Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/c8e001-ada3-45bf-aa46-fd515681620c/1/pdroBcyUvdKfwnEHzWOwvSfJFNA.mft
File: pdroBcyUvdKfwnEHzWOwvSfJFNA.mft (raw, json)
Hash identifier: SZ8ACV+gTxA+dDni8ALMQrsrLYvCQLZ8dw9bOskLd1g=
Subject key identifier: EC:1D:2E:82:3F:31:58:32:C5:EB:DF:2B:99:F3:3B:D8:61:F6:84:EB
Authority key identifier: A5:DA:E8:05:CC:94:BD:D2:9F:C2:71:07:CD:63:B0:BD:27:C9:14:D0
Certificate issuer: /CN=a5dae805cc94bdd29fc27107cd63b0bd27c914d0
Certificate serial: 01976C2B2A31596EE28F99E3306311799F0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pdroBcyUvdKfwnEHzWOwvSfJFNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/c8e001-ada3-45bf-aa46-fd515681620c/1/pdroBcyUvdKfwnEHzWOwvSfJFNA.mft
Manifest number: 158C
Signing time: Sat 14 Jun 2025 02:00:57 +0000
Manifest this update: Sat 14 Jun 2025 02:00:57 +0000
Manifest next update: Sun 15 Jun 2025 02:00:57 +0000
Files and hashes: 1: jRK4xjLjW0AS7WU026pDGWREkHo.roa (hash: ER6luwoElNhKf2QyVxJrryvA3AGyV4wY+yOa5rcowpY=)
2: pdroBcyUvdKfwnEHzWOwvSfJFNA.crl (hash: BR0A4A89luXZDBGG8CD1z6w+owGnErO7+/wVwGBU1Rc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/c8e001-ada3-45bf-aa46-fd515681620c/1/pdroBcyUvdKfwnEHzWOwvSfJFNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/c8e001-ada3-45bf-aa46-fd515681620c/1/pdroBcyUvdKfwnEHzWOwvSfJFNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pdroBcyUvdKfwnEHzWOwvSfJFNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2b:2a:31:59:6e:e2:8f:99:e3:30:63:11:79:9f:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5dae805cc94bdd29fc27107cd63b0bd27c914d0
Validity
Not Before: Jun 14 02:00:57 2025 GMT
Not After : Jun 15 02:00:57 2025 GMT
Subject: CN=ec1d2e823f315832c5ebdf2b99f33bd861f684eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:be:95:2c:1c:e0:ef:be:23:33:66:2f:41:47:
44:b0:00:76:d4:2e:22:1c:cb:5e:31:da:09:70:09:
f6:e3:16:22:7d:62:51:a8:65:5f:ed:fe:2c:1c:77:
70:8a:1f:e8:29:38:db:94:53:70:2a:86:29:76:0a:
03:c4:8e:8f:dd:67:3a:cc:8e:cd:a1:88:f9:f6:70:
34:4c:00:6a:85:47:ae:70:cf:7f:14:af:5d:fd:ad:
bc:aa:46:8e:ce:f8:22:0e:9a:45:0b:bc:a9:5b:5e:
c0:48:80:1b:ff:55:06:8a:40:41:64:3c:48:b4:fd:
84:39:25:c3:39:90:04:14:2e:69:f1:e4:4c:0e:94:
46:6e:0c:d6:91:5f:1d:af:59:84:e6:6e:b4:a0:61:
2d:d3:3c:03:64:e5:1c:e1:a7:20:4e:e5:79:65:94:
3e:e1:49:72:0c:84:7a:72:bd:5d:80:2f:da:b4:8c:
21:1b:45:10:6e:bb:0e:bb:75:88:07:9f:ff:3c:c7:
bf:03:dd:8e:0f:72:df:03:c7:58:2f:8f:a6:fc:4f:
83:a8:6c:94:05:e3:00:cb:2c:fc:2b:29:52:0d:12:
05:cd:7d:f5:3e:64:d8:da:ec:df:a1:1c:f3:81:76:
1a:b7:91:b5:36:1f:af:2f:73:0f:fb:1f:1b:3b:a6:
a9:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:1D:2E:82:3F:31:58:32:C5:EB:DF:2B:99:F3:3B:D8:61:F6:84:EB
X509v3 Authority Key Identifier:
keyid:A5:DA:E8:05:CC:94:BD:D2:9F:C2:71:07:CD:63:B0:BD:27:C9:14:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pdroBcyUvdKfwnEHzWOwvSfJFNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c8e001-ada3-45bf-aa46-fd515681620c/1/pdroBcyUvdKfwnEHzWOwvSfJFNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c8e001-ada3-45bf-aa46-fd515681620c/1/pdroBcyUvdKfwnEHzWOwvSfJFNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:8f:1f:65:a2:64:37:18:2c:2d:93:6d:ca:c9:47:2d:51:0f:
03:82:18:b1:73:01:4b:ef:20:f2:b8:e5:87:ac:42:2b:94:96:
58:28:1a:68:f1:9a:a8:8a:d2:4c:0a:2f:6a:ef:05:06:6e:73:
48:4d:99:6d:72:73:0b:27:20:38:01:63:b5:b0:9e:67:08:c5:
b1:91:81:c1:0e:31:58:3a:b5:8c:2f:22:f7:f5:80:2b:91:f7:
ec:55:92:cd:53:45:a7:fb:73:5d:7b:a9:39:f5:47:55:83:42:
f5:ae:d7:8c:7b:46:a2:6e:d4:61:ec:f2:47:76:aa:54:96:a4:
e1:41:0e:2a:85:84:c1:ac:c1:e5:e1:25:41:f0:a5:1a:bc:c1:
a9:84:d6:08:fc:81:f2:8b:0e:6e:ca:16:17:e5:14:90:28:18:
f0:41:27:ea:23:0b:fb:ba:1c:98:b7:a5:3f:ea:4d:4f:a3:3a:
49:db:0f:95:ef:4b:39:5a:cd:53:9f:55:0e:28:da:4f:88:c6:
f7:41:94:72:61:6e:34:7d:3d:03:2c:a5:b1:5d:45:49:48:f7:
09:e3:32:8e:9f:d8:3f:75:32:12:98:f5:ef:14:83:0f:b1:ac:
89:6e:11:90:84:7e:07:4a:98:a7:28:9c:81:fa:81:15:2f:3a:
ce:39:dc:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsKyoxWW7ij5njMGMReZ8KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1ZGFlODA1Y2M5NGJkZDI5ZmMyNzEwN2NkNjNiMGJkMjdj
OTE0ZDAwHhcNMjUwNjE0MDIwMDU3WhcNMjUwNjE1MDIwMDU3WjAzMTEwLwYDVQQD
EyhlYzFkMmU4MjNmMzE1ODMyYzVlYmRmMmI5OWYzM2JkODYxZjY4NGViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA076VLBzg774jM2YvQUdEsAB21C4i
HMteMdoJcAn24xYifWJRqGVf7f4sHHdwih/oKTjblFNwKoYpdgoDxI6P3Wc6zI7N
oYj59nA0TABqhUeucM9/FK9d/a28qkaOzvgiDppFC7ypW17ASIAb/1UGikBBZDxI
tP2EOSXDOZAEFC5p8eRMDpRGbgzWkV8dr1mE5m60oGEt0zwDZOUc4acgTuV5ZZQ+
4UlyDIR6cr1dgC/atIwhG0UQbrsOu3WIB5//PMe/A92OD3LfA8dYL4+m/E+DqGyU
BeMAyyz8KylSDRIFzX31PmTY2uzfoRzzgXYat5G1Nh+vL3MP+x8bO6apvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOwdLoI/MVgyxevfK5nzO9hh9oTrMB8GA1UdIwQY
MBaAFKXa6AXMlL3Sn8JxB81jsL0nyRTQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGRyb0JjeVV2ZEtmd25FSHpXT3d2U2ZKRk5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9jOGUwMDEtYWRhMy00NWJmLWFhNDYt
ZmQ1MTU2ODE2MjBjLzEvcGRyb0JjeVV2ZEtmd25FSHpXT3d2U2ZKRk5BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC9jOGUwMDEtYWRhMy00NWJmLWFhNDYtZmQ1MTU2ODE2MjBj
LzEvcGRyb0JjeVV2ZEtmd25FSHpXT3d2U2ZKRk5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJY8fZaJk
NxgsLZNtyslHLVEPA4IYsXMBS+8g8rjlh6xCK5SWWCgaaPGaqIrSTAovau8FBm5z
SE2ZbXJzCycgOAFjtbCeZwjFsZGBwQ4xWDq1jC8i9/WAK5H37FWSzVNFp/tzXXup
OfVHVYNC9a7XjHtGom7UYezyR3aqVJak4UEOKoWEwazB5eElQfClGrzBqYTWCPyB
8osObsoWF+UUkCgY8EEn6iML+7ocmLelP+pNT6M6SdsPle9LOVrNU59VDijaT4jG
90GUcmFuNH09AyylsV1FSUj3CeMyjp/YP3UyEpj17xSDD7GsiW4RkIR+B0qYpyic
gfqBFS86zjncHg==
-----END CERTIFICATE-----
Generated at Sat Jun 14 13:02:26 2025 by rpki-client