Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft
File: po_5Ip79jRK0Jz80b4xkVOpYfsw.mft (raw, json)
Hash identifier: 8mkvWOAoK1uGnRgLt+iIbdoSGdGBu09dQ7VbJN71zM8=
Subject key identifier: 53:07:EC:BB:AB:95:21:94:F5:C1:30:D1:90:D9:94:A6:77:E8:C4:F5
Authority key identifier: A6:8F:F9:22:9E:FD:8D:12:B4:27:3F:34:6F:8C:64:54:EA:58:7E:CC
Certificate issuer: /CN=a68ff9229efd8d12b4273f346f8c6454ea587ecc
Certificate serial: 0197499EF800D26EEC721025B1DE49B66E3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/po_5Ip79jRK0Jz80b4xkVOpYfsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft
Manifest number: 1580
Signing time: Sat 07 Jun 2025 09:00:44 +0000
Manifest this update: Sat 07 Jun 2025 09:00:44 +0000
Manifest next update: Sun 08 Jun 2025 09:00:44 +0000
Files and hashes: 1: NvB3sbtKygBuV_bHy4ubiaP6jUc.roa (hash: QHR99wgFE0npSuCrsPzML6fCQB1JMr/5JCdaknSW7aY=)
2: mkpPO0iUB-Trjc2yot_MhVuYzeI.roa (hash: bl4jbnOxpRldBgzWUbIAjtNRBkTTSgb/YiMXDC223qY=)
3: po_5Ip79jRK0Jz80b4xkVOpYfsw.crl (hash: xpskwPMYUpX6MV3a4CFis+QvbspEgnIS7Vko5v56w4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/po_5Ip79jRK0Jz80b4xkVOpYfsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9e:f8:00:d2:6e:ec:72:10:25:b1:de:49:b6:6e:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a68ff9229efd8d12b4273f346f8c6454ea587ecc
Validity
Not Before: Jun 7 09:00:44 2025 GMT
Not After : Jun 8 09:00:44 2025 GMT
Subject: CN=5307ecbbab952194f5c130d190d994a677e8c4f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:e2:ad:48:58:d8:00:57:c1:54:2a:09:7a:8d:
9b:f8:0b:a3:3e:56:1d:9f:22:44:e8:e2:be:66:58:
2f:fc:19:1d:3a:5e:c9:c5:0f:c4:14:11:a7:04:ff:
5f:83:0e:63:17:21:c0:25:9c:b3:65:56:a1:bd:e9:
54:d3:ce:21:58:8a:39:bd:5a:3a:f0:74:91:b7:d7:
9a:81:e0:ca:6c:24:41:d2:58:65:e3:2f:3f:da:07:
49:90:d4:62:23:da:0d:12:6d:a7:5b:54:ae:57:d7:
67:55:39:3c:00:c8:0a:72:ee:88:ac:75:07:00:8e:
26:b5:a1:28:ac:c0:1f:96:6d:1c:a3:4e:e2:ca:c7:
38:5e:05:b4:09:ae:43:c3:52:26:5e:a4:08:77:3d:
c1:7f:4d:53:3d:ec:dd:c1:da:7f:df:aa:f2:88:83:
d7:25:70:f2:79:35:d7:1d:88:ad:20:ce:5b:1b:ad:
8d:f8:66:96:ec:29:cc:6a:92:b2:5e:ef:bd:be:8f:
84:ed:9c:03:f6:e6:42:29:a3:fe:eb:a0:42:30:5c:
f8:6d:87:e6:6f:61:7d:ed:da:03:12:5c:b7:ab:2b:
5c:a2:8f:5d:d1:44:71:f7:dc:b6:3b:be:d7:d7:bb:
70:9a:e8:a0:13:75:4e:75:bc:9b:18:ab:bd:2e:7e:
12:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:07:EC:BB:AB:95:21:94:F5:C1:30:D1:90:D9:94:A6:77:E8:C4:F5
X509v3 Authority Key Identifier:
keyid:A6:8F:F9:22:9E:FD:8D:12:B4:27:3F:34:6F:8C:64:54:EA:58:7E:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/po_5Ip79jRK0Jz80b4xkVOpYfsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:94:24:2d:da:a3:64:4c:d4:b4:64:59:fe:25:19:9a:0c:96:
60:4e:dd:2c:4c:a1:a6:f6:8a:4e:17:44:2a:45:8d:2b:79:ed:
89:78:ed:68:ea:8d:3f:06:ba:f2:55:16:2d:0a:f8:57:1d:91:
f4:d6:5d:ae:5b:ef:b4:5a:ef:53:ff:17:db:a1:f3:c2:f0:93:
ae:bc:6e:d4:50:1c:cf:56:97:67:f6:bd:b4:f7:eb:0a:5a:a8:
38:d5:08:e3:03:f6:5f:17:6a:4c:b4:de:81:ac:9f:d9:da:a5:
41:79:e3:a1:33:cd:3d:c4:35:0c:6e:61:9b:da:f5:4a:c3:b7:
3e:cb:e5:00:51:81:6d:88:7f:07:13:59:d0:ba:bc:32:8e:59:
c5:ac:19:57:3f:ff:34:63:6d:2b:6b:94:55:6d:6a:5f:55:a1:
a2:3e:c8:3d:ff:f9:f7:6b:a3:0a:db:48:9b:f1:4f:df:66:4e:
d9:bd:fd:27:e6:e4:04:a2:6a:48:7e:51:08:ac:9c:18:7a:54:
dc:5a:80:17:17:56:a5:08:1b:0c:ae:d2:05:16:67:17:31:73:
6e:cc:ce:06:a3:51:9c:f5:07:8e:62:b8:4c:da:2c:1b:53:02:
6a:bc:b9:98:4f:2a:3b:7d:01:97:6b:a4:76:44:bf:6c:90:30:
42:70:84:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:31:54 2025 by rpki-client