Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.mft
File: pat5hX5owCBczi8RpTh6avofiJU.mft (raw, json)
Hash identifier: g2XSbLlhgvRmhJpOaI8aXkuJxDg+sO7MfWJNb6al1VY=
Subject key identifier: 48:83:68:78:89:F6:94:8B:90:FA:F0:D6:05:23:EC:DC:6E:A4:87:75
Authority key identifier: A5:AB:79:85:7E:68:C0:20:5C:CE:2F:11:A5:38:7A:6A:FA:1F:88:95
Certificate issuer: /CN=a5ab79857e68c0205cce2f11a5387a6afa1f8895
Certificate serial: 0198D5F1A14132DCC01AAEC6D0A5DB3414AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pat5hX5owCBczi8RpTh6avofiJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 08:00:39 +0000
Manifest this update: Sat 23 Aug 2025 08:00:39 +0000
Manifest next update: Sun 24 Aug 2025 08:00:39 +0000
Files and hashes: 1: RJc6jzAyS3uWboc6tEy0sbhbczk.roa (hash: Tl0N+n4FID6GW+L+lL7UDQWc6s/Qw80QVfgROFxq4Tw=)
2: lGQ5oAC4DvbrVczVYtetvVMraGI.roa (hash: RPF4xGL/jJtG/0h2vD9Z4Pt0zkSh8uypUluux6hYGEQ=)
3: pat5hX5owCBczi8RpTh6avofiJU.crl (hash: 9sacsR4D48RXD/YGOMmcOoTkjFjiirpq+1RQ12+fN9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pat5hX5owCBczi8RpTh6avofiJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:a1:41:32:dc:c0:1a:ae:c6:d0:a5:db:34:14:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5ab79857e68c0205cce2f11a5387a6afa1f8895
Validity
Not Before: Aug 23 08:00:39 2025 GMT
Not After : Aug 24 08:00:39 2025 GMT
Subject: CN=4883687889f6948b90faf0d60523ecdc6ea48775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:44:7d:ef:ab:91:b9:25:1d:b1:37:b6:2c:43:
a1:b3:17:e4:74:bf:09:85:7a:bb:ef:d4:25:32:a7:
49:21:56:59:4a:8c:38:b5:94:f2:c6:2e:27:81:62:
d4:b9:5f:ca:1b:19:39:d2:63:d2:f2:8c:89:bc:68:
99:05:63:c5:02:18:88:74:bc:36:cd:a3:c4:27:ee:
b9:b9:39:9f:2a:95:af:bf:f3:48:06:54:ee:fc:e6:
9c:29:92:5e:80:b5:95:7b:a3:d0:3d:a3:15:86:87:
17:a2:1d:c0:c1:1e:f4:b6:e9:15:11:b9:0d:25:28:
5b:25:6d:94:2c:0a:25:1e:53:d5:cb:86:99:3a:70:
c3:02:2c:88:2f:54:e7:04:6f:98:a4:2a:7e:a7:52:
a2:41:48:1c:e2:8e:46:49:76:97:56:72:e3:e8:17:
2c:6e:6f:9c:d8:01:3f:49:07:d9:d0:2d:72:aa:40:
05:55:b2:3c:6c:2d:08:68:6f:ce:e2:b9:f6:f0:98:
34:8d:e4:3f:3c:b2:09:45:2c:a4:24:9d:5b:13:72:
db:24:a0:5a:27:26:ed:cc:35:73:3c:89:4d:53:c7:
79:2b:2c:6c:b4:d8:cb:57:94:dd:41:51:38:94:7b:
d8:49:ea:60:b1:32:2b:8a:a4:0c:3f:83:4d:d7:44:
f1:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:83:68:78:89:F6:94:8B:90:FA:F0:D6:05:23:EC:DC:6E:A4:87:75
X509v3 Authority Key Identifier:
keyid:A5:AB:79:85:7E:68:C0:20:5C:CE:2F:11:A5:38:7A:6A:FA:1F:88:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pat5hX5owCBczi8RpTh6avofiJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:20:9d:4a:cc:c9:c8:7a:1e:dd:eb:f9:e6:09:e2:d7:fa:da:
64:41:8e:79:7c:50:c6:65:9d:97:05:15:a7:31:7f:c0:bb:dc:
c2:0c:ea:97:13:ab:48:82:7b:bb:06:8e:38:52:7e:80:b6:52:
a8:d0:6b:fb:eb:e3:9b:5d:3a:80:c7:32:11:e8:31:7a:ea:47:
35:e8:36:2a:47:48:d4:37:26:d6:f8:f0:4c:b6:84:75:a4:0d:
0b:99:8c:49:ed:97:c1:25:f5:a7:bb:a3:17:8e:5c:6c:0a:f3:
75:c6:07:5f:61:47:7f:58:d3:c2:b5:a3:84:d4:1a:96:2a:33:
55:56:b4:83:6f:19:ed:6d:9f:e6:a7:64:8b:f9:52:a5:f7:23:
74:c9:04:96:59:a5:f7:32:b2:56:6b:d8:bf:8a:57:13:30:c5:
2a:f9:38:3a:d7:8d:01:1d:9d:ec:38:00:28:b9:17:03:81:6c:
72:f8:a3:68:e7:4d:ba:67:1c:59:ec:a5:0a:78:b4:0d:80:c4:
68:bf:b5:40:9c:7a:e6:6d:91:14:17:a2:81:27:74:08:7d:ac:
fd:e1:a2:c5:1e:8c:21:45:3e:3d:d9:29:fa:14:75:15:0e:0b:
f7:8d:fb:b2:3e:dd:ea:64:d7:f6:ad:43:b2:c9:a7:9c:1c:33:
5b:80:32:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:24:41 2025 by rpki-client