Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/c8e001-ada3-45bf-aa46-fd515681620c/1/pdroBcyUvdKfwnEHzWOwvSfJFNA.mft
File: pdroBcyUvdKfwnEHzWOwvSfJFNA.mft (raw, json)
Hash identifier: DuqwR3UYh5QllQId9d15thW02GccY94/lKEg6MUGfOs=
Subject key identifier: 14:F4:13:78:85:46:43:58:2B:10:E6:D8:4F:83:A2:1E:1F:03:F4:C5
Authority key identifier: A5:DA:E8:05:CC:94:BD:D2:9F:C2:71:07:CD:63:B0:BD:27:C9:14:D0
Certificate issuer: /CN=a5dae805cc94bdd29fc27107cd63b0bd27c914d0
Certificate serial: 01967EA1771805E843B324B2973EDE8774DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pdroBcyUvdKfwnEHzWOwvSfJFNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/c8e001-ada3-45bf-aa46-fd515681620c/1/pdroBcyUvdKfwnEHzWOwvSfJFNA.mft
Manifest number: 1511
Signing time: Mon 28 Apr 2025 23:00:33 +0000
Manifest this update: Mon 28 Apr 2025 23:00:33 +0000
Manifest next update: Tue 29 Apr 2025 23:00:33 +0000
Files and hashes: 1: jRK4xjLjW0AS7WU026pDGWREkHo.roa (hash: ER6luwoElNhKf2QyVxJrryvA3AGyV4wY+yOa5rcowpY=)
2: pdroBcyUvdKfwnEHzWOwvSfJFNA.crl (hash: xQHkzXhi7L6thuytU1+CKrllEzRwaVL/vuaWsJANLm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/c8e001-ada3-45bf-aa46-fd515681620c/1/pdroBcyUvdKfwnEHzWOwvSfJFNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/c8e001-ada3-45bf-aa46-fd515681620c/1/pdroBcyUvdKfwnEHzWOwvSfJFNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pdroBcyUvdKfwnEHzWOwvSfJFNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 22:36:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:a1:77:18:05:e8:43:b3:24:b2:97:3e:de:87:74:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5dae805cc94bdd29fc27107cd63b0bd27c914d0
Validity
Not Before: Apr 28 23:00:33 2025 GMT
Not After : Apr 29 23:00:33 2025 GMT
Subject: CN=14f41378854643582b10e6d84f83a21e1f03f4c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3c:67:37:fa:4e:eb:47:20:aa:02:55:ca:a7:
ee:21:f8:09:1b:70:d2:58:6f:2d:b8:58:21:43:a0:
a9:f1:e1:28:3b:65:92:11:e1:50:73:58:16:e2:70:
21:49:9d:3a:24:5c:ca:33:ee:4c:74:33:0d:be:06:
0b:18:ef:7c:63:66:99:db:32:8d:2f:de:bc:21:cd:
d0:14:62:ec:92:f1:6c:a0:ce:ef:25:5f:0b:51:17:
5a:9b:90:ae:48:a2:14:d6:e6:30:28:7e:53:a9:87:
d3:d6:46:eb:f9:0a:05:45:65:1d:cc:94:0e:8c:66:
67:57:d7:65:d3:3a:51:18:ba:e4:0b:55:7f:14:80:
57:91:3b:43:91:1b:a7:af:74:fb:1f:50:df:22:02:
83:e2:f1:4e:3e:6c:b1:53:9e:ec:75:4e:e2:07:b4:
e0:31:c9:82:33:83:d5:82:ae:de:5f:56:d7:33:08:
65:f8:76:99:e3:f3:92:c5:af:fe:e2:88:cc:5d:e6:
f4:2a:69:ff:cf:40:15:26:87:b7:35:a6:bd:6c:9e:
63:de:78:c9:66:65:6f:a6:f6:78:5e:53:88:82:cb:
70:d4:bb:df:4b:c0:f7:77:24:93:a4:b1:30:e4:bf:
39:61:58:11:ee:20:11:a6:94:ac:af:b1:cd:57:0a:
3d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:F4:13:78:85:46:43:58:2B:10:E6:D8:4F:83:A2:1E:1F:03:F4:C5
X509v3 Authority Key Identifier:
keyid:A5:DA:E8:05:CC:94:BD:D2:9F:C2:71:07:CD:63:B0:BD:27:C9:14:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pdroBcyUvdKfwnEHzWOwvSfJFNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c8e001-ada3-45bf-aa46-fd515681620c/1/pdroBcyUvdKfwnEHzWOwvSfJFNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c8e001-ada3-45bf-aa46-fd515681620c/1/pdroBcyUvdKfwnEHzWOwvSfJFNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:b2:55:e3:ce:27:bb:01:10:ec:49:a1:2a:fa:10:09:11:27:
aa:d9:9f:b3:a4:41:7e:24:70:60:4c:c8:d3:49:8c:26:38:bf:
25:50:e2:d5:ef:76:cd:a9:4d:cc:7e:87:da:8d:75:44:16:e6:
ae:57:60:a7:0c:64:87:7f:8b:75:50:44:b6:2f:a0:35:18:dd:
94:b6:af:48:ac:6d:c6:6d:d1:6c:e5:3c:f4:f5:51:13:05:da:
f9:0d:7b:ed:81:41:d0:94:67:9d:1e:3c:52:ce:20:3d:52:04:
03:7c:8e:40:f4:4b:81:7c:71:64:f7:07:35:67:c8:27:90:c0:
e9:6c:54:b2:de:62:62:eb:00:2f:2b:da:43:05:64:f8:da:c7:
2a:92:62:f3:e9:56:5a:38:55:45:47:f3:bd:04:72:b6:cb:b1:
3c:63:b4:01:4c:ec:2f:f8:0f:01:b7:5a:39:e7:01:23:59:be:
b7:49:32:79:ee:58:50:ac:73:27:18:9b:6a:ac:60:81:a2:d3:
b3:ca:44:8a:32:3d:6f:0c:a2:be:c2:12:5d:65:30:2b:26:a7:
50:bb:e5:b7:9d:48:1e:52:ec:b6:e6:1f:06:9f:fa:55:1f:2c:
ee:21:a6:9f:56:69:a5:54:03:c7:b2:06:21:4d:c9:50:40:83:
77:8f:5a:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ+oXcYBehDsySylz7eh3TfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1ZGFlODA1Y2M5NGJkZDI5ZmMyNzEwN2NkNjNiMGJkMjdj
OTE0ZDAwHhcNMjUwNDI4MjMwMDMzWhcNMjUwNDI5MjMwMDMzWjAzMTEwLwYDVQQD
EygxNGY0MTM3ODg1NDY0MzU4MmIxMGU2ZDg0ZjgzYTIxZTFmMDNmNGM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDxnN/pO60cgqgJVyqfuIfgJG3DS
WG8tuFghQ6Cp8eEoO2WSEeFQc1gW4nAhSZ06JFzKM+5MdDMNvgYLGO98Y2aZ2zKN
L968Ic3QFGLskvFsoM7vJV8LURdam5CuSKIU1uYwKH5TqYfT1kbr+QoFRWUdzJQO
jGZnV9dl0zpRGLrkC1V/FIBXkTtDkRunr3T7H1DfIgKD4vFOPmyxU57sdU7iB7Tg
McmCM4PVgq7eX1bXMwhl+HaZ4/OSxa/+4ojMXeb0Kmn/z0AVJoe3Naa9bJ5j3njJ
ZmVvpvZ4XlOIgstw1LvfS8D3dySTpLEw5L85YVgR7iARppSsr7HNVwo9BwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBT0E3iFRkNYKxDm2E+Doh4fA/TFMB8GA1UdIwQY
MBaAFKXa6AXMlL3Sn8JxB81jsL0nyRTQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGRyb0JjeVV2ZEtmd25FSHpXT3d2U2ZKRk5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9jOGUwMDEtYWRhMy00NWJmLWFhNDYt
ZmQ1MTU2ODE2MjBjLzEvcGRyb0JjeVV2ZEtmd25FSHpXT3d2U2ZKRk5BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC9jOGUwMDEtYWRhMy00NWJmLWFhNDYtZmQ1MTU2ODE2MjBj
LzEvcGRyb0JjeVV2ZEtmd25FSHpXT3d2U2ZKRk5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOrJV484n
uwEQ7EmhKvoQCREnqtmfs6RBfiRwYEzI00mMJji/JVDi1e92zalNzH6H2o11RBbm
rldgpwxkh3+LdVBEti+gNRjdlLavSKxtxm3RbOU89PVREwXa+Q177YFB0JRnnR48
Us4gPVIEA3yOQPRLgXxxZPcHNWfIJ5DA6WxUst5iYusALyvaQwVk+NrHKpJi8+lW
WjhVRUfzvQRytsuxPGO0AUzsL/gPAbdaOecBI1m+t0kyee5YUKxzJxibaqxggaLT
s8pEijI9bwyivsISXWUwKyanULvlt51IHlLstuYfBp/6VR8s7iGmn1ZppVQDx7IG
IU3JUECDd49aLQ==
-----END CERTIFICATE-----
Generated at Tue Apr 29 03:11:03 2025 by rpki-client