Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/c8e001-ada3-45bf-aa46-fd515681620c/1/pdroBcyUvdKfwnEHzWOwvSfJFNA.mft
File: pdroBcyUvdKfwnEHzWOwvSfJFNA.mft (raw, json)
Hash identifier: zmbyG1gFj4QpTO0utM047a9Yyb4OFbkP0ycRDAaDgFI=
Subject key identifier: DF:3F:BC:BB:A5:CD:47:FF:15:75:C4:A7:CC:C4:B5:6F:B6:9D:50:CA
Authority key identifier: A5:DA:E8:05:CC:94:BD:D2:9F:C2:71:07:CD:63:B0:BD:27:C9:14:D0
Certificate issuer: /CN=a5dae805cc94bdd29fc27107cd63b0bd27c914d0
Certificate serial: 0198861EF19C834590E0CA1AB24179E9877D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pdroBcyUvdKfwnEHzWOwvSfJFNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/c8e001-ada3-45bf-aa46-fd515681620c/1/pdroBcyUvdKfwnEHzWOwvSfJFNA.mft
Manifest number: 161E
Signing time: Thu 07 Aug 2025 20:00:31 +0000
Manifest this update: Thu 07 Aug 2025 20:00:31 +0000
Manifest next update: Fri 08 Aug 2025 20:00:31 +0000
Files and hashes: 1: jRK4xjLjW0AS7WU026pDGWREkHo.roa (hash: ER6luwoElNhKf2QyVxJrryvA3AGyV4wY+yOa5rcowpY=)
2: pdroBcyUvdKfwnEHzWOwvSfJFNA.crl (hash: eC5qHmr6lBkgP9d4u+JhKe5Q5WcrsKtflrCxX0QPkSI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/c8e001-ada3-45bf-aa46-fd515681620c/1/pdroBcyUvdKfwnEHzWOwvSfJFNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/c8e001-ada3-45bf-aa46-fd515681620c/1/pdroBcyUvdKfwnEHzWOwvSfJFNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pdroBcyUvdKfwnEHzWOwvSfJFNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:86:1e:f1:9c:83:45:90:e0:ca:1a:b2:41:79:e9:87:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5dae805cc94bdd29fc27107cd63b0bd27c914d0
Validity
Not Before: Aug 7 20:00:31 2025 GMT
Not After : Aug 8 20:00:31 2025 GMT
Subject: CN=df3fbcbba5cd47ff1575c4a7ccc4b56fb69d50ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:71:f0:92:f0:b4:5f:19:83:4e:f6:71:a7:b1:
54:34:be:cf:cd:56:3b:f2:04:65:1b:13:fd:36:95:
23:3c:5b:1f:36:a8:d1:c2:f7:9f:34:48:92:f3:e4:
2c:91:a4:f3:d1:77:cb:1a:51:27:34:c8:6d:e1:65:
9f:e7:51:e4:c0:d9:99:6f:f8:48:98:48:9d:65:09:
86:47:33:86:80:5a:f6:44:d2:c8:00:86:e9:67:81:
d0:7a:42:d0:8d:7f:86:4a:00:ef:92:c2:23:88:3e:
b0:72:ac:e4:2f:d6:fe:ab:aa:69:38:00:c7:b9:d3:
4a:22:9d:89:9f:93:10:b6:7c:f4:ce:24:a2:6d:0f:
4a:8f:ed:76:db:c0:4f:de:13:85:92:98:49:31:dd:
f9:9d:8f:1b:d6:de:07:eb:13:de:27:ab:9c:c0:5d:
ad:e3:d4:86:1f:12:bb:7f:07:18:9a:53:2f:7c:54:
aa:1d:24:d4:19:89:6d:eb:49:54:3c:3e:07:85:13:
8c:21:85:9d:5b:fa:73:be:80:22:58:d7:68:8e:67:
79:f7:86:46:6f:d8:46:06:9a:84:75:a5:b0:63:e4:
95:1a:22:ce:98:a8:ec:ca:82:35:93:8b:51:cf:9b:
9e:d4:48:62:d6:42:5e:8a:54:17:81:ef:28:b9:a2:
59:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:3F:BC:BB:A5:CD:47:FF:15:75:C4:A7:CC:C4:B5:6F:B6:9D:50:CA
X509v3 Authority Key Identifier:
keyid:A5:DA:E8:05:CC:94:BD:D2:9F:C2:71:07:CD:63:B0:BD:27:C9:14:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pdroBcyUvdKfwnEHzWOwvSfJFNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c8e001-ada3-45bf-aa46-fd515681620c/1/pdroBcyUvdKfwnEHzWOwvSfJFNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c8e001-ada3-45bf-aa46-fd515681620c/1/pdroBcyUvdKfwnEHzWOwvSfJFNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:aa:9c:54:6c:da:85:21:dc:74:8e:10:36:a8:b6:46:d4:65:
b7:8f:59:d5:f2:81:f0:c5:de:d4:41:30:f7:b8:3f:7d:a5:8f:
d1:cb:65:79:b2:87:0d:93:0e:d3:80:60:6d:9a:71:69:fd:b2:
4c:c1:e3:c5:da:2b:01:7e:49:41:64:02:d6:1d:09:1a:93:c1:
5a:d5:57:46:57:11:29:be:41:12:23:74:cf:fd:c9:10:7e:5f:
88:eb:87:d2:55:99:14:47:6a:4c:4d:bd:bd:8a:c6:4a:29:45:
cc:a8:69:b4:e6:d1:b3:2d:ae:83:3a:ee:46:64:a8:fd:b5:95:
be:c3:3f:fa:3a:55:f8:b8:21:2d:6d:92:27:27:c7:fd:12:5c:
ad:f8:46:bc:f2:9c:9f:ac:22:a9:99:d2:1f:c3:7b:ba:8d:3c:
55:b2:bb:15:8d:68:25:27:31:f2:00:9b:ee:36:21:14:3d:81:
f8:89:db:a5:3e:6e:88:cd:27:e7:32:67:09:a7:3a:00:8f:51:
90:82:f2:e0:78:1f:41:01:2f:00:15:f9:ec:d8:ff:d0:a0:33:
5e:a8:8e:36:2b:24:b1:98:ea:1e:14:42:34:8f:f5:7f:15:ff:
a9:eb:2d:a7:ed:73:1b:ab:b4:01:fb:d7:a4:5c:1e:9e:88:aa:
e0:86:50:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:48:07 2025 by rpki-client