Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.mft
File: pat5hX5owCBczi8RpTh6avofiJU.mft (raw, json)
Hash identifier: UnluDKd7BTuQgmFRViHDYfTe39XMBGTMDv367WfyTLk=
Subject key identifier: B3:40:53:82:73:AB:C3:77:EE:BA:E2:6F:0C:61:93:45:ED:5E:D4:1D
Authority key identifier: A5:AB:79:85:7E:68:C0:20:5C:CE:2F:11:A5:38:7A:6A:FA:1F:88:95
Certificate issuer: /CN=a5ab79857e68c0205cce2f11a5387a6afa1f8895
Certificate serial: 019A733812117A58E7996DDD1D58B91A0EA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pat5hX5owCBczi8RpTh6avofiJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.mft
Manifest number: 1723
Signing time: Tue 11 Nov 2025 14:00:45 +0000
Manifest this update: Tue 11 Nov 2025 14:00:45 +0000
Manifest next update: Wed 12 Nov 2025 14:00:45 +0000
Files and hashes: 1: RJc6jzAyS3uWboc6tEy0sbhbczk.roa (hash: Tl0N+n4FID6GW+L+lL7UDQWc6s/Qw80QVfgROFxq4Tw=)
2: lGQ5oAC4DvbrVczVYtetvVMraGI.roa (hash: RPF4xGL/jJtG/0h2vD9Z4Pt0zkSh8uypUluux6hYGEQ=)
3: pat5hX5owCBczi8RpTh6avofiJU.crl (hash: xCgsHVTUWsLcHW9DLG4PiH0CkINu5xNFtCpmc1xsUvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pat5hX5owCBczi8RpTh6avofiJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:12:11:7a:58:e7:99:6d:dd:1d:58:b9:1a:0e:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5ab79857e68c0205cce2f11a5387a6afa1f8895
Validity
Not Before: Nov 11 14:00:45 2025 GMT
Not After : Nov 12 14:00:45 2025 GMT
Subject: CN=b340538273abc377eebae26f0c619345ed5ed41d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:53:bb:12:be:19:ac:90:ee:90:1c:80:97:b3:
ee:ac:40:db:d7:fa:d9:93:25:f1:e9:c9:82:08:83:
e4:3f:79:8f:11:cb:be:b5:16:8b:9b:92:e9:a7:ba:
62:63:93:8f:f6:37:35:a7:71:8b:d3:39:15:1f:fd:
aa:9f:a0:24:7e:fe:e0:45:36:89:da:f3:0e:bb:9d:
74:de:82:c2:17:34:e8:f7:69:d4:93:3e:9b:6e:f7:
31:58:15:a0:97:97:c6:e1:45:c4:f4:91:96:96:23:
f2:98:2a:f4:bc:0b:74:58:64:b3:fa:3b:04:d6:75:
b3:bb:90:84:e2:e7:c3:f3:9d:31:13:d5:c4:58:35:
b8:c4:de:56:b1:a8:8a:ab:d9:fd:fd:2c:a8:a2:cf:
36:0b:77:04:a4:12:fd:4b:35:8e:4d:8b:d4:d4:29:
ef:cf:32:67:d3:db:8a:87:68:22:3c:a9:c9:8d:a6:
86:f0:19:45:b5:5f:45:74:89:f2:7a:5f:d1:7d:a6:
d6:d5:98:97:3e:af:6d:eb:20:7b:56:dc:08:60:9c:
07:fc:31:1c:43:a9:8c:31:d3:f0:b6:c1:aa:20:ba:
94:04:1b:b6:6c:6a:b0:1c:ff:f9:a0:15:a3:e9:92:
96:68:ac:68:5f:e3:57:85:82:27:71:1a:e0:b3:1e:
f2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:40:53:82:73:AB:C3:77:EE:BA:E2:6F:0C:61:93:45:ED:5E:D4:1D
X509v3 Authority Key Identifier:
keyid:A5:AB:79:85:7E:68:C0:20:5C:CE:2F:11:A5:38:7A:6A:FA:1F:88:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pat5hX5owCBczi8RpTh6avofiJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:2a:8d:57:aa:7f:98:e8:74:3a:52:6f:c8:30:bf:1d:68:b0:
2d:3a:50:25:5d:87:7d:a1:64:7a:3d:ac:d0:92:c8:a6:39:bd:
28:62:b8:fa:d5:46:9f:4b:6a:97:cf:70:42:db:7c:c9:6b:8a:
7d:09:d6:71:08:6a:5b:06:0c:8a:ff:b3:f3:93:bc:93:32:b3:
69:c1:11:9b:4c:e1:97:c3:fb:7a:29:83:20:c6:c2:5a:95:bf:
f1:fe:1c:75:8c:7e:aa:bf:4e:61:96:62:dd:a3:01:d6:5b:b4:
82:6e:f0:ce:0d:11:77:65:17:0f:83:c4:21:e1:1f:9f:ab:bb:
7c:48:f1:f7:13:b9:0e:6b:3b:8e:3a:ab:98:09:4d:73:32:bb:
b8:54:05:99:6e:da:dc:fe:19:23:33:14:28:41:fe:14:c9:8f:
a9:5b:91:60:c2:cc:a2:80:3c:7c:2d:e4:13:0c:ce:f9:a7:72:
ee:81:52:f6:41:d2:12:8e:6a:e4:33:0a:ee:26:d4:c0:9e:5c:
89:16:5c:d2:c3:a9:05:c7:3a:00:ee:24:a5:b7:24:16:cf:01:
99:1c:c5:29:e2:b8:6d:78:ae:c4:e9:e5:0c:cb:c4:cf:87:b4:
9f:e0:11:f8:4a:ee:ef:36:11:fe:67:47:a5:f4:cb:04:6d:27:
53:17:a1:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpzOBIReljnmW3dHVi5Gg6gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1YWI3OTg1N2U2OGMwMjA1Y2NlMmYxMWE1Mzg3YTZhZmEx
Zjg4OTUwHhcNMjUxMTExMTQwMDQ1WhcNMjUxMTEyMTQwMDQ1WjAzMTEwLwYDVQQD
EyhiMzQwNTM4MjczYWJjMzc3ZWViYWUyNmYwYzYxOTM0NWVkNWVkNDFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplO7Er4ZrJDukByAl7PurEDb1/rZ
kyXx6cmCCIPkP3mPEcu+tRaLm5Lpp7piY5OP9jc1p3GL0zkVH/2qn6Akfv7gRTaJ
2vMOu5103oLCFzTo92nUkz6bbvcxWBWgl5fG4UXE9JGWliPymCr0vAt0WGSz+jsE
1nWzu5CE4ufD850xE9XEWDW4xN5WsaiKq9n9/Syoos82C3cEpBL9SzWOTYvU1Cnv
zzJn09uKh2giPKnJjaaG8BlFtV9FdInyel/RfabW1ZiXPq9t6yB7VtwIYJwH/DEc
Q6mMMdPwtsGqILqUBBu2bGqwHP/5oBWj6ZKWaKxoX+NXhYIncRrgsx7y3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLNAU4Jzq8N37rribwxhk0XtXtQdMB8GA1UdIwQY
MBaAFKWreYV+aMAgXM4vEaU4emr6H4iVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGF0NWhYNW93Q0Jjemk4UnBUaDZhdm9maUpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9lMmE1NWMtYjVlNi00OTlhLWI3Mjkt
MWU1OGFjODc5MjRhLzEvcGF0NWhYNW93Q0Jjemk4UnBUaDZhdm9maUpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9lMmE1NWMtYjVlNi00OTlhLWI3MjktMWU1OGFjODc5MjRh
LzEvcGF0NWhYNW93Q0Jjemk4UnBUaDZhdm9maUpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOiqNV6p/
mOh0OlJvyDC/HWiwLTpQJV2HfaFkej2s0JLIpjm9KGK4+tVGn0tql89wQtt8yWuK
fQnWcQhqWwYMiv+z85O8kzKzacERm0zhl8P7eimDIMbCWpW/8f4cdYx+qr9OYZZi
3aMB1lu0gm7wzg0Rd2UXD4PEIeEfn6u7fEjx9xO5Dms7jjqrmAlNczK7uFQFmW7a
3P4ZIzMUKEH+FMmPqVuRYMLMooA8fC3kEwzO+ady7oFS9kHSEo5q5DMK7ibUwJ5c
iRZc0sOpBcc6AO4kpbckFs8BmRzFKeK4bXiuxOnlDMvEz4e0n+AR+Eru7zYR/mdH
pfTLBG0nUxeh0Q==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:37:03 2025 by rpki-client