Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.mft
File: paVuvwHgA0n2cwGRgFYMmjGuqHE.mft (raw, json)
Hash identifier: 5PpKtD02yke864aub6Y8fZgwAuxrIwd08jhPAa3otks=
Subject key identifier: C1:1E:E6:BB:1E:91:3D:C3:14:F8:88:52:6C:C5:62:37:CA:91:F5:C2
Authority key identifier: A5:A5:6E:BF:01:E0:03:49:F6:73:01:91:80:56:0C:9A:31:AE:A8:71
Certificate issuer: /CN=a5a56ebf01e00349f673019180560c9a31aea871
Certificate serial: 0198D4A7D21EA563A7D487C426515CF344B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/paVuvwHgA0n2cwGRgFYMmjGuqHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.mft
Manifest number: 0D4C
Signing time: Sat 23 Aug 2025 02:00:24 +0000
Manifest this update: Sat 23 Aug 2025 02:00:24 +0000
Manifest next update: Sun 24 Aug 2025 02:00:24 +0000
Files and hashes: 1: Up1DgVu6Rzl8j-xWcnRJPbc9w5c.roa (hash: S1Y+h0243/EB07fB0dXlduT0obEhbg3cgY40o4HTbzQ=)
2: paVuvwHgA0n2cwGRgFYMmjGuqHE.crl (hash: McmFJ4FFrn5EtHLZBtvaxTYyBKbHjps16ADbdPx28bI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/paVuvwHgA0n2cwGRgFYMmjGuqHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:d2:1e:a5:63:a7:d4:87:c4:26:51:5c:f3:44:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5a56ebf01e00349f673019180560c9a31aea871
Validity
Not Before: Aug 23 02:00:24 2025 GMT
Not After : Aug 24 02:00:24 2025 GMT
Subject: CN=c11ee6bb1e913dc314f888526cc56237ca91f5c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d3:73:b1:9e:7a:3c:6b:7e:97:30:2b:33:9d:
0e:1d:6b:63:98:30:9b:6d:b2:f6:a0:6b:0b:61:b5:
41:59:18:60:13:a4:a3:71:9f:b5:17:a3:70:e4:c7:
3b:17:04:17:45:13:02:f0:80:ac:51:1b:45:cf:3b:
82:e3:0f:8d:03:be:ba:82:58:55:73:a0:69:db:cf:
71:fb:f0:49:da:96:56:2e:bb:6a:38:17:87:a2:57:
fe:59:15:8c:4e:a5:c6:82:e3:b5:5c:39:37:87:d7:
2a:c3:ac:e3:fd:cb:f1:7b:69:bf:de:3b:ba:9c:84:
de:55:c0:73:34:8b:65:32:24:e7:a4:90:66:4b:e3:
36:e9:a3:51:33:f1:0c:a4:e8:32:30:4c:be:16:30:
01:81:22:19:6f:9a:4a:95:68:8a:c3:99:6e:a0:dc:
69:87:31:e4:e6:c0:1f:d1:80:da:c1:31:58:a5:97:
12:c3:f4:49:1e:6e:27:66:f9:9b:d2:80:74:6c:60:
96:d6:ef:5b:56:54:a5:d7:3b:b8:9a:76:a7:b9:ee:
3d:4e:a2:e9:6c:ec:0d:3a:6a:9d:5a:08:c6:f4:af:
d3:fe:7b:2e:f7:ce:b1:ff:ae:2e:f0:3e:f2:ba:1b:
07:91:c8:f9:2b:a5:51:a6:73:32:55:57:6d:78:bf:
69:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:1E:E6:BB:1E:91:3D:C3:14:F8:88:52:6C:C5:62:37:CA:91:F5:C2
X509v3 Authority Key Identifier:
keyid:A5:A5:6E:BF:01:E0:03:49:F6:73:01:91:80:56:0C:9A:31:AE:A8:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/paVuvwHgA0n2cwGRgFYMmjGuqHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:71:32:37:ab:55:40:92:72:fc:46:48:af:b6:19:f8:c2:f7:
0e:8d:e1:f6:7a:4d:3c:5e:80:e7:de:ca:2a:b4:9e:ce:fd:81:
c4:56:11:c8:1f:3f:db:db:25:75:35:28:24:ea:ce:21:4d:73:
9f:83:17:d6:84:fa:93:2e:51:05:a2:89:b2:e0:70:ee:fb:1c:
7f:82:ea:d4:1c:31:47:b2:be:1d:12:d5:cd:18:1b:7a:b9:08:
c5:b3:ba:36:01:5e:4c:f7:c9:ca:7d:77:f4:a5:b7:f4:21:31:
83:fd:ae:67:40:51:03:e9:50:4b:f3:bf:90:20:4d:f0:61:83:
66:c6:08:57:e9:e1:49:55:9e:c9:58:8a:02:4b:92:71:03:d3:
01:ee:3e:89:06:43:db:01:50:88:0b:1a:73:76:7d:5c:1a:48:
86:5a:34:94:bd:6b:c3:35:d0:11:28:7f:6b:e5:57:c7:fd:7c:
b0:5d:4a:ee:58:32:f2:4f:d4:27:54:3e:d0:ba:b8:74:6c:86:
92:fb:ab:d1:3a:2a:2b:34:d7:62:6c:c4:60:25:76:8f:94:7e:
2c:d8:6b:51:53:05:33:18:d8:d9:bd:51:c1:61:1f:cf:a6:7d:
90:f2:c9:f1:d8:85:ff:7b:3f:ae:d5:6e:fb:89:e5:02:b5:58:
8d:bf:ba:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUp9IepWOn1IfEJlFc80S5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1YTU2ZWJmMDFlMDAzNDlmNjczMDE5MTgwNTYwYzlhMzFh
ZWE4NzEwHhcNMjUwODIzMDIwMDI0WhcNMjUwODI0MDIwMDI0WjAzMTEwLwYDVQQD
EyhjMTFlZTZiYjFlOTEzZGMzMTRmODg4NTI2Y2M1NjIzN2NhOTFmNWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1tNzsZ56PGt+lzArM50OHWtjmDCb
bbL2oGsLYbVBWRhgE6SjcZ+1F6Nw5Mc7FwQXRRMC8ICsURtFzzuC4w+NA766glhV
c6Bp289x+/BJ2pZWLrtqOBeHolf+WRWMTqXGguO1XDk3h9cqw6zj/cvxe2m/3ju6
nITeVcBzNItlMiTnpJBmS+M26aNRM/EMpOgyMEy+FjABgSIZb5pKlWiKw5luoNxp
hzHk5sAf0YDawTFYpZcSw/RJHm4nZvmb0oB0bGCW1u9bVlSl1zu4mnanue49TqLp
bOwNOmqdWgjG9K/T/nsu986x/64u8D7yuhsHkcj5K6VRpnMyVVdteL9pBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMEe5rsekT3DFPiIUmzFYjfKkfXCMB8GA1UdIwQY
MBaAFKWlbr8B4ANJ9nMBkYBWDJoxrqhxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGFWdXZ3SGdBMG4yY3dHUmdGWU1takd1cUhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS81NTRjMzUtYTgzYy00MzI5LWEwOGQt
MmQ0NmQzMGRhY2JmLzEvcGFWdXZ3SGdBMG4yY3dHUmdGWU1takd1cUhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS81NTRjMzUtYTgzYy00MzI5LWEwOGQtMmQ0NmQzMGRhY2Jm
LzEvcGFWdXZ3SGdBMG4yY3dHUmdGWU1takd1cUhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXHEyN6tV
QJJy/EZIr7YZ+ML3Do3h9npNPF6A597KKrSezv2BxFYRyB8/29sldTUoJOrOIU1z
n4MX1oT6ky5RBaKJsuBw7vscf4Lq1BwxR7K+HRLVzRgberkIxbO6NgFeTPfJyn13
9KW39CExg/2uZ0BRA+lQS/O/kCBN8GGDZsYIV+nhSVWeyViKAkuScQPTAe4+iQZD
2wFQiAsac3Z9XBpIhlo0lL1rwzXQESh/a+VXx/18sF1K7lgy8k/UJ1Q+0Lq4dGyG
kvur0ToqKzTXYmzEYCV2j5R+LNhrUVMFMxjY2b1RwWEfz6Z9kPLJ8diF/3s/rtVu
+4nlArVYjb+64g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:36:20 2025 by rpki-client