Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.mft
File: pdlU1tsqEXjvvsDV2VkHZAfPlso.mft (raw, json)
Hash identifier: Pr6KaKwgVowwHt/w6HTFvnhGIyzv0GfloQmLLJPAB64=
Subject key identifier: 5A:BD:FC:24:43:C0:BB:ED:78:01:80:61:BE:8A:75:30:40:9F:3B:38
Authority key identifier: A5:D9:54:D6:DB:2A:11:78:EF:BE:C0:D5:D9:59:07:64:07:CF:96:CA
Certificate issuer: /CN=a5d954d6db2a1178efbec0d5d959076407cf96ca
Certificate serial: 0198439B40A6569DE50CCB5B5631AFFDA094
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pdlU1tsqEXjvvsDV2VkHZAfPlso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.mft
Manifest number: 08A1
Signing time: Fri 25 Jul 2025 22:01:44 +0000
Manifest this update: Fri 25 Jul 2025 22:01:44 +0000
Manifest next update: Sat 26 Jul 2025 22:01:44 +0000
Files and hashes: 1: HfQcZUosYB38WUcoYIEz_7k83KM.roa (hash: /K2P6JpdfwjoEYHmwZLKE7XXSJIGLEcUy6J3vqVuO5E=)
2: pdlU1tsqEXjvvsDV2VkHZAfPlso.crl (hash: AMMN0GUA1TKVLZHXP2cp2U2PDEP9doMWL7q8xgEhG3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.mft
rsync://rpki.ripe.net/repository/DEFAULT/pdlU1tsqEXjvvsDV2VkHZAfPlso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 21:50:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:43:9b:40:a6:56:9d:e5:0c:cb:5b:56:31:af:fd:a0:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5d954d6db2a1178efbec0d5d959076407cf96ca
Validity
Not Before: Jul 25 22:01:44 2025 GMT
Not After : Jul 26 22:01:44 2025 GMT
Subject: CN=5abdfc2443c0bbed78018061be8a7530409f3b38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ec:e2:85:d1:b8:f6:f1:05:c1:35:45:fd:5a:
32:c6:6d:61:b4:19:3e:a9:ae:6d:03:07:b5:6a:b0:
12:4d:2e:6b:25:36:79:79:f8:fc:18:d6:79:44:7d:
69:19:52:a9:84:cc:5b:fb:41:e2:c0:0a:84:9c:5a:
a3:51:da:84:22:bd:62:46:0d:48:0e:93:01:56:cc:
64:0a:d1:c9:a5:86:2d:2e:53:4e:1e:b3:66:f0:93:
b2:e6:ca:36:78:0d:d0:eb:ed:bd:ca:7a:77:17:00:
3b:f6:c9:d6:54:e3:9a:4a:2e:8e:a7:ba:43:b6:49:
b2:9c:b7:cb:56:88:89:b7:f6:c2:2b:14:f1:30:cf:
ff:2b:ea:b6:1b:a1:9f:38:73:1c:1f:57:31:5d:60:
a4:7a:76:cc:d2:99:11:c8:18:9a:0d:d1:bf:df:84:
d9:19:53:f2:f7:f3:01:81:a5:f5:d2:00:e9:91:d6:
98:be:c4:b0:5b:92:d0:4e:30:69:f9:7a:b9:b1:01:
ec:15:94:e6:3b:f2:61:5b:ea:01:54:17:5e:e2:a9:
f5:68:94:dd:29:50:c4:4b:2a:98:0d:60:d4:49:15:
83:9c:84:a8:b6:7b:02:2e:8e:6d:a9:e3:53:ab:6d:
41:4c:40:50:14:a0:a6:7b:ce:f8:2e:3d:67:13:9f:
c8:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:BD:FC:24:43:C0:BB:ED:78:01:80:61:BE:8A:75:30:40:9F:3B:38
X509v3 Authority Key Identifier:
keyid:A5:D9:54:D6:DB:2A:11:78:EF:BE:C0:D5:D9:59:07:64:07:CF:96:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pdlU1tsqEXjvvsDV2VkHZAfPlso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:6c:ef:b8:2d:e6:dd:2a:ee:e0:1c:a7:0c:61:3d:0a:c9:a9:
ff:76:d5:0c:65:cb:15:8f:d4:8e:fd:63:a7:bc:48:16:45:7d:
d0:51:12:4d:f0:90:ce:d6:e1:c4:a1:7e:dc:7a:1a:86:1d:33:
58:d6:70:68:84:f1:44:c4:74:d9:23:ba:91:93:18:d5:3c:42:
1f:d3:e1:a2:8b:e2:17:8b:b5:ce:f2:1d:96:ce:cd:42:51:bb:
10:15:e5:aa:48:a2:3f:11:64:1a:5a:80:a8:f4:5d:0e:9c:d8:
42:d9:6a:fb:90:a5:d8:5c:24:39:5e:6d:98:23:f4:66:4a:2f:
e9:5e:38:c5:72:25:19:0d:b7:bc:c4:f4:c5:f3:f1:b3:3c:8d:
38:3a:21:af:2e:d6:29:71:ed:6a:13:41:6f:7d:8e:91:2a:bc:
e8:39:3b:09:7a:0f:1b:ad:d6:8e:75:f4:70:02:85:02:24:9b:
8b:09:66:1a:be:61:bd:35:ba:b0:d4:df:bf:70:c8:18:d1:fa:
9b:44:4b:9d:00:cc:17:ff:e5:52:5a:3b:d7:bd:87:01:87:9e:
40:ab:39:3c:15:5d:b0:66:82:7e:1f:f5:a1:69:20:4d:e9:48:
6c:77:9b:c8:89:10:c2:7f:f4:82:c6:6a:b5:b6:b3:ea:73:16:
98:2f:6d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 06:33:19 2025 by rpki-client