Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/ppTwBfWXfDI-zb6pxfjMo2nmXGc.mft
File: ppTwBfWXfDI-zb6pxfjMo2nmXGc.mft (raw, json)
Hash identifier: Kxj4SitYnfMrRLT7W/h/MjqWTg4kEbdsY2LS3Ed9gLE=
Subject key identifier: 38:ED:B4:CB:02:1F:98:C4:74:16:1D:CA:F3:31:4B:70:CC:8F:3F:86
Authority key identifier: A6:94:F0:05:F5:97:7C:32:3E:CD:BE:A9:C5:F8:CC:A3:69:E6:5C:67
Certificate issuer: /CN=a694f005f5977c323ecdbea9c5f8cca369e65c67
Certificate serial: 01974A43D12A782441F1AE3DA0695AE7A9B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ppTwBfWXfDI-zb6pxfjMo2nmXGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/ppTwBfWXfDI-zb6pxfjMo2nmXGc.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 12:00:47 +0000
Manifest this update: Sat 07 Jun 2025 12:00:47 +0000
Manifest next update: Sun 08 Jun 2025 12:00:47 +0000
Files and hashes: 1: La2Bx3Kg3yNgjzXlOayck9yYHYs.roa (hash: RlSJSM6obvvJNVAHyjc4ol2rPsLp9JSNr1eJ2DwTo2Q=)
2: MrkyT3HsZnc05eV0DUl_cIOGSb0.roa (hash: Rbd1whscUt8OERBLf2JXNylefFQ5sp0l42mdjx1lxUo=)
3: bkH9wHIb-OrCqJuyQRHuIXtQk1c.roa (hash: JMTNFJ1w/NwtHoH0YImfgSSrGbnKKHMXYAPq6CQxkXc=)
4: ppTwBfWXfDI-zb6pxfjMo2nmXGc.crl (hash: r9OSPORBJKpBcrhJQSqkI0XL3oHqgPhb8clxs8IfobQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/ppTwBfWXfDI-zb6pxfjMo2nmXGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/ppTwBfWXfDI-zb6pxfjMo2nmXGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ppTwBfWXfDI-zb6pxfjMo2nmXGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:d1:2a:78:24:41:f1:ae:3d:a0:69:5a:e7:a9:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a694f005f5977c323ecdbea9c5f8cca369e65c67
Validity
Not Before: Jun 7 12:00:47 2025 GMT
Not After : Jun 8 12:00:47 2025 GMT
Subject: CN=38edb4cb021f98c474161dcaf3314b70cc8f3f86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:6c:22:e9:b9:5a:4a:39:f3:4f:71:88:48:43:
5b:b6:40:1c:52:4f:77:a1:e6:d5:9d:6d:a1:bc:f1:
21:55:59:f6:bf:2c:ac:35:56:46:ba:f4:64:bb:fe:
59:01:e0:b9:d8:c1:eb:5f:26:e3:ad:8e:16:6c:43:
b7:00:1f:f5:ec:24:df:cf:e4:28:4a:9e:20:85:07:
2c:d2:db:fc:23:b8:a1:67:3d:56:e5:4f:ce:82:62:
85:c6:e7:e1:89:a0:89:e5:34:21:64:cb:b0:ca:ea:
83:d5:c8:13:38:a6:dc:dc:db:d5:2d:1e:0e:0c:3d:
f5:b8:dc:6d:e1:5a:3a:a4:19:62:ec:6a:22:d2:d1:
ba:60:e1:c2:34:61:b3:7d:4a:27:9a:9b:0f:c7:b5:
97:25:99:77:ae:16:1d:79:2b:80:2c:b5:28:aa:3a:
ec:82:ca:9d:3a:38:75:3e:5a:49:e9:7a:28:ff:57:
5f:2b:a8:53:fa:de:cf:ae:1a:3c:c7:13:a1:f8:f6:
b3:c0:cd:48:f1:6f:b5:a1:e2:9f:43:d4:a9:33:05:
a2:01:7a:b6:8b:fc:c6:0d:a2:84:95:76:91:f4:cc:
33:e5:ce:52:43:fc:2a:6f:a9:0c:44:43:7f:66:55:
2b:39:cf:2a:76:42:7e:4c:7e:f1:fd:fc:47:eb:26:
fd:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:ED:B4:CB:02:1F:98:C4:74:16:1D:CA:F3:31:4B:70:CC:8F:3F:86
X509v3 Authority Key Identifier:
keyid:A6:94:F0:05:F5:97:7C:32:3E:CD:BE:A9:C5:F8:CC:A3:69:E6:5C:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ppTwBfWXfDI-zb6pxfjMo2nmXGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/ppTwBfWXfDI-zb6pxfjMo2nmXGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/ppTwBfWXfDI-zb6pxfjMo2nmXGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:6a:27:db:e6:27:75:3f:93:7c:94:70:46:fa:3f:6e:95:ef:
72:08:07:b1:60:ad:eb:66:72:c5:dc:bd:80:0d:25:80:b4:7d:
f9:9e:b7:27:6e:6e:78:0c:5a:1b:c1:d5:6b:b9:e4:16:f9:93:
a1:9b:55:08:12:36:1e:09:51:ab:ab:b7:34:eb:a4:b0:c1:10:
12:14:86:85:b3:49:ff:5e:cf:13:50:f2:53:bf:47:7f:3b:9d:
0d:5b:6a:e4:42:70:19:8e:e8:b6:64:cc:04:80:30:80:73:53:
79:d0:43:27:94:c7:65:dc:a0:66:5f:75:5c:41:86:b8:af:95:
ef:f4:11:a8:47:84:1c:ac:6f:98:f1:0b:1a:8e:c4:17:1b:a5:
1c:0e:78:7e:e2:de:71:57:62:ad:d0:d8:e8:c0:1a:a4:82:6f:
cd:1c:91:23:10:1e:17:7c:17:49:56:3b:78:66:a5:13:56:20:
2e:ef:37:88:7a:62:70:d8:74:d1:fe:53:80:9b:14:1c:76:37:
a7:6c:00:1c:c1:88:09:7d:5c:b5:6c:1d:ea:6d:a4:25:a6:73:
f6:a6:dd:b1:2a:66:cf:43:ec:16:d3:e6:c0:18:18:93:19:94:
46:37:22:0d:6a:74:9b:c1:af:0e:ce:4a:66:76:16:3a:e9:07:
df:6e:1f:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:29:13 2025 by rpki-client