Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.mft
File: POdWa7WxnnAPSOJeB1BsLyIt84Q.mft (raw, json)
Hash identifier: 73wGx44FQ+1KShe4lawv73dja1u6J5uLbOZeiZU6ISU=
Subject key identifier: F2:3F:0D:1C:A2:0E:30:D5:1B:C2:03:04:24:E4:4F:9E:8C:8E:91:C7
Authority key identifier: 3C:E7:56:6B:B5:B1:9E:70:0F:48:E2:5E:07:50:6C:2F:22:2D:F3:84
Certificate issuer: /CN=3ce7566bb5b19e700f48e25e07506c2f222df384
Certificate serial: 0198CBA5830D4CE40E2FF0A215E39105298B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/POdWa7WxnnAPSOJeB1BsLyIt84Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.mft
Manifest number: 0EA0
Signing time: Thu 21 Aug 2025 08:01:18 +0000
Manifest this update: Thu 21 Aug 2025 08:01:18 +0000
Manifest next update: Fri 22 Aug 2025 08:01:18 +0000
Files and hashes: 1: LnOKhHlXHgf9Bc7By8RdD87CENc.roa (hash: SBq8tD3nAGx2l0m6YmZ4sb5xKbi6vLmOJJ/u4lHDzyQ=)
2: MtOebLSNSemLqQH1Qdt6lKbCdQU.roa (hash: p2mZ95DJo3RCkhalV7XQwJkDag3/z20BD18MDcr1SRU=)
3: POdWa7WxnnAPSOJeB1BsLyIt84Q.crl (hash: 1siuPG6sg1fKQlbIGQezAkZc5bhpbImKaul0NytQwLM=)
4: qQRcQNcowo3kCSFmxOhnd54Y8jY.roa (hash: raMUt5t5W5lynqzBwroXOMjtxQgLkjALLNPiIADIJEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/POdWa7WxnnAPSOJeB1BsLyIt84Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Aug 2025 07:46:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:cb:a5:83:0d:4c:e4:0e:2f:f0:a2:15:e3:91:05:29:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ce7566bb5b19e700f48e25e07506c2f222df384
Validity
Not Before: Aug 21 08:01:18 2025 GMT
Not After : Aug 22 08:01:18 2025 GMT
Subject: CN=f23f0d1ca20e30d51bc2030424e44f9e8c8e91c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2b:6d:5e:6e:78:f7:a4:14:ab:1c:5a:b3:91:
95:b0:83:02:2c:55:9c:b3:88:4f:9c:db:11:ef:b4:
e9:36:8d:1c:bc:0f:32:77:a2:65:82:0b:7a:52:40:
23:d9:70:e2:3f:b7:7e:fb:cb:f2:6c:0b:62:29:cc:
d1:e8:aa:ce:45:7a:83:83:4c:fb:80:7c:86:14:9b:
60:09:8c:36:22:0d:49:e9:25:2c:0d:e5:37:98:05:
9e:8b:08:a1:f2:47:d2:55:06:02:a3:90:d3:a7:53:
db:71:70:a0:42:a5:b0:fe:33:65:05:92:8e:5f:5e:
33:38:02:5f:e5:28:be:80:7c:36:e7:58:5a:63:5a:
8a:0a:9e:b7:84:73:b1:8c:84:02:35:18:7a:fb:4f:
7c:10:29:33:c4:c1:02:35:94:85:dd:2e:80:1a:e4:
5e:a1:54:6b:25:6f:25:10:3a:96:11:ce:af:90:42:
cd:94:b8:e7:6d:23:97:a0:bd:c6:3a:f2:6a:90:18:
35:c1:32:fb:d6:e2:08:80:84:e9:75:75:8c:fd:4a:
5f:ca:9a:7f:e4:5c:a1:e9:02:af:6f:8a:07:3a:82:
4f:c0:d7:20:90:78:ec:c4:f2:da:68:d2:41:8c:a0:
88:bc:a5:dd:0c:19:03:f6:7e:9d:36:eb:89:a1:03:
85:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:3F:0D:1C:A2:0E:30:D5:1B:C2:03:04:24:E4:4F:9E:8C:8E:91:C7
X509v3 Authority Key Identifier:
keyid:3C:E7:56:6B:B5:B1:9E:70:0F:48:E2:5E:07:50:6C:2F:22:2D:F3:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/POdWa7WxnnAPSOJeB1BsLyIt84Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:4f:de:d5:15:bb:70:72:97:8e:11:06:19:33:06:b2:ba:56:
3b:0e:04:33:99:46:d0:32:47:10:d4:c4:ef:1c:26:1e:e6:44:
9b:08:1f:60:95:ab:dc:2e:89:7c:52:c6:a3:cf:89:a3:38:ea:
df:c9:73:0f:08:91:5c:7e:66:00:39:08:01:67:1a:80:e7:5a:
bf:91:fa:1d:9e:ce:1f:e4:a9:18:3e:ac:3f:4e:6b:0f:cc:3d:
a8:95:0e:60:cf:31:1a:37:d1:43:91:b7:0d:54:19:91:d0:b2:
6c:19:09:00:f3:dc:60:70:37:3b:be:4a:59:b9:46:b9:40:61:
fc:4c:0a:c3:9f:5a:79:96:59:8b:fe:31:ee:1e:fb:02:9b:70:
f7:6d:34:6c:f7:fa:5c:70:cd:06:01:a1:9d:f2:21:50:0f:c3:
bf:f8:d4:78:25:ab:c2:13:9c:a0:d8:93:b4:2d:79:7d:5c:90:
53:1f:e4:84:91:0e:96:fa:f6:d4:ca:7c:32:2b:24:f3:cd:93:
14:4e:7c:eb:84:25:4b:da:b1:46:05:33:4e:ed:07:ca:e8:e4:
58:73:95:97:9d:40:81:d7:78:72:1e:64:0c:8a:73:db:91:16:
5e:19:d0:5b:b4:32:bf:21:aa:ac:33:3d:b1:7e:3f:59:96:34:
eb:df:e9:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 09:41:49 2025 by rpki-client