Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft
File: pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft (raw, json)
Hash identifier: i05PB71ME8H6gcPi7MBDCiixkwkPbipAElYx1kpRPS8=
Subject key identifier: 06:06:CB:AF:34:C3:4A:77:C6:AF:26:F9:99:94:A7:28:34:61:10:B3
Authority key identifier: A5:B0:C0:57:31:EF:A4:BB:E5:C2:A3:0A:E5:18:9F:77:85:D2:D4:99
Certificate issuer: /CN=a5b0c05731efa4bbe5c2a30ae5189f7785d2d499
Certificate serial: 0198D660EE4511639DA42F71E987CC699F28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft
Manifest number: 15F7
Signing time: Sat 23 Aug 2025 10:02:13 +0000
Manifest this update: Sat 23 Aug 2025 10:02:13 +0000
Manifest next update: Sun 24 Aug 2025 10:02:13 +0000
Files and hashes: 1: DuTLHmPWVWziogaT97oFAa9mDRE.roa (hash: PMtNyjUzQWlQv3rVcKbrWnO8Vocq0JKKdYATvPbNA78=)
2: X3CBuLjI2iLdZV3cmRV8Xr8zH-8.roa (hash: nRhR1UBTZd6YJqMwitmIM+7shNJ21X2SOgFJgRIoWfs=)
3: pbDAVzHvpLvlwqMK5Rifd4XS1Jk.crl (hash: OCBX98BRsVxCxguk1uHYsivXNbyYoHZ2WAUGehIyACU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:ee:45:11:63:9d:a4:2f:71:e9:87:cc:69:9f:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5b0c05731efa4bbe5c2a30ae5189f7785d2d499
Validity
Not Before: Aug 23 10:02:13 2025 GMT
Not After : Aug 24 10:02:13 2025 GMT
Subject: CN=0606cbaf34c34a77c6af26f99994a728346110b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5c:6f:f6:cc:3c:f8:0c:c7:7b:7e:c2:d2:92:
d1:03:43:73:86:7c:2b:b2:9b:eb:d5:e5:cb:ef:c0:
ac:d3:83:de:3d:db:c6:0c:ee:19:57:e5:9b:24:1f:
5d:0e:77:5c:8f:22:06:be:a4:18:63:61:4a:72:bf:
ab:d4:ad:e2:32:a2:e8:7d:00:5d:00:b7:76:2d:1d:
a4:f5:81:15:2e:b5:2b:77:da:40:99:a7:25:3d:b4:
58:c2:7f:7d:45:e3:d5:03:80:f7:87:02:9d:a3:3e:
ff:f4:49:34:56:86:27:01:f5:e0:8a:c4:37:83:e2:
74:42:7a:95:fb:af:65:85:19:8d:c5:5e:cf:b7:16:
3d:1a:4c:d0:49:01:ab:5b:c6:5a:f8:a9:a7:74:7c:
cb:9f:c8:ee:b2:35:03:66:89:46:8f:9e:cd:96:57:
cb:3b:01:8a:5e:bc:a1:5f:4a:30:f4:dd:8c:c6:fd:
72:0a:95:81:b6:7c:99:5e:59:94:56:28:fd:74:06:
cc:46:80:e0:f4:51:05:2f:71:99:88:ba:2f:2d:99:
7e:04:4b:41:f9:0e:82:4e:2e:6a:8d:d7:d4:2c:13:
d1:50:6e:10:ce:3c:ce:0b:83:a7:8b:c6:b6:43:b0:
a5:23:2a:27:36:be:c2:49:a2:dc:23:81:9d:a6:57:
69:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:06:CB:AF:34:C3:4A:77:C6:AF:26:F9:99:94:A7:28:34:61:10:B3
X509v3 Authority Key Identifier:
keyid:A5:B0:C0:57:31:EF:A4:BB:E5:C2:A3:0A:E5:18:9F:77:85:D2:D4:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:e2:b7:65:1c:f4:74:68:62:b4:50:3b:b7:d6:5f:7e:d2:eb:
e9:85:39:ee:a4:05:66:1d:f2:fa:e7:ca:df:69:c3:2d:41:cc:
d0:52:60:5e:64:77:db:2a:dc:62:5a:00:8b:f3:19:e4:54:da:
32:87:06:f9:bd:af:da:af:89:a1:40:6f:b5:3d:50:77:7c:fe:
e8:6e:f1:66:ea:ff:0d:1d:ca:d3:57:8d:66:68:17:93:15:8b:
9d:11:b2:6d:3d:27:f4:d1:57:63:df:cf:8a:2b:a7:0c:b9:3b:
e6:c8:00:9c:69:15:53:c6:ca:79:e0:d9:cc:78:bd:02:9a:64:
d8:3c:e1:e6:ee:d0:c3:f4:84:bd:d7:02:56:19:58:a2:51:e1:
d4:30:64:c1:7c:fe:9e:7f:b9:bc:ff:a3:90:a5:4a:65:3d:bf:
10:ff:ee:b3:31:94:18:bc:4e:76:06:24:75:64:54:66:6d:93:
22:7c:75:83:8c:82:fa:76:90:84:a0:f3:4b:47:9d:d7:fa:45:
a6:af:26:48:df:71:2b:89:16:3a:6d:e2:d2:cf:6a:50:d9:94:
25:d6:dd:10:47:c1:53:11:62:a4:83:e6:81:e5:16:ec:8b:5c:
25:23:e4:06:19:e3:5d:b5:e4:c0:fa:09:c1:87:95:b4:51:68:
11:cf:4a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:37:19 2025 by rpki-client