Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.mft
File: pdlU1tsqEXjvvsDV2VkHZAfPlso.mft (raw, json)
Hash identifier: nQuLMOKEJRJF7rCYhP6df/Yi5jCamh2QMQJhQTkWOik=
Subject key identifier: 1B:25:95:12:0D:E7:AB:6E:49:16:D7:DC:6E:2E:CE:2D:B4:66:87:97
Authority key identifier: A5:D9:54:D6:DB:2A:11:78:EF:BE:C0:D5:D9:59:07:64:07:CF:96:CA
Certificate issuer: /CN=a5d954d6db2a1178efbec0d5d959076407cf96ca
Certificate serial: 01974A7B1669AB2006B79ACB115B64749422
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pdlU1tsqEXjvvsDV2VkHZAfPlso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.mft
Manifest number: 0820
Signing time: Sat 07 Jun 2025 13:01:10 +0000
Manifest this update: Sat 07 Jun 2025 13:01:10 +0000
Manifest next update: Sun 08 Jun 2025 13:01:10 +0000
Files and hashes: 1: HfQcZUosYB38WUcoYIEz_7k83KM.roa (hash: /K2P6JpdfwjoEYHmwZLKE7XXSJIGLEcUy6J3vqVuO5E=)
2: pdlU1tsqEXjvvsDV2VkHZAfPlso.crl (hash: bD64bwBs4c8Ovd4+U/3DGMA5MRNfWwNEzMK4Tvp7F8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.mft
rsync://rpki.ripe.net/repository/DEFAULT/pdlU1tsqEXjvvsDV2VkHZAfPlso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:16:69:ab:20:06:b7:9a:cb:11:5b:64:74:94:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5d954d6db2a1178efbec0d5d959076407cf96ca
Validity
Not Before: Jun 7 13:01:10 2025 GMT
Not After : Jun 8 13:01:10 2025 GMT
Subject: CN=1b2595120de7ab6e4916d7dc6e2ece2db4668797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:35:4d:e4:ca:d0:f7:2d:55:35:90:79:6b:ab:
29:3f:44:e8:4d:0a:fb:cf:37:a4:4f:a2:89:b8:81:
56:aa:44:75:e7:50:79:57:24:a5:12:86:5f:d7:09:
bc:2a:fc:6d:30:20:cc:c6:d2:f1:ee:cc:b0:58:2e:
d0:dd:e8:81:40:4d:6e:9f:e1:d7:f6:b4:92:fd:88:
c2:4d:66:32:48:c1:cc:cf:9c:b4:e5:b9:0d:0c:92:
39:c4:82:1a:08:f6:77:a0:cf:ce:aa:dc:c6:46:59:
61:9c:73:46:79:9b:45:27:c3:6b:41:37:6e:ae:eb:
d7:5e:31:95:a4:26:9c:76:01:02:2e:76:7a:19:bf:
b9:19:ac:cb:b3:d4:3d:1e:45:1b:e1:85:46:26:c7:
05:9e:28:aa:00:2a:8f:ad:de:56:83:e8:8f:f6:53:
c1:63:64:9b:77:a3:57:88:17:75:d0:bf:da:7b:9d:
52:55:38:e4:61:9e:a9:70:43:c8:b0:10:cd:a9:64:
76:d5:ef:4e:9a:34:d6:a3:2c:d0:31:b3:25:fb:2d:
81:72:17:67:9b:2e:2a:11:a1:05:3a:a2:d5:22:03:
f2:aa:2e:c6:6d:e3:c5:38:b7:1c:be:f5:b8:88:0d:
0b:78:9e:c0:52:1c:47:36:7c:f2:9c:94:e9:17:55:
21:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:25:95:12:0D:E7:AB:6E:49:16:D7:DC:6E:2E:CE:2D:B4:66:87:97
X509v3 Authority Key Identifier:
keyid:A5:D9:54:D6:DB:2A:11:78:EF:BE:C0:D5:D9:59:07:64:07:CF:96:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pdlU1tsqEXjvvsDV2VkHZAfPlso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:7a:f5:03:2e:db:4e:51:1d:01:8f:9a:ee:c9:80:b1:e3:f2:
b4:8e:b1:6f:8f:17:bd:67:8f:f9:65:c2:23:40:97:14:f8:76:
43:56:db:a9:f7:2d:30:fb:65:a6:33:4a:24:d6:95:e0:34:9c:
50:52:6e:83:67:b7:30:3e:72:98:b1:19:6b:5e:29:3f:e7:2d:
6d:e5:ba:f3:b8:9f:6c:0c:2a:dd:ff:c9:a6:93:39:da:60:c2:
b8:3b:b1:8e:87:ff:52:f4:7e:a8:d5:a8:6a:be:96:c1:bb:ab:
d3:de:dc:a3:f6:db:af:2b:bb:d9:ab:04:d3:ef:64:b5:6f:fc:
e7:eb:a6:35:6c:cc:a5:52:e9:3d:e6:77:ee:be:b5:5d:db:55:
55:7d:f4:7f:63:3a:39:35:8a:58:1e:69:05:ec:1d:bc:19:e8:
84:7f:40:6c:df:5e:56:47:3d:6c:9a:b6:e8:74:c5:0e:ba:cc:
89:1e:3f:15:ca:0c:55:7d:17:c6:1b:41:2d:d6:31:02:41:f2:
f0:0b:91:3a:42:77:9e:f9:05:11:1c:0c:bc:49:a3:93:e0:b8:
84:b4:d1:93:22:fd:41:b3:97:1b:47:af:e0:a6:1e:70:00:a1:
33:d3:5b:e8:38:bd:f2:75:c0:39:fa:d4:54:14:fe:dc:3f:84:
7a:24:08:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:32:39 2025 by rpki-client