Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft
File: paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft (raw, json)
Hash identifier: v67pDKDnxZIWAQUxbPwsWzXhkXwUxpDpWOCsObdnBtw=
Subject key identifier: 51:A5:F3:31:1A:8A:E1:15:2C:10:0F:8E:FE:BE:FA:30:58:02:CA:0B
Authority key identifier: A5:A4:2D:26:0D:5E:CD:C2:FA:2B:0B:5D:BF:60:3B:90:D7:15:44:4D
Certificate issuer: /CN=a5a42d260d5ecdc2fa2b0b5dbf603b90d715444d
Certificate serial: 019853E8F5EE0134371B80218BC69344328D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/paQtJg1ezcL6Kwtdv2A7kNcVRE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft
Manifest number: 1608
Signing time: Tue 29 Jul 2025 02:00:32 +0000
Manifest this update: Tue 29 Jul 2025 02:00:32 +0000
Manifest next update: Wed 30 Jul 2025 02:00:32 +0000
Files and hashes: 1: Ef4jdp4ch3bGe_Ka3GRq8dFNRyA.roa (hash: 0HcHv8IPsRtMKEw7Kx2nplJJT6BUJZOb81lct/uUUeg=)
2: Lqe5vcwgWue09k7p7ctNg9AlXcM.roa (hash: YaDYxTi/SH2+EMKhFcDi7OA2pSDfUeTirPWPAhdJeo0=)
3: paQtJg1ezcL6Kwtdv2A7kNcVRE0.crl (hash: 4X2ODSuNAjqTYLCbR/YsMMz38KHFDesN3UTJRYRTO3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/paQtJg1ezcL6Kwtdv2A7kNcVRE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:e8:f5:ee:01:34:37:1b:80:21:8b:c6:93:44:32:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5a42d260d5ecdc2fa2b0b5dbf603b90d715444d
Validity
Not Before: Jul 29 02:00:32 2025 GMT
Not After : Jul 30 02:00:32 2025 GMT
Subject: CN=51a5f3311a8ae1152c100f8efebefa305802ca0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9b:b6:6f:25:73:2e:1c:62:ce:21:bf:4c:c3:
0a:cd:dd:6a:db:a9:34:13:23:67:b3:d2:8e:45:54:
8b:ca:b6:7b:03:cb:eb:0a:be:4c:c6:e5:a6:70:01:
b8:70:77:c1:41:db:74:12:90:c8:81:b2:b2:f2:26:
02:88:68:e7:bf:bd:1e:30:98:a1:69:f0:b2:05:fb:
ca:31:c0:12:6b:c1:c1:a4:93:89:f6:50:4d:67:37:
ac:13:83:b2:b3:1f:1d:60:37:14:e7:1d:e4:46:26:
e4:f7:40:da:63:97:ef:d2:e3:31:2c:04:45:39:2f:
fc:cf:26:bb:12:ea:15:db:e4:2f:ea:80:6d:86:70:
79:65:e8:04:fd:bf:2d:5a:45:73:e4:0a:37:93:d5:
3f:3f:66:61:6d:8a:18:a2:6d:22:da:9f:cd:11:a9:
00:c0:dd:14:74:cd:07:0a:a4:df:52:2d:6b:ef:82:
15:6b:0c:87:1d:82:6c:8e:93:89:ff:09:91:85:77:
40:d2:8f:81:d6:32:53:b6:b8:56:b9:fb:b8:92:ae:
df:5e:0f:1b:46:84:d4:4f:e1:5a:67:d0:e0:75:18:
3f:eb:94:e8:65:bd:19:21:5a:88:9f:38:c1:20:07:
58:bf:52:cc:78:df:06:75:fc:e7:c2:e4:90:61:72:
96:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:A5:F3:31:1A:8A:E1:15:2C:10:0F:8E:FE:BE:FA:30:58:02:CA:0B
X509v3 Authority Key Identifier:
keyid:A5:A4:2D:26:0D:5E:CD:C2:FA:2B:0B:5D:BF:60:3B:90:D7:15:44:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/paQtJg1ezcL6Kwtdv2A7kNcVRE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:75:02:f3:cd:e8:d6:41:86:bf:93:a3:03:cc:80:28:aa:76:
f5:6c:4a:36:cc:6b:65:19:9c:07:54:23:05:ef:0c:3e:16:07:
07:ad:fd:d1:64:9a:6f:75:f4:ec:ae:5c:99:66:ab:1e:ae:58:
3a:27:41:55:4b:31:78:4d:26:2d:36:45:b9:0a:af:6e:36:10:
ba:e6:c0:75:71:b8:67:82:7b:b5:9e:c7:9f:54:71:18:f9:82:
5b:fd:65:53:c8:c5:d5:57:7f:a7:f8:db:14:94:c5:03:5f:e9:
9e:46:8a:2e:1b:dc:d0:06:03:98:9e:ff:db:4d:ad:7f:1c:73:
ce:25:27:9e:6e:8b:61:74:16:6d:da:2f:6a:05:b0:e5:9f:e7:
c3:24:61:b6:91:b1:c6:78:84:34:68:3e:ec:65:08:a4:28:60:
e1:b5:5e:bf:d8:82:44:4e:58:f7:4e:36:dd:9e:14:47:f2:53:
bb:31:20:c3:d4:3b:38:60:35:10:64:9f:2b:70:3c:b3:6b:2c:
48:5d:34:53:bb:29:bc:49:4e:cf:42:12:f8:46:63:8e:a4:bf:
83:7a:68:54:ff:b2:47:d9:5f:a4:58:41:0b:bd:b7:a6:77:5c:
06:40:2b:b5:92:d2:fc:4e:a3:08:78:81:50:83:3e:1e:df:e0:
be:db:0f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:16:52 2025 by rpki-client