Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft
File: pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft (raw, json)
Hash identifier: R5N6AfmLAmkWAWAR7pqkLmZXBYFTmHLTjIbF9MlmY0g=
Subject key identifier: A2:76:A1:9A:43:E4:A7:1F:4C:D6:6E:31:65:E6:E9:68:97:FD:FA:99
Authority key identifier: A5:B0:C0:57:31:EF:A4:BB:E5:C2:A3:0A:E5:18:9F:77:85:D2:D4:99
Certificate issuer: /CN=a5b0c05731efa4bbe5c2a30ae5189f7785d2d499
Certificate serial: 0197B6A04BDA7E22A22BEE365022C92E70D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft
Manifest number: 1562
Signing time: Sat 28 Jun 2025 13:00:47 +0000
Manifest this update: Sat 28 Jun 2025 13:00:47 +0000
Manifest next update: Sun 29 Jun 2025 13:00:47 +0000
Files and hashes: 1: DuTLHmPWVWziogaT97oFAa9mDRE.roa (hash: PMtNyjUzQWlQv3rVcKbrWnO8Vocq0JKKdYATvPbNA78=)
2: X3CBuLjI2iLdZV3cmRV8Xr8zH-8.roa (hash: nRhR1UBTZd6YJqMwitmIM+7shNJ21X2SOgFJgRIoWfs=)
3: pbDAVzHvpLvlwqMK5Rifd4XS1Jk.crl (hash: iQsU7zS3P0nsrW9CQ9BHX3WU+I2orU2LEbo/x5smB74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:4b:da:7e:22:a2:2b:ee:36:50:22:c9:2e:70:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5b0c05731efa4bbe5c2a30ae5189f7785d2d499
Validity
Not Before: Jun 28 13:00:47 2025 GMT
Not After : Jun 29 13:00:47 2025 GMT
Subject: CN=a276a19a43e4a71f4cd66e3165e6e96897fdfa99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ff:16:ba:5a:8f:c3:e5:89:b7:8c:45:51:90:
83:e8:94:8a:47:00:73:8b:0c:80:a0:e8:87:b0:d6:
20:1c:3f:ee:33:db:58:d3:ec:13:db:ab:6c:27:12:
31:72:e9:e0:dc:e0:f2:4c:30:bf:90:f4:32:7c:ed:
13:88:15:88:2a:cc:5f:ab:d1:fb:44:70:ce:a4:2d:
e7:7c:10:b2:11:68:76:64:c8:eb:46:4f:d8:ec:8b:
ae:b9:09:f2:a0:d3:d4:60:f1:33:ed:e9:68:bc:27:
54:f8:e1:f6:37:b0:c2:33:5f:c4:f2:ad:d2:80:ef:
bf:a4:25:8f:f6:f6:a0:5b:c5:c1:85:58:0c:3a:6f:
f7:6a:4d:cf:62:fb:b7:77:54:fd:65:72:e0:e3:e3:
82:8d:eb:19:61:e3:f8:cd:a6:f7:58:45:6c:c7:58:
de:ed:a7:c6:76:47:29:f6:61:b1:33:b4:33:5a:8c:
3e:c2:7c:1a:76:bf:2d:7a:a9:d9:a6:34:ea:cf:ec:
39:53:0f:eb:8c:f0:2c:06:c6:65:9e:68:5f:a8:66:
0b:47:ac:3b:fb:26:00:f8:9f:bc:d8:00:96:64:08:
e5:e2:76:88:20:df:73:bb:b1:66:58:dc:f6:75:1b:
ca:92:a7:ca:c5:f8:7a:bc:e6:be:29:54:58:9f:e5:
1d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:76:A1:9A:43:E4:A7:1F:4C:D6:6E:31:65:E6:E9:68:97:FD:FA:99
X509v3 Authority Key Identifier:
keyid:A5:B0:C0:57:31:EF:A4:BB:E5:C2:A3:0A:E5:18:9F:77:85:D2:D4:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:0d:e3:d0:6a:02:9e:4d:98:9f:e3:ba:c2:0e:e1:ec:53:3a:
01:66:a6:63:5d:18:33:41:f8:52:af:be:bb:3e:6d:dd:e8:b9:
89:18:67:6f:67:2d:14:58:54:b9:ef:64:ed:cc:90:c2:3e:af:
47:1f:ea:96:1a:fc:8f:fd:7e:19:0b:ba:55:f4:80:2f:2f:98:
78:16:7a:cd:1a:a1:c8:ed:9f:f2:f1:29:74:ad:7c:66:11:b4:
64:64:94:d6:ed:ee:ec:8f:ba:f9:97:05:6f:db:ae:9b:1d:50:
12:1b:92:3a:81:2c:4b:c4:a1:d6:42:60:ff:09:3e:25:06:c2:
cc:1b:bf:7f:a4:41:96:a0:b6:dc:3e:18:96:e5:70:ec:72:95:
1c:83:8c:33:fb:78:33:ff:73:49:cd:d1:c3:c4:1e:41:88:70:
e8:a3:42:23:33:e4:03:9c:f8:db:3f:8d:1c:ab:5a:51:56:91:
af:9f:8f:37:f9:6f:40:e7:fd:f9:af:eb:64:a1:95:ff:4f:1f:
5e:43:de:61:8e:e6:74:7b:fa:f4:ac:4c:ec:2d:2e:93:0d:40:
cb:9b:39:d7:23:2e:e5:f9:ac:dd:0e:39:6e:62:8f:72:3a:fa:
de:80:a5:2d:9d:8d:1b:dc:99:e2:9d:89:6d:a0:da:cb:bd:ec:
df:20:37:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:27:09 2025 by rpki-client