Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.mft
File: pat5hX5owCBczi8RpTh6avofiJU.mft (raw, json)
Hash identifier: MzlhnW2S4zNS3QaEZrzhjBmGX7WRuUmq1oPtab4N988=
Subject key identifier: 8A:1C:9C:08:27:C5:E7:21:DD:54:81:45:99:0E:3F:34:46:B0:CF:C1
Authority key identifier: A5:AB:79:85:7E:68:C0:20:5C:CE:2F:11:A5:38:7A:6A:FA:1F:88:95
Certificate issuer: /CN=a5ab79857e68c0205cce2f11a5387a6afa1f8895
Certificate serial: 0199FF59B34434468A1B585BFAC39C7FDAEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pat5hX5owCBczi8RpTh6avofiJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.mft
Manifest number: 16E7
Signing time: Mon 20 Oct 2025 02:01:32 +0000
Manifest this update: Mon 20 Oct 2025 02:01:32 +0000
Manifest next update: Tue 21 Oct 2025 02:01:32 +0000
Files and hashes: 1: RJc6jzAyS3uWboc6tEy0sbhbczk.roa (hash: Tl0N+n4FID6GW+L+lL7UDQWc6s/Qw80QVfgROFxq4Tw=)
2: lGQ5oAC4DvbrVczVYtetvVMraGI.roa (hash: RPF4xGL/jJtG/0h2vD9Z4Pt0zkSh8uypUluux6hYGEQ=)
3: pat5hX5owCBczi8RpTh6avofiJU.crl (hash: YvPZVZ0d/jsxh+Ihgy57ssqJzoU1eXCDzy3gos3BzI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pat5hX5owCBczi8RpTh6avofiJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:b3:44:34:46:8a:1b:58:5b:fa:c3:9c:7f:da:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5ab79857e68c0205cce2f11a5387a6afa1f8895
Validity
Not Before: Oct 20 02:01:32 2025 GMT
Not After : Oct 21 02:01:32 2025 GMT
Subject: CN=8a1c9c0827c5e721dd548145990e3f3446b0cfc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:98:7d:7e:61:b2:cc:12:b4:41:9d:47:da:44:
7a:3c:c9:4d:8b:11:10:ba:7d:36:73:fe:75:e5:bf:
14:43:a6:5a:1a:62:9c:67:8f:2c:0a:ff:a0:c8:85:
38:c1:70:f4:f1:32:3b:6a:20:a2:ae:a0:57:72:4d:
32:4d:b0:20:8c:1a:d1:6d:ca:b1:29:9c:64:65:de:
66:cc:f9:83:01:8b:86:73:b6:af:c1:38:0a:8d:b0:
98:65:77:ff:5e:79:92:01:4b:32:21:d7:6d:0d:d4:
d6:d8:3f:de:21:9d:ec:f0:a6:cf:e9:c0:4a:97:f3:
b7:bc:52:3f:58:37:61:12:ad:2f:54:8c:04:13:a0:
11:ef:36:c0:14:32:2a:a3:2f:89:9f:d8:61:d1:c6:
7e:0d:bd:90:0d:3a:ac:7b:c3:45:1d:09:00:20:56:
e4:ed:61:a3:4a:68:d8:99:82:65:d2:a1:ed:46:f0:
2c:7f:78:fe:69:58:b7:53:ac:b2:e1:da:76:a8:dc:
36:b1:87:20:97:c5:84:d4:a8:23:d1:d6:5a:9d:c3:
9c:6d:dc:39:34:0f:15:e8:92:6d:c3:d0:0e:c9:73:
1c:ad:9f:ab:38:38:f5:38:6c:2c:f9:49:76:47:68:
b6:3f:1b:e6:22:75:33:48:9e:18:ac:1d:fb:d4:49:
5f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:1C:9C:08:27:C5:E7:21:DD:54:81:45:99:0E:3F:34:46:B0:CF:C1
X509v3 Authority Key Identifier:
keyid:A5:AB:79:85:7E:68:C0:20:5C:CE:2F:11:A5:38:7A:6A:FA:1F:88:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pat5hX5owCBczi8RpTh6avofiJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:1e:d3:6e:29:1e:3b:57:12:72:dd:36:52:4f:40:59:67:97:
0f:a8:1d:6f:b3:05:f0:ec:e9:52:38:4d:aa:19:ef:5b:6d:08:
60:07:26:b0:cd:d2:25:16:ed:8b:26:fb:9f:5c:fc:86:cd:fb:
a1:6a:93:77:78:97:5c:87:1a:c5:d6:a2:11:7e:86:f6:ff:81:
ce:2a:46:f4:7f:7a:dd:96:98:e3:3b:4f:8a:2a:20:79:38:cb:
bd:bf:b3:92:45:50:d8:8c:c0:b2:66:bc:fb:dd:8b:35:10:12:
b8:10:53:c8:9d:61:e6:e3:a0:e8:6c:bb:bf:42:28:c8:e7:c2:
55:05:9b:19:47:a7:72:25:94:c5:1f:c0:81:50:9d:4a:b5:25:
50:c2:b0:7a:6d:17:1d:1c:85:3f:ca:e9:70:9a:f9:d5:1c:27:
00:85:cc:55:5c:f7:a5:18:6c:ea:6d:35:14:5a:0c:8b:c0:75:
dc:04:0d:e4:92:66:0a:99:d3:37:b7:36:74:62:6d:58:15:e6:
79:2e:1d:11:60:6a:7c:f0:12:1d:f9:2c:b3:1d:06:a0:b0:85:
a0:36:9e:36:39:3d:29:0c:09:33:7e:7a:0a:3c:01:b7:e2:fc:
be:dc:98:01:de:6e:f5:4e:4b:e0:68:03:92:02:37:d8:ff:ce:
b2:f5:3a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:06:28 2025 by rpki-client