Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.mft
File: pat5hX5owCBczi8RpTh6avofiJU.mft (raw, json)
Hash identifier: d9gkCrU9FwcQfRAQGZSIGg+XwS8Uq0V6X3zujLwj7iU=
Subject key identifier: 7E:7F:0C:8F:1E:7F:6F:42:AF:03:0B:88:37:43:36:4B:E8:33:7E:CD
Authority key identifier: A5:AB:79:85:7E:68:C0:20:5C:CE:2F:11:A5:38:7A:6A:FA:1F:88:95
Certificate issuer: /CN=a5ab79857e68c0205cce2f11a5387a6afa1f8895
Certificate serial: 019A5074FACB225E94B3B18EB0D7DBEE893F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pat5hX5owCBczi8RpTh6avofiJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.mft
Manifest number: 1711
Signing time: Tue 04 Nov 2025 20:00:34 +0000
Manifest this update: Tue 04 Nov 2025 20:00:34 +0000
Manifest next update: Wed 05 Nov 2025 20:00:34 +0000
Files and hashes: 1: RJc6jzAyS3uWboc6tEy0sbhbczk.roa (hash: Tl0N+n4FID6GW+L+lL7UDQWc6s/Qw80QVfgROFxq4Tw=)
2: lGQ5oAC4DvbrVczVYtetvVMraGI.roa (hash: RPF4xGL/jJtG/0h2vD9Z4Pt0zkSh8uypUluux6hYGEQ=)
3: pat5hX5owCBczi8RpTh6avofiJU.crl (hash: gDEfFItR2oRaYbxfmOxPRjH6geOTdrGgBmWmxbEMRgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pat5hX5owCBczi8RpTh6avofiJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:fa:cb:22:5e:94:b3:b1:8e:b0:d7:db:ee:89:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5ab79857e68c0205cce2f11a5387a6afa1f8895
Validity
Not Before: Nov 4 20:00:34 2025 GMT
Not After : Nov 5 20:00:34 2025 GMT
Subject: CN=7e7f0c8f1e7f6f42af030b883743364be8337ecd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4c:35:b8:00:cc:8b:b2:e0:c7:d3:b9:b3:40:
3a:e6:b9:eb:99:ee:7a:72:3f:c1:4f:f5:b1:29:86:
be:52:d4:e7:7c:4c:a8:d1:4b:8a:18:4b:f5:a0:cd:
2f:4b:38:38:5d:2a:c7:6f:4e:36:6b:f7:40:9a:e9:
59:3e:59:f6:7b:04:2a:c7:21:d2:20:e5:b3:8c:a7:
e8:99:36:8c:b9:c4:14:bb:6d:0c:81:aa:33:b7:a5:
78:f9:2e:dd:55:6c:d7:12:9c:d0:1b:86:ad:f0:e8:
3a:4d:8b:35:ac:45:30:d8:dc:9c:96:3e:ef:60:34:
21:77:12:b0:19:2c:1b:cd:af:eb:7d:50:0c:ef:5c:
31:fd:d8:8a:9a:b1:c5:b6:4b:1d:6d:c5:e9:1a:e7:
8a:c4:8c:a8:b5:dc:f2:ce:67:56:90:85:ee:b0:96:
69:01:23:03:b9:15:c5:67:24:f6:4a:b7:e8:d7:e5:
f2:51:83:48:4f:fb:88:7b:ee:a7:4d:ad:64:6d:22:
82:d8:f8:e8:b8:c6:41:f4:bd:06:20:7d:66:a9:2d:
8b:4c:5b:a3:62:60:c9:a5:eb:6b:4c:6d:6b:5f:6b:
e2:6b:b3:b6:c7:b8:e0:ef:79:f0:59:24:d4:cd:d7:
b2:55:f9:c0:d8:0a:bb:e2:44:5c:0e:ab:6b:ae:04:
b9:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:7F:0C:8F:1E:7F:6F:42:AF:03:0B:88:37:43:36:4B:E8:33:7E:CD
X509v3 Authority Key Identifier:
keyid:A5:AB:79:85:7E:68:C0:20:5C:CE:2F:11:A5:38:7A:6A:FA:1F:88:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pat5hX5owCBczi8RpTh6avofiJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:66:43:91:f3:7b:26:3f:30:73:bd:cc:dc:9d:7e:60:c5:a1:
2a:e0:cb:9f:0c:1b:5b:3b:aa:02:b4:55:77:47:69:4e:a1:a8:
9e:fb:a7:30:ef:18:d8:15:7c:61:b0:6d:83:c6:c3:86:d5:b1:
b0:7e:b2:01:ad:ad:c4:1d:9a:6e:62:bb:7d:a4:3c:37:f1:5d:
66:84:2c:e1:1b:77:b5:99:3f:4e:96:63:56:99:6f:dd:09:73:
e1:3e:1d:aa:54:90:0c:80:8c:da:5c:a5:d2:23:e3:bc:94:c5:
1f:ae:5b:6c:91:f7:b2:89:12:ab:4a:b0:e1:ea:be:38:63:74:
4b:d6:4a:c9:f2:ca:4d:17:07:f5:64:15:68:8f:6c:1e:8e:01:
98:ad:c5:da:1e:b0:77:3b:db:3d:85:ea:81:c1:57:b8:9b:2f:
21:5e:24:12:11:21:00:2d:ed:72:23:54:0f:e1:38:fc:8a:ec:
82:6d:80:ae:89:c5:61:7a:16:e1:2b:ba:cd:09:50:bb:f0:fd:
cd:2e:59:c2:44:85:31:ec:2e:97:91:41:0c:52:d3:d6:bf:44:
f0:21:73:6f:ce:d3:85:cd:15:b5:7b:42:b3:80:63:ab:f0:b2:
70:9b:c3:f3:7b:6f:c3:fe:86:03:b8:23:b0:56:d2:24:2c:ad:
f6:a6:99:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQdPrLIl6Us7GOsNfb7ok/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1YWI3OTg1N2U2OGMwMjA1Y2NlMmYxMWE1Mzg3YTZhZmEx
Zjg4OTUwHhcNMjUxMTA0MjAwMDM0WhcNMjUxMTA1MjAwMDM0WjAzMTEwLwYDVQQD
Eyg3ZTdmMGM4ZjFlN2Y2ZjQyYWYwMzBiODgzNzQzMzY0YmU4MzM3ZWNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkw1uADMi7Lgx9O5s0A65rnrme56
cj/BT/WxKYa+UtTnfEyo0UuKGEv1oM0vSzg4XSrHb042a/dAmulZPln2ewQqxyHS
IOWzjKfomTaMucQUu20Mgaozt6V4+S7dVWzXEpzQG4at8Og6TYs1rEUw2Nyclj7v
YDQhdxKwGSwbza/rfVAM71wx/diKmrHFtksdbcXpGueKxIyotdzyzmdWkIXusJZp
ASMDuRXFZyT2Srfo1+XyUYNIT/uIe+6nTa1kbSKC2PjouMZB9L0GIH1mqS2LTFuj
YmDJpetrTG1rX2via7O2x7jg73nwWSTUzdeyVfnA2Aq74kRcDqtrrgS5TwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH5/DI8ef29CrwMLiDdDNkvoM37NMB8GA1UdIwQY
MBaAFKWreYV+aMAgXM4vEaU4emr6H4iVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGF0NWhYNW93Q0Jjemk4UnBUaDZhdm9maUpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9lMmE1NWMtYjVlNi00OTlhLWI3Mjkt
MWU1OGFjODc5MjRhLzEvcGF0NWhYNW93Q0Jjemk4UnBUaDZhdm9maUpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9lMmE1NWMtYjVlNi00OTlhLWI3MjktMWU1OGFjODc5MjRh
LzEvcGF0NWhYNW93Q0Jjemk4UnBUaDZhdm9maUpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUmZDkfN7
Jj8wc73M3J1+YMWhKuDLnwwbWzuqArRVd0dpTqGonvunMO8Y2BV8YbBtg8bDhtWx
sH6yAa2txB2abmK7faQ8N/FdZoQs4Rt3tZk/TpZjVplv3Qlz4T4dqlSQDICM2lyl
0iPjvJTFH65bbJH3sokSq0qw4eq+OGN0S9ZKyfLKTRcH9WQVaI9sHo4BmK3F2h6w
dzvbPYXqgcFXuJsvIV4kEhEhAC3tciNUD+E4/Irsgm2AronFYXoW4Su6zQlQu/D9
zS5ZwkSFMewul5FBDFLT1r9E8CFzb87Thc0VtXtCs4Bjq/CycJvD83tvw/6GA7gj
sFbSJCyt9qaZhw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:46:00 2025 by rpki-client