Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/9e22b8-4eb1-4d2f-a807-7b94fb43b60a/1/ppv5fceDSX88N716huWZSs7ngbA.mft
File: ppv5fceDSX88N716huWZSs7ngbA.mft (raw, json)
Hash identifier: xaY+y87keBd/vyXOY924cvqZ6yE4a581gGbF388focg=
Subject key identifier: 36:CB:AF:98:58:40:AF:3E:32:4B:DD:43:C1:6A:2A:DE:EC:D2:3C:42
Authority key identifier: A6:9B:F9:7D:C7:83:49:7F:3C:37:BD:7A:86:E5:99:4A:CE:E7:81:B0
Certificate issuer: /CN=a69bf97dc783497f3c37bd7a86e5994acee781b0
Certificate serial: 01984966218CA2F8909324CB5886A4634DB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ppv5fceDSX88N716huWZSs7ngbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/9e22b8-4eb1-4d2f-a807-7b94fb43b60a/1/ppv5fceDSX88N716huWZSs7ngbA.mft
Manifest number: 0FF9
Signing time: Sun 27 Jul 2025 01:01:26 +0000
Manifest this update: Sun 27 Jul 2025 01:01:26 +0000
Manifest next update: Mon 28 Jul 2025 01:01:26 +0000
Files and hashes: 1: ppv5fceDSX88N716huWZSs7ngbA.crl (hash: L+KB1TKKlu3DflObTQrAp4aqaEuGCN8CZMwfhCA4Tak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/9e22b8-4eb1-4d2f-a807-7b94fb43b60a/1/ppv5fceDSX88N716huWZSs7ngbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/9e22b8-4eb1-4d2f-a807-7b94fb43b60a/1/ppv5fceDSX88N716huWZSs7ngbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ppv5fceDSX88N716huWZSs7ngbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:21:8c:a2:f8:90:93:24:cb:58:86:a4:63:4d:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a69bf97dc783497f3c37bd7a86e5994acee781b0
Validity
Not Before: Jul 27 01:01:26 2025 GMT
Not After : Jul 28 01:01:26 2025 GMT
Subject: CN=36cbaf985840af3e324bdd43c16a2adeecd23c42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c4:88:d5:7a:b1:17:ce:f8:19:20:f5:02:3c:
87:dd:b3:0c:b2:0a:79:a4:6f:33:99:9d:30:76:3a:
33:48:7b:ed:30:c9:03:1e:7e:0e:e4:06:91:40:a3:
67:e3:2c:9f:27:2e:c2:be:07:7a:9d:a8:f1:e5:6c:
7b:43:e2:d5:f0:da:b5:6d:a7:26:f0:63:dc:32:11:
eb:0a:e8:b6:4d:a9:35:cc:f0:3b:9c:d1:fb:98:02:
7a:d8:89:40:e1:83:ef:4a:20:77:f0:38:98:ef:b8:
0f:db:da:1f:7b:69:fa:a7:6a:3e:6a:d6:cd:14:2f:
80:62:60:fd:4b:c5:8f:6f:6b:08:fa:4e:ac:f1:04:
ce:dc:57:1d:16:e1:ba:46:f2:36:6c:88:2c:da:60:
f1:9a:16:51:d6:25:33:42:72:e5:13:63:c4:76:ef:
16:24:3a:3b:2b:c5:6d:e2:d7:a9:9b:6c:85:41:12:
e3:03:4a:15:85:63:69:52:a5:0c:d4:b3:ab:67:d4:
ec:44:b6:5c:81:83:00:51:21:95:42:8b:fd:21:ec:
b0:1b:7c:26:de:af:f0:2e:4f:f1:40:c6:6a:11:03:
05:96:3a:f3:76:c4:47:32:bc:68:ed:af:5c:ce:d2:
1a:1a:31:40:71:17:a6:73:43:6b:eb:4b:83:7b:26:
ad:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:CB:AF:98:58:40:AF:3E:32:4B:DD:43:C1:6A:2A:DE:EC:D2:3C:42
X509v3 Authority Key Identifier:
keyid:A6:9B:F9:7D:C7:83:49:7F:3C:37:BD:7A:86:E5:99:4A:CE:E7:81:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ppv5fceDSX88N716huWZSs7ngbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9e22b8-4eb1-4d2f-a807-7b94fb43b60a/1/ppv5fceDSX88N716huWZSs7ngbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9e22b8-4eb1-4d2f-a807-7b94fb43b60a/1/ppv5fceDSX88N716huWZSs7ngbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:0e:db:cd:9e:b1:c2:4e:93:77:09:91:86:69:6b:6c:d0:ab:
8d:06:3e:22:09:63:6b:2f:ec:7f:e6:81:42:a0:31:da:7b:da:
03:6a:4e:70:f2:df:d5:17:5a:e7:fb:f3:8b:37:b5:36:b3:0b:
bf:a8:46:93:4d:cf:68:5c:0d:72:f8:2c:12:12:58:2b:d7:8e:
f1:9e:ba:fa:77:64:e1:3e:15:88:e4:a9:e0:76:6a:19:e9:bf:
25:bc:a4:c5:10:f5:27:56:38:26:17:90:64:97:e1:59:a2:d0:
5b:b7:16:66:4b:c5:89:a3:ae:46:6e:d6:2d:22:f7:2f:7b:75:
e0:e1:98:19:e1:5f:80:b2:0a:42:c7:58:82:02:88:48:93:53:
4d:8e:3a:9f:d2:4a:00:e0:e3:de:b1:18:2f:47:25:0f:d2:49:
61:57:d0:36:79:33:a0:85:3f:8b:60:e7:83:a8:3b:d7:ab:43:
a7:3e:b9:ac:09:83:37:fb:8b:35:95:c0:d2:53:e2:5c:0b:f8:
f1:e2:85:43:22:42:65:31:ac:d3:dd:62:a6:c0:7d:05:ab:1d:
c4:b1:75:e7:4c:3d:30:9b:db:0e:2c:3f:73:7f:09:f7:ec:f4:
f3:c0:5c:2a:90:39:84:34:64:ad:63:46:d0:f5:91:64:d7:83:
52:83:00:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:13:22 2025 by rpki-client