Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.mft
File: paVuvwHgA0n2cwGRgFYMmjGuqHE.mft (raw, json)
Hash identifier: XiTWET7c9YTDfzhLWi/QjOipuOrzINiTSOVoFeO6rV8=
Subject key identifier: 88:72:F7:07:2B:F9:B7:D8:C2:0A:40:0E:E5:E3:1D:10:7D:F5:1B:99
Authority key identifier: A5:A5:6E:BF:01:E0:03:49:F6:73:01:91:80:56:0C:9A:31:AE:A8:71
Certificate issuer: /CN=a5a56ebf01e00349f673019180560c9a31aea871
Certificate serial: 01974AB13EBF7E1C320FAACCA56C45C35694
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/paVuvwHgA0n2cwGRgFYMmjGuqHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.mft
Manifest number: 0C80
Signing time: Sat 07 Jun 2025 14:00:19 +0000
Manifest this update: Sat 07 Jun 2025 14:00:19 +0000
Manifest next update: Sun 08 Jun 2025 14:00:19 +0000
Files and hashes: 1: Up1DgVu6Rzl8j-xWcnRJPbc9w5c.roa (hash: S1Y+h0243/EB07fB0dXlduT0obEhbg3cgY40o4HTbzQ=)
2: paVuvwHgA0n2cwGRgFYMmjGuqHE.crl (hash: +Lg38z3OZ4ZjiWp9Rio6CNty7akfOrGOywzszsGS0iQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/paVuvwHgA0n2cwGRgFYMmjGuqHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:b1:3e:bf:7e:1c:32:0f:aa:cc:a5:6c:45:c3:56:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5a56ebf01e00349f673019180560c9a31aea871
Validity
Not Before: Jun 7 14:00:19 2025 GMT
Not After : Jun 8 14:00:19 2025 GMT
Subject: CN=8872f7072bf9b7d8c20a400ee5e31d107df51b99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:76:ff:b5:82:0f:6c:19:71:74:4c:0e:a7:4e:
0c:63:08:26:1c:a9:a1:bb:41:e1:10:34:36:0c:53:
44:6b:e2:3a:26:fe:9a:48:4f:8c:f7:82:28:31:9b:
fd:07:89:41:8c:d7:11:c0:65:5e:90:ca:b6:95:b0:
ec:02:9c:90:ae:de:a0:74:74:17:fa:6e:64:7c:50:
db:89:ab:42:4c:f1:86:c4:a2:28:62:94:4c:4f:10:
0a:83:af:13:dd:fd:b2:49:8f:30:5c:b1:87:9f:01:
22:1a:b1:ad:40:77:59:bc:98:82:1a:14:3d:7a:fb:
e7:7c:a4:42:e4:b2:6e:f3:ed:2c:71:8a:6f:41:8c:
2f:67:03:3d:6a:60:9c:c4:28:57:5f:6f:2e:4f:9a:
de:96:93:02:7b:4e:7a:13:ce:34:0f:4b:a1:e5:3b:
ce:db:1b:fb:39:f9:60:82:b2:86:f7:aa:94:db:d0:
69:3c:fd:3d:52:d5:9f:17:40:0e:a2:e4:6d:2f:3c:
6d:79:ef:92:a9:5d:fa:b1:dd:76:32:9c:9d:b6:4b:
17:73:88:2a:ae:cc:04:e9:1b:22:1d:87:bc:5a:a5:
23:be:51:f1:31:bb:5d:ba:9d:f4:a1:d1:ad:96:8e:
05:1d:53:96:8f:a4:82:0f:0f:10:b0:cc:28:7f:7b:
b2:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:72:F7:07:2B:F9:B7:D8:C2:0A:40:0E:E5:E3:1D:10:7D:F5:1B:99
X509v3 Authority Key Identifier:
keyid:A5:A5:6E:BF:01:E0:03:49:F6:73:01:91:80:56:0C:9A:31:AE:A8:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/paVuvwHgA0n2cwGRgFYMmjGuqHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:1e:2f:33:19:47:bd:95:32:e0:e2:5a:4b:c2:10:4e:a1:24:
63:6a:03:bc:18:c2:70:b4:e2:f9:07:37:4b:ef:ee:38:cf:07:
62:13:24:a8:fb:74:82:1f:e4:e9:5b:e5:cd:5c:35:a9:50:9c:
86:6d:cf:71:92:d8:eb:f4:f6:85:30:a6:f5:81:b8:4c:ea:fc:
49:7e:a6:a6:4d:ad:a3:18:28:94:c0:b9:18:8d:5c:74:fa:3f:
38:d5:6d:d0:e2:9d:14:2e:13:6f:2e:0c:54:91:02:b6:fb:8e:
78:c3:49:58:05:68:f8:13:76:f6:f6:e2:22:21:c8:4b:f4:e2:
97:3c:22:57:47:f4:21:de:f3:ea:d2:52:76:34:89:08:d4:5d:
e8:0f:7e:c6:f2:13:1c:43:ab:2e:38:cb:d2:20:37:bc:1f:f8:
12:cf:a3:9c:5b:94:61:19:07:9f:71:91:e5:4f:db:9d:70:0a:
ac:54:e8:38:0b:a7:ed:ed:eb:c4:dc:01:0d:26:86:95:33:9f:
4a:bb:d1:14:a5:d5:19:b4:3e:99:69:cd:81:77:b8:89:60:1f:
29:3c:83:af:37:56:7f:27:3a:6c:ca:24:d9:0c:9a:6f:28:fd:
d4:0b:4a:cf:3c:ae:61:37:e4:4e:be:94:0f:cc:cc:32:80:8a:
51:59:da:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:31:18 2025 by rpki-client