Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.mft
File: pdCLMVCtNN4riFkhdBkkCDlvEfs.mft (raw, json)
Hash identifier: irOrguYBTGXCYeFjSXeA3ljkovPDlTnLe8jgc2+pfAA=
Subject key identifier: 2C:58:96:93:D6:13:CD:3F:97:71:C7:AD:AE:DA:49:35:DD:20:9B:06
Authority key identifier: A5:D0:8B:31:50:AD:34:DE:2B:88:59:21:74:19:24:08:39:6F:11:FB
Certificate issuer: /CN=a5d08b3150ad34de2b88592174192408396f11fb
Certificate serial: 0197470C34F6EB9F8DB6B4EA54F1E785C1EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pdCLMVCtNN4riFkhdBkkCDlvEfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.mft
Manifest number: 157B
Signing time: Fri 06 Jun 2025 21:01:11 +0000
Manifest this update: Fri 06 Jun 2025 21:01:11 +0000
Manifest next update: Sat 07 Jun 2025 21:01:11 +0000
Files and hashes: 1: bY2tBQ51YL8a-pcphuYuVQz7bOg.roa (hash: FnAC9AE4W5+r++w2y10UXXpTgultC6LrjOa8S41rhns=)
2: pdCLMVCtNN4riFkhdBkkCDlvEfs.crl (hash: ZlYLVMnsfrcoVMlEdM2PYTPw39v6CkD8UNmRcyq8t2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pdCLMVCtNN4riFkhdBkkCDlvEfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0c:34:f6:eb:9f:8d:b6:b4:ea:54:f1:e7:85:c1:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5d08b3150ad34de2b88592174192408396f11fb
Validity
Not Before: Jun 6 21:01:11 2025 GMT
Not After : Jun 7 21:01:11 2025 GMT
Subject: CN=2c589693d613cd3f9771c7adaeda4935dd209b06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:f9:fc:25:4f:16:53:06:c1:22:89:b1:0e:0c:
c4:8b:f5:e9:a6:96:4c:c1:c2:b6:c3:11:70:cf:87:
bd:48:25:fb:8c:4e:9f:1d:b0:ac:0c:80:ba:08:1a:
c4:91:4f:fa:73:ab:a6:8f:0f:14:5d:2e:a8:21:7a:
94:d9:67:f6:34:18:7d:23:df:fa:fd:75:b7:84:ff:
0f:0b:c8:80:99:95:e4:61:8a:df:a5:39:90:fd:bc:
03:1c:9e:82:f9:b6:cb:9c:05:8c:8d:75:58:9c:28:
db:23:04:b4:42:1d:e0:63:d9:65:54:12:ec:d2:5e:
4a:06:68:11:89:c1:7c:64:ea:cf:80:af:dc:2b:28:
8f:00:35:7c:3f:c2:20:61:cf:76:5e:7a:c2:98:27:
52:6e:77:47:1f:ab:69:d9:28:44:bd:8f:be:12:bf:
5d:16:cc:ca:1e:c6:be:f6:be:a4:5a:1d:c2:9b:0b:
2a:45:ff:ab:64:6b:d1:f3:45:d9:43:ea:b7:55:b8:
a3:34:a1:ed:48:02:53:67:d3:86:44:78:d5:67:8e:
6d:1a:42:c7:58:bd:ca:d7:b6:3f:04:45:85:21:04:
cf:d2:04:c3:bb:45:41:e3:0e:55:cf:b0:77:0e:58:
4a:41:c7:87:9a:d2:87:df:86:66:2b:35:06:94:79:
ab:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:58:96:93:D6:13:CD:3F:97:71:C7:AD:AE:DA:49:35:DD:20:9B:06
X509v3 Authority Key Identifier:
keyid:A5:D0:8B:31:50:AD:34:DE:2B:88:59:21:74:19:24:08:39:6F:11:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pdCLMVCtNN4riFkhdBkkCDlvEfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:34:bb:9a:8f:02:23:2d:49:3b:ac:65:5c:e2:8f:f3:df:8a:
e8:15:89:0a:9c:a0:95:5f:c2:4f:e0:74:be:9a:b7:1f:f7:ea:
eb:bb:22:31:8d:c7:5d:89:d4:41:f1:10:dd:37:f3:46:51:4d:
7a:ac:65:e0:9d:4e:f7:23:91:49:69:d1:07:bb:33:bd:66:42:
49:60:20:88:23:57:b3:f6:fa:d6:04:09:0b:83:e3:40:bc:33:
27:ec:70:1c:d5:58:d0:91:59:78:21:39:89:3d:04:6e:d0:97:
c4:c5:b1:e7:82:fa:3c:22:a9:7e:d4:18:b7:36:70:7c:44:f0:
d6:06:04:61:80:86:dc:fb:14:02:8b:db:95:22:68:28:58:b4:
0c:a2:3e:61:4e:66:6d:e4:8e:cb:72:d5:4c:a7:f3:85:41:f9:
f3:41:31:6c:80:c1:22:ba:fd:da:b2:1a:bb:b1:e1:58:53:7d:
74:f0:01:52:17:8a:07:ac:14:f6:2a:4a:05:29:ea:4c:9f:cc:
53:8d:aa:46:28:37:02:d3:12:68:dc:06:d8:73:2d:07:69:9c:
12:e7:65:8f:ad:ec:49:c2:e3:3b:08:07:8b:85:8b:b9:61:4a:
6d:08:01:e2:8c:6d:20:10:21:da:56:db:51:aa:07:9c:b1:98:
96:a7:9f:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:02:00 2025 by rpki-client