Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.mft
File: pavEOvztcvuSd4covuVxxnj1OFM.mft (raw, json)
Hash identifier: zkoe9EZI6Isf4AW8mz+SiYyqBeh7s6dkTBM3JZxv5JE=
Subject key identifier: F4:7A:C5:E5:9B:30:C3:E9:4A:C5:76:24:1B:41:70:88:C2:87:89:28
Authority key identifier: A5:AB:C4:3A:FC:ED:72:FB:92:77:87:28:BE:E5:71:C6:78:F5:38:53
Certificate issuer: /CN=a5abc43afced72fb92778728bee571c678f53853
Certificate serial: 01983D61148E30DEEAC4365D8A2B52E23AEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pavEOvztcvuSd4covuVxxnj1OFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.mft
Manifest number: 15FC
Signing time: Thu 24 Jul 2025 17:00:28 +0000
Manifest this update: Thu 24 Jul 2025 17:00:28 +0000
Manifest next update: Fri 25 Jul 2025 17:00:28 +0000
Files and hashes: 1: XTYDavgtknOlnwhLwE8YM7gzGNo.roa (hash: PldFwC0OKAPE16YsYJiSJ7/6hQNZV4y5TLuWK0kyNJ0=)
2: pavEOvztcvuSd4covuVxxnj1OFM.crl (hash: sT5/H/8kdoWe4TGjBeyW3CWnQnh8lmviECGr0ggFrDQ=)
3: sSPz7KsWNIMKyyRHlSkiZwosgKw.roa (hash: wjM7pq8MRvpOQBEJDje34R/IkWbdszEvqnHRsuBbId4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/pavEOvztcvuSd4covuVxxnj1OFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 17:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3d:61:14:8e:30:de:ea:c4:36:5d:8a:2b:52:e2:3a:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5abc43afced72fb92778728bee571c678f53853
Validity
Not Before: Jul 24 17:00:28 2025 GMT
Not After : Jul 25 17:00:28 2025 GMT
Subject: CN=f47ac5e59b30c3e94ac576241b417088c2878928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a4:dd:ca:75:e2:03:cb:e2:99:ec:6e:43:dd:
f3:b3:de:68:ad:a0:85:a7:f9:99:68:11:b3:39:22:
e4:c8:b6:22:c5:99:1b:37:ba:85:4a:17:12:3f:b3:
9c:98:86:8a:74:47:2b:f3:16:83:c9:9c:ea:ff:68:
97:96:fb:59:44:56:31:34:6c:44:23:16:9c:59:e1:
0b:c1:00:65:77:4c:39:ca:77:81:35:18:40:25:d5:
53:ea:02:7b:07:04:17:85:c1:e9:99:6c:29:5a:3d:
a3:68:ea:df:3e:16:8e:23:b5:c2:bf:ea:e5:75:bd:
ae:8a:3f:81:7f:70:b2:32:0a:70:76:72:c9:1f:13:
84:51:18:29:13:62:e7:ae:f8:08:24:bd:83:7d:b4:
49:b7:ee:48:36:40:c5:46:9c:b0:1c:be:45:b6:3f:
49:0c:9c:a1:60:ed:9b:00:59:71:41:dd:04:03:60:
d4:30:02:5d:7d:91:4d:a6:46:f5:fd:62:a4:19:a7:
e1:99:9b:93:ee:b3:e8:3b:ec:ff:6b:24:88:08:53:
e5:0d:21:e1:db:a4:b1:48:79:75:c9:81:b2:53:a0:
5f:2a:ce:48:eb:c1:ce:15:f5:b7:38:84:30:71:85:
f0:a1:fd:ee:e9:dc:93:98:4a:d2:71:7b:ff:85:fe:
91:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:7A:C5:E5:9B:30:C3:E9:4A:C5:76:24:1B:41:70:88:C2:87:89:28
X509v3 Authority Key Identifier:
keyid:A5:AB:C4:3A:FC:ED:72:FB:92:77:87:28:BE:E5:71:C6:78:F5:38:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pavEOvztcvuSd4covuVxxnj1OFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:6f:c3:cb:63:06:19:ad:4a:84:0a:4d:40:b0:35:21:4a:8f:
a9:d3:e6:8d:f2:71:0a:16:6d:ff:bc:69:f4:93:f4:4b:43:40:
be:e2:9c:06:83:38:ad:14:d6:2c:92:48:14:6a:42:7e:7b:1d:
cc:6b:a6:2b:34:3f:87:d1:bf:02:62:bd:78:c7:08:a5:04:81:
8d:9c:d6:fb:11:e6:50:28:9c:00:ec:9f:a9:3c:18:ed:6d:a2:
c0:fe:21:b7:f0:eb:15:32:91:24:e1:6f:03:73:f1:c8:1a:67:
7f:1b:01:c4:a1:ad:cc:5a:d3:7d:2a:1f:38:e2:07:0a:81:16:
51:93:15:15:54:d4:96:b8:52:af:c8:9e:d6:5a:b9:5d:85:12:
4f:da:63:00:af:81:6a:d4:32:a9:31:64:63:ca:06:f1:7b:16:
a2:65:be:85:fe:f8:ee:f0:15:63:57:d4:fb:91:f1:44:e3:97:
ad:50:d5:2e:0f:b0:d7:e4:97:9d:f2:c3:84:6d:82:ae:d3:c0:
9f:2d:0f:09:80:c0:39:0c:33:b3:ff:4d:1a:4d:41:f6:b3:2f:
82:4d:f4:ed:97:e3:35:32:d3:51:03:d7:24:81:be:c6:dc:73:
ba:ba:62:28:fa:21:47:ae:a8:4d:b5:3f:8d:85:6c:23:5c:77:
20:32:7f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 00:26:29 2025 by rpki-client