Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.mft
File: pdlU1tsqEXjvvsDV2VkHZAfPlso.mft (raw, json)
Hash identifier: mjGdOFMyom3XX3a7Cft4SYehvnRXq+nnLeBsNwtgMCk=
Subject key identifier: 8E:FC:BE:A9:E4:FB:C5:BA:28:89:BD:88:0C:B1:E8:2C:D2:7A:6E:33
Authority key identifier: A5:D9:54:D6:DB:2A:11:78:EF:BE:C0:D5:D9:59:07:64:07:CF:96:CA
Certificate issuer: /CN=a5d954d6db2a1178efbec0d5d959076407cf96ca
Certificate serial: 0196515B47D47A25FFF933CEFD453441B7D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pdlU1tsqEXjvvsDV2VkHZAfPlso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.mft
Manifest number: 079F
Signing time: Sun 20 Apr 2025 04:00:58 +0000
Manifest this update: Sun 20 Apr 2025 04:00:58 +0000
Manifest next update: Mon 21 Apr 2025 04:00:58 +0000
Files and hashes: 1: HfQcZUosYB38WUcoYIEz_7k83KM.roa (hash: /K2P6JpdfwjoEYHmwZLKE7XXSJIGLEcUy6J3vqVuO5E=)
2: pdlU1tsqEXjvvsDV2VkHZAfPlso.crl (hash: 2Juv39Gy+zivUberXwt2lHi4eLYoLyWdQ+r/Fo1zPG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.mft
rsync://rpki.ripe.net/repository/DEFAULT/pdlU1tsqEXjvvsDV2VkHZAfPlso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 04:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:5b:47:d4:7a:25:ff:f9:33:ce:fd:45:34:41:b7:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5d954d6db2a1178efbec0d5d959076407cf96ca
Validity
Not Before: Apr 20 04:00:58 2025 GMT
Not After : Apr 21 04:00:58 2025 GMT
Subject: CN=8efcbea9e4fbc5ba2889bd880cb1e82cd27a6e33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:4e:ca:e8:8b:2a:6f:c1:6a:d6:41:b2:6d:9d:
3e:d1:d6:4c:71:2f:42:1c:ba:86:37:2c:65:a1:cd:
b9:61:f8:db:84:02:26:1a:b2:79:d4:c5:8c:94:7f:
60:6c:c5:7d:c6:ce:07:a1:53:2b:0c:61:0c:a2:df:
9e:ea:5d:31:82:1e:f5:a4:c9:47:37:9a:fd:52:80:
74:03:eb:81:2c:17:9a:7a:c5:7c:8c:88:bb:68:eb:
30:96:f6:3c:7f:f9:18:8e:a8:41:b6:32:8e:14:91:
06:90:51:89:d4:38:a1:b8:8c:c5:8c:3e:13:df:ab:
8f:2c:b2:d7:5a:24:d2:3d:d0:f4:e5:3c:0b:42:bf:
cc:4a:b3:8f:25:db:ab:0c:36:c1:21:e1:57:a7:a0:
85:c9:25:ea:80:43:bc:5c:95:03:a2:ff:c5:7d:b2:
13:d4:b1:20:ac:8f:03:16:e6:d0:4f:0b:6b:01:e2:
af:1b:9b:01:8f:ce:b4:78:be:72:49:bf:4f:3c:4f:
a0:91:5c:d8:34:f2:e0:dd:20:32:24:51:31:d1:92:
4d:1d:7f:4d:cf:5a:15:41:9f:2f:0b:bd:d5:0c:e1:
33:1c:6d:0e:ba:13:21:be:a8:27:56:61:40:ad:8d:
e4:1f:d7:d4:0b:70:88:e4:5f:5b:56:fa:af:c0:55:
fc:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:FC:BE:A9:E4:FB:C5:BA:28:89:BD:88:0C:B1:E8:2C:D2:7A:6E:33
X509v3 Authority Key Identifier:
keyid:A5:D9:54:D6:DB:2A:11:78:EF:BE:C0:D5:D9:59:07:64:07:CF:96:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pdlU1tsqEXjvvsDV2VkHZAfPlso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:21:5c:9c:5d:93:ae:31:0a:b0:66:b5:92:df:30:95:a4:4b:
35:cd:fe:23:6a:ca:c8:2b:bf:27:a0:0d:77:ba:79:05:64:01:
8f:e4:a7:5c:04:c3:88:5c:85:4b:8a:9b:fb:28:a9:4e:96:6a:
fd:48:22:65:52:60:53:49:4c:c1:91:19:43:11:b5:fe:ee:aa:
cc:5b:72:ba:23:25:10:ea:bd:cb:ae:a2:ac:50:0c:dc:57:35:
fc:db:fa:46:d4:4f:42:d8:d4:71:2e:21:6d:11:3a:9e:de:6e:
3f:4f:d8:ea:13:53:90:36:ea:86:93:21:59:8d:35:35:a1:22:
4e:66:81:ea:b8:5a:e9:03:7d:b3:54:67:32:43:92:6b:70:d0:
c1:af:1b:f6:3c:53:45:b0:39:0e:ea:d4:4d:76:36:d6:67:56:
be:9f:0a:dd:dd:ca:dd:4c:91:55:b0:c9:06:d0:79:0c:35:90:
15:e7:79:50:34:25:af:5b:31:d0:a8:60:75:8c:28:36:e1:77:
b1:de:82:17:01:52:41:8c:99:f1:0b:16:cb:fa:65:82:29:0b:
70:7a:8a:4c:90:18:b6:59:03:af:84:2f:39:9a:64:72:e2:75:
be:ad:a0:1d:c4:b8:cd:c2:cd:95:48:40:0d:b9:5d:76:5c:18:
87:aa:58:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:11:06 2025 by rpki-client