Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.mft
File: pdlU1tsqEXjvvsDV2VkHZAfPlso.mft (raw, json)
Hash identifier: recWghqLfwF5U1M8yynSw3HENtud+imx0nuKmxHXhyk=
Subject key identifier: D0:D3:07:23:B4:CB:51:62:FB:FB:0A:52:5F:D7:1E:6C:F3:A6:CB:08
Authority key identifier: A5:D9:54:D6:DB:2A:11:78:EF:BE:C0:D5:D9:59:07:64:07:CF:96:CA
Certificate issuer: /CN=a5d954d6db2a1178efbec0d5d959076407cf96ca
Certificate serial: 019677FB30EF88EA789E1EE8DF8451AC0FD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pdlU1tsqEXjvvsDV2VkHZAfPlso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.mft
Manifest number: 07B3
Signing time: Sun 27 Apr 2025 16:01:12 +0000
Manifest this update: Sun 27 Apr 2025 16:01:12 +0000
Manifest next update: Mon 28 Apr 2025 16:01:12 +0000
Files and hashes: 1: HfQcZUosYB38WUcoYIEz_7k83KM.roa (hash: /K2P6JpdfwjoEYHmwZLKE7XXSJIGLEcUy6J3vqVuO5E=)
2: pdlU1tsqEXjvvsDV2VkHZAfPlso.crl (hash: AXMsW/HWJLhX5rUJRGQSOZda4uGBecjYm9TxgnVbzQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.mft
rsync://rpki.ripe.net/repository/DEFAULT/pdlU1tsqEXjvvsDV2VkHZAfPlso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fb:30:ef:88:ea:78:9e:1e:e8:df:84:51:ac:0f:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5d954d6db2a1178efbec0d5d959076407cf96ca
Validity
Not Before: Apr 27 16:01:12 2025 GMT
Not After : Apr 28 16:01:12 2025 GMT
Subject: CN=d0d30723b4cb5162fbfb0a525fd71e6cf3a6cb08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:9a:63:2e:ef:f1:44:6e:84:17:59:6a:26:23:
d5:2f:ff:88:c3:7e:50:11:5f:7f:e4:a1:59:70:4c:
a7:13:ce:f2:b9:53:83:df:b4:ac:d5:b2:76:b5:2e:
2a:e6:64:a2:1f:a8:1d:8a:fb:05:8d:11:1b:89:36:
c1:19:7f:8a:9c:96:31:3a:50:29:10:4f:ef:a1:a6:
a0:1a:5b:83:13:48:76:3c:20:9f:bf:e3:98:3f:b4:
12:6b:70:85:b0:57:7e:eb:2a:c5:3b:7e:18:76:4e:
2a:cd:0b:d5:47:3b:4c:ef:a4:e7:4d:f4:91:c4:79:
6f:70:4d:3d:f5:e2:bd:58:ff:d9:b1:8e:88:32:6b:
ec:ab:6d:a0:c8:56:0f:98:33:46:cf:70:90:1d:aa:
a1:b4:ff:d0:aa:43:71:33:89:ce:51:75:b0:6c:1b:
42:ac:09:80:e4:b9:0d:f9:b0:07:07:1b:e2:d9:ae:
e1:11:b8:f4:06:81:8a:ff:cd:67:81:c9:6b:97:4e:
d3:23:23:d2:2f:31:d5:cb:2c:12:d2:6e:81:f3:1c:
85:2d:3f:67:ec:b3:bb:ac:cb:6a:e1:23:d8:58:c0:
26:f8:10:8c:ec:03:61:96:b1:0b:89:9e:df:45:39:
17:65:45:db:44:4f:62:45:fa:2f:98:19:81:9e:10:
bd:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:D3:07:23:B4:CB:51:62:FB:FB:0A:52:5F:D7:1E:6C:F3:A6:CB:08
X509v3 Authority Key Identifier:
keyid:A5:D9:54:D6:DB:2A:11:78:EF:BE:C0:D5:D9:59:07:64:07:CF:96:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pdlU1tsqEXjvvsDV2VkHZAfPlso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:03:61:67:6c:8e:74:5f:d7:84:15:81:33:21:d1:c8:9f:94:
49:86:4c:ea:4f:df:a8:8b:ae:01:c0:76:3c:c6:c5:7c:6f:b7:
d4:ea:fa:48:5e:93:bf:95:43:73:51:a6:62:f1:51:6f:34:0b:
cd:cf:17:9b:16:e2:07:5f:21:db:00:3b:74:16:b7:8a:a0:83:
59:84:bc:37:58:3e:8e:07:f5:72:62:13:47:72:51:bc:a3:e9:
56:49:09:76:21:57:80:80:26:37:21:a9:4d:53:77:b2:8c:94:
5f:4b:5d:3e:60:e6:a1:66:c2:15:66:a1:1f:1c:0d:65:c2:d5:
84:f4:17:7f:a3:cb:bf:4d:d8:e4:ef:b1:73:63:1d:10:80:17:
0b:6e:85:06:ec:9c:44:63:68:91:07:a0:48:7a:52:6f:c1:01:
60:73:b0:52:5e:94:b8:23:8c:e2:44:15:52:96:7a:26:c2:5d:
f7:ad:d8:aa:68:14:30:1f:e9:f5:c7:f9:97:bd:43:59:ea:6b:
ee:0d:7f:97:dd:9e:df:91:35:76:7a:61:5b:27:4f:c4:ed:39:
17:c0:87:79:61:e0:32:01:77:26:64:e3:14:e5:58:cc:88:aa:
88:2b:b3:fd:6c:ef:ce:18:8d:9f:38:65:a8:21:2e:94:7a:76:
10:92:f4:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:18:30 2025 by rpki-client