Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.mft
File: paVuvwHgA0n2cwGRgFYMmjGuqHE.mft (raw, json)
Hash identifier: cUHsbAbUc818t7GIOPy7U44lGA2wD3SRUQqIlAbI6Xs=
Subject key identifier: F7:56:3C:8A:C8:39:23:B1:C4:6C:F4:17:DD:18:32:A5:E6:3C:35:19
Authority key identifier: A5:A5:6E:BF:01:E0:03:49:F6:73:01:91:80:56:0C:9A:31:AE:A8:71
Certificate issuer: /CN=a5a56ebf01e00349f673019180560c9a31aea871
Certificate serial: 019A5119F6AC1A80AFB0A86198F4BAA41A15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/paVuvwHgA0n2cwGRgFYMmjGuqHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.mft
Manifest number: 0E11
Signing time: Tue 04 Nov 2025 23:00:47 +0000
Manifest this update: Tue 04 Nov 2025 23:00:47 +0000
Manifest next update: Wed 05 Nov 2025 23:00:47 +0000
Files and hashes: 1: Up1DgVu6Rzl8j-xWcnRJPbc9w5c.roa (hash: S1Y+h0243/EB07fB0dXlduT0obEhbg3cgY40o4HTbzQ=)
2: paVuvwHgA0n2cwGRgFYMmjGuqHE.crl (hash: eDVNlolyj3undtULvxFDjA+MluilmqRaeURfpyX9Kck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/paVuvwHgA0n2cwGRgFYMmjGuqHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:f6:ac:1a:80:af:b0:a8:61:98:f4:ba:a4:1a:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5a56ebf01e00349f673019180560c9a31aea871
Validity
Not Before: Nov 4 23:00:47 2025 GMT
Not After : Nov 5 23:00:47 2025 GMT
Subject: CN=f7563c8ac83923b1c46cf417dd1832a5e63c3519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e8:3a:12:d4:5d:9d:2a:8d:2e:b3:55:a3:07:
e7:d3:2e:6d:b3:ac:61:12:d0:62:d3:23:e5:47:99:
4b:53:c9:28:41:3b:bb:56:aa:00:3c:15:c6:08:c8:
5d:07:b8:28:a4:35:cc:6f:39:00:9c:10:1b:ad:7b:
cf:32:83:bd:69:4e:ed:3e:cb:8a:e9:0b:e8:5d:69:
f5:07:98:a0:90:5a:8f:03:b1:28:51:57:ec:a2:3c:
2b:7a:95:ea:d7:3e:e9:41:8d:ae:58:97:13:32:50:
05:d5:ea:f5:7b:c3:01:b2:e3:ec:0d:d4:b1:88:a9:
59:ea:17:5a:3a:48:76:03:ec:54:00:7f:b5:3b:af:
02:34:d0:3e:dd:1d:16:cb:90:4e:68:6a:42:31:1e:
2a:75:8c:d8:8b:ce:e4:8e:70:67:98:e9:4a:f9:4e:
a7:1d:ae:27:6a:d9:4c:68:3b:a2:db:37:78:e2:63:
98:85:e4:94:9c:1d:f7:72:6e:47:a5:43:90:97:d0:
22:06:a5:28:cc:ea:e7:c1:5b:e5:38:a8:eb:58:59:
c1:16:88:85:62:9f:32:eb:15:2a:2d:c2:63:7c:8b:
14:fa:4d:bb:84:64:7e:48:01:53:7d:52:3b:c3:8f:
89:fa:f5:68:63:58:fa:e6:18:a8:0b:fb:6e:0b:78:
50:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:56:3C:8A:C8:39:23:B1:C4:6C:F4:17:DD:18:32:A5:E6:3C:35:19
X509v3 Authority Key Identifier:
keyid:A5:A5:6E:BF:01:E0:03:49:F6:73:01:91:80:56:0C:9A:31:AE:A8:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/paVuvwHgA0n2cwGRgFYMmjGuqHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:e0:24:37:47:2c:b2:47:bb:28:2b:33:e1:01:bb:27:2e:2f:
75:f3:2e:e4:3e:c2:cc:1d:a8:24:7c:bb:d4:66:80:f0:31:94:
c4:19:10:0d:61:06:8b:72:71:a8:6c:05:75:b5:88:c0:6d:c0:
a4:79:7e:50:62:a3:18:73:3a:b9:06:74:5b:89:7e:00:6c:c9:
d0:9c:d5:5b:55:eb:5c:d8:28:10:bf:3b:0c:47:46:f2:cf:bf:
58:c4:d9:2c:b8:19:49:28:b8:6d:ea:53:a7:94:31:60:1e:f2:
3e:31:1c:c6:78:14:99:94:b6:9f:d4:fa:98:f9:16:3f:18:76:
09:b4:0c:d0:5d:2d:d9:0e:57:76:36:36:09:64:23:50:c7:1b:
df:e0:a3:07:4d:a1:33:dc:4d:a9:97:bf:f8:ad:72:ac:bd:82:
8f:c5:bf:9e:01:e3:c7:7a:38:3d:f9:60:14:26:96:18:be:1e:
d4:fb:67:63:92:a5:ce:6c:1a:e4:5b:fe:85:74:81:37:cc:1c:
fc:35:23:6e:88:3f:47:95:8a:c8:df:48:a4:7e:6b:fa:3a:ed:
55:70:74:86:6f:ae:7b:a1:72:b2:b8:09:81:cc:18:65:25:e3:
eb:ba:5f:a6:5a:b3:ad:58:e2:e5:6a:78:d9:ad:69:2b:1c:ff:
ed:1a:97:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:26:36 2025 by rpki-client