Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft
File: PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft (raw, json)
Hash identifier: uzPnoxG/w0pEG18pgZWqSlmh+Jnt18vyBgouobi794k=
Subject key identifier: 77:1C:C9:2A:5E:E2:4F:52:1A:A3:AE:02:34:FF:77:80:5B:2A:48:1C
Authority key identifier: 3C:FA:A4:0F:62:63:E0:0D:12:91:69:85:76:A6:17:A5:B5:D6:8A:9C
Certificate issuer: /CN=3cfaa40f6263e00d1291698576a617a5b5d68a9c
Certificate serial: 01974F6A9427A1E8DF3BC26941520D428E19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PPqkD2Jj4A0SkWmFdqYXpbXWipw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft
Manifest number: 0CC5
Signing time: Sun 08 Jun 2025 12:01:13 +0000
Manifest this update: Sun 08 Jun 2025 12:01:13 +0000
Manifest next update: Mon 09 Jun 2025 12:01:13 +0000
Files and hashes: 1: PPqkD2Jj4A0SkWmFdqYXpbXWipw.crl (hash: xNOMNnwJvIcWXniw3hVqk3cYAmm0Tfdn3889gLFHa4g=)
2: Zudt2t67uMUQbMO8N99rmxJB1wQ.roa (hash: SIlAW/DlBSg5+XbRtnFyzPAIYziyY+yFv6/k5lPUFJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PPqkD2Jj4A0SkWmFdqYXpbXWipw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:6a:94:27:a1:e8:df:3b:c2:69:41:52:0d:42:8e:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cfaa40f6263e00d1291698576a617a5b5d68a9c
Validity
Not Before: Jun 8 12:01:13 2025 GMT
Not After : Jun 9 12:01:13 2025 GMT
Subject: CN=771cc92a5ee24f521aa3ae0234ff77805b2a481c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:97:62:55:24:af:e1:38:e4:ec:79:f6:b5:ef:
8c:5d:07:88:3c:a3:7d:da:00:b5:87:9e:6b:44:16:
dd:52:5f:e0:bc:b4:b5:67:eb:2f:a3:bd:67:31:e6:
e5:a8:a3:c7:2d:f9:98:c6:8d:34:f9:e1:1b:0a:d5:
a3:67:a1:31:6d:25:92:0b:21:d2:33:06:fd:ff:31:
fb:78:6d:8e:24:e9:f8:87:cb:62:9d:f7:bd:26:ba:
72:fe:e2:2c:35:fd:03:ed:84:45:57:70:14:3a:d4:
33:f2:d6:b9:05:78:e3:98:ba:d6:86:66:1f:95:4d:
97:67:9b:82:d3:57:f7:13:a2:00:ec:41:b5:ed:10:
9e:36:f6:78:59:33:67:19:a9:1a:d6:e6:4c:1a:b7:
a7:34:c5:80:30:79:9d:db:49:c5:89:2a:20:64:2d:
e6:01:78:c3:bf:ff:4c:d4:ea:f1:ed:55:a8:3f:61:
07:c2:4c:ed:a2:5c:6a:b7:88:11:cf:db:bc:39:f7:
bd:da:df:1b:f8:0e:5e:f1:ce:e4:7c:a8:5b:9c:55:
fc:88:fa:41:4f:07:45:20:30:bb:f8:34:1e:e4:ca:
58:6d:10:23:a7:df:f6:a1:ff:f7:2f:93:73:a7:09:
b5:fe:e0:9b:ac:a5:09:c1:ec:18:0d:1c:fb:ef:c0:
22:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:1C:C9:2A:5E:E2:4F:52:1A:A3:AE:02:34:FF:77:80:5B:2A:48:1C
X509v3 Authority Key Identifier:
keyid:3C:FA:A4:0F:62:63:E0:0D:12:91:69:85:76:A6:17:A5:B5:D6:8A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PPqkD2Jj4A0SkWmFdqYXpbXWipw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:c5:46:67:81:17:22:b6:75:a3:77:c7:78:3f:f6:5c:4c:b0:
f2:5f:c0:96:0e:a1:56:a7:ac:1a:28:af:47:f6:4a:c4:23:ec:
1f:29:2f:9e:e5:ec:51:5d:e4:79:a7:70:92:c2:50:27:83:71:
03:a0:6e:6e:6b:88:e7:35:91:54:d8:b9:9a:3c:59:fe:84:91:
fc:b7:de:49:01:54:e9:94:af:fa:8a:27:b7:09:d0:70:e9:57:
27:b4:54:b8:c0:0d:3c:40:e4:12:db:5d:4b:7c:e0:6b:b6:cf:
4c:27:31:bf:eb:f7:3b:a8:46:b1:43:b2:22:41:93:d2:e3:db:
71:c7:68:60:f9:95:b5:88:e7:2c:03:91:18:f5:8d:7d:fc:27:
e3:da:b5:9c:df:64:94:21:b4:1c:6a:1e:ff:2d:ff:99:cc:f3:
f8:ba:7b:a9:1f:bc:7c:19:28:16:bf:8f:a8:a2:da:60:8c:9b:
e7:1a:26:e7:59:ab:6b:29:af:96:fa:d2:19:b8:3e:c7:64:f7:
82:b8:27:f7:cc:ff:17:e0:a5:92:17:52:bf:1e:36:50:9a:09:
82:41:1f:35:af:e6:14:cb:8b:4b:fd:69:7d:a4:ea:af:db:fc:
9a:5c:b9:8c:ec:9b:fd:11:e9:43:50:85:6d:b0:39:6d:e9:47:
75:ae:17:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 19:55:25 2025 by rpki-client