Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/c8e001-ada3-45bf-aa46-fd515681620c/1/pdroBcyUvdKfwnEHzWOwvSfJFNA.mft
File: pdroBcyUvdKfwnEHzWOwvSfJFNA.mft (raw, json)
Hash identifier: t7IBrrqZvqGWOJLHiqZc1ysYLq5BK0YxGVzb5FcdBU8=
Subject key identifier: 37:50:35:49:A8:97:8F:17:31:2E:D9:DB:E9:03:63:75:CA:87:49:CD
Authority key identifier: A5:DA:E8:05:CC:94:BD:D2:9F:C2:71:07:CD:63:B0:BD:27:C9:14:D0
Certificate issuer: /CN=a5dae805cc94bdd29fc27107cd63b0bd27c914d0
Certificate serial: 0196BC6E1964A82AE92056780AB9EA8B2D10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pdroBcyUvdKfwnEHzWOwvSfJFNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/c8e001-ada3-45bf-aa46-fd515681620c/1/pdroBcyUvdKfwnEHzWOwvSfJFNA.mft
Manifest number: 1531
Signing time: Sat 10 May 2025 23:00:53 +0000
Manifest this update: Sat 10 May 2025 23:00:53 +0000
Manifest next update: Sun 11 May 2025 23:00:53 +0000
Files and hashes: 1: jRK4xjLjW0AS7WU026pDGWREkHo.roa (hash: ER6luwoElNhKf2QyVxJrryvA3AGyV4wY+yOa5rcowpY=)
2: pdroBcyUvdKfwnEHzWOwvSfJFNA.crl (hash: pHDb6fwCb7KhqJav8cj0bYg+s+lSNG9lkIbLLLeKqSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/c8e001-ada3-45bf-aa46-fd515681620c/1/pdroBcyUvdKfwnEHzWOwvSfJFNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/c8e001-ada3-45bf-aa46-fd515681620c/1/pdroBcyUvdKfwnEHzWOwvSfJFNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pdroBcyUvdKfwnEHzWOwvSfJFNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:6e:19:64:a8:2a:e9:20:56:78:0a:b9:ea:8b:2d:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5dae805cc94bdd29fc27107cd63b0bd27c914d0
Validity
Not Before: May 10 23:00:53 2025 GMT
Not After : May 11 23:00:53 2025 GMT
Subject: CN=37503549a8978f17312ed9dbe9036375ca8749cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:11:07:65:05:42:27:cf:7a:aa:c5:34:6e:2c:
36:10:3b:5b:98:6a:06:e0:2a:74:30:b6:82:39:f5:
95:62:3f:1f:72:ac:78:66:27:61:63:cd:98:24:ce:
c9:e7:0d:cf:2c:9a:0d:ad:8f:1e:6f:cd:1c:2c:f1:
4c:f7:12:93:d8:b5:08:1b:d4:f7:6b:ce:c7:81:df:
8c:19:02:4d:27:03:f2:67:f7:7b:81:1c:d2:a2:0f:
38:c5:99:1a:0b:bf:ae:99:28:e6:d7:5c:e9:21:e2:
59:94:78:17:23:8e:fc:8d:61:3e:d8:f0:f4:ce:5a:
27:8d:72:9c:af:2e:2c:bc:0f:85:04:1c:17:7e:96:
c1:28:7d:93:b5:f3:87:d1:20:32:b4:0d:f3:d8:64:
7b:55:d5:e5:79:d7:7d:fd:22:ba:12:eb:ff:0b:7c:
eb:c2:82:34:0d:cd:3e:1a:b4:ed:ca:31:f3:f1:78:
4a:b8:3a:0a:3a:86:3d:90:32:f7:af:44:e2:ab:2c:
48:c7:e9:35:71:77:05:5c:eb:64:e7:3a:e3:bc:47:
6d:83:62:f7:2e:20:f4:0d:e0:5a:cb:7e:a0:31:e9:
72:8a:96:89:12:b4:c8:d8:4c:a3:78:66:80:70:30:
f3:b3:f8:99:94:f0:cd:52:10:38:29:da:07:c4:44:
e8:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:50:35:49:A8:97:8F:17:31:2E:D9:DB:E9:03:63:75:CA:87:49:CD
X509v3 Authority Key Identifier:
keyid:A5:DA:E8:05:CC:94:BD:D2:9F:C2:71:07:CD:63:B0:BD:27:C9:14:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pdroBcyUvdKfwnEHzWOwvSfJFNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c8e001-ada3-45bf-aa46-fd515681620c/1/pdroBcyUvdKfwnEHzWOwvSfJFNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c8e001-ada3-45bf-aa46-fd515681620c/1/pdroBcyUvdKfwnEHzWOwvSfJFNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:a8:09:fb:06:72:96:4c:28:0c:92:06:37:f4:92:55:00:c2:
15:4a:70:1a:75:a8:71:25:1a:fe:0e:e2:1b:80:2f:15:7e:a6:
8a:be:e7:c4:0c:e6:ac:3b:d2:72:11:e8:69:7a:23:3f:a7:0f:
07:30:a3:b2:7a:2b:38:55:0d:b1:69:96:0d:41:09:d6:c5:d8:
78:7d:0f:40:33:28:ce:1b:2c:4f:d1:84:c1:b2:83:4f:d8:23:
50:53:08:3e:eb:3d:18:a9:4e:32:8e:d4:86:94:e4:d9:a4:48:
9c:ca:e8:8a:90:28:69:af:ca:69:6e:76:89:1b:3e:c2:fe:3f:
ba:b9:a0:69:d8:c4:44:11:eb:97:68:ae:09:ef:97:31:b1:20:
69:8a:07:e9:05:60:4e:aa:f4:9b:60:89:6c:97:85:53:88:e7:
cb:8d:b9:19:e7:a2:62:b4:41:0d:2b:d1:5a:de:e4:c7:89:55:
d7:e8:82:0b:24:b4:5c:9b:a5:56:58:fb:3a:e9:20:04:fb:5d:
16:64:07:ef:d5:e0:9f:ae:ec:a4:b7:f5:17:bf:3f:e2:6a:c8:
07:67:07:f9:f0:df:29:53:5b:89:97:81:21:91:db:24:06:51:
7e:02:47:f5:3b:fc:37:58:9b:12:8e:93:7c:70:32:5c:55:4a:
1d:c2:6d:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa8bhlkqCrpIFZ4Crnqiy0QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1ZGFlODA1Y2M5NGJkZDI5ZmMyNzEwN2NkNjNiMGJkMjdj
OTE0ZDAwHhcNMjUwNTEwMjMwMDUzWhcNMjUwNTExMjMwMDUzWjAzMTEwLwYDVQQD
EygzNzUwMzU0OWE4OTc4ZjE3MzEyZWQ5ZGJlOTAzNjM3NWNhODc0OWNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyxEHZQVCJ896qsU0biw2EDtbmGoG
4Cp0MLaCOfWVYj8fcqx4ZidhY82YJM7J5w3PLJoNrY8eb80cLPFM9xKT2LUIG9T3
a87Hgd+MGQJNJwPyZ/d7gRzSog84xZkaC7+umSjm11zpIeJZlHgXI478jWE+2PD0
zlonjXKcry4svA+FBBwXfpbBKH2TtfOH0SAytA3z2GR7VdXledd9/SK6Euv/C3zr
woI0Dc0+GrTtyjHz8XhKuDoKOoY9kDL3r0TiqyxIx+k1cXcFXOtk5zrjvEdtg2L3
LiD0DeBay36gMelyipaJErTI2EyjeGaAcDDzs/iZlPDNUhA4KdoHxETo/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDdQNUmol48XMS7Z2+kDY3XKh0nNMB8GA1UdIwQY
MBaAFKXa6AXMlL3Sn8JxB81jsL0nyRTQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGRyb0JjeVV2ZEtmd25FSHpXT3d2U2ZKRk5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9jOGUwMDEtYWRhMy00NWJmLWFhNDYt
ZmQ1MTU2ODE2MjBjLzEvcGRyb0JjeVV2ZEtmd25FSHpXT3d2U2ZKRk5BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC9jOGUwMDEtYWRhMy00NWJmLWFhNDYtZmQ1MTU2ODE2MjBj
LzEvcGRyb0JjeVV2ZEtmd25FSHpXT3d2U2ZKRk5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf6gJ+wZy
lkwoDJIGN/SSVQDCFUpwGnWocSUa/g7iG4AvFX6mir7nxAzmrDvSchHoaXojP6cP
BzCjsnorOFUNsWmWDUEJ1sXYeH0PQDMozhssT9GEwbKDT9gjUFMIPus9GKlOMo7U
hpTk2aRInMroipAoaa/KaW52iRs+wv4/urmgadjERBHrl2iuCe+XMbEgaYoH6QVg
Tqr0m2CJbJeFU4jny425GeeiYrRBDSvRWt7kx4lV1+iCCyS0XJulVlj7OukgBPtd
FmQH79Xgn67spLf1F78/4mrIB2cH+fDfKVNbiZeBIZHbJAZRfgJH9Tv8N1ibEo6T
fHAyXFVKHcJtVA==
-----END CERTIFICATE-----
Generated at Sun May 11 09:24:43 2025 by rpki-client