Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/c8e001-ada3-45bf-aa46-fd515681620c/1/pdroBcyUvdKfwnEHzWOwvSfJFNA.mft
File: pdroBcyUvdKfwnEHzWOwvSfJFNA.mft (raw, json)
Hash identifier: wNzMFZDQxX5qJLnlX1+sIF/pESmqq7m/Wj2zDJIK970=
Subject key identifier: 2B:8F:F9:A6:47:CF:4F:22:BD:14:B1:97:66:9D:92:DE:94:41:6B:EF
Authority key identifier: A5:DA:E8:05:CC:94:BD:D2:9F:C2:71:07:CD:63:B0:BD:27:C9:14:D0
Certificate issuer: /CN=a5dae805cc94bdd29fc27107cd63b0bd27c914d0
Certificate serial: 019656131B9D747754306795EC34E3A5110E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pdroBcyUvdKfwnEHzWOwvSfJFNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/c8e001-ada3-45bf-aa46-fd515681620c/1/pdroBcyUvdKfwnEHzWOwvSfJFNA.mft
Manifest number: 14FC
Signing time: Mon 21 Apr 2025 02:00:14 +0000
Manifest this update: Mon 21 Apr 2025 02:00:14 +0000
Manifest next update: Tue 22 Apr 2025 02:00:14 +0000
Files and hashes: 1: jRK4xjLjW0AS7WU026pDGWREkHo.roa (hash: ER6luwoElNhKf2QyVxJrryvA3AGyV4wY+yOa5rcowpY=)
2: pdroBcyUvdKfwnEHzWOwvSfJFNA.crl (hash: l9dyF7Jf0acCjwwMfe0LAwANkcueoGPQ0sNQKQLITtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/c8e001-ada3-45bf-aa46-fd515681620c/1/pdroBcyUvdKfwnEHzWOwvSfJFNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/c8e001-ada3-45bf-aa46-fd515681620c/1/pdroBcyUvdKfwnEHzWOwvSfJFNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pdroBcyUvdKfwnEHzWOwvSfJFNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:13:1b:9d:74:77:54:30:67:95:ec:34:e3:a5:11:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5dae805cc94bdd29fc27107cd63b0bd27c914d0
Validity
Not Before: Apr 21 02:00:14 2025 GMT
Not After : Apr 22 02:00:14 2025 GMT
Subject: CN=2b8ff9a647cf4f22bd14b197669d92de94416bef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f6:05:ee:1c:63:d1:87:4b:80:b1:8f:e0:89:
67:03:6f:18:e3:9c:e2:ab:fe:dd:48:5b:0a:51:63:
13:d1:e9:3a:b0:3c:dd:5d:c6:b6:fb:8b:92:a6:ca:
f6:8c:a4:fe:93:fb:9f:85:6f:5c:13:bc:7c:7d:60:
5c:bf:98:5f:f5:40:3e:5e:42:0e:01:ba:66:1b:ae:
0d:ae:80:40:ec:d1:79:81:6d:3e:84:4a:7c:5b:a7:
b8:68:2c:ce:b6:b6:a2:4e:19:f4:ea:87:fb:33:34:
ee:e0:43:2c:c8:67:52:93:82:2c:24:bf:21:92:1a:
35:d4:f3:3d:20:49:1e:aa:38:b4:69:9e:a4:31:50:
b9:e0:45:58:86:de:ab:2d:8b:e9:be:7e:be:0c:9c:
bf:80:c3:df:f9:db:8c:04:be:55:89:67:e7:4a:ce:
86:c7:f7:bb:88:06:b1:b2:86:bb:ed:66:9a:d3:81:
45:14:02:23:77:bb:e0:3e:d8:63:11:44:eb:a1:48:
b8:01:cf:6f:54:d4:45:41:45:40:8f:5f:01:a1:bf:
8e:7a:69:68:d9:56:a0:94:76:2e:4d:ec:e8:f3:13:
92:aa:0f:24:1e:d8:14:d9:c0:20:0e:8c:ac:db:4b:
b2:39:48:ad:02:81:e6:64:35:03:ec:9a:3a:ff:43:
24:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:8F:F9:A6:47:CF:4F:22:BD:14:B1:97:66:9D:92:DE:94:41:6B:EF
X509v3 Authority Key Identifier:
keyid:A5:DA:E8:05:CC:94:BD:D2:9F:C2:71:07:CD:63:B0:BD:27:C9:14:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pdroBcyUvdKfwnEHzWOwvSfJFNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c8e001-ada3-45bf-aa46-fd515681620c/1/pdroBcyUvdKfwnEHzWOwvSfJFNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c8e001-ada3-45bf-aa46-fd515681620c/1/pdroBcyUvdKfwnEHzWOwvSfJFNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:5b:89:e7:04:2f:a1:f9:a6:9c:38:ad:7e:cf:8c:2b:72:f2:
d7:16:b8:92:3a:04:2a:ba:c8:dc:70:7b:18:68:bb:a8:48:af:
48:e9:b3:03:6d:a3:c0:7e:49:e6:50:b8:a9:e9:c4:b8:18:14:
51:8d:47:bf:7b:78:b1:fb:ef:40:41:50:50:4d:b9:16:7d:6b:
97:53:97:21:f7:ac:e6:a8:17:33:4b:7b:d6:99:6b:7d:a8:16:
44:77:94:f1:b7:58:59:a2:c7:7d:dd:3b:73:53:fe:31:a0:58:
88:dd:29:61:89:1a:1e:d6:5b:0c:54:44:65:cd:e9:dd:3e:61:
9e:1c:99:ed:af:b2:e1:27:8f:6e:d4:ad:75:64:73:33:40:6d:
4d:e9:02:85:e1:50:b4:03:b0:cc:9b:97:de:35:ef:76:e9:66:
f3:cc:b3:29:a6:70:a1:0a:b7:3a:04:3c:55:d0:54:7f:50:c2:
4d:5c:01:f2:01:ab:ae:52:4c:8e:f0:e4:7b:53:12:97:ba:cd:
96:9f:45:1a:e0:8c:98:6b:00:c2:a0:58:02:4f:8f:6f:f1:86:
0f:8f:01:a4:8f:ac:d1:73:67:55:94:a9:7a:b0:df:a9:84:81:
b0:19:a3:8f:1c:7a:55:a5:4e:f5:50:b5:b3:6c:bd:e0:42:2d:
97:85:01:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZWExuddHdUMGeV7DTjpREOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1ZGFlODA1Y2M5NGJkZDI5ZmMyNzEwN2NkNjNiMGJkMjdj
OTE0ZDAwHhcNMjUwNDIxMDIwMDE0WhcNMjUwNDIyMDIwMDE0WjAzMTEwLwYDVQQD
EygyYjhmZjlhNjQ3Y2Y0ZjIyYmQxNGIxOTc2NjlkOTJkZTk0NDE2YmVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfYF7hxj0YdLgLGP4IlnA28Y45zi
q/7dSFsKUWMT0ek6sDzdXca2+4uSpsr2jKT+k/ufhW9cE7x8fWBcv5hf9UA+XkIO
AbpmG64NroBA7NF5gW0+hEp8W6e4aCzOtraiThn06of7MzTu4EMsyGdSk4IsJL8h
kho11PM9IEkeqji0aZ6kMVC54EVYht6rLYvpvn6+DJy/gMPf+duMBL5ViWfnSs6G
x/e7iAaxsoa77Waa04FFFAIjd7vgPthjEUTroUi4Ac9vVNRFQUVAj18Bob+Oemlo
2VaglHYuTezo8xOSqg8kHtgU2cAgDoys20uyOUitAoHmZDUD7Jo6/0MkwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCuP+aZHz08ivRSxl2adkt6UQWvvMB8GA1UdIwQY
MBaAFKXa6AXMlL3Sn8JxB81jsL0nyRTQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGRyb0JjeVV2ZEtmd25FSHpXT3d2U2ZKRk5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9jOGUwMDEtYWRhMy00NWJmLWFhNDYt
ZmQ1MTU2ODE2MjBjLzEvcGRyb0JjeVV2ZEtmd25FSHpXT3d2U2ZKRk5BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC9jOGUwMDEtYWRhMy00NWJmLWFhNDYtZmQ1MTU2ODE2MjBj
LzEvcGRyb0JjeVV2ZEtmd25FSHpXT3d2U2ZKRk5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcVuJ5wQv
ofmmnDitfs+MK3Ly1xa4kjoEKrrI3HB7GGi7qEivSOmzA22jwH5J5lC4qenEuBgU
UY1Hv3t4sfvvQEFQUE25Fn1rl1OXIfes5qgXM0t71plrfagWRHeU8bdYWaLHfd07
c1P+MaBYiN0pYYkaHtZbDFREZc3p3T5hnhyZ7a+y4SePbtStdWRzM0BtTekCheFQ
tAOwzJuX3jXvdulm88yzKaZwoQq3OgQ8VdBUf1DCTVwB8gGrrlJMjvDke1MSl7rN
lp9FGuCMmGsAwqBYAk+Pb/GGD48BpI+s0XNnVZSperDfqYSBsBmjjxx6VaVO9VC1
s2y94EItl4UBsA==
-----END CERTIFICATE-----
Generated at Mon Apr 21 10:53:26 2025 by rpki-client