Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.mft
File: pavEOvztcvuSd4covuVxxnj1OFM.mft (raw, json)
Hash identifier: ecRy8cdaqkx5m/hh0eobZekRu5X8HshZCf98aKfc83c=
Subject key identifier: 3D:ED:49:0F:B8:B2:9D:27:C3:2A:A3:8A:13:C7:46:27:72:8E:67:48
Authority key identifier: A5:AB:C4:3A:FC:ED:72:FB:92:77:87:28:BE:E5:71:C6:78:F5:38:53
Certificate issuer: /CN=a5abc43afced72fb92778728bee571c678f53853
Certificate serial: 0198D5F14FBF4DE5AC8FAC7DFE8401B44FA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pavEOvztcvuSd4covuVxxnj1OFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 08:00:18 +0000
Manifest this update: Sat 23 Aug 2025 08:00:18 +0000
Manifest next update: Sun 24 Aug 2025 08:00:18 +0000
Files and hashes: 1: XTYDavgtknOlnwhLwE8YM7gzGNo.roa (hash: PldFwC0OKAPE16YsYJiSJ7/6hQNZV4y5TLuWK0kyNJ0=)
2: pavEOvztcvuSd4covuVxxnj1OFM.crl (hash: lmQOM+sz0dOyv7jU1NIRT2lDFWbJnhFgwaGq2UrAirs=)
3: sSPz7KsWNIMKyyRHlSkiZwosgKw.roa (hash: wjM7pq8MRvpOQBEJDje34R/IkWbdszEvqnHRsuBbId4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/pavEOvztcvuSd4covuVxxnj1OFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:4f:bf:4d:e5:ac:8f:ac:7d:fe:84:01:b4:4f:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5abc43afced72fb92778728bee571c678f53853
Validity
Not Before: Aug 23 08:00:18 2025 GMT
Not After : Aug 24 08:00:18 2025 GMT
Subject: CN=3ded490fb8b29d27c32aa38a13c74627728e6748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:8a:8f:8b:7d:57:23:f8:e2:f1:54:99:a5:bc:
35:67:50:5c:31:bf:bd:d9:36:ce:9d:b1:81:00:16:
50:e5:75:df:8d:59:b4:9c:2f:0a:63:43:9a:21:b9:
c1:f5:34:99:79:89:4d:4d:21:e6:a8:08:0a:af:57:
49:a0:6e:1e:7a:96:82:52:eb:39:ae:43:e3:e2:d7:
06:57:fd:ee:af:f7:5c:43:5e:83:e2:1d:3d:c8:e9:
d8:a3:3a:c5:9c:21:c9:19:37:9b:37:b4:94:5a:04:
30:9f:68:c8:eb:19:bc:b8:d0:e2:7e:47:b4:24:57:
ab:87:12:b2:07:b3:d4:5d:5f:3b:9e:5b:2d:95:91:
4f:cb:3c:cd:8f:74:c3:22:bd:b9:ed:4a:e8:fa:2a:
54:1b:58:61:38:c4:39:3b:d5:82:35:bf:4b:58:6b:
ed:bf:7c:12:aa:88:75:21:eb:97:c0:f6:b2:95:ab:
a6:00:d9:10:d7:0b:93:a1:16:22:19:fb:69:e1:74:
a4:63:73:3a:7c:6e:a9:ab:b7:fa:13:f9:67:3c:c5:
90:51:1a:8b:6f:b6:fa:ec:01:ed:63:b9:6d:ab:ba:
75:2e:80:91:01:df:4e:c7:73:c4:b1:91:db:44:25:
1c:10:f2:ca:c8:64:66:7e:f2:85:70:64:b5:7e:2e:
c6:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:ED:49:0F:B8:B2:9D:27:C3:2A:A3:8A:13:C7:46:27:72:8E:67:48
X509v3 Authority Key Identifier:
keyid:A5:AB:C4:3A:FC:ED:72:FB:92:77:87:28:BE:E5:71:C6:78:F5:38:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pavEOvztcvuSd4covuVxxnj1OFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:10:c6:77:b0:78:88:d2:fe:13:85:4c:b1:67:99:04:de:ff:
e1:56:f2:0f:b2:78:7e:24:86:54:57:f7:7e:93:46:cf:18:de:
ab:6f:82:e6:ed:cd:32:35:b5:b8:39:f9:4f:9e:ac:90:1f:63:
62:85:90:96:3d:b7:7e:46:bd:f8:24:c6:3c:7f:04:89:43:2b:
08:40:ee:81:43:8b:73:a5:dc:e1:a5:24:ec:64:71:5f:29:46:
07:17:b5:8e:a1:85:aa:1c:26:12:0f:c2:9f:1b:09:50:bd:53:
a7:38:d9:c9:1e:57:62:9f:00:50:03:64:65:a5:f8:dc:bb:a2:
54:4b:7f:49:a7:59:3c:82:6a:7f:70:25:09:db:03:ef:22:18:
f4:d6:a0:f2:3b:d9:3f:ac:bd:f0:66:ad:07:5c:85:35:d7:ef:
2f:98:cd:54:80:78:0f:c7:98:f8:de:e2:a1:30:7a:54:c6:a3:
9f:09:d4:8c:fa:61:49:93:8a:cc:0f:ca:c5:7e:fb:86:c8:e4:
7a:6c:73:65:aa:e9:ac:24:91:22:7a:8d:5b:9e:60:83:18:0a:
ef:97:c8:e8:95:6d:f2:3a:82:54:88:d7:2f:62:56:00:aa:7e:
21:fb:32:0a:7b:eb:3a:73:74:db:1f:e7:71:19:ed:52:d6:69:
a1:df:ce:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:26:06 2025 by rpki-client