Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.mft
File: pavEOvztcvuSd4covuVxxnj1OFM.mft (raw, json)
Hash identifier: AF7GFLirBsFtuID+Fg+jRB78ofn47hxqN+/Hu0ioPkc=
Subject key identifier: EB:B9:A4:8A:DF:52:87:AF:2B:C7:22:16:D9:EE:BE:BF:F4:8D:FA:41
Authority key identifier: A5:AB:C4:3A:FC:ED:72:FB:92:77:87:28:BE:E5:71:C6:78:F5:38:53
Certificate issuer: /CN=a5abc43afced72fb92778728bee571c678f53853
Certificate serial: 01977865CA950980F397C59D8188C4A0688C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pavEOvztcvuSd4covuVxxnj1OFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.mft
Manifest number: 1596
Signing time: Mon 16 Jun 2025 11:00:26 +0000
Manifest this update: Mon 16 Jun 2025 11:00:26 +0000
Manifest next update: Tue 17 Jun 2025 11:00:26 +0000
Files and hashes: 1: XTYDavgtknOlnwhLwE8YM7gzGNo.roa (hash: PldFwC0OKAPE16YsYJiSJ7/6hQNZV4y5TLuWK0kyNJ0=)
2: pavEOvztcvuSd4covuVxxnj1OFM.crl (hash: TPwXPi765C/zq/W/JMcpmgpkaWdzzc8O+GRQbOWGZ9c=)
3: sSPz7KsWNIMKyyRHlSkiZwosgKw.roa (hash: wjM7pq8MRvpOQBEJDje34R/IkWbdszEvqnHRsuBbId4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/pavEOvztcvuSd4covuVxxnj1OFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 11:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:65:ca:95:09:80:f3:97:c5:9d:81:88:c4:a0:68:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5abc43afced72fb92778728bee571c678f53853
Validity
Not Before: Jun 16 11:00:26 2025 GMT
Not After : Jun 17 11:00:26 2025 GMT
Subject: CN=ebb9a48adf5287af2bc72216d9eebebff48dfa41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ad:06:ad:7f:f0:6f:7b:2d:48:1e:0e:f3:15:
a2:63:ab:e3:5c:fa:59:2c:3b:43:f5:38:51:84:2b:
78:1b:38:17:1a:65:42:08:17:b5:ce:33:87:ea:b9:
f0:57:a1:6f:8f:11:d7:ab:ea:8d:6a:ae:aa:aa:c8:
b4:ed:02:0a:3b:f2:9c:ee:54:d4:85:f9:2e:7c:05:
a4:af:bb:a1:5c:0b:34:61:4f:30:cd:d3:9f:1c:2c:
41:a1:24:4c:4e:97:7f:e7:d8:38:3b:01:76:7e:06:
fb:2e:f0:80:87:f7:7a:8b:44:9c:33:45:91:71:76:
2e:d1:69:36:f9:d8:ec:33:8a:65:fd:0a:52:2e:77:
a6:7e:54:c2:6d:fe:d1:87:b0:8c:2b:35:f3:5d:0d:
d0:46:f1:25:d0:dc:10:30:aa:0b:57:81:d9:22:ac:
f0:61:dc:8c:9b:f8:8f:c4:fe:2a:1f:0f:36:b2:88:
65:8b:63:e8:8a:3b:48:f8:fa:16:dc:88:65:5d:7d:
ad:60:81:3a:07:d9:21:c8:06:36:4f:e1:01:df:93:
52:28:9d:8d:b0:e1:47:a4:b6:c7:7a:e1:f5:72:0a:
53:2e:f2:60:a6:b1:ef:5f:a2:de:ec:44:4e:1b:46:
92:92:35:69:64:22:e3:94:63:1a:a6:b6:d0:db:0e:
32:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:B9:A4:8A:DF:52:87:AF:2B:C7:22:16:D9:EE:BE:BF:F4:8D:FA:41
X509v3 Authority Key Identifier:
keyid:A5:AB:C4:3A:FC:ED:72:FB:92:77:87:28:BE:E5:71:C6:78:F5:38:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pavEOvztcvuSd4covuVxxnj1OFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:6d:30:36:17:b6:2e:e0:db:0e:9f:65:cd:c2:92:67:01:b6:
74:0c:f2:95:4d:56:57:ed:b7:9b:3f:62:a3:75:aa:4a:13:9b:
d6:5b:cf:ea:8f:91:8e:75:b6:c3:0a:0e:c4:ff:2a:51:c1:05:
e0:11:39:b1:77:a8:7e:2c:89:eb:57:ee:52:7d:0a:bb:8b:54:
24:40:a5:45:ae:54:94:c2:89:0a:31:40:42:f6:71:d1:bf:34:
be:3f:be:26:63:d9:14:7c:e0:6f:08:80:2d:e9:8e:82:ee:84:
f0:a6:b9:e1:d6:d8:1a:e8:45:7e:e1:31:20:4e:45:14:85:1b:
54:1e:a0:a3:42:5f:b3:e8:27:8f:9e:58:9c:97:cb:cc:68:6a:
43:b9:b5:a8:99:06:e8:f2:ed:58:ba:87:77:43:c3:fc:47:07:
e8:44:71:a2:99:4f:88:4a:5b:b8:aa:34:9a:38:d8:57:dd:07:
1f:9e:df:cf:c1:b9:8d:17:1c:5c:7e:13:20:b1:49:5e:96:60:
43:f0:3b:3c:0b:25:7d:28:fa:c2:0a:8f:5c:e3:e0:91:c6:f5:
3a:a5:91:e0:77:7b:f1:d3:2c:ee:cb:c5:ba:62:1b:cb:1a:15:
05:a4:bd:27:dd:92:d3:4c:8a:02:ec:ce:44:52:2d:39:fe:6b:
c9:9e:96:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 16:48:52 2025 by rpki-client