Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.mft
File: paVuvwHgA0n2cwGRgFYMmjGuqHE.mft (raw, json)
Hash identifier: x2vAVIZubdEAk8SrCuCsQOZN65Tu9kg5lxW/LZb+YUY=
Subject key identifier: A7:E5:C7:B7:A2:DB:03:6F:44:C4:F8:B2:F9:36:4F:A2:36:7D:7B:D2
Authority key identifier: A5:A5:6E:BF:01:E0:03:49:F6:73:01:91:80:56:0C:9A:31:AE:A8:71
Certificate issuer: /CN=a5a56ebf01e00349f673019180560c9a31aea871
Certificate serial: 0199FC219ACAD163B700DA8F293CE4A3D09F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/paVuvwHgA0n2cwGRgFYMmjGuqHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.mft
Manifest number: 0DE5
Signing time: Sun 19 Oct 2025 11:01:24 +0000
Manifest this update: Sun 19 Oct 2025 11:01:24 +0000
Manifest next update: Mon 20 Oct 2025 11:01:24 +0000
Files and hashes: 1: Up1DgVu6Rzl8j-xWcnRJPbc9w5c.roa (hash: S1Y+h0243/EB07fB0dXlduT0obEhbg3cgY40o4HTbzQ=)
2: paVuvwHgA0n2cwGRgFYMmjGuqHE.crl (hash: HUJhd3xFsTDKOJhqU4NvIRK+FQCf9XFakNF9hWHCokA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/paVuvwHgA0n2cwGRgFYMmjGuqHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:9a:ca:d1:63:b7:00:da:8f:29:3c:e4:a3:d0:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5a56ebf01e00349f673019180560c9a31aea871
Validity
Not Before: Oct 19 11:01:24 2025 GMT
Not After : Oct 20 11:01:24 2025 GMT
Subject: CN=a7e5c7b7a2db036f44c4f8b2f9364fa2367d7bd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6c:07:74:52:88:57:0a:5f:5d:0f:1d:5b:17:
b3:b8:bc:d4:99:19:88:0d:ff:cc:f2:44:0d:3e:7f:
76:1a:6d:22:26:49:2e:bd:b9:6d:89:d3:2c:3b:f2:
6a:23:c8:53:b2:6b:e6:36:83:e0:f8:67:fa:04:85:
35:f2:92:fb:47:3d:ce:3a:43:3d:b5:44:9f:dd:84:
06:a3:ba:b3:3f:24:e1:51:27:f5:38:ae:3a:66:54:
b3:bf:7f:ee:da:a5:f5:ec:92:cf:f0:2a:a9:20:28:
48:18:58:4f:e2:bb:2e:ea:17:e6:05:30:61:52:8a:
06:f0:a0:4a:2d:7c:07:3a:d7:44:56:26:ff:95:8a:
87:9b:e5:e4:1b:78:e3:01:ef:0c:bc:12:aa:93:27:
4a:57:16:dc:c5:52:68:b3:92:0f:96:b0:78:91:78:
f9:c9:aa:02:25:b0:27:b7:00:06:bb:a9:27:fa:ec:
c7:80:f4:98:85:18:3b:01:54:d5:30:b5:a0:a2:b3:
1c:e4:9c:8a:4b:82:d4:34:b5:59:c6:44:a1:50:b3:
b4:a1:83:6d:08:d0:8f:d7:68:59:07:02:28:c3:5f:
53:b5:09:b2:cb:5b:41:e7:7e:bd:03:2e:ef:42:d3:
9c:2e:0f:15:4d:27:27:64:97:a7:ec:f8:6e:ee:4f:
3b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:E5:C7:B7:A2:DB:03:6F:44:C4:F8:B2:F9:36:4F:A2:36:7D:7B:D2
X509v3 Authority Key Identifier:
keyid:A5:A5:6E:BF:01:E0:03:49:F6:73:01:91:80:56:0C:9A:31:AE:A8:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/paVuvwHgA0n2cwGRgFYMmjGuqHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:11:b9:82:d5:e2:b7:b2:05:d5:7b:4b:26:5c:a6:6b:21:83:
eb:ec:cf:1c:29:0a:f3:a1:16:59:39:d5:4e:8a:80:d1:5f:40:
db:97:e8:c1:70:c3:c4:8d:5f:d3:7f:e3:2a:d9:9f:55:fa:fd:
78:84:88:3e:1e:ed:19:0d:90:aa:77:44:c2:46:61:5d:19:3e:
20:b3:86:7e:3a:93:47:00:9c:6b:4f:3c:c2:20:0b:98:f7:e9:
56:93:0c:17:f1:d7:f2:dd:bf:e7:de:6e:74:16:21:80:2d:68:
8f:ee:59:47:e4:96:4f:93:c1:8a:05:6a:99:34:ed:e9:3a:9a:
ca:bd:f9:ae:b6:69:5a:c8:db:c8:3c:83:0e:c3:f8:59:20:95:
f3:a4:23:9b:95:85:93:9b:62:a0:f1:2b:fb:08:c7:04:f3:dc:
4f:37:14:37:40:24:cd:ff:a0:b2:80:0f:8c:1f:31:b2:7c:ad:
47:08:8b:9f:95:b0:a7:f9:5e:fd:31:12:05:ad:35:2e:16:ee:
12:8e:1d:97:95:38:ad:f6:40:69:80:1e:8b:f8:ad:6b:0b:f1:
08:0b:6e:88:3b:b2:de:20:b8:1b:f5:94:90:c0:bd:91:ed:fb:
33:50:b0:8d:be:03:86:5c:23:36:00:b1:07:b4:a7:bb:8e:08:
1a:82:b3:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:27:36 2025 by rpki-client