Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.mft
File: pat5hX5owCBczi8RpTh6avofiJU.mft (raw, json)
Hash identifier: 5EDLTGbPAIK5Vp30l4l0XAJ62E2WTSG/vTI6m8R6dq8=
Subject key identifier: 8C:B5:32:A2:29:E1:C3:C1:4D:87:98:38:59:E5:F9:1A:10:9C:F3:78
Authority key identifier: A5:AB:79:85:7E:68:C0:20:5C:CE:2F:11:A5:38:7A:6A:FA:1F:88:95
Certificate issuer: /CN=a5ab79857e68c0205cce2f11a5387a6afa1f8895
Certificate serial: 01964EFE57E107E6F4B28E9905C0E769921E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pat5hX5owCBczi8RpTh6avofiJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.mft
Manifest number: 14FE
Signing time: Sat 19 Apr 2025 17:00:13 +0000
Manifest this update: Sat 19 Apr 2025 17:00:13 +0000
Manifest next update: Sun 20 Apr 2025 17:00:13 +0000
Files and hashes: 1: RJc6jzAyS3uWboc6tEy0sbhbczk.roa (hash: Tl0N+n4FID6GW+L+lL7UDQWc6s/Qw80QVfgROFxq4Tw=)
2: lGQ5oAC4DvbrVczVYtetvVMraGI.roa (hash: RPF4xGL/jJtG/0h2vD9Z4Pt0zkSh8uypUluux6hYGEQ=)
3: pat5hX5owCBczi8RpTh6avofiJU.crl (hash: edi71HVfvLmr9baeIjIzh11aqjjftheUFnkhOT7KzqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pat5hX5owCBczi8RpTh6avofiJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 17:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:fe:57:e1:07:e6:f4:b2:8e:99:05:c0:e7:69:92:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5ab79857e68c0205cce2f11a5387a6afa1f8895
Validity
Not Before: Apr 19 17:00:13 2025 GMT
Not After : Apr 20 17:00:13 2025 GMT
Subject: CN=8cb532a229e1c3c14d87983859e5f91a109cf378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e5:ba:66:bc:b1:43:3f:46:45:0f:ae:36:e4:
87:fb:f6:88:29:84:60:10:ea:8a:47:0e:cd:be:42:
54:ce:5e:d5:3b:45:54:0d:bd:cd:07:98:d9:44:f1:
23:c1:79:b0:1e:93:f8:5c:e1:64:e6:44:c6:be:c0:
e9:1b:3b:d7:c5:ed:9a:c4:20:97:c9:44:0e:6e:8e:
92:12:64:89:4a:42:ac:f6:45:89:d3:da:2b:c7:f4:
97:35:fb:2e:7c:3c:26:78:36:d2:ed:09:a8:56:8c:
36:62:f0:05:7d:37:07:77:2a:69:3c:3b:09:c4:50:
89:a0:51:5c:1d:f6:84:aa:53:b5:af:7b:9e:b0:3b:
5c:6b:d5:a8:ac:5e:d2:a8:aa:6b:5b:de:83:5b:e1:
ee:1d:0b:c8:70:83:31:c3:dd:10:a7:70:3a:b5:85:
b6:13:cb:e9:f6:00:4b:a9:ce:74:87:9a:46:d6:57:
25:90:e4:a8:8d:12:77:0d:e6:51:94:b7:10:35:5a:
77:59:30:b6:76:9d:a1:3b:ea:f8:b5:41:9c:57:37:
60:c2:e1:56:69:2f:b1:2a:e8:85:cb:d8:6a:fd:8d:
b2:fa:3e:ea:96:42:18:d3:5f:b0:d4:09:b1:8b:b8:
6e:23:b6:6e:9b:3f:a7:02:9d:19:ef:51:10:e4:42:
42:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:B5:32:A2:29:E1:C3:C1:4D:87:98:38:59:E5:F9:1A:10:9C:F3:78
X509v3 Authority Key Identifier:
keyid:A5:AB:79:85:7E:68:C0:20:5C:CE:2F:11:A5:38:7A:6A:FA:1F:88:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pat5hX5owCBczi8RpTh6avofiJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:41:ee:61:31:05:d8:fc:91:48:92:a7:37:b1:fb:3e:ea:fb:
db:16:0b:2d:ce:9c:b6:2e:1b:c2:22:93:41:3d:6b:43:0c:ee:
e9:83:84:f0:9b:a3:76:96:1e:19:21:56:60:2a:e6:40:11:be:
41:8f:43:3e:84:74:08:e8:b4:a3:58:55:c1:02:8d:46:51:58:
71:a4:a6:fa:09:19:8c:c5:66:e7:01:aa:0c:ea:26:99:af:7c:
90:55:47:e7:2e:3b:ba:64:f5:ed:d6:e8:93:c2:cd:32:09:c7:
5f:d8:03:7c:11:30:1d:ba:14:d8:40:b5:73:35:be:4a:ec:ea:
14:b7:b3:fa:37:ee:c8:b3:a0:16:cd:d5:40:5a:49:88:5c:ea:
ef:aa:01:9d:bb:92:68:74:20:44:8c:77:08:ed:44:49:3e:90:
4f:73:d6:b3:1d:f1:00:e5:c5:14:e5:85:25:2e:a9:d8:95:fe:
2a:18:cb:04:99:b7:ce:29:89:ed:cf:cc:d9:70:87:63:12:c4:
05:68:4b:44:16:6e:af:41:f2:23:e8:eb:83:d7:5b:8d:4e:1a:
63:2b:24:9e:f7:1b:4a:54:81:f0:3b:b0:e0:d4:c3:5b:07:23:
51:43:3b:7f:6a:b6:05:2f:26:fc:a1:88:90:3e:45:e8:dd:d5:
ea:ff:db:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZO/lfhB+b0so6ZBcDnaZIeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1YWI3OTg1N2U2OGMwMjA1Y2NlMmYxMWE1Mzg3YTZhZmEx
Zjg4OTUwHhcNMjUwNDE5MTcwMDEzWhcNMjUwNDIwMTcwMDEzWjAzMTEwLwYDVQQD
Eyg4Y2I1MzJhMjI5ZTFjM2MxNGQ4Nzk4Mzg1OWU1ZjkxYTEwOWNmMzc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOW6ZryxQz9GRQ+uNuSH+/aIKYRg
EOqKRw7NvkJUzl7VO0VUDb3NB5jZRPEjwXmwHpP4XOFk5kTGvsDpGzvXxe2axCCX
yUQObo6SEmSJSkKs9kWJ09orx/SXNfsufDwmeDbS7QmoVow2YvAFfTcHdyppPDsJ
xFCJoFFcHfaEqlO1r3uesDtca9WorF7SqKprW96DW+HuHQvIcIMxw90Qp3A6tYW2
E8vp9gBLqc50h5pG1lclkOSojRJ3DeZRlLcQNVp3WTC2dp2hO+r4tUGcVzdgwuFW
aS+xKuiFy9hq/Y2y+j7qlkIY01+w1Amxi7huI7Zumz+nAp0Z71EQ5EJCnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIy1MqIp4cPBTYeYOFnl+RoQnPN4MB8GA1UdIwQY
MBaAFKWreYV+aMAgXM4vEaU4emr6H4iVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGF0NWhYNW93Q0Jjemk4UnBUaDZhdm9maUpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9lMmE1NWMtYjVlNi00OTlhLWI3Mjkt
MWU1OGFjODc5MjRhLzEvcGF0NWhYNW93Q0Jjemk4UnBUaDZhdm9maUpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9lMmE1NWMtYjVlNi00OTlhLWI3MjktMWU1OGFjODc5MjRh
LzEvcGF0NWhYNW93Q0Jjemk4UnBUaDZhdm9maUpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACEHuYTEF
2PyRSJKnN7H7Pur72xYLLc6cti4bwiKTQT1rQwzu6YOE8JujdpYeGSFWYCrmQBG+
QY9DPoR0COi0o1hVwQKNRlFYcaSm+gkZjMVm5wGqDOomma98kFVH5y47umT17dbo
k8LNMgnHX9gDfBEwHboU2EC1czW+SuzqFLez+jfuyLOgFs3VQFpJiFzq76oBnbuS
aHQgRIx3CO1EST6QT3PWsx3xAOXFFOWFJS6p2JX+KhjLBJm3zimJ7c/M2XCHYxLE
BWhLRBZur0HyI+jrg9dbjU4aYysknvcbSlSB8Duw4NTDWwcjUUM7f2q2BS8m/KGI
kD5F6N3V6v/bRA==
-----END CERTIFICATE-----
Generated at Sun Apr 20 03:29:37 2025 by rpki-client