Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft
File: po_5Ip79jRK0Jz80b4xkVOpYfsw.mft (raw, json)
Hash identifier: ZFGkZ/sOIB+CiFSDglbe162Rtfh5/c8rCN5HPeL71To=
Subject key identifier: 93:D0:85:2C:4F:E2:65:B4:46:2B:C2:0B:2C:23:C8:AE:9C:E3:83:F4
Authority key identifier: A6:8F:F9:22:9E:FD:8D:12:B4:27:3F:34:6F:8C:64:54:EA:58:7E:CC
Certificate issuer: /CN=a68ff9229efd8d12b4273f346f8c6454ea587ecc
Certificate serial: 0198C610A6FCD24CF450F5B13D24F0166663
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/po_5Ip79jRK0Jz80b4xkVOpYfsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft
Manifest number: 1645
Signing time: Wed 20 Aug 2025 06:00:36 +0000
Manifest this update: Wed 20 Aug 2025 06:00:36 +0000
Manifest next update: Thu 21 Aug 2025 06:00:36 +0000
Files and hashes: 1: NvB3sbtKygBuV_bHy4ubiaP6jUc.roa (hash: QHR99wgFE0npSuCrsPzML6fCQB1JMr/5JCdaknSW7aY=)
2: mkpPO0iUB-Trjc2yot_MhVuYzeI.roa (hash: bl4jbnOxpRldBgzWUbIAjtNRBkTTSgb/YiMXDC223qY=)
3: po_5Ip79jRK0Jz80b4xkVOpYfsw.crl (hash: 3SiqhPL9Y0oP0MG17SKM71khgTv7lzofC9AjsMMgNy0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/po_5Ip79jRK0Jz80b4xkVOpYfsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 06:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c6:10:a6:fc:d2:4c:f4:50:f5:b1:3d:24:f0:16:66:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a68ff9229efd8d12b4273f346f8c6454ea587ecc
Validity
Not Before: Aug 20 06:00:36 2025 GMT
Not After : Aug 21 06:00:36 2025 GMT
Subject: CN=93d0852c4fe265b4462bc20b2c23c8ae9ce383f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:11:91:fb:5e:21:57:67:74:cd:6b:66:21:0e:
b6:c3:33:10:b6:09:11:0f:53:93:ab:1b:24:33:00:
4b:50:af:2e:54:9f:21:c0:cd:9d:22:48:a1:7e:b8:
8b:0e:3c:3d:c9:ca:5d:c2:b6:b9:1b:f5:86:72:04:
f4:6b:1c:93:c0:0b:9e:2b:68:8c:5d:3f:2f:4f:53:
de:bd:f0:45:a9:80:d6:f6:72:f4:e5:7b:3d:27:58:
b4:9a:c8:d4:64:8a:42:db:36:ca:8f:81:3b:b9:8e:
d9:35:9a:7f:bb:7e:5c:72:e3:41:b5:b9:75:bf:a6:
b6:fc:9f:78:bb:da:83:ba:98:e3:0c:c4:94:f9:3c:
a1:9c:51:89:a6:08:45:11:5d:e8:54:e4:12:5b:13:
fa:7a:16:1b:c2:f6:69:09:92:2d:f5:b4:17:93:93:
3f:6d:c4:4b:e4:c8:6a:69:ff:43:f0:df:c2:6e:b5:
53:00:92:92:4e:72:79:af:31:4e:bb:60:dc:89:1f:
0f:01:84:56:ad:f0:8b:c4:8f:6f:dd:49:48:d0:6f:
a2:86:ce:ad:22:ff:df:bb:5b:83:b5:69:56:8e:d8:
48:c2:55:69:d3:08:c1:93:44:85:88:d1:b4:73:36:
35:5a:9b:b3:1e:a0:4f:b0:14:25:67:0f:3c:24:6b:
ca:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:D0:85:2C:4F:E2:65:B4:46:2B:C2:0B:2C:23:C8:AE:9C:E3:83:F4
X509v3 Authority Key Identifier:
keyid:A6:8F:F9:22:9E:FD:8D:12:B4:27:3F:34:6F:8C:64:54:EA:58:7E:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/po_5Ip79jRK0Jz80b4xkVOpYfsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:fe:cc:78:97:77:f0:da:ac:77:43:15:76:59:60:6a:0b:64:
fe:0e:c1:f8:2b:48:b6:46:b5:2f:68:ab:38:66:56:2a:18:4a:
c0:d0:26:6a:c7:8f:16:00:1d:9c:8a:97:f4:96:06:50:44:fa:
2c:f4:05:a2:68:1b:b4:ea:7c:67:1c:cb:de:e0:16:ce:67:49:
0c:44:9d:86:3f:d5:52:de:57:a5:87:eb:38:3f:23:91:87:79:
3e:7a:61:fc:b1:e3:6d:60:80:72:25:0a:6f:90:f7:3d:1b:c3:
73:d6:3e:b7:02:95:ec:10:f5:2b:a8:79:d5:5e:53:c0:1d:71:
81:9c:aa:1c:48:e6:9f:01:3f:cf:43:c4:59:89:f6:73:46:d5:
21:5f:14:dd:83:d7:59:d1:91:01:b9:9d:01:03:25:92:0d:d8:
aa:fb:42:d5:90:e3:c9:ba:98:ce:fe:cc:9f:85:88:bd:98:72:
76:dc:9d:36:76:4f:d1:7d:b1:18:d7:b0:f0:ff:5a:d2:a6:f1:
a4:60:50:f6:62:15:e3:71:33:37:e2:a7:68:51:ce:e4:75:d9:
82:03:23:df:99:25:e6:d3:e1:0f:f7:fd:ec:19:66:67:9c:6d:
ce:d9:c9:e2:99:60:38:b4:85:98:bf:76:72:93:22:ee:e4:e5:
29:f2:c8:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 13:51:46 2025 by rpki-client