Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.mft
File: POdWa7WxnnAPSOJeB1BsLyIt84Q.mft (raw, json)
Hash identifier: OyZsMPkzNVtDjhaX9TQeOVLt0BP48XGMW9lqhMVrPOE=
Subject key identifier: 8A:E0:AB:C3:19:D2:D4:55:BD:EC:A2:94:60:75:3A:BC:C0:0F:76:EB
Authority key identifier: 3C:E7:56:6B:B5:B1:9E:70:0F:48:E2:5E:07:50:6C:2F:22:2D:F3:84
Certificate issuer: /CN=3ce7566bb5b19e700f48e25e07506c2f222df384
Certificate serial: 0199DFCE7138CDBD4DB33F3662B5C870B9A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/POdWa7WxnnAPSOJeB1BsLyIt84Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.mft
Manifest number: 0F2F
Signing time: Mon 13 Oct 2025 23:01:12 +0000
Manifest this update: Mon 13 Oct 2025 23:01:12 +0000
Manifest next update: Tue 14 Oct 2025 23:01:12 +0000
Files and hashes: 1: LnOKhHlXHgf9Bc7By8RdD87CENc.roa (hash: SBq8tD3nAGx2l0m6YmZ4sb5xKbi6vLmOJJ/u4lHDzyQ=)
2: MtOebLSNSemLqQH1Qdt6lKbCdQU.roa (hash: p2mZ95DJo3RCkhalV7XQwJkDag3/z20BD18MDcr1SRU=)
3: POdWa7WxnnAPSOJeB1BsLyIt84Q.crl (hash: PAMSSKOMoAR+CLcDOgEUa0ZRCEldlRGIzjMy6y3I4gk=)
4: qQRcQNcowo3kCSFmxOhnd54Y8jY.roa (hash: raMUt5t5W5lynqzBwroXOMjtxQgLkjALLNPiIADIJEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/POdWa7WxnnAPSOJeB1BsLyIt84Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 Oct 2025 23:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:df:ce:71:38:cd:bd:4d:b3:3f:36:62:b5:c8:70:b9:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ce7566bb5b19e700f48e25e07506c2f222df384
Validity
Not Before: Oct 13 23:01:12 2025 GMT
Not After : Oct 14 23:01:12 2025 GMT
Subject: CN=8ae0abc319d2d455bdeca29460753abcc00f76eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:86:b3:6e:b2:33:f8:87:8f:da:e5:27:28:9f:
b8:bc:bf:43:a8:26:5d:c0:41:d3:7b:9b:47:93:06:
1a:05:68:c4:8d:db:ca:2c:5c:2e:fc:6b:36:ee:72:
58:e1:65:17:6e:eb:7c:f0:6c:14:2f:60:67:88:86:
64:ae:b5:8e:90:32:60:f4:27:a3:02:2f:aa:52:8a:
4d:89:40:58:39:40:98:82:ff:6b:62:76:bd:bd:df:
2f:30:eb:2c:23:cc:27:e6:2d:67:41:b1:79:f7:81:
cb:cf:4a:d8:3d:0c:1c:78:80:07:2d:18:61:0b:74:
46:75:ab:ae:01:b8:46:22:65:95:8f:45:bf:2e:3f:
24:ae:f3:41:cf:3a:17:d0:20:59:a8:1c:dd:32:1f:
e2:64:5f:3d:00:c2:f9:4e:58:3c:b2:b1:39:2e:c1:
b5:20:d7:be:3c:7f:88:c4:61:42:53:8a:f6:d8:04:
e1:cd:64:df:34:10:45:b5:dc:d7:0e:4d:11:10:03:
00:d2:54:4d:fa:62:43:3d:05:76:3c:fc:90:f3:20:
fe:f3:96:56:6d:3e:a8:71:36:96:0b:5d:29:b4:8c:
b9:fe:31:9b:8a:6b:2d:1a:32:ef:09:52:aa:a0:3f:
c5:76:e8:49:6d:8c:a7:fc:7a:b1:4c:dd:49:25:15:
89:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:E0:AB:C3:19:D2:D4:55:BD:EC:A2:94:60:75:3A:BC:C0:0F:76:EB
X509v3 Authority Key Identifier:
keyid:3C:E7:56:6B:B5:B1:9E:70:0F:48:E2:5E:07:50:6C:2F:22:2D:F3:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/POdWa7WxnnAPSOJeB1BsLyIt84Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:cc:0d:d7:0d:b2:94:57:5e:f2:4c:38:5b:71:ca:cd:d2:31:
b5:a6:86:c4:ac:33:3d:41:15:2f:63:f7:2b:7e:32:97:63:1b:
68:f1:87:f1:c6:fe:d5:18:a2:61:b9:57:40:e2:19:ff:92:5d:
39:76:3f:71:d7:3a:50:94:ec:9f:26:1d:7d:bd:b9:b4:c6:d2:
80:9b:17:e0:d2:e3:d2:91:ba:aa:bb:02:4e:92:cd:8c:8e:ca:
a8:d8:04:dc:25:6b:cf:aa:81:2a:95:96:a2:76:f3:e8:17:91:
20:0f:27:f2:e4:42:b9:38:21:22:f9:89:bb:7f:28:a2:2a:6e:
fa:c2:4f:86:cb:d7:5b:bb:29:b3:29:15:d3:6c:b8:25:2a:82:
ec:90:5a:fb:ff:c8:df:15:5c:e3:4d:18:8e:16:82:9d:b1:ce:
da:ce:e2:33:c2:f6:79:7d:a1:d2:9c:bc:18:91:5d:d5:7a:ff:
35:a9:fa:4a:45:de:2b:ed:f4:42:a2:8b:76:c9:5c:66:65:15:
53:07:9a:f6:40:0e:79:f6:c0:a4:c8:22:eb:44:3e:c3:c9:f2:
7d:83:3d:57:0f:1d:36:65:55:3b:e9:4a:51:05:49:08:6e:d5:
5a:e8:cf:23:07:28:72:2b:4e:6d:82:19:fe:08:9e:8b:50:bb:
3a:7f:ab:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZnfznE4zb1Nsz82YrXIcLmiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjZTc1NjZiYjViMTllNzAwZjQ4ZTI1ZTA3NTA2YzJmMjIy
ZGYzODQwHhcNMjUxMDEzMjMwMTEyWhcNMjUxMDE0MjMwMTEyWjAzMTEwLwYDVQQD
Eyg4YWUwYWJjMzE5ZDJkNDU1YmRlY2EyOTQ2MDc1M2FiY2MwMGY3NmViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIazbrIz+IeP2uUnKJ+4vL9DqCZd
wEHTe5tHkwYaBWjEjdvKLFwu/Gs27nJY4WUXbut88GwUL2BniIZkrrWOkDJg9Cej
Ai+qUopNiUBYOUCYgv9rYna9vd8vMOssI8wn5i1nQbF594HLz0rYPQwceIAHLRhh
C3RGdauuAbhGImWVj0W/Lj8krvNBzzoX0CBZqBzdMh/iZF89AML5Tlg8srE5LsG1
INe+PH+IxGFCU4r22AThzWTfNBBFtdzXDk0REAMA0lRN+mJDPQV2PPyQ8yD+85ZW
bT6ocTaWC10ptIy5/jGbimstGjLvCVKqoD/FduhJbYyn/HqxTN1JJRWJkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIrgq8MZ0tRVveyilGB1OrzAD3brMB8GA1UdIwQY
MBaAFDznVmu1sZ5wD0jiXgdQbC8iLfOEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUE9kV2E3V3hubkFQU09KZUIxQnNMeUl0ODRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC84NmZmNzctOTc3Mi00YjI4LWFhMTIt
ODlmZjA2Zjc5NjM1LzEvUE9kV2E3V3hubkFQU09KZUIxQnNMeUl0ODRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC84NmZmNzctOTc3Mi00YjI4LWFhMTItODlmZjA2Zjc5NjM1
LzEvUE9kV2E3V3hubkFQU09KZUIxQnNMeUl0ODRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf8wN1w2y
lFde8kw4W3HKzdIxtaaGxKwzPUEVL2P3K34yl2MbaPGH8cb+1RiiYblXQOIZ/5Jd
OXY/cdc6UJTsnyYdfb25tMbSgJsX4NLj0pG6qrsCTpLNjI7KqNgE3CVrz6qBKpWW
onbz6BeRIA8n8uRCuTghIvmJu38ooipu+sJPhsvXW7spsykV02y4JSqC7JBa+//I
3xVc400YjhaCnbHO2s7iM8L2eX2h0py8GJFd1Xr/Nan6SkXeK+30QqKLdslcZmUV
Uwea9kAOefbApMgi60Q+w8nyfYM9Vw8dNmVVO+lKUQVJCG7VWujPIwcocitObYIZ
/giei1C7On+rkA==
-----END CERTIFICATE-----
Generated at Tue Oct 14 09:09:03 2025 by rpki-client