Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.mft
File: pdlU1tsqEXjvvsDV2VkHZAfPlso.mft (raw, json)
Hash identifier: yH6tEbnl7eT8GXPSirZKtYVul8XjyMjDUW4F5rzz1JU=
Subject key identifier: 52:D3:63:50:1E:6A:64:DB:F4:DA:EC:F9:E7:90:D4:42:39:08:CE:BE
Authority key identifier: A5:D9:54:D6:DB:2A:11:78:EF:BE:C0:D5:D9:59:07:64:07:CF:96:CA
Certificate issuer: /CN=a5d954d6db2a1178efbec0d5d959076407cf96ca
Certificate serial: 019873E3977C1D20FD5B1E3FB1D9D59E4315
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pdlU1tsqEXjvvsDV2VkHZAfPlso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.mft
Manifest number: 08BA
Signing time: Mon 04 Aug 2025 07:02:31 +0000
Manifest this update: Mon 04 Aug 2025 07:02:31 +0000
Manifest next update: Tue 05 Aug 2025 07:02:31 +0000
Files and hashes: 1: HfQcZUosYB38WUcoYIEz_7k83KM.roa (hash: /K2P6JpdfwjoEYHmwZLKE7XXSJIGLEcUy6J3vqVuO5E=)
2: pdlU1tsqEXjvvsDV2VkHZAfPlso.crl (hash: fjUewv4Ik+xaPKVP9XZROkxMG20oKmS5xDI01RXHG/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.mft
rsync://rpki.ripe.net/repository/DEFAULT/pdlU1tsqEXjvvsDV2VkHZAfPlso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:97:7c:1d:20:fd:5b:1e:3f:b1:d9:d5:9e:43:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5d954d6db2a1178efbec0d5d959076407cf96ca
Validity
Not Before: Aug 4 07:02:31 2025 GMT
Not After : Aug 5 07:02:31 2025 GMT
Subject: CN=52d363501e6a64dbf4daecf9e790d4423908cebe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:01:81:12:62:cb:d4:dd:4a:b3:f4:48:55:ef:
60:b0:d7:5d:34:f1:62:38:7f:5b:43:ac:e9:eb:18:
3f:db:f0:49:02:a1:20:90:fc:74:c8:76:b7:3b:9e:
ee:06:95:50:b4:e7:2e:d3:90:d6:c3:ee:f2:13:62:
9d:f4:7d:d9:be:63:ee:7a:78:7c:73:cc:46:51:44:
89:31:6e:17:38:09:d3:b2:64:0e:d3:c1:03:dc:dd:
1b:79:5d:ff:2b:fa:a0:7a:cb:97:b9:35:46:58:c6:
05:49:79:c4:96:14:d6:86:de:fa:5f:78:99:3b:b1:
fd:4d:78:18:e7:46:cb:07:7e:61:a3:46:0b:8d:4d:
df:33:a3:bb:36:5f:8e:b3:b1:d1:d6:07:8c:33:0f:
09:96:ae:37:2f:4a:aa:8b:30:f0:71:1f:04:29:39:
84:cc:36:15:75:8a:3a:1e:38:c2:8c:bc:de:51:5e:
65:08:43:26:eb:b6:0b:4f:fb:3c:2e:fd:f5:31:56:
a8:81:4c:34:3e:0f:9f:ab:56:41:5c:93:42:73:b0:
6f:ae:e9:15:e8:39:ba:e3:f1:9b:2c:0d:82:26:f0:
bf:57:a4:2b:5d:7a:79:9d:18:ff:3c:3e:c0:a6:a2:
40:20:a5:78:84:8b:85:ac:1a:f3:3a:71:42:12:26:
60:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:D3:63:50:1E:6A:64:DB:F4:DA:EC:F9:E7:90:D4:42:39:08:CE:BE
X509v3 Authority Key Identifier:
keyid:A5:D9:54:D6:DB:2A:11:78:EF:BE:C0:D5:D9:59:07:64:07:CF:96:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pdlU1tsqEXjvvsDV2VkHZAfPlso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/fbf39d-9247-4e07-9e15-39f4ab6ec7e6/1/pdlU1tsqEXjvvsDV2VkHZAfPlso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:ef:d7:9a:6f:ca:5d:23:b0:d0:bf:22:b4:7e:22:b0:d6:9b:
b0:77:9e:b9:43:ad:c1:96:4b:3e:66:4b:7d:5b:7f:40:31:ff:
ac:01:96:c3:77:e8:a5:21:c9:b6:96:e1:d3:38:aa:29:c0:4e:
79:44:e0:0d:e7:59:91:da:67:fc:96:7f:03:01:f6:b6:d0:4e:
80:ad:13:db:0e:77:2b:48:a8:da:02:a0:10:16:40:86:b9:7b:
bd:f8:24:82:c2:00:c3:b3:6f:e2:9a:e4:89:28:a1:b0:90:82:
4a:c6:17:6a:4a:ac:b9:22:8c:4a:d7:05:e7:c9:1a:50:65:79:
5c:c7:73:d4:ac:2c:26:28:70:da:2a:f2:a5:c5:fd:e2:b2:ef:
a6:0a:b2:bc:64:1d:1a:9d:72:a3:f4:6a:9f:d0:bb:64:39:df:
98:8d:a4:da:c1:24:64:f8:07:60:3d:28:2d:a6:7f:d6:f0:a9:
52:c4:e3:4a:05:c1:03:ec:78:e8:04:bd:63:cb:92:1c:87:8f:
eb:1a:3e:91:0b:28:03:20:3f:28:68:00:2e:6a:d8:c8:a8:cd:
f4:4f:53:a6:84:f5:48:a7:5d:77:0d:0e:18:39:36:c5:2a:a6:
1c:0a:f1:ee:63:1c:9d:68:4f:23:64:5f:3c:1a:39:f8:76:be:
26:fd:20:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:01:36 2025 by rpki-client