Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/c8e001-ada3-45bf-aa46-fd515681620c/1/pdroBcyUvdKfwnEHzWOwvSfJFNA.mft
File: pdroBcyUvdKfwnEHzWOwvSfJFNA.mft (raw, json)
Hash identifier: rSvXHTSo+zXyYYWfJu2PRaHMeyvdYtz2scjixEIX27o=
Subject key identifier: 7A:7F:48:D4:D0:44:A6:7F:C7:CC:88:63:B2:67:8C:7F:F8:0B:E6:89
Authority key identifier: A5:DA:E8:05:CC:94:BD:D2:9F:C2:71:07:CD:63:B0:BD:27:C9:14:D0
Certificate issuer: /CN=a5dae805cc94bdd29fc27107cd63b0bd27c914d0
Certificate serial: 0198D54E98033283C7EA488B51F2912FFC1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pdroBcyUvdKfwnEHzWOwvSfJFNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/c8e001-ada3-45bf-aa46-fd515681620c/1/pdroBcyUvdKfwnEHzWOwvSfJFNA.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 05:02:34 +0000
Manifest this update: Sat 23 Aug 2025 05:02:34 +0000
Manifest next update: Sun 24 Aug 2025 05:02:34 +0000
Files and hashes: 1: jRK4xjLjW0AS7WU026pDGWREkHo.roa (hash: ER6luwoElNhKf2QyVxJrryvA3AGyV4wY+yOa5rcowpY=)
2: pdroBcyUvdKfwnEHzWOwvSfJFNA.crl (hash: hTD8/jQ+s5DY/xp3czJ4p8kvHFbKzepeDwPF4jP8JnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/c8e001-ada3-45bf-aa46-fd515681620c/1/pdroBcyUvdKfwnEHzWOwvSfJFNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/c8e001-ada3-45bf-aa46-fd515681620c/1/pdroBcyUvdKfwnEHzWOwvSfJFNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pdroBcyUvdKfwnEHzWOwvSfJFNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:98:03:32:83:c7:ea:48:8b:51:f2:91:2f:fc:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5dae805cc94bdd29fc27107cd63b0bd27c914d0
Validity
Not Before: Aug 23 05:02:34 2025 GMT
Not After : Aug 24 05:02:34 2025 GMT
Subject: CN=7a7f48d4d044a67fc7cc8863b2678c7ff80be689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:80:ac:d9:2b:fc:f7:df:b5:b0:9b:d5:0f:95:
c9:a9:dd:d5:66:bc:79:00:74:28:b5:b3:17:b7:50:
cf:ce:46:75:b3:dc:68:5f:98:5b:92:b7:bc:a4:2c:
48:23:d0:6a:78:7b:da:5d:66:ba:bc:e8:35:f0:6f:
dc:76:ac:72:7b:ef:fe:53:33:27:1d:3a:fe:8a:f7:
86:85:9b:4c:22:3b:e1:1e:1d:3f:5e:44:99:09:8d:
cb:eb:ef:f8:59:7d:06:ea:8c:0f:7c:85:67:56:12:
ee:0b:a6:c8:c7:00:9b:f5:c5:22:b6:52:b1:c5:b4:
ff:8a:d6:57:ac:39:5e:37:28:57:50:fa:c3:05:cd:
3a:31:ca:38:af:65:32:96:d9:fb:5b:64:ea:57:44:
c8:ba:00:af:88:29:db:96:0d:b9:f1:a3:33:e7:84:
70:45:3b:d7:d9:00:0c:38:85:a7:69:59:69:bf:6a:
a4:fd:ae:51:30:80:fc:dd:11:ae:4e:c9:12:f1:62:
12:a4:c1:9c:d9:9e:74:21:65:ed:1e:2f:10:35:df:
d6:03:e9:fb:36:3e:38:43:a0:02:88:87:ff:aa:ba:
c6:c9:34:86:0d:d8:85:3c:49:1d:e8:70:11:1d:a2:
ab:4e:65:ec:ff:aa:19:7c:b8:4a:86:f2:94:23:0a:
36:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:7F:48:D4:D0:44:A6:7F:C7:CC:88:63:B2:67:8C:7F:F8:0B:E6:89
X509v3 Authority Key Identifier:
keyid:A5:DA:E8:05:CC:94:BD:D2:9F:C2:71:07:CD:63:B0:BD:27:C9:14:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pdroBcyUvdKfwnEHzWOwvSfJFNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c8e001-ada3-45bf-aa46-fd515681620c/1/pdroBcyUvdKfwnEHzWOwvSfJFNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c8e001-ada3-45bf-aa46-fd515681620c/1/pdroBcyUvdKfwnEHzWOwvSfJFNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:64:d3:a2:b5:95:22:e1:f2:22:08:b8:d1:61:73:f7:c7:04:
f9:dc:43:ee:45:25:cb:0d:18:ee:56:70:4a:03:d9:71:ad:9c:
d1:00:29:55:60:26:58:f7:e7:9b:24:a0:02:df:16:e9:af:42:
3e:05:57:ad:92:fc:36:ad:1f:39:4e:be:a6:35:6c:46:ac:df:
6a:24:8a:75:7e:ac:7c:d0:62:80:82:91:45:8a:c9:12:88:ad:
b5:5b:9c:14:46:0c:13:8e:6a:f3:79:a7:e4:e4:3b:af:b3:c9:
57:3a:bc:bc:65:dd:0c:55:64:9c:98:af:72:c1:5f:62:17:b8:
70:2c:36:22:f0:76:9f:01:fa:64:35:3d:7d:f5:b1:1b:6d:fc:
59:69:22:28:c1:5f:b8:15:2a:01:24:34:34:03:44:aa:a7:53:
e0:8e:b9:6c:9f:2c:ae:93:89:80:8d:db:21:cc:64:9f:78:d7:
d6:00:e0:61:d9:f7:1c:8d:d2:8c:6c:50:d7:27:85:6d:4d:d6:
b0:c0:f6:b4:01:75:82:83:ea:2d:32:6c:cc:c9:e6:ae:1c:e3:
17:87:38:3e:9c:9e:35:a2:2c:a3:57:54:1f:12:74:61:b9:cc:
7b:8b:d8:ed:49:c6:9b:9b:78:eb:ac:59:82:cc:68:7c:ce:1a:
f2:0a:3d:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:55 2025 by rpki-client