e:e5:9d:10:68:73:92:53:84:
90:b9:44:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 02:50:09 2025 by rpki-client