Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/4f4b4e-23cc-4c3a-90af-4ef39514aa43/1/paHquv4t5wOCJ6hZOnrFzDkvN04.mft
File: paHquv4t5wOCJ6hZOnrFzDkvN04.mft (raw, json)
Hash identifier: rsA8AeHv6qIJcqflCz6DWE57oaQLdf7b4OCR8IWCkXM=
Subject key identifier: F0:D5:C0:8D:4E:07:17:FF:79:F8:5E:A0:6F:73:F3:A9:76:87:54:86
Authority key identifier: A5:A1:EA:BA:FE:2D:E7:03:82:27:A8:59:3A:7A:C5:CC:39:2F:37:4E
Certificate issuer: /CN=a5a1eabafe2de7038227a8593a7ac5cc392f374e
Certificate serial: 0198D706274B077A9364649240F589E9EB23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/paHquv4t5wOCJ6hZOnrFzDkvN04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/4f4b4e-23cc-4c3a-90af-4ef39514aa43/1/paHquv4t5wOCJ6hZOnrFzDkvN04.mft
Manifest number: 12EC
Signing time: Sat 23 Aug 2025 13:02:41 +0000
Manifest this update: Sat 23 Aug 2025 13:02:41 +0000
Manifest next update: Sun 24 Aug 2025 13:02:41 +0000
Files and hashes: 1: paHquv4t5wOCJ6hZOnrFzDkvN04.crl (hash: s3CNlU6PZwD+IWTF4UFxdqrprUyKnFlpFPEFaPnowDw=)
2: wW2KE3gY8QjEsnXJFmwHDL7WH6g.roa (hash: rYujNDXyFY6K7NmLNp1LWeOiCz0Qh+l0K7mCOQxVp3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/4f4b4e-23cc-4c3a-90af-4ef39514aa43/1/paHquv4t5wOCJ6hZOnrFzDkvN04.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/4f4b4e-23cc-4c3a-90af-4ef39514aa43/1/paHquv4t5wOCJ6hZOnrFzDkvN04.mft
rsync://rpki.ripe.net/repository/DEFAULT/paHquv4t5wOCJ6hZOnrFzDkvN04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:06:27:4b:07:7a:93:64:64:92:40:f5:89:e9:eb:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5a1eabafe2de7038227a8593a7ac5cc392f374e
Validity
Not Before: Aug 23 13:02:41 2025 GMT
Not After : Aug 24 13:02:41 2025 GMT
Subject: CN=f0d5c08d4e0717ff79f85ea06f73f3a976875486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0d:4f:44:66:ca:d9:7b:00:27:51:1a:7b:dc:
78:46:d0:51:63:b1:dc:39:3e:c9:11:cc:f1:52:02:
0d:11:d5:b7:6e:d7:08:3e:6e:05:69:26:89:8b:71:
d8:2e:29:f8:f3:1d:bb:45:57:ad:2a:ff:68:2a:39:
c0:6c:d9:32:7c:eb:90:23:28:93:6d:87:fd:6d:9a:
52:b2:ca:77:40:be:fb:c5:0b:7f:8b:bf:c4:23:4b:
59:59:60:c8:bf:79:3b:da:f2:45:d5:17:fe:78:a8:
92:fb:86:e4:81:dd:03:00:41:99:53:8b:bd:22:3b:
0b:cd:39:db:47:14:03:82:74:5b:43:df:ad:2f:56:
ea:d6:d1:5f:d0:4d:c6:91:bb:72:30:ba:ca:81:d8:
b9:6f:de:00:86:e7:40:87:00:d7:ea:e5:fd:88:87:
14:d2:1c:0f:7f:f5:c7:8a:ec:8a:39:7c:d5:2a:02:
71:c6:d5:ca:f9:80:f2:43:82:62:a5:f9:8e:66:3a:
68:0b:b7:ce:c5:02:4b:06:7d:7d:d9:41:c2:8b:e2:
20:38:5a:3a:7b:e2:0a:6c:f5:c0:32:50:a3:75:66:
69:6e:57:88:7f:53:4e:6e:6d:67:06:dd:c5:2f:e7:
7d:62:be:b3:e6:de:ca:68:00:c6:cd:b0:14:af:ca:
b0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:D5:C0:8D:4E:07:17:FF:79:F8:5E:A0:6F:73:F3:A9:76:87:54:86
X509v3 Authority Key Identifier:
keyid:A5:A1:EA:BA:FE:2D:E7:03:82:27:A8:59:3A:7A:C5:CC:39:2F:37:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/paHquv4t5wOCJ6hZOnrFzDkvN04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/4f4b4e-23cc-4c3a-90af-4ef39514aa43/1/paHquv4t5wOCJ6hZOnrFzDkvN04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/4f4b4e-23cc-4c3a-90af-4ef39514aa43/1/paHquv4t5wOCJ6hZOnrFzDkvN04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:76:f6:a6:f8:f2:43:21:cf:2a:53:6c:2e:d6:1e:1d:8d:d7:
e5:ca:5b:5d:7c:72:85:a3:79:27:ed:81:36:01:9f:65:d5:65:
84:51:33:b9:a4:0c:ad:9c:f4:76:56:5f:92:e1:52:4d:07:52:
4a:b8:7d:2d:2e:af:52:64:da:5c:05:76:86:78:30:47:cd:dd:
51:04:bf:bb:f9:3c:2e:be:80:84:38:a3:f9:e9:2a:64:da:b6:
fd:f4:8a:ac:e4:20:92:f7:bf:ac:89:a1:7d:54:19:b9:ba:f8:
6c:38:42:cf:cf:f4:2e:74:d8:0f:da:34:b6:9d:f8:23:59:00:
df:b7:e2:31:2a:88:fe:18:1c:81:50:31:9a:4b:9f:42:01:ff:
0e:40:89:67:68:de:43:d0:93:a7:5d:f0:c1:48:75:22:b1:8f:
82:39:e4:a1:01:9c:9c:9e:1e:00:d3:f8:a1:61:54:60:62:83:
27:09:56:16:e5:f0:ce:05:4e:02:af:6a:19:b4:a2:0b:63:b6:
de:2b:33:97:fb:f0:63:4b:09:f4:fa:0c:2c:8b:3b:1e:24:c8:
c9:65:2d:51:45:4e:89:46:f5:d6:3d:da:24:15:4c:a8:10:ae:
6a:48:f6:f7:3c:9c:8b:b0:ee:34:57:cc:e7:b5:a4:38:37:63:
7f:dc:69:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXBidLB3qTZGSSQPWJ6esjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1YTFlYWJhZmUyZGU3MDM4MjI3YTg1OTNhN2FjNWNjMzky
ZjM3NGUwHhcNMjUwODIzMTMwMjQxWhcNMjUwODI0MTMwMjQxWjAzMTEwLwYDVQQD
EyhmMGQ1YzA4ZDRlMDcxN2ZmNzlmODVlYTA2ZjczZjNhOTc2ODc1NDg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQ1PRGbK2XsAJ1Eae9x4RtBRY7Hc
OT7JEczxUgINEdW3btcIPm4FaSaJi3HYLin48x27RVetKv9oKjnAbNkyfOuQIyiT
bYf9bZpSssp3QL77xQt/i7/EI0tZWWDIv3k72vJF1Rf+eKiS+4bkgd0DAEGZU4u9
IjsLzTnbRxQDgnRbQ9+tL1bq1tFf0E3GkbtyMLrKgdi5b94AhudAhwDX6uX9iIcU
0hwPf/XHiuyKOXzVKgJxxtXK+YDyQ4JipfmOZjpoC7fOxQJLBn192UHCi+IgOFo6
e+IKbPXAMlCjdWZpbleIf1NObm1nBt3FL+d9Yr6z5t7KaADGzbAUr8qwiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPDVwI1OBxf/efheoG9z86l2h1SGMB8GA1UdIwQY
MBaAFKWh6rr+LecDgieoWTp6xcw5LzdOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGFIcXV2NHQ1d09DSjZoWk9uckZ6RGt2TjA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC80ZjRiNGUtMjNjYy00YzNhLTkwYWYt
NGVmMzk1MTRhYTQzLzEvcGFIcXV2NHQ1d09DSjZoWk9uckZ6RGt2TjA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC80ZjRiNGUtMjNjYy00YzNhLTkwYWYtNGVmMzk1MTRhYTQz
LzEvcGFIcXV2NHQ1d09DSjZoWk9uckZ6RGt2TjA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqHb2pvjy
QyHPKlNsLtYeHY3X5cpbXXxyhaN5J+2BNgGfZdVlhFEzuaQMrZz0dlZfkuFSTQdS
Srh9LS6vUmTaXAV2hngwR83dUQS/u/k8Lr6AhDij+ekqZNq2/fSKrOQgkve/rImh
fVQZubr4bDhCz8/0LnTYD9o0tp34I1kA37fiMSqI/hgcgVAxmkufQgH/DkCJZ2je
Q9CTp13wwUh1IrGPgjnkoQGcnJ4eANP4oWFUYGKDJwlWFuXwzgVOAq9qGbSiC2O2
3iszl/vwY0sJ9PoMLIs7HiTIyWUtUUVOiUb11j3aJBVMqBCuakj29zyci7DuNFfM
57WkODdjf9xpTg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:09:29 2025 by rpki-client