Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft
File: PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft (raw, json)
Hash identifier: Td9Q/516OD7i/BNNZdiedzQ1/rIUqY/iTiyu+3oVoQQ=
Subject key identifier: D8:41:37:6E:BA:B7:44:72:8E:82:C6:55:4F:8B:E2:84:ED:84:B4:2E
Authority key identifier: 3E:8C:6C:C4:48:F9:63:5C:56:FF:22:B1:1C:D8:0C:1A:A9:C5:2D:4F
Certificate issuer: /CN=3e8c6cc448f9635c56ff22b11cd80c1aa9c52d4f
Certificate serial: 019764DEEF5A066168B1BD3AEE409839A002
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft
Manifest number: 0B90
Signing time: Thu 12 Jun 2025 16:00:21 +0000
Manifest this update: Thu 12 Jun 2025 16:00:21 +0000
Manifest next update: Fri 13 Jun 2025 16:00:21 +0000
Files and hashes: 1: Ag4vdPGKqSYWGm9dLWjLCYFXITs.roa (hash: K8PordojpOIplsR6Jg7NEy3mCM9e/c8OLgPeQ2xQz6M=)
2: PoxsxEj5Y1xW_yKxHNgMGqnFLU8.crl (hash: PmJ3jPDcEsmNBOlMhntOUOzNLrqUf8Sx/gD7vpM8oAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 16:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:64:de:ef:5a:06:61:68:b1:bd:3a:ee:40:98:39:a0:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e8c6cc448f9635c56ff22b11cd80c1aa9c52d4f
Validity
Not Before: Jun 12 16:00:21 2025 GMT
Not After : Jun 13 16:00:21 2025 GMT
Subject: CN=d841376ebab744728e82c6554f8be284ed84b42e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:42:77:7e:8e:75:5e:9e:07:36:34:f2:1d:82:
14:0a:8c:56:b4:bd:21:9f:62:f8:3f:1f:8a:a2:35:
8b:c7:d8:0b:93:ac:68:21:28:2b:fd:9d:cf:7e:f8:
a2:90:03:29:9c:3f:72:81:ef:04:e5:54:78:06:68:
4c:d8:5f:7b:03:16:91:76:d3:27:c5:84:ed:45:22:
9a:4f:70:03:c8:65:c6:6a:80:5e:90:b8:6b:d1:94:
e4:0a:05:20:04:22:0e:6f:14:3b:0d:1c:9c:b9:d0:
03:7a:54:fb:bf:0e:3b:db:34:aa:8c:38:f6:c7:45:
55:84:76:97:b3:76:93:8f:a3:9a:06:ab:db:ab:e8:
aa:ce:7f:91:0b:c6:88:10:29:15:0d:1e:f3:7f:1b:
0a:24:96:9d:23:9d:fa:d5:ca:94:00:b3:6b:fd:5b:
08:f9:e6:46:44:5d:f3:aa:90:01:a1:66:ec:a1:60:
b2:10:22:d9:c6:4a:9f:77:59:50:18:4b:87:7c:1e:
d0:d5:85:a6:f6:73:09:3a:12:f9:fb:53:5b:b5:78:
15:75:84:ef:a0:fd:0d:e7:6b:c3:19:f2:a6:cc:7f:
b9:8b:b4:30:af:b1:f7:9f:50:72:fc:7b:05:43:cf:
34:8b:d6:a8:4f:fb:8c:89:34:0c:c6:97:8a:44:cd:
19:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:41:37:6E:BA:B7:44:72:8E:82:C6:55:4F:8B:E2:84:ED:84:B4:2E
X509v3 Authority Key Identifier:
keyid:3E:8C:6C:C4:48:F9:63:5C:56:FF:22:B1:1C:D8:0C:1A:A9:C5:2D:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/af6742-e358-4a6e-a1a7-d28105e3f380/1/PoxsxEj5Y1xW_yKxHNgMGqnFLU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:4a:89:12:37:f1:b2:ef:cd:78:2c:a2:60:5f:3a:be:10:cb:
b9:65:69:88:40:f2:00:3a:3f:a5:7b:35:6a:c4:bc:85:66:1d:
b4:2c:59:ee:22:b5:48:3c:97:77:7b:b8:96:fc:06:fc:8e:47:
25:72:06:ac:96:ac:7e:01:68:d4:a5:c4:e8:87:18:68:ea:43:
c4:ba:90:50:23:da:f8:db:95:01:bc:b6:d3:ae:c6:a6:8f:2d:
f5:e3:91:4c:78:6f:82:0e:ea:77:ea:be:1e:c4:4a:49:a2:9c:
b0:57:7e:21:92:6a:f0:46:f5:fd:a6:f2:60:e9:da:ac:8a:c6:
05:32:db:d9:e3:b2:3b:9c:65:e9:c6:72:4a:b2:87:b1:3e:c9:
36:49:74:d9:7a:88:76:c9:3c:b7:fb:7a:8b:f4:0c:fe:69:41:
08:04:dd:63:af:42:c7:d3:80:0a:fd:ce:38:30:fd:59:08:3e:
ac:1d:0f:b2:9c:35:91:ac:20:8e:83:e4:b1:97:51:bc:dd:d0:
a3:4c:e5:49:7d:7b:20:1f:48:73:4b:6d:c9:f2:e1:78:31:47:
74:21:ec:74:81:1e:20:05:d9:0a:12:0e:26:56:15:d3:2b:36:
60:e3:0c:df:e1:42:5a:81:2a:b6:d0:ff:2b:f9:e0:41:5c:ba:
15:e8:4e:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 01:39:02 2025 by rpki-client