Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/9e22b8-4eb1-4d2f-a807-7b94fb43b60a/1/ppv5fceDSX88N716huWZSs7ngbA.mft
File: ppv5fceDSX88N716huWZSs7ngbA.mft (raw, json)
Hash identifier: B9XgRnwJ2ENotvmxfrXVuOfxtmcmublDUsthxcjaVLc=
Subject key identifier: 1B:B7:27:D4:A9:37:A1:9D:BA:EE:90:52:03:30:24:27:7D:5E:B8:B6
Authority key identifier: A6:9B:F9:7D:C7:83:49:7F:3C:37:BD:7A:86:E5:99:4A:CE:E7:81:B0
Certificate issuer: /CN=a69bf97dc783497f3c37bd7a86e5994acee781b0
Certificate serial: 019A71B83CD8C7DADA3AC81926AA894F5F66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ppv5fceDSX88N716huWZSs7ngbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/9e22b8-4eb1-4d2f-a807-7b94fb43b60a/1/ppv5fceDSX88N716huWZSs7ngbA.mft
Manifest number: 1117
Signing time: Tue 11 Nov 2025 07:01:30 +0000
Manifest this update: Tue 11 Nov 2025 07:01:30 +0000
Manifest next update: Wed 12 Nov 2025 07:01:30 +0000
Files and hashes: 1: ppv5fceDSX88N716huWZSs7ngbA.crl (hash: 3j3t0Xu84uFr9QR1DJCq1gzLhGtxvHP3Dcwbnp1/k/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/9e22b8-4eb1-4d2f-a807-7b94fb43b60a/1/ppv5fceDSX88N716huWZSs7ngbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/9e22b8-4eb1-4d2f-a807-7b94fb43b60a/1/ppv5fceDSX88N716huWZSs7ngbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ppv5fceDSX88N716huWZSs7ngbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:3c:d8:c7:da:da:3a:c8:19:26:aa:89:4f:5f:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a69bf97dc783497f3c37bd7a86e5994acee781b0
Validity
Not Before: Nov 11 07:01:30 2025 GMT
Not After : Nov 12 07:01:30 2025 GMT
Subject: CN=1bb727d4a937a19dbaee9052033024277d5eb8b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e6:0d:8e:00:07:0c:76:1e:11:b5:f4:1e:85:
01:d3:6c:c6:b7:15:b9:39:68:ae:7e:8d:77:b0:c3:
91:f9:15:79:af:65:20:b3:0f:35:33:5c:31:ad:d8:
36:48:18:be:36:7d:6d:0b:ae:60:27:cf:ee:5a:c0:
75:c9:75:e2:4d:b9:01:38:65:f6:4f:04:34:4e:d6:
e3:cb:57:0d:84:c2:b0:77:7e:3a:b6:bb:7c:cf:b8:
12:28:ca:ee:31:89:de:7c:ea:2d:ad:b3:3d:b8:83:
72:ad:e1:7d:9a:bb:1a:b6:6b:55:7f:fd:f8:3a:21:
d8:30:29:fb:3b:83:e4:7f:c5:bd:2e:e4:b7:e3:26:
b2:dc:96:a1:6f:9d:73:11:20:12:d1:ea:8a:4b:02:
4e:22:27:da:d7:b1:07:de:5d:d0:f7:e1:db:18:a0:
60:7b:ad:2a:8e:86:26:ab:a8:f9:5a:d6:ba:03:f5:
3b:3f:44:cf:49:a3:d6:58:60:8d:fc:06:07:e4:2b:
0c:44:21:10:9c:fa:54:41:8d:e2:be:8b:42:04:05:
28:46:c7:88:68:3b:dd:a6:55:04:12:cb:fb:99:f7:
26:b9:df:87:51:e6:9e:9e:48:90:46:9e:54:f4:77:
7d:53:f3:f6:30:2b:79:46:5a:fd:f2:82:79:53:32:
46:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:B7:27:D4:A9:37:A1:9D:BA:EE:90:52:03:30:24:27:7D:5E:B8:B6
X509v3 Authority Key Identifier:
keyid:A6:9B:F9:7D:C7:83:49:7F:3C:37:BD:7A:86:E5:99:4A:CE:E7:81:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ppv5fceDSX88N716huWZSs7ngbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9e22b8-4eb1-4d2f-a807-7b94fb43b60a/1/ppv5fceDSX88N716huWZSs7ngbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9e22b8-4eb1-4d2f-a807-7b94fb43b60a/1/ppv5fceDSX88N716huWZSs7ngbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:a8:ea:95:46:fc:2a:90:97:d2:9f:71:34:0c:5c:46:60:a0:
5b:5f:56:d4:96:6f:67:c2:52:d6:07:3c:e6:fb:86:d4:06:58:
ff:44:a4:54:07:13:04:47:bd:67:26:ae:28:77:c7:58:79:2e:
e5:7f:23:df:e6:73:b1:51:5f:ad:87:44:c1:b0:7e:ce:ba:fb:
96:fa:db:e0:60:06:eb:e4:c6:05:db:dd:6b:26:4e:25:dc:5b:
48:9a:78:0a:c4:cc:16:14:ed:43:42:55:2d:51:f9:af:25:30:
c8:b2:b4:7f:ee:b8:db:e0:ff:9b:93:8d:9e:21:4a:e9:c3:d9:
3c:f7:0b:bb:b4:aa:ff:70:cc:3a:8d:b2:9c:b9:a8:a1:74:51:
dd:e2:5f:12:2f:9b:0a:4a:ba:56:99:e3:08:66:a7:0f:90:61:
b5:95:20:75:e1:f0:ae:ec:c6:84:df:a3:47:3b:7d:57:49:31:
2e:93:da:83:99:24:66:e3:f5:89:45:e5:fe:82:6e:0b:eb:b5:
82:f0:78:8c:6a:f1:f5:bb:0a:d4:f6:26:4e:b5:f6:c6:48:f4:
0d:4b:ac:39:11:36:bb:ea:f9:04:9f:c5:2b:24:9b:dd:b3:d1:
7f:03:03:9a:5c:96:7f:7c:f7:ed:32:c9:af:f8:76:87:cd:5f:
9b:37:50:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:24 2025 by rpki-client