Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.mft
File: pavEOvztcvuSd4covuVxxnj1OFM.mft (raw, json)
Hash identifier: /kW2NqtfWRFNQ0pwaKdLoc4j4nUGGrKONplp2y/5sf4=
Subject key identifier: 6F:92:6B:AB:C5:91:5F:4A:2F:67:83:EB:D0:4D:C9:32:8F:15:85:5E
Authority key identifier: A5:AB:C4:3A:FC:ED:72:FB:92:77:87:28:BE:E5:71:C6:78:F5:38:53
Certificate issuer: /CN=a5abc43afced72fb92778728bee571c678f53853
Certificate serial: 0199FB7CB27B6E8B45ED88CB243DBA2414CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pavEOvztcvuSd4covuVxxnj1OFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 08:01:17 +0000
Manifest this update: Sun 19 Oct 2025 08:01:17 +0000
Manifest next update: Mon 20 Oct 2025 08:01:17 +0000
Files and hashes: 1: XTYDavgtknOlnwhLwE8YM7gzGNo.roa (hash: PldFwC0OKAPE16YsYJiSJ7/6hQNZV4y5TLuWK0kyNJ0=)
2: pavEOvztcvuSd4covuVxxnj1OFM.crl (hash: sbsA71/uhZxIb1UAAwo1rJagU7E5whW0G6cjEtSJ2j0=)
3: sSPz7KsWNIMKyyRHlSkiZwosgKw.roa (hash: wjM7pq8MRvpOQBEJDje34R/IkWbdszEvqnHRsuBbId4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/pavEOvztcvuSd4covuVxxnj1OFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:b2:7b:6e:8b:45:ed:88:cb:24:3d:ba:24:14:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5abc43afced72fb92778728bee571c678f53853
Validity
Not Before: Oct 19 08:01:17 2025 GMT
Not After : Oct 20 08:01:17 2025 GMT
Subject: CN=6f926babc5915f4a2f6783ebd04dc9328f15855e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6f:fd:c1:15:07:0e:41:32:1a:6b:1f:93:6e:
15:4b:b3:75:49:5b:8e:3b:f0:4e:38:b6:e9:a6:86:
7a:3b:1f:3d:46:3c:64:60:4c:a9:6a:10:7a:f6:b2:
4b:28:40:ee:51:1e:d9:ae:a6:2c:84:60:af:47:e4:
d2:7e:ec:cd:83:8e:e0:42:fc:d2:33:37:8f:f3:36:
2b:f0:02:fc:dc:b0:86:ef:36:88:39:a0:ca:f7:74:
92:08:bd:11:cb:07:d8:9d:08:7a:b6:cb:c3:03:d3:
06:5d:7d:1b:b1:22:73:87:78:c6:07:88:92:ec:37:
23:f8:81:a0:68:b9:c4:ef:91:87:b4:93:30:8a:a8:
f0:4c:e0:6e:05:03:22:ce:54:9f:ae:b0:5d:a3:cd:
aa:f0:e0:f1:e7:75:cf:ce:44:b5:7d:c5:e2:80:9e:
2a:99:90:8f:13:92:64:e1:da:4a:63:07:ea:51:b5:
60:9c:06:d6:d3:e3:d1:bf:ca:2a:5a:e1:c3:94:1e:
c3:01:4b:0f:c7:09:6d:11:15:62:40:67:6f:c3:c6:
68:be:3b:2d:f8:94:4e:f7:f9:34:d8:27:01:56:82:
89:72:11:69:a2:60:89:86:10:d5:ea:26:67:75:dd:
bd:fd:88:0a:b1:ed:19:3e:32:88:0d:ce:55:12:f2:
32:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:92:6B:AB:C5:91:5F:4A:2F:67:83:EB:D0:4D:C9:32:8F:15:85:5E
X509v3 Authority Key Identifier:
keyid:A5:AB:C4:3A:FC:ED:72:FB:92:77:87:28:BE:E5:71:C6:78:F5:38:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pavEOvztcvuSd4covuVxxnj1OFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:0d:40:27:bb:6b:8f:05:b8:5a:96:e6:b0:86:d7:cd:de:91:
5e:fa:e0:e7:ed:00:4b:e7:44:42:f9:1d:52:10:d0:91:b7:3f:
97:81:46:9f:24:4b:73:13:64:2a:51:9d:58:6b:ac:f0:8a:ef:
f2:b8:e6:79:38:b0:29:7e:bd:b1:51:5f:77:f2:5d:0d:3a:e6:
a6:d6:e3:82:a3:f3:02:3d:8b:49:c5:2e:b1:70:67:c0:d7:04:
4f:02:86:01:7f:99:fa:f6:d4:12:ce:ec:a1:21:f9:d6:ec:0d:
4a:e1:e2:0b:d7:2e:e2:fe:16:9c:04:25:97:f7:54:87:69:92:
a4:eb:8b:91:32:70:46:76:a0:d4:6b:37:0d:7a:73:7e:26:be:
c4:b8:82:09:4f:9f:a5:92:10:35:5b:9b:17:d7:54:b2:30:70:
7d:fc:a8:be:dd:f2:01:b3:51:b6:4b:68:1e:84:49:78:65:aa:
c0:c5:75:9c:9c:59:88:83:c9:a4:c6:29:ba:9a:3d:b9:9c:b2:
5f:09:5e:2e:9a:87:95:a4:7c:d7:96:7d:6c:55:f7:57:16:66:
c1:64:64:f6:23:70:88:67:be:92:6c:b9:37:b4:ec:73:72:11:
ee:19:8d:92:e3:fa:49:c4:50:0f:4f:c4:f5:ce:a6:57:23:04:
2d:3b:d5:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:53 2025 by rpki-client