Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft
File: PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft (raw, json)
Hash identifier: kmfb1YPbnukIEFB3s8xND2A20TUoVTfthbXe1NLouIc=
Subject key identifier: 9A:AA:50:50:6D:07:A6:C0:2D:65:99:D7:0E:39:A3:4B:25:11:87:ED
Authority key identifier: 3E:8C:6C:C4:48:F9:63:5C:56:FF:22:B1:1C:D8:0C:1A:A9:C5:2D:4F
Certificate issuer: /CN=3e8c6cc448f9635c56ff22b11cd80c1aa9c52d4f
Certificate serial: 01975D255F062B85F80EDC629294D6548435
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft
Manifest number: 0B8C
Signing time: Wed 11 Jun 2025 04:00:19 +0000
Manifest this update: Wed 11 Jun 2025 04:00:19 +0000
Manifest next update: Thu 12 Jun 2025 04:00:19 +0000
Files and hashes: 1: Ag4vdPGKqSYWGm9dLWjLCYFXITs.roa (hash: K8PordojpOIplsR6Jg7NEy3mCM9e/c8OLgPeQ2xQz6M=)
2: PoxsxEj5Y1xW_yKxHNgMGqnFLU8.crl (hash: A1IM07UvbMhUQQS987IdLZ/t7drfQYBkvgcg1OYjQMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5d:25:5f:06:2b:85:f8:0e:dc:62:92:94:d6:54:84:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e8c6cc448f9635c56ff22b11cd80c1aa9c52d4f
Validity
Not Before: Jun 11 04:00:19 2025 GMT
Not After : Jun 12 04:00:19 2025 GMT
Subject: CN=9aaa50506d07a6c02d6599d70e39a34b251187ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f1:70:d5:69:bd:18:38:11:00:14:49:6e:73:
24:29:0b:81:28:bf:d8:32:cf:bd:39:bd:88:7a:c4:
76:6c:92:b4:00:a4:07:60:70:29:52:a3:3f:b1:3d:
42:46:ac:ff:57:c0:3c:9d:5b:aa:bf:b9:61:1d:d3:
b1:66:54:25:53:7c:b1:3d:e0:9d:f1:3b:61:60:1f:
b4:e6:08:83:23:af:3e:b4:bf:bb:67:da:47:ed:33:
19:ba:f1:73:53:2c:82:5f:bb:be:01:4a:d5:4f:03:
6d:71:c4:ad:ed:28:d2:f5:1d:3c:91:9f:b1:c6:68:
ef:a0:c4:03:7a:a7:e7:f2:0f:ea:c8:a3:2f:5d:e7:
52:16:c7:1b:7f:93:66:2b:7c:15:df:3f:44:41:64:
84:28:64:b1:d6:b9:0e:fc:54:86:9c:5e:79:50:b0:
08:a5:27:c4:21:16:06:59:bd:c5:95:06:9b:88:fc:
04:75:3b:bb:51:34:08:14:52:a0:4f:95:e3:4c:c5:
2e:f6:b2:85:0f:f2:27:8a:93:13:8f:4d:16:0a:e0:
dd:ab:6d:7b:e2:aa:b4:5b:83:a4:6b:26:27:04:c4:
1c:c9:21:bd:dd:16:72:7e:f4:b3:5c:0a:52:94:8d:
91:4f:5c:3a:11:ce:69:c2:8a:b3:ba:32:db:73:32:
60:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:AA:50:50:6D:07:A6:C0:2D:65:99:D7:0E:39:A3:4B:25:11:87:ED
X509v3 Authority Key Identifier:
keyid:3E:8C:6C:C4:48:F9:63:5C:56:FF:22:B1:1C:D8:0C:1A:A9:C5:2D:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:74:99:7a:8f:60:6d:52:6a:20:ce:7a:a6:4d:fd:05:94:a8:
2f:bc:95:d8:62:d7:e4:69:3e:a8:2a:ab:04:56:a1:15:a6:50:
cc:47:0a:fe:e7:51:3d:e1:6d:d7:5a:b4:ee:c3:d4:68:63:ee:
b9:5b:7c:c5:4e:9a:3a:ee:1f:87:f0:c6:c4:81:fc:48:da:50:
22:17:bf:21:c1:f0:3f:bc:31:0b:73:cc:ed:bc:a5:ae:fa:c5:
78:3c:58:22:4a:b3:82:1c:61:20:a4:7d:07:a8:e4:66:7f:53:
9c:2f:e8:83:17:a6:8c:f3:74:e9:f6:24:88:f6:97:cb:ec:f4:
37:cb:8a:c7:09:86:3d:a9:1b:e8:62:26:f4:7b:49:0b:00:2a:
92:f5:ae:b0:a3:ad:e9:d6:56:bd:f9:94:c7:69:a4:c5:44:53:
64:f7:ae:87:80:d8:77:23:21:47:04:69:72:b7:31:8a:2a:4c:
ea:2c:e1:08:46:7f:da:d1:0c:90:bc:34:48:04:2d:ab:6c:25:
2c:70:3c:2a:06:4c:e8:38:8f:93:9d:a8:33:29:e7:13:1e:4d:
a6:bc:35:ce:f3:00:45:51:73:a8:74:92:11:b1:6b:60:fa:9b:
81:85:81:2a:80:ad:6f:a1:c9:be:04:ca:6c:c7:91:cb:11:31:
12:7e:59:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 10:06:39 2025 by rpki-client