Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft
File: ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft (raw, json)
Hash identifier: djwk/6jXqZ0JwJW+3weed0BxL5pu6QDj8CzUX0AjhDM=
Subject key identifier: FA:D5:95:6B:99:16:2F:CB:92:15:87:A9:68:0B:A0:68:78:E3:49:6E
Authority key identifier: A6:97:49:FA:23:37:DB:33:A7:64:74:EB:81:2C:03:4E:30:50:9D:2A
Certificate issuer: /CN=a69749fa2337db33a76474eb812c034e30509d2a
Certificate serial: 01984AAE7EC987A53BE4762141210124E2B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ppdJ-iM32zOnZHTrgSwDTjBQnSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft
Manifest number: 0574
Signing time: Sun 27 Jul 2025 07:00:06 +0000
Manifest this update: Sun 27 Jul 2025 07:00:06 +0000
Manifest next update: Mon 28 Jul 2025 07:00:06 +0000
Files and hashes: 1: AKpMQvIIqQzXRs3Ululs7jvONDY.roa (hash: BIy70VCzVM+Xa+CdmKbiFZkREDOaRaKjJ7xUey551TY=)
2: ppdJ-iM32zOnZHTrgSwDTjBQnSo.crl (hash: wrIgGzIXHpup4Luu6DH4bRM6IcHJCoJwUKjWCesbeZ0=)
3: xwhdiFLdj-4M8l9XUnyeFRJXGwQ.roa (hash: VoSzy1kKxVH6beyOekb646N9QsT3/EG5ENUuXQtb21o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ppdJ-iM32zOnZHTrgSwDTjBQnSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:7e:c9:87:a5:3b:e4:76:21:41:21:01:24:e2:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a69749fa2337db33a76474eb812c034e30509d2a
Validity
Not Before: Jul 27 07:00:06 2025 GMT
Not After : Jul 28 07:00:06 2025 GMT
Subject: CN=fad5956b99162fcb921587a9680ba06878e3496e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:08:13:d1:2e:51:27:78:59:31:b6:79:4d:79:
5e:47:f5:cb:55:85:0c:f1:bf:6f:a4:73:f5:a4:00:
c3:7d:10:e7:af:e5:78:27:2f:04:0b:46:d1:b4:0c:
b5:86:95:77:1b:8a:d1:f9:1a:5b:c5:c1:60:6a:1c:
77:fb:b3:01:7a:3a:20:21:f3:ee:dd:cf:ad:92:dd:
07:33:6b:ff:95:56:b2:89:7a:50:1a:0e:89:54:91:
df:98:b2:20:58:6a:f9:08:5c:80:be:f0:45:80:33:
5a:08:04:b6:d6:60:e1:82:e0:04:ad:da:4a:14:20:
93:41:98:3d:bc:0e:ac:de:0b:5f:9b:75:4b:9d:92:
cf:1c:ac:6f:66:5a:50:15:40:3b:56:52:fc:f8:37:
49:2e:c1:f7:89:06:5d:1e:44:f7:08:10:3c:c1:68:
79:98:31:f1:ec:4f:6a:76:0e:7b:88:f3:36:ea:b4:
87:70:8a:67:85:76:50:2c:b2:b3:9b:cf:00:a8:28:
20:68:f0:c9:b5:e8:08:cc:33:84:bb:21:dd:72:d3:
bd:99:93:10:22:06:6a:4a:29:fb:5c:96:67:07:4f:
2b:46:fd:35:94:fe:1d:cd:00:18:f3:33:c6:46:93:
73:bf:2a:4e:9b:e6:4b:1d:fd:99:80:84:74:26:d8:
f2:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:D5:95:6B:99:16:2F:CB:92:15:87:A9:68:0B:A0:68:78:E3:49:6E
X509v3 Authority Key Identifier:
keyid:A6:97:49:FA:23:37:DB:33:A7:64:74:EB:81:2C:03:4E:30:50:9D:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ppdJ-iM32zOnZHTrgSwDTjBQnSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:93:d2:a0:9f:29:4c:ab:5a:e4:9d:b7:f1:ab:b2:6e:e2:22:
f8:ef:f1:28:05:d1:de:ef:f2:6b:47:6d:f8:89:cf:74:7e:d2:
d1:67:0a:50:9f:14:23:6c:8e:e1:f4:56:de:b4:c3:a5:13:7e:
2a:8f:39:a6:37:d2:e6:6b:31:dc:aa:7c:bd:e0:de:56:e0:df:
f5:84:5e:25:06:0e:9f:80:18:6f:cd:48:9a:4f:73:11:48:b4:
b4:27:2c:5d:f6:84:fd:22:e2:49:0f:09:9b:7c:77:72:62:30:
f0:70:89:7c:86:8c:55:03:01:71:4a:40:f0:bc:7d:37:0b:c8:
e0:5f:47:7f:91:9d:7f:3f:5c:06:9d:74:fd:1e:db:da:38:27:
c5:81:9d:11:3d:e0:c5:b4:e1:f0:1c:f0:7a:ee:84:c2:d5:a3:
df:58:55:e6:4b:0e:4f:24:b9:79:cf:f7:ac:74:af:0e:28:00:
fb:e6:46:7d:fa:d0:d6:b8:fb:50:e4:d1:07:12:e6:4c:9c:27:
92:ef:f4:e8:05:88:3f:50:a9:56:7a:dd:db:97:a1:80:ab:ed:
8a:6e:52:1f:92:13:a7:96:87:88:d2:4a:47:8e:f7:a6:ac:09:
c2:38:7d:3a:ee:bf:e2:7e:83:ab:57:de:6f:72:0f:91:45:9f:
fe:1a:af:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:37:16 2025 by rpki-client