Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.mft
File: pdlU1tsqEXjvvsDV2VkHZAfPlso.mft (raw, json)
Hash identifier: KiYin41R0OEu0G9dIZM/zx2RvdbKreWGHQkd990w+6I=
Subject key identifier: C7:B0:E1:93:94:C2:25:97:FF:DF:3E:A3:36:A7:4B:44:A9:45:08:67
Authority key identifier: A5:D9:54:D6:DB:2A:11:78:EF:BE:C0:D5:D9:59:07:64:07:CF:96:CA
Certificate issuer: /CN=a5d954d6db2a1178efbec0d5d959076407cf96ca
Certificate serial: 019A4EF456201447740EE702172E7F5FFFE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pdlU1tsqEXjvvsDV2VkHZAfPlso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.mft
Manifest number: 09B0
Signing time: Tue 04 Nov 2025 13:00:26 +0000
Manifest this update: Tue 04 Nov 2025 13:00:26 +0000
Manifest next update: Wed 05 Nov 2025 13:00:26 +0000
Files and hashes: 1: HfQcZUosYB38WUcoYIEz_7k83KM.roa (hash: /K2P6JpdfwjoEYHmwZLKE7XXSJIGLEcUy6J3vqVuO5E=)
2: pdlU1tsqEXjvvsDV2VkHZAfPlso.crl (hash: mEN/+K2rFCFgfv1ax/IIoSxO9EYulKCLgTDvXcAjHlA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.mft
rsync://rpki.ripe.net/repository/DEFAULT/pdlU1tsqEXjvvsDV2VkHZAfPlso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:56:20:14:47:74:0e:e7:02:17:2e:7f:5f:ff:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5d954d6db2a1178efbec0d5d959076407cf96ca
Validity
Not Before: Nov 4 13:00:26 2025 GMT
Not After : Nov 5 13:00:26 2025 GMT
Subject: CN=c7b0e19394c22597ffdf3ea336a74b44a9450867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3b:97:1d:ab:26:ff:e4:d0:3a:f5:96:5a:fb:
77:8e:43:a2:96:12:f5:0f:ab:0c:1b:d9:19:1e:42:
64:b8:49:7e:f1:98:54:23:5d:bb:17:b7:a1:6b:4d:
11:8c:01:42:f3:8c:03:8f:6b:00:c4:db:7e:b4:3d:
9f:ad:e5:d7:00:8f:c0:bc:20:a2:30:ad:bd:fb:f4:
69:0f:17:c2:7b:87:68:a8:74:ca:62:b3:e1:43:3c:
67:e1:54:37:c6:9a:c6:7f:61:e6:c3:9c:b0:0c:a3:
cc:03:d0:71:54:46:43:e1:f5:de:4c:d2:47:2c:42:
e1:07:64:ef:f9:47:28:d1:2c:32:07:7a:3e:7a:44:
c9:fc:0d:b7:45:bb:92:bc:bd:49:92:62:72:24:66:
ee:37:e9:b0:76:ab:32:4c:01:be:76:6b:4e:5f:fe:
e7:23:be:ef:b6:9e:21:76:1f:9d:97:19:93:18:73:
97:fb:b9:44:30:22:ee:a4:da:87:46:6c:2d:f4:7a:
32:2a:c0:9e:0c:2c:be:d9:c9:cc:af:c4:8a:f9:b1:
4b:8d:ef:d1:31:fd:bc:4a:ca:4d:53:09:6a:d4:d0:
8f:77:df:4a:07:7a:cc:20:1e:5b:76:6f:fa:d6:32:
0e:20:b8:66:b1:31:38:9a:3d:04:35:2a:8c:7a:fe:
54:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:B0:E1:93:94:C2:25:97:FF:DF:3E:A3:36:A7:4B:44:A9:45:08:67
X509v3 Authority Key Identifier:
keyid:A5:D9:54:D6:DB:2A:11:78:EF:BE:C0:D5:D9:59:07:64:07:CF:96:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pdlU1tsqEXjvvsDV2VkHZAfPlso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:38:65:b0:0a:6e:cd:ca:e7:ba:3e:16:a9:f0:86:ee:82:2d:
a2:22:8d:6c:85:fa:e6:84:7e:71:bb:09:35:00:ea:b6:d4:8b:
19:77:45:4b:80:3d:6c:3f:17:b9:3c:66:73:e9:4a:aa:e0:6a:
13:04:8d:d8:e1:4c:8e:1e:db:38:cc:c5:d2:55:03:24:33:70:
44:fc:8b:b5:41:a5:dd:a9:e5:2b:ad:18:24:8c:2a:76:2a:f3:
87:ce:ac:d8:0f:d9:19:a8:1b:75:9f:b0:22:2f:d5:65:f9:57:
08:fc:83:85:7d:de:56:8c:8a:11:f8:59:ec:85:ae:10:45:21:
35:b2:bf:48:89:05:e7:6c:8d:0c:fc:bb:7a:ee:37:f5:9b:7c:
19:33:62:84:9b:e4:cb:1d:cd:c3:ee:20:e8:05:18:8a:ec:d1:
25:18:db:82:aa:2b:1d:2e:b8:86:c1:60:d0:15:0f:08:67:36:
c8:a7:8c:50:84:75:13:3e:4c:6d:1f:b4:c0:58:2d:cf:18:ff:
9e:61:13:33:e3:6b:0c:b3:cd:62:b4:14:7d:92:00:96:b5:2a:
d0:90:1c:58:0f:93:aa:69:d6:65:77:6b:68:ec:44:58:97:f1:
a2:70:83:43:5e:d6:d5:1c:db:c8:90:e6:97:87:e6:12:01:b0:
51:db:5b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:04:47 2025 by rpki-client