Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/c8e001-ada3-45bf-aa46-fd515681620c/1/pdroBcyUvdKfwnEHzWOwvSfJFNA.mft
File: pdroBcyUvdKfwnEHzWOwvSfJFNA.mft (raw, json)
Hash identifier: fjZDipm5FD6sNQkQ44t0oZsTk7IsZQK9ECU7A45Dqyk=
Subject key identifier: 60:98:ED:C8:E6:5D:1D:6F:60:69:F5:BD:52:D6:D5:0A:11:A9:18:57
Authority key identifier: A5:DA:E8:05:CC:94:BD:D2:9F:C2:71:07:CD:63:B0:BD:27:C9:14:D0
Certificate issuer: /CN=a5dae805cc94bdd29fc27107cd63b0bd27c914d0
Certificate serial: 0199FAD8094B7240F3A4DD06654A8661D73F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pdroBcyUvdKfwnEHzWOwvSfJFNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/c8e001-ada3-45bf-aa46-fd515681620c/1/pdroBcyUvdKfwnEHzWOwvSfJFNA.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 05:01:26 +0000
Manifest this update: Sun 19 Oct 2025 05:01:26 +0000
Manifest next update: Mon 20 Oct 2025 05:01:26 +0000
Files and hashes: 1: jRK4xjLjW0AS7WU026pDGWREkHo.roa (hash: ER6luwoElNhKf2QyVxJrryvA3AGyV4wY+yOa5rcowpY=)
2: pdroBcyUvdKfwnEHzWOwvSfJFNA.crl (hash: YeoUFxNqGuX+RaO5XGxZ/eglS/jsAezS7olGsLgOIkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/c8e001-ada3-45bf-aa46-fd515681620c/1/pdroBcyUvdKfwnEHzWOwvSfJFNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/c8e001-ada3-45bf-aa46-fd515681620c/1/pdroBcyUvdKfwnEHzWOwvSfJFNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pdroBcyUvdKfwnEHzWOwvSfJFNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:09:4b:72:40:f3:a4:dd:06:65:4a:86:61:d7:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5dae805cc94bdd29fc27107cd63b0bd27c914d0
Validity
Not Before: Oct 19 05:01:26 2025 GMT
Not After : Oct 20 05:01:26 2025 GMT
Subject: CN=6098edc8e65d1d6f6069f5bd52d6d50a11a91857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b1:5b:3e:65:45:e9:13:a8:d0:c1:31:35:48:
03:95:0f:82:f8:a3:d9:be:14:55:b6:e4:8c:e9:4f:
ac:31:98:e4:eb:6a:41:e4:ca:87:9f:5a:5d:13:20:
6c:37:7d:30:d9:d0:c9:ef:9d:7f:67:55:2d:a2:a8:
e3:6d:7d:21:f1:5d:98:c5:d6:5d:a0:32:81:58:f6:
a5:87:8d:d8:d1:63:78:fb:a9:38:ce:53:b3:12:0e:
0b:f6:bd:7a:50:da:3a:a8:d3:84:3c:35:78:43:ad:
db:10:9b:6e:5c:09:48:ca:ce:61:f8:c8:b6:30:9e:
a2:f4:69:e1:90:eb:ab:6a:4c:33:b6:b1:14:08:f8:
9c:4e:bc:72:89:f2:9d:7b:d0:ec:0b:ae:ec:3a:df:
7e:85:47:8d:ee:89:2d:14:39:12:da:1d:7c:54:31:
84:aa:6d:4c:82:6c:e2:da:3f:67:60:71:50:03:fb:
07:d5:29:aa:1f:b3:b7:0e:2a:90:a2:fd:44:24:c3:
e6:fb:c3:4c:71:7d:c2:62:c0:82:97:5c:cb:aa:66:
70:3a:0b:f1:07:1c:f5:96:d0:5c:cd:67:43:f8:9c:
d1:2b:d1:e7:3d:0a:7c:b0:f3:9d:77:14:08:16:8f:
63:39:b9:f9:5c:f6:1a:07:89:f6:98:f6:fd:01:ef:
cb:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:98:ED:C8:E6:5D:1D:6F:60:69:F5:BD:52:D6:D5:0A:11:A9:18:57
X509v3 Authority Key Identifier:
keyid:A5:DA:E8:05:CC:94:BD:D2:9F:C2:71:07:CD:63:B0:BD:27:C9:14:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pdroBcyUvdKfwnEHzWOwvSfJFNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c8e001-ada3-45bf-aa46-fd515681620c/1/pdroBcyUvdKfwnEHzWOwvSfJFNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c8e001-ada3-45bf-aa46-fd515681620c/1/pdroBcyUvdKfwnEHzWOwvSfJFNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:70:70:75:2f:e8:9c:ca:09:94:b2:12:39:f3:2d:70:2d:b9:
e0:7c:6f:05:c9:bf:72:3a:e8:af:40:f5:47:50:23:5f:1e:3b:
26:69:0b:51:f8:98:4d:8b:f3:4a:55:2c:70:6f:2c:40:5d:78:
1d:10:11:ce:3c:dd:13:58:22:7c:d1:5b:f1:4e:fc:6f:38:fc:
5d:f5:3b:46:12:07:4c:90:09:64:49:5d:7e:87:af:63:42:fa:
c3:5c:ed:37:ca:d9:b4:a6:ff:07:6a:ba:15:74:9e:c3:9b:40:
34:ce:80:f9:73:22:a3:b0:74:cc:60:52:0b:7e:ad:14:fb:05:
27:95:ec:30:32:75:56:af:0a:e2:4b:8c:8a:0e:5b:9a:30:91:
4b:89:6b:46:0d:a1:2c:ed:4c:2d:da:39:e9:aa:d2:65:65:78:
d7:c7:9e:27:52:2e:a1:81:e8:b5:26:a7:30:56:13:88:0b:28:
12:58:68:3f:1d:ed:77:f1:2c:ee:22:d2:ca:83:39:3f:8b:aa:
de:7b:b0:18:f7:08:80:3f:f2:a5:98:55:d9:58:5e:b4:7b:23:
2c:b9:de:61:fb:3f:d3:9c:d9:fd:79:68:c5:e9:1e:bf:64:6f:
3e:ca:2b:51:36:ff:03:57:82:48:31:c2:87:84:24:54:cc:78:
cf:78:03:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn62AlLckDzpN0GZUqGYdc/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1ZGFlODA1Y2M5NGJkZDI5ZmMyNzEwN2NkNjNiMGJkMjdj
OTE0ZDAwHhcNMjUxMDE5MDUwMTI2WhcNMjUxMDIwMDUwMTI2WjAzMTEwLwYDVQQD
Eyg2MDk4ZWRjOGU2NWQxZDZmNjA2OWY1YmQ1MmQ2ZDUwYTExYTkxODU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLFbPmVF6ROo0MExNUgDlQ+C+KPZ
vhRVtuSM6U+sMZjk62pB5MqHn1pdEyBsN30w2dDJ751/Z1UtoqjjbX0h8V2YxdZd
oDKBWPalh43Y0WN4+6k4zlOzEg4L9r16UNo6qNOEPDV4Q63bEJtuXAlIys5h+Mi2
MJ6i9GnhkOurakwztrEUCPicTrxyifKde9DsC67sOt9+hUeN7oktFDkS2h18VDGE
qm1Mgmzi2j9nYHFQA/sH1SmqH7O3DiqQov1EJMPm+8NMcX3CYsCCl1zLqmZwOgvx
Bxz1ltBczWdD+JzRK9HnPQp8sPOddxQIFo9jObn5XPYaB4n2mPb9Ae/LNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGCY7cjmXR1vYGn1vVLW1QoRqRhXMB8GA1UdIwQY
MBaAFKXa6AXMlL3Sn8JxB81jsL0nyRTQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGRyb0JjeVV2ZEtmd25FSHpXT3d2U2ZKRk5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9jOGUwMDEtYWRhMy00NWJmLWFhNDYt
ZmQ1MTU2ODE2MjBjLzEvcGRyb0JjeVV2ZEtmd25FSHpXT3d2U2ZKRk5BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC9jOGUwMDEtYWRhMy00NWJmLWFhNDYtZmQ1MTU2ODE2MjBj
LzEvcGRyb0JjeVV2ZEtmd25FSHpXT3d2U2ZKRk5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGHBwdS/o
nMoJlLISOfMtcC254HxvBcm/cjror0D1R1AjXx47JmkLUfiYTYvzSlUscG8sQF14
HRARzjzdE1gifNFb8U78bzj8XfU7RhIHTJAJZEldfoevY0L6w1ztN8rZtKb/B2q6
FXSew5tANM6A+XMio7B0zGBSC36tFPsFJ5XsMDJ1Vq8K4kuMig5bmjCRS4lrRg2h
LO1MLdo56arSZWV418eeJ1IuoYHotSanMFYTiAsoElhoPx3td/Es7iLSyoM5P4uq
3nuwGPcIgD/ypZhV2VhetHsjLLneYfs/05zZ/Xloxekev2RvPsorUTb/A1eCSDHC
h4QkVMx4z3gD/Q==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:11:02 2025 by rpki-client