Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.mft
File: pdlU1tsqEXjvvsDV2VkHZAfPlso.mft (raw, json)
Hash identifier: uTSdk4B8Ki75JltFbYdsHTLY9TwtdommauOTL25l3aA=
Subject key identifier: 3D:C8:38:CF:33:19:99:10:42:0F:2B:EB:AA:5B:BA:09:53:79:BA:BE
Authority key identifier: A5:D9:54:D6:DB:2A:11:78:EF:BE:C0:D5:D9:59:07:64:07:CF:96:CA
Certificate issuer: /CN=a5d954d6db2a1178efbec0d5d959076407cf96ca
Certificate serial: 0197B6A1000137391EBC17C4AE99D3418D79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pdlU1tsqEXjvvsDV2VkHZAfPlso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.mft
Manifest number: 0858
Signing time: Sat 28 Jun 2025 13:01:33 +0000
Manifest this update: Sat 28 Jun 2025 13:01:33 +0000
Manifest next update: Sun 29 Jun 2025 13:01:33 +0000
Files and hashes: 1: HfQcZUosYB38WUcoYIEz_7k83KM.roa (hash: /K2P6JpdfwjoEYHmwZLKE7XXSJIGLEcUy6J3vqVuO5E=)
2: pdlU1tsqEXjvvsDV2VkHZAfPlso.crl (hash: JhD6YnttKrAZF5BB1TsLOrSU8UEHZktSBgJKLSa8mVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.mft
rsync://rpki.ripe.net/repository/DEFAULT/pdlU1tsqEXjvvsDV2VkHZAfPlso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:00:01:37:39:1e:bc:17:c4:ae:99:d3:41:8d:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5d954d6db2a1178efbec0d5d959076407cf96ca
Validity
Not Before: Jun 28 13:01:33 2025 GMT
Not After : Jun 29 13:01:33 2025 GMT
Subject: CN=3dc838cf33199910420f2bebaa5bba095379babe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7c:1f:8a:cb:db:35:65:cb:48:5b:7b:1f:e1:
25:01:8d:e1:67:21:ed:d1:71:e8:71:94:01:e5:73:
91:6a:12:7d:0c:81:b9:4b:ad:3f:91:ba:0d:73:f5:
7e:ec:fc:3e:b6:30:01:a9:09:73:e8:37:eb:ec:ea:
2c:da:67:13:8d:2b:5b:21:00:33:9e:a9:aa:fc:00:
a9:23:af:b5:86:80:d9:d1:cc:ff:9b:1e:20:4d:69:
4c:94:5f:12:d5:32:6a:39:c9:f6:80:75:45:26:dd:
4b:0e:b6:29:a5:70:78:54:07:a0:31:9f:43:71:78:
bd:db:fc:05:ed:85:82:d0:9b:49:1f:be:1a:75:49:
bb:bf:96:43:c4:5f:73:64:77:9f:84:17:fb:28:46:
3e:7f:9f:cc:c2:8a:93:57:e2:c1:7d:7c:b2:78:b0:
37:3b:5a:12:16:fa:e2:e7:59:0d:9e:0e:29:44:97:
57:b8:d9:90:11:4f:1d:9a:b0:67:5a:2a:08:e5:21:
32:be:7c:9a:73:2d:54:50:f6:a6:9b:92:40:03:25:
bc:fe:a7:93:6d:66:f0:87:8f:8b:71:ce:51:81:6a:
08:67:9a:63:30:87:65:09:a8:e9:f8:ca:4f:53:1c:
13:48:59:18:ad:e4:04:12:9c:ac:2b:cc:95:b6:94:
fb:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:C8:38:CF:33:19:99:10:42:0F:2B:EB:AA:5B:BA:09:53:79:BA:BE
X509v3 Authority Key Identifier:
keyid:A5:D9:54:D6:DB:2A:11:78:EF:BE:C0:D5:D9:59:07:64:07:CF:96:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pdlU1tsqEXjvvsDV2VkHZAfPlso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:ae:00:a7:96:2e:66:70:5e:1c:e8:00:d6:ad:fb:70:19:7d:
d4:6a:2e:76:d7:3b:c8:0a:8e:e1:a2:c6:59:6d:6a:80:01:8b:
72:69:88:d8:93:2e:35:9d:2e:82:f5:14:fd:62:64:42:7c:9f:
1e:e9:af:ce:51:eb:a4:2a:ac:4d:ae:c2:c1:96:21:fb:d2:53:
b8:80:61:2e:06:51:e0:15:84:a6:a9:ed:ee:b2:fc:24:b9:55:
7a:61:62:2b:8e:cd:28:44:92:17:55:fa:7a:b4:6d:05:bc:c0:
a6:18:f7:ee:5d:75:44:29:99:8a:b7:94:7f:a9:3b:1a:66:41:
a5:46:da:aa:6d:c7:43:27:e2:c2:20:c2:f2:34:a1:60:aa:22:
2a:e2:ad:1b:02:0d:51:47:81:d2:a9:d4:f0:ee:96:f3:f4:2e:
ea:7f:d6:54:3c:41:b6:75:d2:53:ef:e0:d3:7d:d7:6c:5d:8a:
d5:30:27:d5:20:4d:ea:81:d9:65:5e:a0:2d:3d:54:fe:36:4c:
9d:85:8a:53:52:93:ff:31:1d:c9:89:dc:fe:d7:b8:27:2b:6f:
e5:27:33:fa:a9:04:c0:ce:50:dd:b8:b9:04:3b:92:57:a8:43:
aa:3f:b5:f9:db:9c:c0:98:11:33:7b:6b:cf:c6:0f:07:73:42:
53:cf:51:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:29:40 2025 by rpki-client