Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.mft
File: pat5hX5owCBczi8RpTh6avofiJU.mft (raw, json)
Hash identifier: l0hkgjyrEbSZsf5EMD9hmH0CJ+AxvhTBOxjErASxxOs=
Subject key identifier: 5F:30:97:09:04:32:27:AC:EF:C3:12:2E:D3:FA:26:75:67:93:AC:C4
Authority key identifier: A5:AB:79:85:7E:68:C0:20:5C:CE:2F:11:A5:38:7A:6A:FA:1F:88:95
Certificate issuer: /CN=a5ab79857e68c0205cce2f11a5387a6afa1f8895
Certificate serial: 01976CCF8A68052EB4093FA58D8FCB8E2FBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pat5hX5owCBczi8RpTh6avofiJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.mft
Manifest number: 1592
Signing time: Sat 14 Jun 2025 05:00:30 +0000
Manifest this update: Sat 14 Jun 2025 05:00:30 +0000
Manifest next update: Sun 15 Jun 2025 05:00:30 +0000
Files and hashes: 1: RJc6jzAyS3uWboc6tEy0sbhbczk.roa (hash: Tl0N+n4FID6GW+L+lL7UDQWc6s/Qw80QVfgROFxq4Tw=)
2: lGQ5oAC4DvbrVczVYtetvVMraGI.roa (hash: RPF4xGL/jJtG/0h2vD9Z4Pt0zkSh8uypUluux6hYGEQ=)
3: pat5hX5owCBczi8RpTh6avofiJU.crl (hash: t01zxpcXAHsE8Li1Db4oS2V88lVU2DCL9UjHCEcJDFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pat5hX5owCBczi8RpTh6avofiJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:8a:68:05:2e:b4:09:3f:a5:8d:8f:cb:8e:2f:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5ab79857e68c0205cce2f11a5387a6afa1f8895
Validity
Not Before: Jun 14 05:00:30 2025 GMT
Not After : Jun 15 05:00:30 2025 GMT
Subject: CN=5f309709043227acefc3122ed3fa26756793acc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cc:b6:71:f6:91:7e:65:84:b2:75:c1:79:85:
4b:c0:fc:74:7f:9f:9f:7b:af:fa:cf:5e:30:70:ea:
be:9a:f0:c6:4a:6a:fe:75:75:02:b7:ce:63:9a:5a:
1c:12:ed:24:dc:de:e0:27:96:2b:de:07:4f:ed:da:
75:52:c5:61:b3:a3:dd:66:35:b6:75:59:53:f6:49:
87:ae:82:e9:43:31:1d:b2:8b:03:23:ca:0f:88:f8:
f0:6e:67:1e:54:e2:59:b6:e8:01:d6:e5:4f:8d:15:
c5:2d:e8:57:9d:f1:58:5e:b1:50:75:05:df:2f:6a:
1c:aa:90:3b:15:0d:81:3d:2b:f1:57:38:e6:08:fc:
17:0d:1d:64:23:00:30:72:ef:e5:13:7b:7a:71:11:
d5:7a:93:5a:9d:e7:32:b5:52:55:23:da:22:42:ca:
c4:6e:f8:16:ee:34:21:88:71:70:6a:20:bb:9d:e7:
ea:e8:a5:79:f6:67:05:e4:54:fc:2e:95:72:11:0a:
73:9b:7f:95:93:10:2e:4d:7c:09:00:a5:7b:4b:27:
3a:9d:b3:98:31:de:d0:2b:bd:ce:22:82:08:82:c6:
8e:4a:bb:a8:ad:9f:98:57:05:b1:83:ce:8f:4e:8a:
9d:50:ea:5c:63:6a:99:81:4a:a5:5c:39:94:98:a7:
d8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:30:97:09:04:32:27:AC:EF:C3:12:2E:D3:FA:26:75:67:93:AC:C4
X509v3 Authority Key Identifier:
keyid:A5:AB:79:85:7E:68:C0:20:5C:CE:2F:11:A5:38:7A:6A:FA:1F:88:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pat5hX5owCBczi8RpTh6avofiJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:14:8d:e6:41:65:a2:96:1f:c5:45:6d:ea:1d:1f:dd:57:c6:
87:47:d4:db:4c:19:58:d2:00:63:32:7b:71:0f:67:29:af:4c:
5b:68:d8:63:31:75:74:32:9d:51:c2:6f:01:e0:78:57:73:14:
c0:a9:43:a3:0b:5e:4a:36:26:bd:a9:54:33:88:8f:7d:3a:70:
c5:c0:4b:c6:91:2b:37:f3:89:b7:2d:d0:d1:e2:cb:8c:20:f8:
24:ff:0e:3c:37:32:49:f9:52:4a:9f:6a:56:26:16:13:e8:6f:
70:63:77:ee:0c:ee:0b:1b:49:46:4e:fc:ed:7e:90:7c:3c:ef:
33:2d:ab:76:c6:37:c0:5f:3f:52:32:1d:a7:51:be:2d:b6:93:
ad:ce:f5:8e:cd:a1:64:4e:23:aa:e5:61:3b:77:a8:51:cb:9e:
2c:34:20:94:df:91:d6:39:f8:cd:1f:4a:80:7c:c9:46:3a:1c:
39:43:52:bb:00:87:9d:2b:1d:24:8c:76:8d:b7:b1:2e:93:66:
6c:3a:83:2e:dd:02:d1:ee:c8:b3:0f:f3:0d:81:2e:31:5c:fd:
4a:ef:13:5a:bd:6b:1b:c9:f0:d3:04:9a:f7:10:43:12:f1:8f:
21:b0:36:b9:89:69:ac:74:42:32:0a:2e:13:93:21:c2:57:b9:
4e:53:08:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:18:44 2025 by rpki-client