Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.mft
File: pat5hX5owCBczi8RpTh6avofiJU.mft (raw, json)
Hash identifier: DobdGLrLnLfQTVJkEG/GhS6qOf4bX6wtzeMd4L9BMqU=
Subject key identifier: F3:22:1D:CF:D5:F2:C0:78:D0:48:E5:D8:0C:64:9C:2D:D2:24:D3:0E
Authority key identifier: A5:AB:79:85:7E:68:C0:20:5C:CE:2F:11:A5:38:7A:6A:FA:1F:88:95
Certificate issuer: /CN=a5ab79857e68c0205cce2f11a5387a6afa1f8895
Certificate serial: 0196A01AA5A9D9137F2F21008731CD62BBE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pat5hX5owCBczi8RpTh6avofiJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.mft
Manifest number: 1528
Signing time: Mon 05 May 2025 11:00:22 +0000
Manifest this update: Mon 05 May 2025 11:00:22 +0000
Manifest next update: Tue 06 May 2025 11:00:22 +0000
Files and hashes: 1: RJc6jzAyS3uWboc6tEy0sbhbczk.roa (hash: Tl0N+n4FID6GW+L+lL7UDQWc6s/Qw80QVfgROFxq4Tw=)
2: lGQ5oAC4DvbrVczVYtetvVMraGI.roa (hash: RPF4xGL/jJtG/0h2vD9Z4Pt0zkSh8uypUluux6hYGEQ=)
3: pat5hX5owCBczi8RpTh6avofiJU.crl (hash: 6i+qp5ta0vt1XkXQ+sCWDh6LzUdkTL39S7J22PUUoUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pat5hX5owCBczi8RpTh6avofiJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 08:37:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:1a:a5:a9:d9:13:7f:2f:21:00:87:31:cd:62:bb:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5ab79857e68c0205cce2f11a5387a6afa1f8895
Validity
Not Before: May 5 11:00:22 2025 GMT
Not After : May 6 11:00:22 2025 GMT
Subject: CN=f3221dcfd5f2c078d048e5d80c649c2dd224d30e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c9:a8:b0:ef:fa:1e:03:a8:a7:c9:78:64:05:
f6:51:57:21:27:24:0b:01:00:e9:3e:88:99:fa:69:
0f:f0:8e:c5:31:21:8c:16:a4:5f:75:14:a9:71:52:
05:45:5f:b7:75:01:98:0c:31:dd:a6:6c:0f:fb:9f:
53:05:87:2e:23:80:41:7d:7e:cf:fc:88:32:bd:e9:
e3:1f:9c:99:af:8f:cc:64:4c:dd:5c:cd:65:46:87:
f8:7b:59:91:7a:4b:64:b8:63:41:48:3a:ec:3a:3c:
74:b6:9f:86:d5:93:1f:3f:77:7d:21:49:13:43:d3:
9e:53:c2:79:e0:c8:c3:05:5d:a7:f0:1c:2b:89:bd:
cd:7a:8e:a1:de:12:f5:da:0f:ca:c5:b1:99:3d:f4:
97:c6:3d:20:0a:49:b7:96:df:51:81:b8:b5:2b:7d:
15:fe:7b:bf:c4:4a:a7:77:62:37:5e:10:79:da:92:
1b:62:37:53:4d:90:10:9a:5d:3e:b8:af:6f:1c:63:
f0:b9:f1:4e:40:10:9f:7e:bf:d0:30:8f:12:df:da:
3a:5a:86:f3:f3:ff:37:dc:63:ea:63:6a:be:a5:53:
db:82:5d:82:b1:a4:47:44:7b:e4:f1:32:4c:b5:68:
d1:90:82:4b:f1:3e:aa:b7:87:b2:b4:95:60:ff:75:
2d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:22:1D:CF:D5:F2:C0:78:D0:48:E5:D8:0C:64:9C:2D:D2:24:D3:0E
X509v3 Authority Key Identifier:
keyid:A5:AB:79:85:7E:68:C0:20:5C:CE:2F:11:A5:38:7A:6A:FA:1F:88:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pat5hX5owCBczi8RpTh6avofiJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:da:60:29:22:1f:fa:65:d4:50:ba:7a:87:dc:e1:09:af:e8:
03:26:ae:e5:87:13:33:da:af:78:33:36:36:f5:ae:89:5d:d2:
3e:d6:6c:f7:4f:b7:eb:14:41:e4:e5:36:f4:34:1e:55:86:c1:
6a:8f:0e:f9:cc:f5:c3:59:fb:ab:8a:2b:30:90:67:cb:29:17:
b9:7e:07:2c:ed:c2:11:e8:39:9b:01:e3:35:12:9c:73:b4:44:
23:a0:46:dc:bb:91:59:2b:46:00:cd:b1:00:0c:2d:fe:c5:c3:
b6:f2:c0:a9:90:9e:34:d4:4f:39:ac:90:93:29:01:a3:ab:1f:
02:e3:89:36:4b:79:fd:6f:3e:f4:d2:6e:d4:5f:f7:62:d5:dd:
88:af:ea:f1:00:05:61:c4:10:b8:70:4f:2e:52:11:b8:b8:69:
49:5c:fd:ff:ca:1f:7b:55:05:f0:0f:2f:bb:9f:a7:67:4a:af:
17:a5:84:75:56:9f:35:f1:01:7b:bf:ec:98:63:84:f9:43:fd:
47:1b:28:56:8f:65:ec:7f:1b:45:5a:e2:60:c5:e2:21:5b:ab:
a2:7f:f7:0c:8a:ea:5a:a7:13:8f:b5:7f:5e:dc:5b:06:68:e8:
81:3c:f1:25:b9:7b:fb:31:95:1b:54:e9:1a:dc:34:a8:c8:d8:
2d:2b:17:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 12:50:40 2025 by rpki-client