Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/96c272-f746-4628-95bc-a6126b54094d/1/pOeg0vxXpnuyt-hcPo14GSvKDxg.mft
File: pOeg0vxXpnuyt-hcPo14GSvKDxg.mft (raw, json)
Hash identifier: 501H8CgFMbYTJQER2gisIkrHDo5M8Nez41myGaMOezw=
Subject key identifier: 4D:51:38:FD:A0:C8:8F:3C:68:1F:EF:9B:7D:C3:F1:2D:C7:B3:BB:60
Authority key identifier: A4:E7:A0:D2:FC:57:A6:7B:B2:B7:E8:5C:3E:8D:78:19:2B:CA:0F:18
Certificate issuer: /CN=a4e7a0d2fc57a67bb2b7e85c3e8d78192bca0f18
Certificate serial: 0198C6EE34B7E4067859D145017484CFCF0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOeg0vxXpnuyt-hcPo14GSvKDxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/96c272-f746-4628-95bc-a6126b54094d/1/pOeg0vxXpnuyt-hcPo14GSvKDxg.mft
Manifest number: 0AC3
Signing time: Wed 20 Aug 2025 10:02:36 +0000
Manifest this update: Wed 20 Aug 2025 10:02:36 +0000
Manifest next update: Thu 21 Aug 2025 10:02:36 +0000
Files and hashes: 1: AdJqJvlWVSQ_2sjUlxPnhKVvXgE.roa (hash: rvwXexvACQ2KWhkVUmfkFIN6qH1hFBVmtLOZa/tj5cA=)
2: KJvnnNhFUTDBaAiTXmZylxAZWgo.roa (hash: st1kuzlQOffihqK5tkHfGz91GmZ0H30PPD1FGd+/4YY=)
3: LktV6JWikoIF232VjBQrp6HksI4.roa (hash: KgS7FsPzBvy4Emf2JVBB8x2vPupCGQ56pl16OI2UqbY=)
4: pOeg0vxXpnuyt-hcPo14GSvKDxg.crl (hash: 67c/clg/m4yymy/UENBBQM/61icV2Ed/dVebGfs+Fh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/96c272-f746-4628-95bc-a6126b54094d/1/pOeg0vxXpnuyt-hcPo14GSvKDxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/96c272-f746-4628-95bc-a6126b54094d/1/pOeg0vxXpnuyt-hcPo14GSvKDxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/pOeg0vxXpnuyt-hcPo14GSvKDxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 10:02:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c6:ee:34:b7:e4:06:78:59:d1:45:01:74:84:cf:cf:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4e7a0d2fc57a67bb2b7e85c3e8d78192bca0f18
Validity
Not Before: Aug 20 10:02:36 2025 GMT
Not After : Aug 21 10:02:36 2025 GMT
Subject: CN=4d5138fda0c88f3c681fef9b7dc3f12dc7b3bb60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8c:a2:d1:8c:b2:b9:1e:c0:2b:a8:54:2d:24:
6c:65:26:66:7b:80:42:ae:54:07:47:43:de:29:fb:
9f:6d:23:20:3a:50:e7:82:84:9f:8c:6b:1e:cb:bd:
81:a6:e1:26:8e:3b:15:72:3a:30:81:cf:ac:ac:fa:
8c:1c:b7:ec:5f:ce:66:07:bd:79:44:da:26:f7:4f:
35:48:20:84:f8:46:d2:88:57:2f:b9:1d:e6:f3:f8:
24:40:ac:3e:8b:d5:b3:da:d5:f4:79:05:e9:d4:3f:
92:91:03:09:d3:85:9a:20:53:61:64:53:77:27:0f:
62:03:fe:ca:c2:7f:37:0a:4d:79:e7:c2:c4:a5:b4:
44:d8:49:be:55:f1:7c:1a:5e:fb:8e:9a:e6:22:b8:
0c:2a:59:da:13:dc:34:b0:ef:84:5c:b2:a7:55:5c:
f7:56:e3:2a:72:de:2b:b2:16:98:48:04:9f:9d:7c:
ed:4a:f1:ed:17:ad:f2:ed:2f:22:71:17:40:72:05:
23:75:7c:7e:96:6c:a2:00:d4:d3:0e:d9:99:9a:b8:
79:d0:8c:32:c0:4d:a2:3d:4c:c8:f2:08:67:38:43:
36:ae:ab:30:b2:77:78:2b:e9:2a:95:ac:70:7b:6b:
cc:f0:f1:15:c1:44:57:07:58:c0:10:78:81:b1:09:
88:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:51:38:FD:A0:C8:8F:3C:68:1F:EF:9B:7D:C3:F1:2D:C7:B3:BB:60
X509v3 Authority Key Identifier:
keyid:A4:E7:A0:D2:FC:57:A6:7B:B2:B7:E8:5C:3E:8D:78:19:2B:CA:0F:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOeg0vxXpnuyt-hcPo14GSvKDxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/96c272-f746-4628-95bc-a6126b54094d/1/pOeg0vxXpnuyt-hcPo14GSvKDxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/96c272-f746-4628-95bc-a6126b54094d/1/pOeg0vxXpnuyt-hcPo14GSvKDxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:fa:87:dd:47:10:ad:46:dc:4c:3a:ec:8b:84:cb:ae:e9:c9:
59:ec:a9:c1:cb:c4:49:05:13:81:30:fc:71:d8:42:81:ac:c0:
31:d8:83:8e:44:c6:9d:c9:72:23:bd:75:65:3d:97:39:7b:de:
62:8e:16:e6:a4:fc:a0:dd:84:45:a5:11:f8:e8:6f:a1:19:ef:
57:db:28:cb:43:0b:ba:0d:7e:48:8b:07:4a:9b:fe:28:25:0b:
53:7a:5a:53:23:75:7b:26:64:0a:44:4e:ce:d4:97:7f:ff:11:
54:28:9c:71:3c:e6:d8:ec:f0:bc:96:df:08:3a:69:a7:d6:b3:
d1:41:b7:a5:db:72:b5:e2:fc:cd:f7:76:8e:fd:9a:8c:26:12:
16:25:17:e6:70:60:e2:5d:2a:82:0f:b7:39:07:fc:2c:e7:bc:
94:28:a3:7b:1b:9a:86:44:e8:0f:3b:8c:9a:fd:5c:2f:bb:f5:
3b:b3:3e:c1:83:9f:e1:54:7a:f3:c8:58:6e:cf:3c:80:41:ec:
91:3d:11:1b:51:5f:6e:e0:e6:97:5d:9d:87:7e:16:b8:18:71:
4f:9c:50:1f:81:de:9c:df:e5:55:cc:c3:6b:ed:c1:5c:34:d8:
0f:38:64:6c:b8:0a:53:0f:5a:b8:70:88:03:f0:ed:f9:45:64:
3d:80:10:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 15:34:45 2025 by rpki-client