Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/c8e001-ada3-45bf-aa46-fd515681620c/1/pdroBcyUvdKfwnEHzWOwvSfJFNA.mft
File: pdroBcyUvdKfwnEHzWOwvSfJFNA.mft (raw, json)
Hash identifier: 6leVwhSQ5lJyT0WIsWpx0hbcfYUcd5qGKmKKogPyBPA=
Subject key identifier: 87:B6:17:C5:CF:9C:04:7A:F7:BB:BB:17:B5:BB:2D:24:AB:89:D4:90
Authority key identifier: A5:DA:E8:05:CC:94:BD:D2:9F:C2:71:07:CD:63:B0:BD:27:C9:14:D0
Certificate issuer: /CN=a5dae805cc94bdd29fc27107cd63b0bd27c914d0
Certificate serial: 0197C5010FF0D011C06C4EAF47BE7EF080D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pdroBcyUvdKfwnEHzWOwvSfJFNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/c8e001-ada3-45bf-aa46-fd515681620c/1/pdroBcyUvdKfwnEHzWOwvSfJFNA.mft
Manifest number: 15BA
Signing time: Tue 01 Jul 2025 08:01:10 +0000
Manifest this update: Tue 01 Jul 2025 08:01:10 +0000
Manifest next update: Wed 02 Jul 2025 08:01:10 +0000
Files and hashes: 1: jRK4xjLjW0AS7WU026pDGWREkHo.roa (hash: ER6luwoElNhKf2QyVxJrryvA3AGyV4wY+yOa5rcowpY=)
2: pdroBcyUvdKfwnEHzWOwvSfJFNA.crl (hash: DquVVFESBe33kCLLX4cQVpJslGC/rJ0aPcpltd4gctk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/c8e001-ada3-45bf-aa46-fd515681620c/1/pdroBcyUvdKfwnEHzWOwvSfJFNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/c8e001-ada3-45bf-aa46-fd515681620c/1/pdroBcyUvdKfwnEHzWOwvSfJFNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pdroBcyUvdKfwnEHzWOwvSfJFNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c5:01:0f:f0:d0:11:c0:6c:4e:af:47:be:7e:f0:80:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5dae805cc94bdd29fc27107cd63b0bd27c914d0
Validity
Not Before: Jul 1 08:01:10 2025 GMT
Not After : Jul 2 08:01:10 2025 GMT
Subject: CN=87b617c5cf9c047af7bbbb17b5bb2d24ab89d490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:a3:5d:0c:5b:e7:ac:8b:69:13:8c:ca:38:0f:
e5:66:66:0a:54:cd:c2:55:41:43:2f:3e:54:87:2f:
e0:59:69:02:71:3b:d6:19:40:28:07:cf:8a:76:e0:
3d:67:cd:81:82:f5:67:95:90:e5:6f:af:bc:76:05:
59:96:c9:87:ae:b5:82:fe:d6:28:7a:8b:cd:9f:f6:
6b:2f:2f:93:bb:25:04:04:05:97:9e:83:95:4a:1e:
bc:df:9c:ae:a5:af:ca:76:6f:2a:e8:23:f9:6b:fd:
e5:9a:84:5d:eb:8a:7c:f9:4e:ce:ef:9a:14:22:73:
64:a2:bd:90:be:76:91:c9:5f:11:05:54:d0:03:10:
2c:21:c5:06:cd:25:47:bb:66:24:3e:ef:10:45:33:
7e:28:a9:05:96:34:f3:c3:f3:08:63:91:6e:20:f8:
33:d8:a1:67:82:23:d4:0d:5a:9b:6c:af:51:24:97:
77:8e:94:02:e2:f9:c1:bd:20:88:f4:5d:00:13:cf:
1d:25:12:aa:68:99:aa:57:00:a3:ed:fe:07:b7:fc:
b0:7f:35:a8:e1:27:fe:68:67:0a:f9:51:e1:6e:8f:
7b:78:ae:82:c9:72:ad:1f:73:a0:fe:15:20:cc:89:
91:be:a9:03:16:f1:9b:73:c3:68:72:81:38:a8:04:
64:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:B6:17:C5:CF:9C:04:7A:F7:BB:BB:17:B5:BB:2D:24:AB:89:D4:90
X509v3 Authority Key Identifier:
keyid:A5:DA:E8:05:CC:94:BD:D2:9F:C2:71:07:CD:63:B0:BD:27:C9:14:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pdroBcyUvdKfwnEHzWOwvSfJFNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c8e001-ada3-45bf-aa46-fd515681620c/1/pdroBcyUvdKfwnEHzWOwvSfJFNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c8e001-ada3-45bf-aa46-fd515681620c/1/pdroBcyUvdKfwnEHzWOwvSfJFNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:1c:85:4e:97:af:c8:bc:9b:52:f0:0b:b8:3c:bb:86:40:2b:
04:90:23:27:2c:2b:c2:32:45:ac:e7:88:4d:17:f6:0c:39:b6:
18:a2:fc:fd:24:7a:47:6f:42:5f:f7:ee:19:3e:12:f2:a7:a8:
66:83:61:eb:42:30:02:af:48:e2:df:95:2a:84:71:e1:8f:ed:
09:6f:2d:0d:43:3d:82:1f:c8:0b:fc:90:3d:a7:22:47:b1:ed:
a8:ee:e3:ec:e3:6e:8b:21:46:b8:06:4b:e4:4c:49:2d:96:a2:
ed:6c:ed:f6:af:96:9b:7e:2c:9b:b5:97:62:70:49:cc:1a:f5:
22:8c:c3:4a:5c:35:dc:e6:45:cb:22:60:0e:42:bd:24:b4:55:
c3:d5:f6:2b:0d:05:c0:86:1c:73:6e:77:19:b7:64:f6:65:42:
a7:65:83:ba:6d:7b:a2:86:4b:9d:ed:4a:c3:47:58:ca:7e:bb:
ef:b0:e3:d0:82:1d:c2:43:bf:89:cc:61:ec:dd:57:29:e9:92:
ed:44:60:83:ce:a2:b8:ae:4b:d6:bd:c2:5a:77:22:1f:ff:33:
7c:90:27:f8:ec:c6:81:d4:1f:84:51:5a:03:3b:ec:14:2e:d0:
40:01:a9:1d:be:c2:4b:46:c7:a8:02:da:71:a7:fd:b5:e5:c4:
db:59:5b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 17:14:47 2025 by rpki-client