Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.mft
File: paVuvwHgA0n2cwGRgFYMmjGuqHE.mft (raw, json)
Hash identifier: IMJyCgk9qbfOpVIreVXA6j20u+Jpn4m3WQGGGxkFKtI=
Subject key identifier: 86:3F:0C:99:04:5C:BC:9F:23:14:37:67:3C:97:91:E9:8F:15:40:9E
Authority key identifier: A5:A5:6E:BF:01:E0:03:49:F6:73:01:91:80:56:0C:9A:31:AE:A8:71
Certificate issuer: /CN=a5a56ebf01e00349f673019180560c9a31aea871
Certificate serial: 0198E22E6185382AF4ACCD18192D6E8A9DE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/paVuvwHgA0n2cwGRgFYMmjGuqHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.mft
Manifest number: 0D53
Signing time: Mon 25 Aug 2025 17:02:27 +0000
Manifest this update: Mon 25 Aug 2025 17:02:27 +0000
Manifest next update: Tue 26 Aug 2025 17:02:27 +0000
Files and hashes: 1: Up1DgVu6Rzl8j-xWcnRJPbc9w5c.roa (hash: S1Y+h0243/EB07fB0dXlduT0obEhbg3cgY40o4HTbzQ=)
2: paVuvwHgA0n2cwGRgFYMmjGuqHE.crl (hash: V5D3ZfRyOdmzfEQ4ghU0TWZr34FO0nNUI7v2xRWlQjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/paVuvwHgA0n2cwGRgFYMmjGuqHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Aug 2025 17:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e2:2e:61:85:38:2a:f4:ac:cd:18:19:2d:6e:8a:9d:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5a56ebf01e00349f673019180560c9a31aea871
Validity
Not Before: Aug 25 17:02:27 2025 GMT
Not After : Aug 26 17:02:27 2025 GMT
Subject: CN=863f0c99045cbc9f231437673c9791e98f15409e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:27:df:5e:42:3b:af:33:6c:e9:72:c7:7a:64:
72:62:86:27:66:df:40:08:1a:8b:e0:47:f1:1c:d9:
dc:93:39:28:62:d7:6c:a9:0b:e8:cf:dd:aa:e2:7e:
47:39:14:69:6d:ac:6f:68:f7:2d:21:63:db:f1:67:
a8:38:60:4f:dc:18:c7:6a:8a:25:72:d1:b4:92:9a:
42:34:13:85:3f:e0:fd:71:89:6b:42:01:d6:30:ab:
90:f5:c0:cb:78:ae:23:7f:d7:ae:a2:60:bf:f5:7d:
5f:41:ae:f3:f7:fe:4e:21:30:f6:9f:fa:6e:e3:c9:
da:fc:d6:e5:fd:10:d8:50:48:19:98:56:12:91:47:
bc:2e:a5:74:38:f2:7c:b7:13:82:80:33:e2:17:07:
3e:1e:11:c5:7b:42:ba:34:f9:b2:b2:ec:50:b5:84:
5c:84:84:76:27:f3:f1:64:6f:fe:ea:ad:f5:fe:a7:
65:4a:2b:ba:4a:6e:6a:a3:e8:d3:c6:e9:bd:89:16:
c1:5c:a1:57:dc:93:f9:6f:60:c9:80:7d:da:f0:a5:
ee:9c:e2:4b:b6:9a:1e:06:43:55:4a:29:f1:81:52:
37:70:98:55:5a:41:7e:74:bb:0c:08:94:9c:02:b1:
a5:02:13:9a:a3:50:26:1f:e2:c0:cc:ee:ea:63:39:
00:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:3F:0C:99:04:5C:BC:9F:23:14:37:67:3C:97:91:E9:8F:15:40:9E
X509v3 Authority Key Identifier:
keyid:A5:A5:6E:BF:01:E0:03:49:F6:73:01:91:80:56:0C:9A:31:AE:A8:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/paVuvwHgA0n2cwGRgFYMmjGuqHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:91:24:d1:94:3d:70:2a:0f:64:fa:c4:58:d3:6d:20:2e:ac:
75:b9:5d:26:c1:60:63:1b:b3:21:c3:51:0b:5e:f5:40:33:37:
68:77:d2:80:77:8e:67:e5:e8:e6:55:d4:cd:d8:32:47:27:97:
a1:97:1b:93:a9:64:73:2b:7a:5f:6a:3f:5a:a9:02:9b:f9:95:
d0:45:56:e7:96:b2:05:66:fd:62:5c:ea:f7:66:46:ad:16:cb:
84:fb:cb:bd:6d:9c:c0:7d:b7:25:33:64:07:4a:4d:c7:1e:ed:
0b:56:e6:04:33:6f:ef:8c:c9:ad:76:91:0f:03:0b:d7:84:84:
00:e4:0c:eb:5a:38:37:5a:b3:25:d0:c3:53:00:61:a7:a4:f6:
2d:4d:cf:e8:d5:98:3d:1d:53:bc:a7:2a:08:7f:ac:df:80:7b:
d9:51:10:e7:83:96:de:57:68:76:b4:a9:1b:d7:49:7d:7d:01:
6e:c0:7d:d9:bb:5e:18:a1:c2:65:64:09:c2:12:bd:f4:8e:ff:
fa:6b:af:0c:9d:69:b7:92:b6:37:83:02:d5:6d:34:ff:53:38:
55:b2:17:db:b7:75:14:88:d8:46:d0:5e:80:cb:46:f3:dc:1d:
a3:d3:13:cc:e2:83:4e:e2:ce:7f:8b:2d:88:c1:3a:d9:10:c5:
92:69:db:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 26 02:59:54 2025 by rpki-client