Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.mft
File: pat5hX5owCBczi8RpTh6avofiJU.mft (raw, json)
Hash identifier: EsIgkZ0lgYzMkqvDshuKJgYj3AqIDn0yFx2JizC0z/Q=
Subject key identifier: 30:47:9B:0D:BE:04:6F:54:34:3C:D2:E3:E9:76:C7:52:37:31:3C:80
Authority key identifier: A5:AB:79:85:7E:68:C0:20:5C:CE:2F:11:A5:38:7A:6A:FA:1F:88:95
Certificate issuer: /CN=a5ab79857e68c0205cce2f11a5387a6afa1f8895
Certificate serial: 0197BA0F23BF771B3E85CE425EBFF0CA2306
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pat5hX5owCBczi8RpTh6avofiJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.mft
Manifest number: 15BA
Signing time: Sun 29 Jun 2025 05:00:43 +0000
Manifest this update: Sun 29 Jun 2025 05:00:43 +0000
Manifest next update: Mon 30 Jun 2025 05:00:43 +0000
Files and hashes: 1: RJc6jzAyS3uWboc6tEy0sbhbczk.roa (hash: Tl0N+n4FID6GW+L+lL7UDQWc6s/Qw80QVfgROFxq4Tw=)
2: lGQ5oAC4DvbrVczVYtetvVMraGI.roa (hash: RPF4xGL/jJtG/0h2vD9Z4Pt0zkSh8uypUluux6hYGEQ=)
3: pat5hX5owCBczi8RpTh6avofiJU.crl (hash: 5ZwZTPfXUpDrAdsb7Tk4UtoFtvmkSxOglLz8Yefyp6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pat5hX5owCBczi8RpTh6avofiJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:0f:23:bf:77:1b:3e:85:ce:42:5e:bf:f0:ca:23:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5ab79857e68c0205cce2f11a5387a6afa1f8895
Validity
Not Before: Jun 29 05:00:43 2025 GMT
Not After : Jun 30 05:00:43 2025 GMT
Subject: CN=30479b0dbe046f54343cd2e3e976c75237313c80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9b:ec:5d:95:73:85:7b:5e:c5:bd:84:30:c5:
b8:90:03:de:9e:07:fa:35:60:20:ce:05:0e:e4:93:
cf:22:63:35:1c:01:ef:33:e0:d2:b2:15:59:b3:5d:
86:39:17:6b:1c:b3:64:9c:b9:a8:89:63:be:06:82:
79:2c:9e:eb:f9:ba:99:37:e2:cb:b6:91:15:68:90:
a2:1a:5f:ca:e0:8f:2d:ba:0b:69:5a:18:21:3e:f7:
c5:e9:03:33:96:e0:47:1a:70:7b:ed:47:08:37:2c:
1f:ea:da:ba:f0:24:7a:b6:6b:9a:9a:cf:7b:a3:3a:
ff:03:e9:4a:28:aa:be:67:6d:9b:ef:c5:ef:eb:1c:
43:33:97:ed:5d:0d:99:7c:0a:26:b3:6c:b2:e5:17:
90:25:c5:03:69:d1:7b:56:30:f3:18:81:66:b1:53:
00:f5:29:1b:4c:63:2c:c6:ad:04:00:0f:9f:5b:8f:
27:ee:77:eb:10:4c:e8:1b:67:17:ff:6e:71:e2:7b:
1c:91:06:88:0d:7d:58:a9:89:fe:d3:b3:1a:7f:18:
51:44:a9:d4:a4:20:64:5f:07:33:33:45:dd:9f:68:
53:7c:da:9f:67:ad:88:f7:a5:07:67:4b:d5:c8:0c:
c2:32:f8:22:0f:ec:09:ce:c5:5f:53:f4:d0:0a:19:
4f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:47:9B:0D:BE:04:6F:54:34:3C:D2:E3:E9:76:C7:52:37:31:3C:80
X509v3 Authority Key Identifier:
keyid:A5:AB:79:85:7E:68:C0:20:5C:CE:2F:11:A5:38:7A:6A:FA:1F:88:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pat5hX5owCBczi8RpTh6avofiJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:bf:47:70:c8:32:4d:44:5b:6c:1f:9d:62:2b:fa:a1:42:ba:
48:1d:8c:79:f5:43:e8:fe:6d:6a:70:e1:29:99:09:02:f2:99:
aa:87:51:a1:14:b3:ef:5e:ab:4b:3d:75:74:c0:90:95:ef:53:
df:6e:2a:02:f8:c0:47:b7:77:4b:51:b4:76:c6:f9:22:9e:ca:
5b:22:f0:80:39:8c:8b:ef:21:26:74:10:bd:d9:97:bd:9f:ee:
a1:48:42:58:ef:98:de:04:cd:31:ad:d1:f1:dc:57:b7:74:f7:
e7:12:69:59:5b:e4:5a:21:f4:d0:96:ec:1e:e2:e3:b9:6b:93:
8d:84:e5:f0:86:0f:a8:f3:6f:90:b0:2a:e2:b9:45:3c:ce:cc:
68:ae:48:09:09:27:d0:c5:32:76:9e:d8:7f:4a:f2:7e:49:21:
7a:45:59:0e:6b:f1:67:5f:7b:5a:67:61:ad:f9:43:05:af:2b:
15:ec:1d:4b:62:71:26:30:5c:b7:22:a5:af:e0:d3:59:99:06:
b9:15:26:40:9c:e5:6c:69:4f:b3:d2:21:4b:7c:4d:cc:c1:5f:
7c:ab:88:17:35:9d:89:b6:cd:6e:b4:e9:2b:93:d3:f0:92:e4:
25:56:c6:3a:62:b0:62:d3:2d:6f:ea:f9:79:7c:31:4b:e4:80:
ed:4b:2b:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe6DyO/dxs+hc5CXr/wyiMGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1YWI3OTg1N2U2OGMwMjA1Y2NlMmYxMWE1Mzg3YTZhZmEx
Zjg4OTUwHhcNMjUwNjI5MDUwMDQzWhcNMjUwNjMwMDUwMDQzWjAzMTEwLwYDVQQD
EygzMDQ3OWIwZGJlMDQ2ZjU0MzQzY2QyZTNlOTc2Yzc1MjM3MzEzYzgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppvsXZVzhXtexb2EMMW4kAPengf6
NWAgzgUO5JPPImM1HAHvM+DSshVZs12GORdrHLNknLmoiWO+BoJ5LJ7r+bqZN+LL
tpEVaJCiGl/K4I8tugtpWhghPvfF6QMzluBHGnB77UcINywf6tq68CR6tmuams97
ozr/A+lKKKq+Z22b78Xv6xxDM5ftXQ2ZfAoms2yy5ReQJcUDadF7VjDzGIFmsVMA
9SkbTGMsxq0EAA+fW48n7nfrEEzoG2cX/25x4nsckQaIDX1YqYn+07MafxhRRKnU
pCBkXwczM0Xdn2hTfNqfZ62I96UHZ0vVyAzCMvgiD+wJzsVfU/TQChlP7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDBHmw2+BG9UNDzS4+l2x1I3MTyAMB8GA1UdIwQY
MBaAFKWreYV+aMAgXM4vEaU4emr6H4iVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGF0NWhYNW93Q0Jjemk4UnBUaDZhdm9maUpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9lMmE1NWMtYjVlNi00OTlhLWI3Mjkt
MWU1OGFjODc5MjRhLzEvcGF0NWhYNW93Q0Jjemk4UnBUaDZhdm9maUpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9lMmE1NWMtYjVlNi00OTlhLWI3MjktMWU1OGFjODc5MjRh
LzEvcGF0NWhYNW93Q0Jjemk4UnBUaDZhdm9maUpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOb9HcMgy
TURbbB+dYiv6oUK6SB2MefVD6P5tanDhKZkJAvKZqodRoRSz716rSz11dMCQle9T
324qAvjAR7d3S1G0dsb5Ip7KWyLwgDmMi+8hJnQQvdmXvZ/uoUhCWO+Y3gTNMa3R
8dxXt3T35xJpWVvkWiH00JbsHuLjuWuTjYTl8IYPqPNvkLAq4rlFPM7MaK5ICQkn
0MUydp7Yf0ryfkkhekVZDmvxZ197WmdhrflDBa8rFewdS2JxJjBctyKlr+DTWZkG
uRUmQJzlbGlPs9IhS3xNzMFffKuIFzWdibbNbrTpK5PT8JLkJVbGOmKwYtMtb+r5
eXwxS+SA7UsrYg==
-----END CERTIFICATE-----
Generated at Sun Jun 29 09:10:32 2025 by rpki-client