Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.mft
File: POdWa7WxnnAPSOJeB1BsLyIt84Q.mft (raw, json)
Hash identifier: IdgfSk0pvKLlmJBqTANpdMrqWUGkG805OBrfStjAjxI=
Subject key identifier: C2:19:29:C4:4C:53:7F:40:BF:2A:7F:8F:F7:8C:83:EF:04:A3:36:6F
Authority key identifier: 3C:E7:56:6B:B5:B1:9E:70:0F:48:E2:5E:07:50:6C:2F:22:2D:F3:84
Certificate issuer: /CN=3ce7566bb5b19e700f48e25e07506c2f222df384
Certificate serial: 019751216007E57F133BDC239B6D18E3D354
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/POdWa7WxnnAPSOJeB1BsLyIt84Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.mft
Manifest number: 0DDC
Signing time: Sun 08 Jun 2025 20:00:31 +0000
Manifest this update: Sun 08 Jun 2025 20:00:31 +0000
Manifest next update: Mon 09 Jun 2025 20:00:31 +0000
Files and hashes: 1: LnOKhHlXHgf9Bc7By8RdD87CENc.roa (hash: SBq8tD3nAGx2l0m6YmZ4sb5xKbi6vLmOJJ/u4lHDzyQ=)
2: MtOebLSNSemLqQH1Qdt6lKbCdQU.roa (hash: p2mZ95DJo3RCkhalV7XQwJkDag3/z20BD18MDcr1SRU=)
3: POdWa7WxnnAPSOJeB1BsLyIt84Q.crl (hash: i+Y6mtbSfog0D1d0dmFdwR4qQcZDPTb7Tr5Mq8BcfbE=)
4: qQRcQNcowo3kCSFmxOhnd54Y8jY.roa (hash: raMUt5t5W5lynqzBwroXOMjtxQgLkjALLNPiIADIJEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/POdWa7WxnnAPSOJeB1BsLyIt84Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 20:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:21:60:07:e5:7f:13:3b:dc:23:9b:6d:18:e3:d3:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ce7566bb5b19e700f48e25e07506c2f222df384
Validity
Not Before: Jun 8 20:00:31 2025 GMT
Not After : Jun 9 20:00:31 2025 GMT
Subject: CN=c21929c44c537f40bf2a7f8ff78c83ef04a3366f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:70:bb:5d:0d:2d:92:72:a2:c0:ab:36:28:81:
7e:2f:e9:bb:6e:ab:bf:0c:66:56:b3:6a:17:97:05:
74:e5:8e:fd:8e:0d:38:e3:c7:e9:71:dc:83:c9:2b:
ce:8c:e8:51:6d:8a:24:9f:4c:ae:a2:74:d2:a8:3c:
6a:8f:11:03:c9:d7:bb:7c:c2:2c:77:2e:ac:2e:be:
0b:60:f6:f2:52:21:e9:5d:71:e7:a8:f4:63:42:77:
a1:67:1a:0c:57:d5:26:2c:95:3f:b4:d4:0b:b8:3f:
bd:c6:4e:16:82:a5:c4:95:d3:73:68:6d:2c:b6:72:
50:f2:0b:6d:7d:fa:94:45:bf:da:d5:2b:50:5f:5b:
e8:65:77:76:89:0d:63:9f:a6:a7:6b:70:f5:d4:ac:
ba:7b:57:f5:d5:15:10:d7:19:9c:45:64:e9:78:31:
ca:45:a4:48:86:c6:7b:fe:4d:2b:09:aa:af:97:8f:
e6:0c:90:77:7a:6a:57:ef:c5:3e:6a:b7:3a:49:02:
0d:81:6e:89:25:92:44:ed:22:e5:36:75:7c:13:ec:
11:53:81:ca:7d:17:70:71:87:60:31:a5:39:7f:2d:
5f:16:07:8a:53:36:ef:d6:7a:14:8a:ea:9c:3b:f4:
e8:70:f8:f2:de:ec:ca:14:2d:7c:a3:0f:7f:61:b9:
03:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:19:29:C4:4C:53:7F:40:BF:2A:7F:8F:F7:8C:83:EF:04:A3:36:6F
X509v3 Authority Key Identifier:
keyid:3C:E7:56:6B:B5:B1:9E:70:0F:48:E2:5E:07:50:6C:2F:22:2D:F3:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/POdWa7WxnnAPSOJeB1BsLyIt84Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:cf:b5:f1:ea:04:de:51:79:21:98:98:63:95:1f:ca:1d:74:
16:8c:55:38:ca:f3:bb:6b:cf:38:40:fb:cc:a3:df:fd:a4:84:
1f:8e:d7:60:26:d8:cd:47:57:74:ba:72:be:75:06:23:83:da:
68:e8:f0:af:38:c7:21:4b:06:fc:d9:58:5a:1b:36:4f:43:42:
45:c3:49:42:f7:fd:ce:bc:4d:c9:ae:48:70:bf:a4:e2:68:ff:
9d:88:cb:24:77:53:07:d1:5b:b6:71:03:b1:93:65:63:36:a0:
fa:2b:2a:65:19:d7:91:8c:f2:ef:ec:73:6e:25:56:40:44:d8:
a1:6a:cd:b1:58:6f:f3:bb:b4:f7:ac:c6:84:22:72:f3:37:9b:
0b:6d:c4:db:c7:a7:fa:18:f8:ce:4a:29:cb:e0:92:4d:1e:23:
6d:18:24:9a:d5:9e:a4:2a:1c:c2:19:81:be:4a:ad:e1:02:65:
b5:3f:7f:81:95:76:2c:28:a6:c0:af:e2:61:33:a3:dd:90:a0:
00:9b:b4:2d:37:4d:f4:4c:74:f5:cb:16:80:d2:e2:6c:af:fe:
78:26:b2:4c:1c:07:d0:67:93:8b:05:a2:0c:e3:54:a5:ed:a4:
bb:17:11:1b:7a:8f:a3:82:37:a2:18:a2:2a:03:52:cd:58:4a:
d2:27:b6:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdRIWAH5X8TO9wjm20Y49NUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjZTc1NjZiYjViMTllNzAwZjQ4ZTI1ZTA3NTA2YzJmMjIy
ZGYzODQwHhcNMjUwNjA4MjAwMDMxWhcNMjUwNjA5MjAwMDMxWjAzMTEwLwYDVQQD
EyhjMjE5MjljNDRjNTM3ZjQwYmYyYTdmOGZmNzhjODNlZjA0YTMzNjZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHC7XQ0tknKiwKs2KIF+L+m7bqu/
DGZWs2oXlwV05Y79jg0448fpcdyDySvOjOhRbYokn0yuonTSqDxqjxEDyde7fMIs
dy6sLr4LYPbyUiHpXXHnqPRjQnehZxoMV9UmLJU/tNQLuD+9xk4WgqXEldNzaG0s
tnJQ8gttffqURb/a1StQX1voZXd2iQ1jn6ana3D11Ky6e1f11RUQ1xmcRWTpeDHK
RaRIhsZ7/k0rCaqvl4/mDJB3empX78U+arc6SQINgW6JJZJE7SLlNnV8E+wRU4HK
fRdwcYdgMaU5fy1fFgeKUzbv1noUiuqcO/TocPjy3uzKFC18ow9/YbkD3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMIZKcRMU39Avyp/j/eMg+8EozZvMB8GA1UdIwQY
MBaAFDznVmu1sZ5wD0jiXgdQbC8iLfOEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUE9kV2E3V3hubkFQU09KZUIxQnNMeUl0ODRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC84NmZmNzctOTc3Mi00YjI4LWFhMTIt
ODlmZjA2Zjc5NjM1LzEvUE9kV2E3V3hubkFQU09KZUIxQnNMeUl0ODRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC84NmZmNzctOTc3Mi00YjI4LWFhMTItODlmZjA2Zjc5NjM1
LzEvUE9kV2E3V3hubkFQU09KZUIxQnNMeUl0ODRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoM+18eoE
3lF5IZiYY5Ufyh10FoxVOMrzu2vPOED7zKPf/aSEH47XYCbYzUdXdLpyvnUGI4Pa
aOjwrzjHIUsG/NlYWhs2T0NCRcNJQvf9zrxNya5IcL+k4mj/nYjLJHdTB9FbtnED
sZNlYzag+isqZRnXkYzy7+xzbiVWQETYoWrNsVhv87u096zGhCJy8zebC23E28en
+hj4zkopy+CSTR4jbRgkmtWepCocwhmBvkqt4QJltT9/gZV2LCimwK/iYTOj3ZCg
AJu0LTdN9Ex09csWgNLibK/+eCayTBwH0GeTiwWiDONUpe2kuxcRG3qPo4I3ohii
KgNSzVhK0ie2Dg==
-----END CERTIFICATE-----
Generated at Mon Jun 9 06:49:37 2025 by rpki-client