Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.mft
File: paVuvwHgA0n2cwGRgFYMmjGuqHE.mft (raw, json)
Hash identifier: 0rmzAIt1Hn10hY+nihSnTkyfMyNLx0DFg4DqHmw52Gs=
Subject key identifier: 39:04:29:2A:22:D6:5A:FA:DC:2B:6D:1C:26:14:35:E7:3A:2C:AC:BE
Authority key identifier: A5:A5:6E:BF:01:E0:03:49:F6:73:01:91:80:56:0C:9A:31:AE:A8:71
Certificate issuer: /CN=a5a56ebf01e00349f673019180560c9a31aea871
Certificate serial: 01987418DBB5A9A045970407C69523699F1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/paVuvwHgA0n2cwGRgFYMmjGuqHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.mft
Manifest number: 0D1A
Signing time: Mon 04 Aug 2025 08:00:42 +0000
Manifest this update: Mon 04 Aug 2025 08:00:42 +0000
Manifest next update: Tue 05 Aug 2025 08:00:42 +0000
Files and hashes: 1: Up1DgVu6Rzl8j-xWcnRJPbc9w5c.roa (hash: S1Y+h0243/EB07fB0dXlduT0obEhbg3cgY40o4HTbzQ=)
2: paVuvwHgA0n2cwGRgFYMmjGuqHE.crl (hash: VZgoOyiteNtw9Pi1VK1DDRCLkbhyVKLXEY9l+eLIHdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/paVuvwHgA0n2cwGRgFYMmjGuqHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:18:db:b5:a9:a0:45:97:04:07:c6:95:23:69:9f:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5a56ebf01e00349f673019180560c9a31aea871
Validity
Not Before: Aug 4 08:00:42 2025 GMT
Not After : Aug 5 08:00:42 2025 GMT
Subject: CN=3904292a22d65afadc2b6d1c261435e73a2cacbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:49:2c:46:e4:0a:66:8a:bb:1c:a7:b5:a8:3c:
4a:e8:7b:65:1c:f2:f4:31:36:4d:7f:14:84:2f:f4:
c8:e7:d5:26:82:99:5d:09:a0:ff:f7:01:2b:5f:68:
0d:2a:5e:6e:24:65:91:51:7f:e9:59:26:52:b2:44:
55:90:d2:bc:9c:dd:b9:98:ca:7e:d6:61:3f:52:44:
b6:61:0a:76:1d:53:c4:bc:f7:59:d7:38:b3:8b:9f:
ea:d7:97:86:0e:6f:e1:77:f0:3d:7d:d5:1d:30:8f:
cc:1f:1f:ee:6d:85:23:25:b5:8c:90:39:5d:21:a5:
98:38:01:e3:d8:dc:95:c5:1b:d1:57:3c:b5:47:32:
1a:9a:2c:7c:43:cb:83:88:0a:2b:4c:90:84:4d:f7:
ed:16:1a:17:b3:0b:b6:8b:ab:40:65:08:17:b8:e9:
43:37:15:61:b0:83:93:12:fa:63:6b:75:20:6e:18:
34:d8:1b:18:d6:d7:41:84:ba:c8:67:13:9d:70:46:
52:00:59:97:16:ec:09:28:23:66:f4:f6:45:40:35:
50:dc:87:6b:f7:d2:76:2c:57:7e:e7:2a:21:53:18:
f5:7a:0f:bf:aa:9d:12:e1:9a:ca:08:11:16:e9:6d:
66:70:34:ee:4c:d9:e2:dc:de:ab:56:f0:50:af:33:
73:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:04:29:2A:22:D6:5A:FA:DC:2B:6D:1C:26:14:35:E7:3A:2C:AC:BE
X509v3 Authority Key Identifier:
keyid:A5:A5:6E:BF:01:E0:03:49:F6:73:01:91:80:56:0C:9A:31:AE:A8:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/paVuvwHgA0n2cwGRgFYMmjGuqHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:6e:74:96:55:05:5d:e7:30:ae:99:80:1d:88:4e:0e:b5:06:
93:47:4c:b0:73:e8:e9:93:1f:c3:09:8a:56:f5:e1:b8:67:c5:
b9:cd:2f:4e:b1:61:14:5c:22:87:73:e1:29:d2:a7:cd:51:3b:
8b:ea:10:2a:7e:66:11:2e:80:8c:73:69:63:37:52:38:b5:a4:
d0:89:47:1d:87:d3:c8:47:01:e6:a1:79:48:cd:f5:f5:af:97:
b1:76:57:66:31:b2:d9:a0:79:b4:1f:d1:42:b4:f1:ea:53:21:
d2:97:47:cb:8a:0d:57:03:b8:ad:6b:b7:e8:40:ee:db:78:ea:
f7:79:0a:cb:5f:77:6f:62:17:c9:d9:0c:cc:33:f5:c4:81:b4:
6e:61:94:5f:7a:9b:bb:b7:0c:9a:0f:58:26:3b:3f:72:91:87:
f0:3c:ff:ac:0f:81:ea:c0:ad:c8:34:f1:3b:82:af:44:39:5f:
a1:c9:99:8f:5d:75:16:f5:13:e3:69:0c:c6:37:23:70:55:de:
b6:6c:d4:8d:92:5c:cc:7e:87:2c:f5:bb:5d:7a:33:12:05:ec:
99:93:c2:5b:56:57:29:9b:2b:00:94:16:93:5f:fb:c0:95:1c:
a9:dc:6b:8b:83:5e:8a:1d:5c:3b:a4:4c:cb:e0:7e:f5:24:ee:
49:21:85:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:00:06 2025 by rpki-client