Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.mft
File: pat5hX5owCBczi8RpTh6avofiJU.mft (raw, json)
Hash identifier: WfmPKHjv8iFzMj1TdKjy4bYO2KOKYIYXw3L/6vM91zU=
Subject key identifier: 7B:85:70:2D:3B:0C:3D:25:F1:5C:81:5E:D7:F7:42:8D:54:A3:01:9E
Authority key identifier: A5:AB:79:85:7E:68:C0:20:5C:CE:2F:11:A5:38:7A:6A:FA:1F:88:95
Certificate issuer: /CN=a5ab79857e68c0205cce2f11a5387a6afa1f8895
Certificate serial: 01974A0CC2D616CCCA6F1CE713F210EC27C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pat5hX5owCBczi8RpTh6avofiJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.mft
Manifest number: 1580
Signing time: Sat 07 Jun 2025 11:00:39 +0000
Manifest this update: Sat 07 Jun 2025 11:00:39 +0000
Manifest next update: Sun 08 Jun 2025 11:00:39 +0000
Files and hashes: 1: RJc6jzAyS3uWboc6tEy0sbhbczk.roa (hash: Tl0N+n4FID6GW+L+lL7UDQWc6s/Qw80QVfgROFxq4Tw=)
2: lGQ5oAC4DvbrVczVYtetvVMraGI.roa (hash: RPF4xGL/jJtG/0h2vD9Z4Pt0zkSh8uypUluux6hYGEQ=)
3: pat5hX5owCBczi8RpTh6avofiJU.crl (hash: YowLqSTkAI5XoeJaJsaMowHD2yocJYL1if/LAPR6WDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pat5hX5owCBczi8RpTh6avofiJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:c2:d6:16:cc:ca:6f:1c:e7:13:f2:10:ec:27:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5ab79857e68c0205cce2f11a5387a6afa1f8895
Validity
Not Before: Jun 7 11:00:39 2025 GMT
Not After : Jun 8 11:00:39 2025 GMT
Subject: CN=7b85702d3b0c3d25f15c815ed7f7428d54a3019e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a3:b1:1f:32:f8:d3:ce:fd:cd:7a:81:fd:75:
03:9e:4e:e8:6c:75:2f:7e:15:cf:e7:75:6d:e7:6e:
44:9f:31:a7:fd:25:7a:b5:46:2d:9a:23:84:53:ac:
16:2f:e7:f7:9b:5b:6d:0e:54:7e:35:b9:86:52:16:
2c:e8:3e:db:cb:02:9b:5a:53:ac:9e:a8:70:67:9b:
65:bc:3c:82:82:e2:90:d9:38:17:da:34:81:30:02:
40:1e:64:90:81:d1:7e:bb:11:92:c9:59:d1:07:cf:
5a:d4:d8:ea:ee:44:f0:dc:63:23:4c:1b:34:9a:91:
29:a9:17:1f:44:29:51:ea:72:b6:0b:1e:2a:75:36:
9c:8d:a0:10:78:26:dc:0d:3d:b8:72:e6:cf:6e:b0:
aa:45:06:4f:2d:b4:1e:38:48:84:dc:1f:b2:ab:78:
0d:88:a7:03:d1:ce:22:da:ed:cb:85:f6:aa:26:3a:
77:e6:9e:af:0d:be:75:c9:6b:90:4c:dd:23:50:8c:
7b:df:76:de:b7:eb:07:18:94:c1:4d:fb:e4:ac:ab:
32:90:15:23:f3:6d:f8:d1:78:8e:97:51:08:de:a2:
4d:45:4c:f6:98:6e:4d:e6:ab:0f:ee:f1:6e:2c:1d:
82:e3:1a:91:fe:45:a0:13:1e:d4:f4:e5:17:02:2c:
a8:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:85:70:2D:3B:0C:3D:25:F1:5C:81:5E:D7:F7:42:8D:54:A3:01:9E
X509v3 Authority Key Identifier:
keyid:A5:AB:79:85:7E:68:C0:20:5C:CE:2F:11:A5:38:7A:6A:FA:1F:88:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pat5hX5owCBczi8RpTh6avofiJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:5c:73:1b:1d:15:32:7e:92:e5:be:35:88:59:2c:09:a7:4d:
24:c3:06:9c:b3:1d:11:35:a1:a6:13:5a:9c:9f:82:e2:69:28:
44:8b:af:09:2e:a4:72:c9:6e:d3:20:50:52:21:df:62:c5:2a:
3e:92:5f:c6:5b:7f:e8:af:8c:c4:5a:05:5b:fa:2f:ed:ab:d0:
1f:e6:7c:43:39:2a:c2:7c:ac:72:fb:48:11:fe:6c:45:2e:ef:
31:68:d6:bc:f5:cd:c4:69:eb:fd:70:16:b3:c5:9b:67:ba:1a:
71:65:a0:be:2e:39:f1:87:57:d6:ce:7e:a7:1d:ec:25:a1:d5:
d9:d5:43:ff:17:a8:bc:69:36:00:01:e8:4b:5b:e7:3d:56:94:
55:2b:50:b3:2e:ad:70:92:33:8c:aa:73:26:b1:d5:38:c3:52:
ed:df:9d:48:44:2c:74:84:fc:04:2a:11:b4:ed:d2:88:2e:ba:
a2:74:64:7c:a6:d3:30:88:19:0b:e0:55:68:0c:64:bb:53:35:
4c:47:2e:c5:b1:2a:24:fa:9d:f4:4c:2e:d2:2f:4b:cd:ee:15:
0c:14:d0:07:f0:41:27:be:1d:93:43:41:fe:3f:02:e7:a9:2a:
14:20:6f:60:9e:8b:d9:a0:61:0a:db:b2:c1:7f:b2:23:3f:6b:
ae:1d:9f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:35:39 2025 by rpki-client