Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.mft
File: pat5hX5owCBczi8RpTh6avofiJU.mft (raw, json)
Hash identifier: Xc5V1rpmXDB3rbV9yiXEMTqTFWPjCZxOwyOn4YeqomQ=
Subject key identifier: A4:DB:83:44:B1:91:69:B9:65:0C:B6:13:AC:21:B4:08:99:32:44:60
Authority key identifier: A5:AB:79:85:7E:68:C0:20:5C:CE:2F:11:A5:38:7A:6A:FA:1F:88:95
Certificate issuer: /CN=a5ab79857e68c0205cce2f11a5387a6afa1f8895
Certificate serial: 01989449006CC1342CE81D5F32185546D22E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pat5hX5owCBczi8RpTh6avofiJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.mft
Manifest number: 162B
Signing time: Sun 10 Aug 2025 14:01:08 +0000
Manifest this update: Sun 10 Aug 2025 14:01:08 +0000
Manifest next update: Mon 11 Aug 2025 14:01:08 +0000
Files and hashes: 1: RJc6jzAyS3uWboc6tEy0sbhbczk.roa (hash: Tl0N+n4FID6GW+L+lL7UDQWc6s/Qw80QVfgROFxq4Tw=)
2: lGQ5oAC4DvbrVczVYtetvVMraGI.roa (hash: RPF4xGL/jJtG/0h2vD9Z4Pt0zkSh8uypUluux6hYGEQ=)
3: pat5hX5owCBczi8RpTh6avofiJU.crl (hash: gVAwH5ec7YmiRN3afSDKNM3M+4xTqnTPg6zz/lOFX2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pat5hX5owCBczi8RpTh6avofiJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 14:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:49:00:6c:c1:34:2c:e8:1d:5f:32:18:55:46:d2:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5ab79857e68c0205cce2f11a5387a6afa1f8895
Validity
Not Before: Aug 10 14:01:08 2025 GMT
Not After : Aug 11 14:01:08 2025 GMT
Subject: CN=a4db8344b19169b9650cb613ac21b40899324460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:04:e9:f2:94:88:f2:da:d3:14:ea:08:ce:84:
8a:ad:85:dc:6c:28:1c:6f:15:ed:b3:76:9e:74:e4:
e1:27:b5:c7:90:5e:c2:c0:c2:a1:73:a6:6b:59:3d:
d3:78:6c:89:6b:a7:75:1c:0b:c2:90:58:42:16:6d:
b3:a2:1c:7a:6a:7c:6f:5d:a6:b4:14:5e:0e:47:1e:
40:d4:0d:fe:3e:8f:f1:dd:2e:2a:7a:47:c4:41:01:
e0:51:da:99:52:d3:ee:ba:ea:2a:54:68:c8:7b:1f:
9e:51:ef:6e:35:4f:bc:a2:b3:e0:96:3b:47:ca:a2:
ad:04:1d:f2:36:d1:be:c6:88:4a:08:cc:ac:52:77:
b4:82:7a:3c:28:7c:82:87:6a:cc:98:0a:74:ff:d8:
ca:c6:0b:c8:77:53:8a:55:3a:a5:18:50:b0:9c:87:
dc:10:b5:6c:0a:5b:06:b3:ee:f6:07:5a:31:20:f5:
25:ba:99:12:76:b5:6f:aa:7f:b0:14:93:d8:6f:55:
1e:b2:84:3b:19:67:3c:8b:ab:3b:ef:a1:04:fb:71:
fe:b7:4e:5b:40:94:ea:6e:eb:f7:0a:93:ec:28:32:
b1:ee:98:3b:a7:16:67:92:7c:7f:33:97:30:43:ac:
b2:73:f8:9f:98:57:82:51:ef:a8:9a:c4:83:fe:4e:
06:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:DB:83:44:B1:91:69:B9:65:0C:B6:13:AC:21:B4:08:99:32:44:60
X509v3 Authority Key Identifier:
keyid:A5:AB:79:85:7E:68:C0:20:5C:CE:2F:11:A5:38:7A:6A:FA:1F:88:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pat5hX5owCBczi8RpTh6avofiJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:e8:7e:56:a7:45:3a:8c:2f:81:e3:19:74:a5:fd:ee:df:c0:
45:1a:b4:b3:5f:09:9a:1d:c2:b6:c3:75:0f:29:d0:eb:90:7d:
6a:dc:c8:66:8c:21:bd:6d:b9:84:c3:1f:4f:e1:a1:45:a2:51:
b1:57:ce:54:7a:52:46:2b:49:29:5e:36:78:44:5e:47:9f:ab:
96:0c:b5:3e:73:45:6e:2b:02:79:56:07:5b:eb:0f:1c:ad:fb:
ea:68:c3:d0:69:34:98:77:ae:4d:25:ab:cb:86:32:e1:35:2f:
0b:d1:45:28:db:3b:11:b4:e9:9a:ab:b5:e1:26:78:cd:ce:ff:
3b:d9:ac:e1:5d:e7:7c:30:11:43:4f:59:7d:12:24:fd:ef:41:
12:a2:d9:20:1f:f1:74:42:fa:f9:fc:c4:8a:2b:fb:db:52:6c:
e9:98:e8:2d:1c:1f:2a:2d:a0:61:b4:fe:43:d0:77:e9:19:dd:
e9:c9:d7:d3:79:ef:a5:7f:b0:56:11:c5:47:e8:43:f7:97:78:
b9:4a:7a:7c:46:d4:f6:46:bd:d8:fc:e5:79:58:6c:30:93:4d:
23:40:1e:b7:89:66:ab:73:fc:3e:7b:19:75:2d:a6:2b:01:16:
b6:09:2c:ad:eb:79:75:96:32:a5:2c:8c:30:9d:74:d4:48:51:
19:e9:f7:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 21:00:27 2025 by rpki-client