Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft
File: pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft (raw, json)
Hash identifier: OsqkG+bdpMDjEaIG1pJcDs/rii5adHYixxUC4eoErnA=
Subject key identifier: A6:1A:E7:D9:76:DF:58:F7:46:CF:C7:E1:38:D8:01:7B:F6:A6:A8:95
Authority key identifier: A5:B0:C0:57:31:EF:A4:BB:E5:C2:A3:0A:E5:18:9F:77:85:D2:D4:99
Certificate issuer: /CN=a5b0c05731efa4bbe5c2a30ae5189f7785d2d499
Certificate serial: 0199FDD9D9F368273CD1B5C2289D92B69A9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft
Manifest number: 1690
Signing time: Sun 19 Oct 2025 19:02:16 +0000
Manifest this update: Sun 19 Oct 2025 19:02:16 +0000
Manifest next update: Mon 20 Oct 2025 19:02:16 +0000
Files and hashes: 1: DuTLHmPWVWziogaT97oFAa9mDRE.roa (hash: PMtNyjUzQWlQv3rVcKbrWnO8Vocq0JKKdYATvPbNA78=)
2: X3CBuLjI2iLdZV3cmRV8Xr8zH-8.roa (hash: nRhR1UBTZd6YJqMwitmIM+7shNJ21X2SOgFJgRIoWfs=)
3: pbDAVzHvpLvlwqMK5Rifd4XS1Jk.crl (hash: c5O/ugGC+Txjv04TjsHiDn0IxEiEOozQAeFTZ1id0R0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:02:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:d9:f3:68:27:3c:d1:b5:c2:28:9d:92:b6:9a:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5b0c05731efa4bbe5c2a30ae5189f7785d2d499
Validity
Not Before: Oct 19 19:02:16 2025 GMT
Not After : Oct 20 19:02:16 2025 GMT
Subject: CN=a61ae7d976df58f746cfc7e138d8017bf6a6a895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:96:9a:31:4d:32:86:59:d3:fb:b4:34:af:1e:
f0:06:9b:9a:f7:be:da:ea:50:c6:07:96:19:35:bd:
f8:59:de:6b:c0:30:c8:21:cc:a3:07:a0:4e:20:91:
b5:25:97:91:c8:c3:a3:f7:66:e1:67:64:c8:cc:57:
f1:d6:32:8c:d9:56:1a:cc:ed:48:ae:d3:bb:cd:2a:
af:3e:1e:bb:da:db:ed:3e:89:a3:2d:ec:12:61:52:
69:8d:5b:89:fc:66:b2:c2:2d:6f:a7:25:74:5f:75:
9e:7c:93:39:36:1b:66:32:cc:40:2a:24:e6:32:72:
a9:43:0f:fa:51:56:98:f1:55:c7:f2:5a:ff:8b:00:
06:5a:da:6d:24:63:9f:32:4e:a7:cb:09:d8:ce:fb:
dd:8c:2f:79:be:e5:8b:69:dc:90:c2:5b:f3:d4:2d:
11:e7:03:ee:7e:93:fd:2c:59:35:89:78:0a:77:f5:
6f:bc:44:77:be:01:cf:fe:a7:e9:7b:c5:51:95:65:
3a:b7:fb:9f:ca:08:d2:34:93:77:c7:94:e8:f9:a3:
e7:5b:b1:55:9c:9d:23:17:72:06:68:b1:c3:d2:de:
5b:d3:dc:2a:85:e2:24:1f:3a:6f:73:3a:00:97:37:
f5:38:ad:f4:27:ae:46:ce:b3:07:09:00:ee:36:be:
3c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:1A:E7:D9:76:DF:58:F7:46:CF:C7:E1:38:D8:01:7B:F6:A6:A8:95
X509v3 Authority Key Identifier:
keyid:A5:B0:C0:57:31:EF:A4:BB:E5:C2:A3:0A:E5:18:9F:77:85:D2:D4:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:fe:23:0e:37:33:5e:8e:5c:7e:b5:b1:3b:f6:ff:fe:cd:9f:
9b:a5:a3:18:77:c1:37:dd:7f:61:ea:0e:ba:ac:36:76:3e:e2:
02:20:cb:93:63:8f:90:4c:9f:c4:1c:ff:35:fc:ce:63:d0:2e:
dc:0c:68:42:e6:34:a4:56:d1:a5:a4:19:25:bc:0b:4e:38:b8:
0e:d0:41:d0:8f:5d:05:ec:1b:fb:44:32:fb:6d:ee:69:42:fc:
7b:37:da:ef:61:31:c9:75:65:d1:5f:8d:ad:04:63:bd:a1:5b:
ea:55:7b:f3:fe:e8:8b:3f:db:68:6c:7c:9b:da:2d:c4:d8:77:
f5:0c:c7:8c:24:66:26:24:ed:30:7d:1c:cc:08:52:f1:76:8f:
5d:2c:4c:bd:68:ae:82:34:fe:1d:88:18:73:50:3c:38:40:e6:
a0:fa:31:8a:3e:bd:88:40:83:c3:11:a5:e9:b1:1f:fe:ee:7c:
00:c9:1c:db:37:5b:51:0a:7f:c8:7b:aa:ec:ed:5a:a9:80:a1:
a0:44:ca:c6:8a:9d:db:1a:14:c9:6e:d6:4e:0c:7e:63:f4:56:
d7:80:06:d4:bc:b1:13:9d:c5:97:14:6f:39:86:40:96:9c:f2:
ad:de:a1:19:cb:ba:15:88:38:ce:b7:74:af:54:3d:6b:73:b9:
8b:4a:ed:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:40:14 2025 by rpki-client