Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft
File: po_5Ip79jRK0Jz80b4xkVOpYfsw.mft (raw, json)
Hash identifier: ZBUuP1LjETlYcnNCXC1vTCx2L68NiEnMwtcWu20iMpc=
Subject key identifier: 5E:CB:6C:AA:4F:89:8C:D9:3B:20:00:FF:1A:CF:5C:C1:60:FD:00:44
Authority key identifier: A6:8F:F9:22:9E:FD:8D:12:B4:27:3F:34:6F:8C:64:54:EA:58:7E:CC
Certificate issuer: /CN=a68ff9229efd8d12b4273f346f8c6454ea587ecc
Certificate serial: 019A4C2A71B30C6F22699745555A74CE1B39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/po_5Ip79jRK0Jz80b4xkVOpYfsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 00:00:41 +0000
Manifest this update: Tue 04 Nov 2025 00:00:41 +0000
Manifest next update: Wed 05 Nov 2025 00:00:41 +0000
Files and hashes: 1: NvB3sbtKygBuV_bHy4ubiaP6jUc.roa (hash: QHR99wgFE0npSuCrsPzML6fCQB1JMr/5JCdaknSW7aY=)
2: mkpPO0iUB-Trjc2yot_MhVuYzeI.roa (hash: bl4jbnOxpRldBgzWUbIAjtNRBkTTSgb/YiMXDC223qY=)
3: po_5Ip79jRK0Jz80b4xkVOpYfsw.crl (hash: hCVSGtghevK+eVLGKzhNwmFjw8Sk0SEtcpiNDDl90hU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/po_5Ip79jRK0Jz80b4xkVOpYfsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Nov 2025 20:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:2a:71:b3:0c:6f:22:69:97:45:55:5a:74:ce:1b:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a68ff9229efd8d12b4273f346f8c6454ea587ecc
Validity
Not Before: Nov 4 00:00:41 2025 GMT
Not After : Nov 5 00:00:41 2025 GMT
Subject: CN=5ecb6caa4f898cd93b2000ff1acf5cc160fd0044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:52:47:b9:f4:47:55:b4:c4:b3:41:2f:b6:db:
57:01:c3:4a:d7:e0:fc:d5:88:4c:43:eb:55:e1:14:
c0:d0:f5:f4:59:31:48:28:74:fd:52:10:6e:9a:60:
5a:6e:39:43:36:0f:36:04:21:d3:81:3d:77:65:d2:
40:3a:60:86:68:1e:46:e7:92:e1:83:39:f3:79:5e:
91:54:ad:db:21:c3:ad:d0:83:b5:80:ad:bc:00:81:
d5:13:de:f1:98:65:07:98:1e:e6:c0:d9:3b:4a:11:
b4:42:e5:ea:b0:36:e5:55:1d:d2:bc:35:5a:12:2d:
f9:48:91:54:05:20:7a:5d:1b:89:4b:79:d6:56:f1:
6c:94:8d:50:60:7c:69:ab:76:07:0c:5c:86:c7:de:
44:ce:d8:94:9e:94:fb:4a:57:14:c6:34:4f:eb:8c:
85:03:0e:67:15:76:18:40:b1:a1:18:9b:48:52:76:
ea:6f:2a:d6:db:dd:fd:e0:cd:28:e8:02:9e:8a:31:
2e:a2:38:1a:ba:76:24:a4:6a:35:04:73:85:b6:8a:
51:a9:0e:e2:7b:70:22:e5:3e:12:6d:95:84:9c:ee:
fb:8c:f1:06:58:be:66:7b:a5:b6:da:cb:6a:de:62:
ef:a5:65:f8:dc:56:5a:17:9e:50:d0:02:7c:90:22:
d9:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:CB:6C:AA:4F:89:8C:D9:3B:20:00:FF:1A:CF:5C:C1:60:FD:00:44
X509v3 Authority Key Identifier:
keyid:A6:8F:F9:22:9E:FD:8D:12:B4:27:3F:34:6F:8C:64:54:EA:58:7E:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/po_5Ip79jRK0Jz80b4xkVOpYfsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:1d:59:bc:80:f0:8d:72:a1:86:41:9a:1b:16:3b:e4:e3:aa:
17:e6:aa:61:4d:34:d3:06:5c:75:f1:35:69:df:36:27:65:f4:
ee:52:c6:75:8a:30:a2:52:3a:53:3f:b9:09:31:ec:72:ef:cf:
17:ab:34:f3:4a:e3:17:df:cc:9a:9f:63:db:c0:36:d1:5c:26:
ea:a4:fc:7b:aa:d0:d8:ca:ac:85:94:e6:d8:d0:00:66:32:c1:
7b:eb:5a:1e:10:c6:8c:10:c0:45:2b:ef:2a:b1:4d:57:ec:1f:
da:9a:52:03:e7:ed:e5:83:17:a0:5d:69:04:45:4b:cb:3d:13:
c2:6b:f2:37:8a:4c:e2:59:51:0b:a3:e1:93:57:fb:2a:96:b9:
c7:46:e9:3e:da:02:9b:f9:a5:10:52:05:ea:aa:d3:43:c2:13:
fb:f8:c4:76:ce:59:a7:1d:5c:f1:fa:1f:8e:87:bb:85:68:72:
89:24:b2:d1:18:ff:ba:81:af:c7:76:90:b9:46:25:9d:81:e6:
d6:1a:ba:e4:d2:19:8e:19:e4:7f:a5:49:c6:fe:ad:6d:05:0a:
a9:77:8a:e6:08:40:04:d2:8b:13:be:57:c2:05:2a:bf:f8:81:
79:7a:c7:c4:08:d0:92:91:f6:41:e6:a6:80:83:e4:9f:f6:83:
4c:ba:9c:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 04:01:14 2025 by rpki-client