Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft
File: PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft (raw, json)
Hash identifier: GOxye5XdLETg15ITHJQsbOqk2EgQ9c0THdJrf09ABFU=
Subject key identifier: FD:4A:36:A6:CA:B3:DF:B3:00:07:71:B8:59:77:F5:85:AE:79:B8:44
Authority key identifier: 3E:8C:6C:C4:48:F9:63:5C:56:FF:22:B1:1C:D8:0C:1A:A9:C5:2D:4F
Certificate issuer: /CN=3e8c6cc448f9635c56ff22b11cd80c1aa9c52d4f
Certificate serial: 019A33468026701CE83D2534F266CA83B08B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft
Manifest number: 0D04
Signing time: Thu 30 Oct 2025 04:00:49 +0000
Manifest this update: Thu 30 Oct 2025 04:00:49 +0000
Manifest next update: Fri 31 Oct 2025 04:00:49 +0000
Files and hashes: 1: Ag4vdPGKqSYWGm9dLWjLCYFXITs.roa (hash: K8PordojpOIplsR6Jg7NEy3mCM9e/c8OLgPeQ2xQz6M=)
2: PoxsxEj5Y1xW_yKxHNgMGqnFLU8.crl (hash: SfdYG+feUUSYtUjEwKm5ezGpYuB+VjK/d/64XgnY68w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 Oct 2025 01:21:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:33:46:80:26:70:1c:e8:3d:25:34:f2:66:ca:83:b0:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e8c6cc448f9635c56ff22b11cd80c1aa9c52d4f
Validity
Not Before: Oct 30 04:00:49 2025 GMT
Not After : Oct 31 04:00:49 2025 GMT
Subject: CN=fd4a36a6cab3dfb3000771b85977f585ae79b844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:1a:cf:79:e3:4e:02:a1:9a:94:23:28:20:98:
67:9d:a4:43:3d:53:d5:f4:f3:a6:17:6c:98:64:fb:
a3:0b:83:09:24:a6:d4:cf:eb:98:39:53:62:8e:1c:
12:e3:a7:8a:24:59:c7:6d:95:e8:7d:f9:cb:15:a4:
59:93:01:84:5c:03:d5:b4:44:19:20:b8:a8:b0:41:
ce:bf:f4:d4:e8:9d:11:cc:e0:1b:14:37:92:f0:d7:
1a:a3:71:0a:db:1f:c5:ff:71:31:f6:53:6c:f9:23:
33:77:8f:90:dd:21:9f:16:3c:10:1b:45:74:2c:3b:
90:8a:7b:c5:74:30:a9:ca:e5:3f:0c:fd:91:86:ea:
40:7c:f7:d6:44:ce:4b:50:6d:5b:3b:67:aa:6f:64:
15:0a:1e:46:71:66:9c:b5:c4:aa:1c:c8:a6:90:1f:
72:d4:c3:ba:64:cf:3c:29:15:9d:9a:6d:f1:57:28:
70:24:bf:7f:2d:55:6b:93:01:53:f9:4c:3f:5d:02:
bd:6b:fe:cc:a2:99:aa:dc:04:37:01:43:d2:42:7c:
64:a7:3e:60:d1:c2:e3:ff:0e:b8:24:19:79:aa:45:
98:51:e4:c6:c9:3b:65:83:75:4b:e2:08:40:6a:f4:
70:ae:f4:86:8c:37:e4:c1:79:d9:5a:9f:f0:b3:4d:
93:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:4A:36:A6:CA:B3:DF:B3:00:07:71:B8:59:77:F5:85:AE:79:B8:44
X509v3 Authority Key Identifier:
keyid:3E:8C:6C:C4:48:F9:63:5C:56:FF:22:B1:1C:D8:0C:1A:A9:C5:2D:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:38:7f:d3:0d:9e:a4:b4:eb:fb:9c:18:56:54:12:72:89:a0:
0a:3c:ad:bf:aa:7f:43:97:78:25:8c:f6:a6:5f:46:2b:25:3f:
12:f9:fb:ef:66:34:33:fd:95:b0:b4:09:1a:4a:90:b3:aa:3e:
ce:68:db:5b:6d:71:0d:47:a9:4d:be:df:f9:c8:6b:bc:2e:e8:
26:e0:54:e7:53:92:cb:e2:26:4f:ed:3c:69:9a:06:5e:d3:1b:
09:f8:f1:01:53:86:c8:32:3d:95:d1:0e:fd:c7:30:ae:34:e0:
76:bf:68:cf:4c:59:48:65:2a:bd:5b:69:2b:37:11:26:31:f0:
98:c0:fa:9a:fd:20:94:b8:b5:e2:49:25:c0:5a:fe:a9:52:4c:
6c:d2:16:0d:5a:84:4f:59:cb:d7:9c:7c:81:6d:99:65:09:37:
07:ab:1c:59:f6:8e:79:d0:48:35:fe:f2:6b:93:73:6d:b7:a9:
68:14:bb:f1:c1:40:87:56:bc:35:50:43:9d:c2:49:d6:68:d9:
dd:5a:48:2e:ca:ac:09:9f:79:02:a8:e4:62:ad:0f:5a:0e:38:
f7:c8:46:82:2e:70:23:2e:89:0a:d8:a9:39:64:0e:c3:27:01:
d5:6f:82:a4:77:da:29:d9:a2:f0:1b:04:b4:df:b6:69:d1:b4:
7d:c6:b2:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 30 06:44:00 2025 by rpki-client