Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.mft
File: paVuvwHgA0n2cwGRgFYMmjGuqHE.mft (raw, json)
Hash identifier: h9LMAQDnKGxy04m2LMzO7RhhlzxFYNB90bp25CYshGk=
Subject key identifier: 24:4B:A7:D8:C8:18:3E:39:A3:07:64:9B:5F:C7:AB:0B:BB:59:A9:96
Authority key identifier: A5:A5:6E:BF:01:E0:03:49:F6:73:01:91:80:56:0C:9A:31:AE:A8:71
Certificate issuer: /CN=a5a56ebf01e00349f673019180560c9a31aea871
Certificate serial: 019A41A69A81D02649CEC0B99744F19861F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/paVuvwHgA0n2cwGRgFYMmjGuqHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.mft
Manifest number: 0E09
Signing time: Sat 01 Nov 2025 23:00:28 +0000
Manifest this update: Sat 01 Nov 2025 23:00:28 +0000
Manifest next update: Sun 02 Nov 2025 23:00:28 +0000
Files and hashes: 1: Up1DgVu6Rzl8j-xWcnRJPbc9w5c.roa (hash: S1Y+h0243/EB07fB0dXlduT0obEhbg3cgY40o4HTbzQ=)
2: paVuvwHgA0n2cwGRgFYMmjGuqHE.crl (hash: MDXVd0GtV5bKYB2tR8OeWMgU799ZUXMIvneC4a4l4yU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/paVuvwHgA0n2cwGRgFYMmjGuqHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Nov 2025 21:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:41:a6:9a:81:d0:26:49:ce:c0:b9:97:44:f1:98:61:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5a56ebf01e00349f673019180560c9a31aea871
Validity
Not Before: Nov 1 23:00:28 2025 GMT
Not After : Nov 2 23:00:28 2025 GMT
Subject: CN=244ba7d8c8183e39a307649b5fc7ab0bbb59a996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ac:cb:ba:31:fb:92:60:a1:f4:96:da:57:27:
d3:9b:02:8b:49:6d:91:96:2d:fd:71:8e:d8:5a:56:
c5:4c:6e:d7:f9:ee:69:8d:bf:fb:d8:92:de:4c:0a:
4f:19:7e:bb:f2:09:27:56:e6:09:94:69:49:88:a2:
2c:8b:08:35:75:a7:8c:1c:84:46:39:c6:d6:1c:6a:
3c:f3:4d:3c:1c:60:e6:27:c2:22:4f:3e:e5:47:74:
19:69:a7:c0:38:37:c9:46:7d:32:c8:9c:5c:69:48:
6c:35:71:3e:10:0e:c3:a9:75:33:16:aa:a0:8a:bb:
d8:9c:5c:01:cf:e0:8f:f2:c2:28:38:8f:e5:71:4c:
07:dc:3d:56:38:e2:e6:94:5f:b8:d6:aa:5e:76:d4:
66:43:b4:63:73:01:29:f8:3b:2a:45:68:a6:ea:98:
c8:02:d1:b0:17:91:6a:1b:ff:fa:99:4e:d7:f8:f7:
1c:a9:1b:13:9b:c5:c2:b3:97:e3:14:2e:dc:73:f2:
e9:3a:c2:81:30:47:02:39:36:89:12:74:91:2a:1a:
da:33:bd:c8:8c:e7:b1:e3:6d:ec:dd:85:2c:00:a6:
3c:36:56:bd:4f:d6:a2:4c:1f:2e:32:f8:ad:67:85:
de:e6:c3:32:2e:27:cf:54:96:63:6f:f4:52:4e:22:
75:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:4B:A7:D8:C8:18:3E:39:A3:07:64:9B:5F:C7:AB:0B:BB:59:A9:96
X509v3 Authority Key Identifier:
keyid:A5:A5:6E:BF:01:E0:03:49:F6:73:01:91:80:56:0C:9A:31:AE:A8:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/paVuvwHgA0n2cwGRgFYMmjGuqHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:ea:a4:98:79:91:37:1d:fa:32:3c:d6:43:2d:84:a1:0b:39:
af:d6:93:7e:0e:3f:17:8b:38:a4:3d:56:bf:26:59:70:63:fe:
ae:c3:f3:83:d1:44:c6:26:e4:73:27:bf:a6:14:84:6f:0e:16:
45:72:c9:8c:58:33:ed:99:85:89:6b:76:eb:b5:29:1e:ac:1b:
ea:7d:28:9d:5c:5b:43:28:54:8b:19:17:08:bf:74:f8:94:ef:
3d:fd:cd:32:a9:74:65:63:d5:2d:eb:61:f9:db:64:9e:55:79:
8d:36:b6:4f:e0:fc:60:b6:04:0e:95:56:96:36:0a:41:e1:35:
41:f9:83:17:dd:8a:1c:b6:73:6f:4e:bc:12:f6:80:52:6d:23:
09:74:7e:f8:20:1e:0c:e2:b9:c8:35:4c:a6:ff:59:7a:75:9a:
8e:b9:6d:b9:8f:8b:91:5e:3a:6f:c1:ae:6e:8b:07:c8:fa:15:
b6:dd:ff:52:cb:f7:1b:79:74:b4:1d:01:3d:0a:7c:22:fc:b7:
cc:25:7b:ca:e8:8a:58:69:7c:13:ca:dc:c1:81:e5:47:c6:a2:
6c:c5:5a:64:b7:c2:96:5f:7b:98:32:e9:ba:96:17:91:02:54:
e1:f6:23:81:8b:2d:66:c2:ef:69:a6:ee:9d:77:6f:10:8e:17:
05:4d:d2:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpBppqB0CZJzsC5l0TxmGH1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1YTU2ZWJmMDFlMDAzNDlmNjczMDE5MTgwNTYwYzlhMzFh
ZWE4NzEwHhcNMjUxMTAxMjMwMDI4WhcNMjUxMTAyMjMwMDI4WjAzMTEwLwYDVQQD
EygyNDRiYTdkOGM4MTgzZTM5YTMwNzY0OWI1ZmM3YWIwYmJiNTlhOTk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6zLujH7kmCh9JbaVyfTmwKLSW2R
li39cY7YWlbFTG7X+e5pjb/72JLeTApPGX678gknVuYJlGlJiKIsiwg1daeMHIRG
OcbWHGo88008HGDmJ8IiTz7lR3QZaafAODfJRn0yyJxcaUhsNXE+EA7DqXUzFqqg
irvYnFwBz+CP8sIoOI/lcUwH3D1WOOLmlF+41qpedtRmQ7RjcwEp+DsqRWim6pjI
AtGwF5FqG//6mU7X+PccqRsTm8XCs5fjFC7cc/LpOsKBMEcCOTaJEnSRKhraM73I
jOex423s3YUsAKY8Nla9T9aiTB8uMvitZ4Xe5sMyLifPVJZjb/RSTiJ1wQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCRLp9jIGD45owdkm1/Hqwu7WamWMB8GA1UdIwQY
MBaAFKWlbr8B4ANJ9nMBkYBWDJoxrqhxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGFWdXZ3SGdBMG4yY3dHUmdGWU1takd1cUhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS81NTRjMzUtYTgzYy00MzI5LWEwOGQt
MmQ0NmQzMGRhY2JmLzEvcGFWdXZ3SGdBMG4yY3dHUmdGWU1takd1cUhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS81NTRjMzUtYTgzYy00MzI5LWEwOGQtMmQ0NmQzMGRhY2Jm
LzEvcGFWdXZ3SGdBMG4yY3dHUmdGWU1takd1cUhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIuqkmHmR
Nx36MjzWQy2EoQs5r9aTfg4/F4s4pD1WvyZZcGP+rsPzg9FExibkcye/phSEbw4W
RXLJjFgz7ZmFiWt267UpHqwb6n0onVxbQyhUixkXCL90+JTvPf3NMql0ZWPVLeth
+dtknlV5jTa2T+D8YLYEDpVWljYKQeE1QfmDF92KHLZzb068EvaAUm0jCXR++CAe
DOK5yDVMpv9ZenWajrltuY+LkV46b8GubosHyPoVtt3/Usv3G3l0tB0BPQp8Ivy3
zCV7yuiKWGl8E8rcwYHlR8aibMVaZLfCll97mDLpupYXkQJU4fYjgYstZsLvaabu
nXdvEI4XBU3SUQ==
-----END CERTIFICATE-----
Generated at Sun Nov 2 03:28:36 2025 by rpki-client