Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.mft
File: pavEOvztcvuSd4covuVxxnj1OFM.mft (raw, json)
Hash identifier: hJLCRX5ZBVwDnKNU2+zNDN/PWLydCU33pI19mckrTkg=
Subject key identifier: 2D:0B:40:2C:68:47:64:69:64:8B:67:AD:A3:9E:9B:F7:02:AA:64:46
Authority key identifier: A5:AB:C4:3A:FC:ED:72:FB:92:77:87:28:BE:E5:71:C6:78:F5:38:53
Certificate issuer: /CN=a5abc43afced72fb92778728bee571c678f53853
Certificate serial: 01988C8F138F8F76578E2D883F248FDEAE56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pavEOvztcvuSd4covuVxxnj1OFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.mft
Manifest number: 1625
Signing time: Sat 09 Aug 2025 02:00:43 +0000
Manifest this update: Sat 09 Aug 2025 02:00:43 +0000
Manifest next update: Sun 10 Aug 2025 02:00:43 +0000
Files and hashes: 1: XTYDavgtknOlnwhLwE8YM7gzGNo.roa (hash: PldFwC0OKAPE16YsYJiSJ7/6hQNZV4y5TLuWK0kyNJ0=)
2: pavEOvztcvuSd4covuVxxnj1OFM.crl (hash: atlhI7gqSl3yylO0puu+HRPeVJRrIgPkF05aszx4eEQ=)
3: sSPz7KsWNIMKyyRHlSkiZwosgKw.roa (hash: wjM7pq8MRvpOQBEJDje34R/IkWbdszEvqnHRsuBbId4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/pavEOvztcvuSd4covuVxxnj1OFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 02:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:8f:13:8f:8f:76:57:8e:2d:88:3f:24:8f:de:ae:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5abc43afced72fb92778728bee571c678f53853
Validity
Not Before: Aug 9 02:00:43 2025 GMT
Not After : Aug 10 02:00:43 2025 GMT
Subject: CN=2d0b402c68476469648b67ada39e9bf702aa6446
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6a:96:0a:d4:87:7b:08:02:bf:74:33:8a:6f:
0b:0e:00:64:ff:df:1a:83:57:2f:05:92:5d:3d:65:
e4:c5:1f:af:2f:6d:5a:2c:34:0c:b4:4e:35:f5:ae:
da:5d:4f:ab:e4:47:dc:00:01:af:e8:eb:c9:58:8f:
a2:b8:2c:b7:39:52:d7:f9:95:2e:e2:e3:e5:4e:ff:
c9:02:bb:c1:28:9a:25:a8:00:f3:6c:26:29:2a:0f:
f8:88:ed:22:94:ac:7c:c4:1c:9d:11:14:bd:8c:3c:
27:24:bc:3e:3e:b4:18:f9:8a:ed:fb:c7:a8:ff:53:
cc:25:eb:ab:cf:cd:52:ea:44:8f:89:04:24:12:5d:
56:53:da:8c:ee:b0:76:82:f3:6a:aa:2b:62:72:60:
d6:9d:e7:b6:09:8c:74:3e:17:de:11:c2:51:4e:40:
f3:06:ec:0d:27:54:44:29:ae:f6:e9:a7:9b:4f:41:
58:a9:35:d7:fa:e1:27:19:f0:14:9d:d6:55:43:c2:
08:e4:95:f8:67:f2:1a:9d:c5:3a:66:f2:20:20:a6:
9d:84:24:51:b8:1b:b8:ef:12:31:4e:08:ff:3f:ce:
0e:9d:b6:25:1e:91:fc:3c:df:a2:e2:a7:ec:4d:a3:
6c:cb:ac:5e:b2:b1:7d:2e:a3:67:d7:a8:49:7a:ce:
20:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:0B:40:2C:68:47:64:69:64:8B:67:AD:A3:9E:9B:F7:02:AA:64:46
X509v3 Authority Key Identifier:
keyid:A5:AB:C4:3A:FC:ED:72:FB:92:77:87:28:BE:E5:71:C6:78:F5:38:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pavEOvztcvuSd4covuVxxnj1OFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:8a:c2:26:a1:a6:30:98:70:49:1e:28:9d:57:2a:11:56:97:
c9:80:1e:e4:b4:c1:ec:b8:9d:cf:a4:c1:6e:7d:49:af:86:49:
a9:79:45:87:15:e5:3d:c9:7d:88:d8:30:98:97:b1:3d:36:28:
6f:b3:d2:be:8f:b1:83:db:62:a2:e1:68:4b:ee:6c:d6:ce:1d:
98:2a:06:83:d5:07:1a:75:41:5f:e5:c1:86:d5:fb:0b:79:72:
ea:22:ce:ec:af:50:0a:72:c7:4c:f7:ca:92:ef:37:89:a8:af:
62:0e:3d:2f:07:b1:9c:99:e7:ec:74:1b:ff:c3:72:89:f1:f7:
75:cd:f3:15:a4:5b:aa:84:00:1d:dc:71:a8:d3:c1:cb:a6:9e:
5c:ee:32:f3:d6:06:22:8c:ef:8b:13:83:63:45:2f:d5:e7:76:
bc:07:dd:35:94:70:ae:be:dd:1e:cd:20:e1:b7:bf:d5:fb:b9:
56:d5:22:2a:41:e0:f5:62:44:56:c9:a1:59:6f:8d:9f:93:8d:
bf:71:5e:a9:6c:2e:bf:e3:fc:6a:4c:88:7d:4c:b0:d0:3f:78:
67:f4:9b:41:39:a3:7c:eb:c7:59:f6:16:31:eb:02:5e:92:50:
4d:af:b9:ac:b8:7b:7f:07:2b:3d:0c:b5:18:2a:e4:e9:10:cf:
4f:6b:73:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiMjxOPj3ZXji2IPySP3q5WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1YWJjNDNhZmNlZDcyZmI5Mjc3ODcyOGJlZTU3MWM2Nzhm
NTM4NTMwHhcNMjUwODA5MDIwMDQzWhcNMjUwODEwMDIwMDQzWjAzMTEwLwYDVQQD
EygyZDBiNDAyYzY4NDc2NDY5NjQ4YjY3YWRhMzllOWJmNzAyYWE2NDQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2qWCtSHewgCv3Qzim8LDgBk/98a
g1cvBZJdPWXkxR+vL21aLDQMtE419a7aXU+r5EfcAAGv6OvJWI+iuCy3OVLX+ZUu
4uPlTv/JArvBKJolqADzbCYpKg/4iO0ilKx8xBydERS9jDwnJLw+PrQY+Yrt+8eo
/1PMJeurz81S6kSPiQQkEl1WU9qM7rB2gvNqqiticmDWnee2CYx0PhfeEcJRTkDz
BuwNJ1REKa726aebT0FYqTXX+uEnGfAUndZVQ8II5JX4Z/IancU6ZvIgIKadhCRR
uBu47xIxTgj/P84OnbYlHpH8PN+i4qfsTaNsy6xesrF9LqNn16hJes4gXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC0LQCxoR2RpZItnraOem/cCqmRGMB8GA1UdIwQY
MBaAFKWrxDr87XL7kneHKL7lccZ49ThTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGF2RU92enRjdnVTZDRjb3Z1Vnh4bmoxT0ZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9lOWI3NmEtMTBiMy00N2MwLWE1MTct
YjVlOTFmYzY1MDUxLzEvcGF2RU92enRjdnVTZDRjb3Z1Vnh4bmoxT0ZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9lOWI3NmEtMTBiMy00N2MwLWE1MTctYjVlOTFmYzY1MDUx
LzEvcGF2RU92enRjdnVTZDRjb3Z1Vnh4bmoxT0ZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJIrCJqGm
MJhwSR4onVcqEVaXyYAe5LTB7Lidz6TBbn1Jr4ZJqXlFhxXlPcl9iNgwmJexPTYo
b7PSvo+xg9tiouFoS+5s1s4dmCoGg9UHGnVBX+XBhtX7C3ly6iLO7K9QCnLHTPfK
ku83iaivYg49LwexnJnn7HQb/8NyifH3dc3zFaRbqoQAHdxxqNPBy6aeXO4y89YG
IozvixODY0Uv1ed2vAfdNZRwrr7dHs0g4be/1fu5VtUiKkHg9WJEVsmhWW+Nn5ON
v3FeqWwuv+P8akyIfUyw0D94Z/SbQTmjfOvHWfYWMesCXpJQTa+5rLh7fwcrPQy1
GCrk6RDPT2tzAw==
-----END CERTIFICATE-----
Generated at Sat Aug 9 10:34:07 2025 by rpki-client