Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/529b28-3a39-49bf-8ef2-a47fb9a94ffd/1/v1Tb8A10WQyJE97Isc8ITY_PaTw.mft
File: v1Tb8A10WQyJE97Isc8ITY_PaTw.mft (raw, json)
Hash identifier: eoEo/ytnK0ZsML8/HlZ4FyiG6/NveGghkSnKrpqT4xE=
Subject key identifier: 22:40:6D:61:8A:20:B4:E1:1E:2E:F1:B1:00:AE:74:15:D4:16:C5:15
Authority key identifier: BF:54:DB:F0:0D:74:59:0C:89:13:DE:C8:B1:CF:08:4D:8F:CF:69:3C
Certificate issuer: /CN=bf54dbf00d74590c8913dec8b1cf084d8fcf693c
Certificate serial: 019A4DE1C0B55E1E1F02A7193B2A8ECF1225
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v1Tb8A10WQyJE97Isc8ITY_PaTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/529b28-3a39-49bf-8ef2-a47fb9a94ffd/1/v1Tb8A10WQyJE97Isc8ITY_PaTw.mft
Manifest number: 0545
Signing time: Tue 04 Nov 2025 08:00:31 +0000
Manifest this update: Tue 04 Nov 2025 08:00:31 +0000
Manifest next update: Wed 05 Nov 2025 08:00:31 +0000
Files and hashes: 1: v1Tb8A10WQyJE97Isc8ITY_PaTw.crl (hash: yRYUU9SAkmgd0bbPYOKBtPuCkgkv5LxtsFw1dq778TU=)
2: wvpX23IN2w8d2-KXP6RepnCHP3g.roa (hash: hX6rM9w+qzbC1N6GJKikByFvvKJf6X+cuAHLvYTMLZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/529b28-3a39-49bf-8ef2-a47fb9a94ffd/1/v1Tb8A10WQyJE97Isc8ITY_PaTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/529b28-3a39-49bf-8ef2-a47fb9a94ffd/1/v1Tb8A10WQyJE97Isc8ITY_PaTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/v1Tb8A10WQyJE97Isc8ITY_PaTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:c0:b5:5e:1e:1f:02:a7:19:3b:2a:8e:cf:12:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf54dbf00d74590c8913dec8b1cf084d8fcf693c
Validity
Not Before: Nov 4 08:00:31 2025 GMT
Not After : Nov 5 08:00:31 2025 GMT
Subject: CN=22406d618a20b4e11e2ef1b100ae7415d416c515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9a:72:26:13:ad:9b:d7:d3:25:cc:57:db:94:
17:56:0b:77:68:52:65:7e:82:84:83:bd:62:93:7a:
c6:ac:60:50:be:83:6b:ce:1b:5d:e0:48:56:18:11:
47:7a:43:4e:84:23:60:26:ce:9d:e4:51:6e:ee:61:
1c:51:22:60:84:1d:53:cd:e9:ec:a8:e4:2d:6c:8d:
b8:fd:88:d4:f3:1a:f4:00:74:69:f4:62:ca:bb:e7:
86:d5:70:20:ec:b4:d7:8b:36:44:20:f9:1f:34:66:
54:ff:6d:c1:34:ff:0d:97:97:fe:53:60:8f:ed:e4:
4b:5b:17:bb:fd:4c:c9:00:a0:6e:d5:d0:ae:99:91:
ab:06:8b:5c:71:b3:e3:44:72:6c:17:58:f7:58:cc:
84:39:2d:d7:4e:d8:9b:c1:93:90:c3:6c:af:55:f8:
51:b9:5a:ca:91:ca:d8:0b:e3:2a:be:8d:43:75:ca:
d4:e6:1c:67:09:57:82:13:93:f9:b8:84:cf:00:a4:
5c:e5:f7:72:be:68:29:3d:11:ba:6c:4b:c5:61:df:
9b:29:4c:79:93:25:c0:02:84:77:60:58:42:9a:1b:
7b:d3:7a:98:28:45:87:a1:91:84:12:51:52:a2:d9:
b0:86:48:ba:a0:8e:ed:23:9f:76:50:95:0c:bb:f9:
3b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:40:6D:61:8A:20:B4:E1:1E:2E:F1:B1:00:AE:74:15:D4:16:C5:15
X509v3 Authority Key Identifier:
keyid:BF:54:DB:F0:0D:74:59:0C:89:13:DE:C8:B1:CF:08:4D:8F:CF:69:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v1Tb8A10WQyJE97Isc8ITY_PaTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/529b28-3a39-49bf-8ef2-a47fb9a94ffd/1/v1Tb8A10WQyJE97Isc8ITY_PaTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/529b28-3a39-49bf-8ef2-a47fb9a94ffd/1/v1Tb8A10WQyJE97Isc8ITY_PaTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:ee:06:55:56:f1:f1:ea:90:06:7f:eb:21:26:72:2b:84:1c:
7c:da:71:51:90:40:f0:02:06:44:8c:fe:b0:89:73:4c:82:29:
77:d1:76:7d:18:fc:2a:32:84:0d:6a:c5:ec:26:e9:78:f7:2a:
4d:4a:96:47:93:4c:cc:a7:54:7f:08:b7:f7:0e:b7:a2:d3:85:
2d:fd:1c:c2:34:9d:f1:c2:09:29:20:52:b6:6b:f9:fa:c2:b6:
ad:1e:2c:9f:d7:9f:2f:6b:37:ab:ed:f2:7a:88:8f:b3:ca:fa:
19:96:c2:52:03:b2:32:a5:a9:f1:8f:8a:72:88:d4:28:e5:11:
c0:1d:c0:71:e0:eb:61:a4:7a:2b:be:59:0f:51:76:71:17:0c:
40:fe:e2:ea:3a:f2:d3:b8:53:96:5c:3f:e7:2b:38:ba:03:b6:
78:28:94:0c:51:24:46:ad:ac:4e:ab:c6:a3:5b:dd:b2:0b:14:
c1:c6:3d:6f:d3:31:2e:64:cc:24:c5:57:5c:20:f5:0f:54:70:
91:e5:c3:86:3c:d4:b6:de:69:c3:9b:9d:1b:49:c1:5a:7c:f4:
fe:3b:6b:dc:55:d2:23:bb:97:31:3d:94:d6:6f:e9:1f:f1:f1:
55:9a:4d:13:8a:a6:7f:84:c9:c9:86:e0:c9:41:f4:cd:32:8c:
ba:d7:b9:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:53:46 2025 by rpki-client