Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.mft
File: pavEOvztcvuSd4covuVxxnj1OFM.mft (raw, json)
Hash identifier: Av7Tbr5MqwKN4IOgLfL0SxXlzdvTtbweOwsA3ikg8Fw=
Subject key identifier: B2:C4:88:DC:58:D4:28:D1:88:B1:48:2C:BF:02:2B:E8:11:F2:31:7F
Authority key identifier: A5:AB:C4:3A:FC:ED:72:FB:92:77:87:28:BE:E5:71:C6:78:F5:38:53
Certificate issuer: /CN=a5abc43afced72fb92778728bee571c678f53853
Certificate serial: 0197C5A5AFD58C681C6D417BEFB214EB6712
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pavEOvztcvuSd4covuVxxnj1OFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.mft
Manifest number: 15BE
Signing time: Tue 01 Jul 2025 11:00:59 +0000
Manifest this update: Tue 01 Jul 2025 11:00:59 +0000
Manifest next update: Wed 02 Jul 2025 11:00:59 +0000
Files and hashes: 1: XTYDavgtknOlnwhLwE8YM7gzGNo.roa (hash: PldFwC0OKAPE16YsYJiSJ7/6hQNZV4y5TLuWK0kyNJ0=)
2: pavEOvztcvuSd4covuVxxnj1OFM.crl (hash: uxLhLkIeWBAvrQMQ+tMItKHSOyeL1IaD5oz02uYvz24=)
3: sSPz7KsWNIMKyyRHlSkiZwosgKw.roa (hash: wjM7pq8MRvpOQBEJDje34R/IkWbdszEvqnHRsuBbId4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/pavEOvztcvuSd4covuVxxnj1OFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c5:a5:af:d5:8c:68:1c:6d:41:7b:ef:b2:14:eb:67:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5abc43afced72fb92778728bee571c678f53853
Validity
Not Before: Jul 1 11:00:59 2025 GMT
Not After : Jul 2 11:00:59 2025 GMT
Subject: CN=b2c488dc58d428d188b1482cbf022be811f2317f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b7:43:99:6f:76:13:9b:82:e3:34:68:c9:ce:
cf:5a:88:5b:65:f2:3f:7e:8b:d7:b5:b6:3c:74:39:
0b:43:4a:c9:e0:2c:9a:b4:a3:e1:f1:e0:3f:6c:da:
a9:59:87:cc:92:43:26:60:84:97:5a:92:ce:9e:3b:
3b:49:f9:67:36:1d:d1:d8:ae:71:42:6f:ec:a4:60:
ec:73:7e:78:48:df:9d:c1:89:ff:4b:04:a2:33:f5:
04:e9:0d:b1:36:8f:e6:65:d7:3f:eb:e7:76:6e:e1:
e5:c9:32:09:1d:0a:74:be:9e:40:a9:2e:9d:48:a5:
70:4e:d2:bf:14:db:40:18:08:44:a9:d5:7f:51:68:
f9:58:ed:00:5a:62:d6:c0:85:3c:c9:51:2a:d4:de:
5b:49:9e:68:52:6b:0b:a8:5a:fe:4b:47:e2:ca:7b:
04:f0:64:4d:c9:22:f8:5d:05:f7:bf:3d:e0:01:c2:
2a:ee:95:b8:fd:8b:ea:37:26:42:5a:45:c0:df:69:
35:b0:1e:2d:51:84:fc:90:ca:1f:41:73:eb:34:5b:
03:e3:56:6f:a4:7d:39:56:31:11:56:ec:45:d1:22:
4c:72:54:c3:ea:29:d4:0f:3c:cf:b7:5e:a3:ab:cd:
5f:3c:53:97:f1:25:f9:cf:70:65:b1:1a:e3:0a:c6:
4c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:C4:88:DC:58:D4:28:D1:88:B1:48:2C:BF:02:2B:E8:11:F2:31:7F
X509v3 Authority Key Identifier:
keyid:A5:AB:C4:3A:FC:ED:72:FB:92:77:87:28:BE:E5:71:C6:78:F5:38:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pavEOvztcvuSd4covuVxxnj1OFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:3c:d0:4e:f9:64:93:66:c9:9e:a9:19:f1:aa:7e:37:2a:76:
c8:b5:78:24:f7:0c:f1:3e:71:89:8b:8b:f4:a8:47:51:ce:5e:
8e:0c:cb:17:af:2e:60:3f:f0:aa:e7:d5:29:83:cd:c3:75:e8:
4d:d2:d6:1e:95:20:6a:6e:20:9c:89:70:bc:1e:c4:1b:fe:a2:
05:de:23:37:f3:67:78:fc:ca:05:a1:4a:8b:dc:87:ad:bc:e1:
17:06:d0:3b:de:de:8b:e6:c3:c2:96:37:92:d0:15:75:a3:7b:
9b:1a:d8:d5:28:c5:a6:19:50:59:d8:59:65:a5:5d:03:ce:79:
c4:46:10:d1:d2:aa:26:e5:0f:0e:c5:fe:4c:5c:fb:22:d2:cc:
76:d1:27:f2:e4:e8:34:04:3c:e5:be:f1:92:73:ca:c1:c4:c5:
75:ff:a0:10:2a:5a:89:14:bf:e9:83:93:49:f2:f6:41:7d:88:
6d:83:00:a1:7a:b1:69:29:9d:04:db:98:0d:96:43:45:ef:5d:
09:8d:f0:0b:35:1a:bb:22:dc:d4:e5:04:e1:ee:1e:ab:b6:1c:
70:f3:76:8f:d7:b9:09:a9:71:ef:4d:7c:e8:58:bf:b1:e9:4b:
6e:28:89:58:54:f0:1e:1a:10:9d:a6:07:44:08:65:81:20:ef:
3e:a7:cd:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 17:51:48 2025 by rpki-client