Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.mft
File: pdlU1tsqEXjvvsDV2VkHZAfPlso.mft (raw, json)
Hash identifier: gWfvBfIayQd4cPVFtZsIcLL79uBcr+agXzt55+HW7zQ=
Subject key identifier: F4:EC:0A:24:78:93:C7:33:10:B9:2D:84:04:89:6C:70:EE:8B:BC:F7
Authority key identifier: A5:D9:54:D6:DB:2A:11:78:EF:BE:C0:D5:D9:59:07:64:07:CF:96:CA
Certificate issuer: /CN=a5d954d6db2a1178efbec0d5d959076407cf96ca
Certificate serial: 0198D474297FC29A1340D8A7B853E3494C14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pdlU1tsqEXjvvsDV2VkHZAfPlso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.mft
Manifest number: 08EC
Signing time: Sat 23 Aug 2025 01:03:59 +0000
Manifest this update: Sat 23 Aug 2025 01:03:59 +0000
Manifest next update: Sun 24 Aug 2025 01:03:59 +0000
Files and hashes: 1: HfQcZUosYB38WUcoYIEz_7k83KM.roa (hash: /K2P6JpdfwjoEYHmwZLKE7XXSJIGLEcUy6J3vqVuO5E=)
2: pdlU1tsqEXjvvsDV2VkHZAfPlso.crl (hash: oO+FN0JAMC9p3LlwgmFi1kmw2nI37Eh2E9tMrNr1Wto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.mft
rsync://rpki.ripe.net/repository/DEFAULT/pdlU1tsqEXjvvsDV2VkHZAfPlso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:29:7f:c2:9a:13:40:d8:a7:b8:53:e3:49:4c:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5d954d6db2a1178efbec0d5d959076407cf96ca
Validity
Not Before: Aug 23 01:03:59 2025 GMT
Not After : Aug 24 01:03:59 2025 GMT
Subject: CN=f4ec0a247893c73310b92d8404896c70ee8bbcf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a8:59:d8:c9:43:28:92:15:f5:9f:5f:c0:39:
61:bc:22:8d:0e:c3:c0:4d:94:e4:89:5f:07:4f:fb:
7c:4a:aa:d2:67:20:d1:4b:01:88:1a:33:6a:c7:b4:
95:86:bc:72:77:89:2d:60:dd:c3:3e:0f:4f:87:53:
d6:d6:06:d0:ae:d8:d3:ef:96:3b:be:35:59:ed:d6:
af:d6:bc:5a:aa:f8:dc:3a:5f:4c:d4:37:3b:d8:1e:
32:70:9f:d4:7a:37:27:47:e4:ae:e1:5b:c8:5a:8c:
5e:cc:84:f5:bc:db:9f:9b:f3:89:9a:4b:54:7a:0e:
04:fc:2a:56:15:b7:4e:a0:72:46:84:88:b0:07:9c:
5f:35:39:2f:82:be:59:f9:39:a8:11:76:72:95:a1:
21:99:31:a2:e2:b3:bc:25:57:f2:24:a5:87:a7:28:
3a:19:1b:17:5f:82:db:61:26:58:a1:9a:17:ea:67:
d5:0a:67:13:e5:65:96:82:be:39:a8:b9:41:c4:30:
e4:82:c8:4e:f0:b5:d0:f9:5d:90:ba:56:f2:1e:87:
f3:cd:9e:27:1f:a5:47:96:72:26:8d:20:cc:33:7d:
d8:16:a6:8c:de:a3:1c:ee:86:88:65:18:e3:a3:da:
67:e9:27:c4:f1:85:74:f9:1c:d5:9b:bb:15:2a:6d:
03:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:EC:0A:24:78:93:C7:33:10:B9:2D:84:04:89:6C:70:EE:8B:BC:F7
X509v3 Authority Key Identifier:
keyid:A5:D9:54:D6:DB:2A:11:78:EF:BE:C0:D5:D9:59:07:64:07:CF:96:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pdlU1tsqEXjvvsDV2VkHZAfPlso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:14:d2:df:b7:34:7b:96:fb:8a:a6:77:0f:b4:0d:d1:95:2c:
74:71:02:f8:c1:e2:37:84:99:1b:6d:3e:ea:c0:4b:fe:fb:44:
9c:02:36:d8:4c:ae:b9:46:3c:c5:bc:91:23:51:cd:09:65:e7:
2f:d4:97:fa:5f:06:1c:9e:52:12:b0:b7:da:b0:f7:75:ef:6f:
a2:3c:70:eb:1d:ea:6e:f9:cd:90:58:eb:14:1a:bd:94:7f:01:
34:05:67:b1:aa:d7:c7:e7:e1:4a:c4:26:51:29:01:7f:ce:15:
38:4a:ea:2c:fd:a6:36:4d:e1:0a:cf:66:8c:34:b4:2f:44:6d:
fd:e1:1f:d6:46:cb:87:2a:22:c9:64:be:34:7f:07:c7:74:21:
09:38:03:d4:2a:2a:f8:f7:dd:60:1d:49:4b:0c:49:3a:10:05:
32:0d:e5:17:92:fe:7b:70:67:d1:f0:ce:96:12:a5:fc:30:ef:
71:48:05:bf:64:43:61:64:ff:81:f5:40:d8:6c:c2:15:55:c8:
2d:fa:78:d0:87:59:76:38:2b:bc:bc:e9:c1:a6:34:b8:b8:57:
15:62:04:74:5b:2c:84:74:7b:df:f8:82:48:b6:12:59:eb:5e:
8a:52:39:9f:c5:c0:26:ad:32:b3:3b:7c:2d:88:00:10:be:df:
ce:1b:1c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:07:12 2025 by rpki-client