Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft
File: pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft (raw, json)
Hash identifier: WGKnbtxVRI8KA2IqPO4qXtBIstRnvFUFQQBi22KEMkk=
Subject key identifier: CC:B1:13:20:17:6F:79:7D:68:CE:E8:24:B6:A1:81:44:37:A4:C8:1B
Authority key identifier: A5:B0:C0:57:31:EF:A4:BB:E5:C2:A3:0A:E5:18:9F:77:85:D2:D4:99
Certificate issuer: /CN=a5b0c05731efa4bbe5c2a30ae5189f7785d2d499
Certificate serial: 0199277D164C03728FBFEC8159F1E8493A02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft
Manifest number: 1621
Signing time: Mon 08 Sep 2025 04:02:13 +0000
Manifest this update: Mon 08 Sep 2025 04:02:13 +0000
Manifest next update: Tue 09 Sep 2025 04:02:13 +0000
Files and hashes: 1: DuTLHmPWVWziogaT97oFAa9mDRE.roa (hash: PMtNyjUzQWlQv3rVcKbrWnO8Vocq0JKKdYATvPbNA78=)
2: X3CBuLjI2iLdZV3cmRV8Xr8zH-8.roa (hash: nRhR1UBTZd6YJqMwitmIM+7shNJ21X2SOgFJgRIoWfs=)
3: pbDAVzHvpLvlwqMK5Rifd4XS1Jk.crl (hash: nCeAdw2S2YZ2PDCDG5v0JJtGAb7w4Zgys9RUBoWgNUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:27:7d:16:4c:03:72:8f:bf:ec:81:59:f1:e8:49:3a:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5b0c05731efa4bbe5c2a30ae5189f7785d2d499
Validity
Not Before: Sep 8 04:02:13 2025 GMT
Not After : Sep 9 04:02:13 2025 GMT
Subject: CN=ccb11320176f797d68cee824b6a1814437a4c81b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6b:2a:f7:68:d7:7c:2a:cf:53:dc:77:77:57:
b9:0d:77:be:fa:54:8d:23:de:e3:20:a7:a4:36:a8:
90:0d:48:8a:78:23:08:dc:81:84:20:b5:d0:05:e0:
21:3c:88:9d:c4:1c:6d:40:a6:f0:22:2b:28:ce:5f:
eb:c9:00:1d:5e:90:74:c9:29:43:1d:d8:8e:d8:91:
57:2a:c6:75:4e:5e:29:88:cc:e7:77:32:3e:12:e3:
c8:da:f9:1d:d7:74:2f:09:21:05:98:4d:05:12:8e:
38:4e:e4:e7:25:c1:4b:89:8a:f9:c1:3e:bd:1d:af:
e9:e3:86:3c:1e:33:9a:9d:d8:bc:4b:b6:dd:da:e2:
8d:91:c2:e7:f8:fb:ad:d2:b1:28:dc:12:d4:00:25:
b3:de:47:f8:06:2e:e8:35:29:cb:bc:98:45:ba:b7:
f8:1b:39:11:a7:73:e3:1a:4b:3c:32:42:18:f8:79:
fe:f8:e0:a9:36:30:56:2f:ce:68:bf:8d:58:57:41:
0c:4b:10:cc:59:54:21:6a:fe:36:f9:58:7b:60:e6:
7d:38:ee:43:2e:ce:77:5a:7b:9a:34:9f:cd:e6:20:
82:74:9f:11:ea:8f:85:67:8c:ca:e9:96:da:1b:b5:
31:77:0c:71:4f:f6:53:ba:3e:71:f0:7c:88:c7:19:
88:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:B1:13:20:17:6F:79:7D:68:CE:E8:24:B6:A1:81:44:37:A4:C8:1B
X509v3 Authority Key Identifier:
keyid:A5:B0:C0:57:31:EF:A4:BB:E5:C2:A3:0A:E5:18:9F:77:85:D2:D4:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:9a:0f:44:96:d0:5b:4b:c9:9e:3c:75:09:80:46:91:ff:5a:
41:37:5d:34:08:a2:79:56:02:35:38:3c:91:d9:b8:ca:b8:0e:
d7:a8:98:d9:66:3e:e0:66:2f:af:e3:0f:61:c1:75:77:8c:1f:
df:ba:df:d6:b7:dc:0b:8a:32:58:2b:59:58:22:d0:1a:2c:eb:
54:86:a8:2f:64:5f:fd:98:91:14:b3:74:fe:f8:29:94:e5:59:
e9:75:0a:e2:95:33:8e:7a:46:41:b0:69:ec:e8:92:c9:0c:de:
32:42:68:4f:35:ad:ac:1c:7c:79:b5:11:34:f3:72:57:f3:25:
bd:9e:79:d6:f0:f7:0e:1a:9f:ab:2f:d7:58:75:db:d3:87:e0:
a7:43:fc:b0:49:b3:86:c4:c0:43:39:78:26:18:9d:50:5f:88:
20:5b:a3:dd:07:96:b1:40:6a:72:97:f7:1f:3e:2d:83:dd:a6:
63:81:37:4f:25:ea:5b:20:40:82:d5:60:0d:3d:b3:af:2d:96:
ff:c6:1f:e4:35:32:f7:d6:d5:8e:ea:e6:1e:29:81:cd:7f:fb:
91:c0:ee:6b:5a:de:12:fc:52:16:51:48:5b:99:bb:be:fc:cb:
6c:4d:22:10:a8:2a:b3:48:35:74:a7:c0:06:e8:92:fb:74:50:
bf:72:26:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 08:42:48 2025 by rpki-client