Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.mft
File: ppWERHKPWreqgm9DeABc5nkgDVI.mft (raw, json)
Hash identifier: pYqM/JCaZX2CLla2OQRX4tUoEmpnagfF7UD3/TdhUvc=
Subject key identifier: 00:E7:52:69:C3:18:25:2F:8E:2F:FA:46:20:81:41:14:C4:A6:9F:AF
Authority key identifier: A6:95:84:44:72:8F:5A:B7:AA:82:6F:43:78:00:5C:E6:79:20:0D:52
Certificate issuer: /CN=a6958444728f5ab7aa826f4378005ce679200d52
Certificate serial: 019A725CF3BC9947439AE2367A2D005A088B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ppWERHKPWreqgm9DeABc5nkgDVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 10:01:25 +0000
Manifest this update: Tue 11 Nov 2025 10:01:25 +0000
Manifest next update: Wed 12 Nov 2025 10:01:25 +0000
Files and hashes: 1: ppWERHKPWreqgm9DeABc5nkgDVI.crl (hash: jFMIWrk+WVaSIoInGTvWZUFsctJvsc6G2Yi+zvHKXbE=)
2: z-LF5XIt0VeWFhY7GK5O7xZnBBE.roa (hash: 1pZ4XtZFpZvLcxR/iScQRob6NYsKteymu5FeNxuRtO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ppWERHKPWreqgm9DeABc5nkgDVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:f3:bc:99:47:43:9a:e2:36:7a:2d:00:5a:08:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6958444728f5ab7aa826f4378005ce679200d52
Validity
Not Before: Nov 11 10:01:25 2025 GMT
Not After : Nov 12 10:01:25 2025 GMT
Subject: CN=00e75269c318252f8e2ffa4620814114c4a69faf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:61:8b:ec:cc:de:12:78:ca:d5:4f:8e:11:80:
eb:4c:a4:2f:ac:35:4c:0d:93:4d:85:ac:84:e0:11:
cc:d6:b7:53:4b:02:96:2d:1d:87:c9:d1:3c:fb:76:
d9:7d:16:22:c4:d6:81:e8:cc:95:fe:b2:f5:46:54:
e6:d5:aa:e1:05:54:c9:be:d4:3b:c1:b2:22:84:0a:
7b:9d:8c:4a:33:61:04:36:56:fd:e2:ed:26:d4:83:
86:81:6f:6d:a8:87:40:4f:83:18:34:47:44:09:33:
c1:05:28:b8:71:27:90:44:f8:2e:33:88:bf:74:bd:
ec:1b:2e:89:92:b2:f0:55:95:34:dc:12:5c:19:89:
38:03:54:25:08:c6:e7:a0:b1:47:1c:fb:24:c3:1b:
03:04:94:f3:a4:2f:a4:4d:7e:54:89:6d:19:79:10:
e9:d3:4d:4c:d1:44:ce:27:95:dd:79:38:58:90:ff:
4a:47:3c:8d:7e:fb:e0:90:68:f8:89:67:66:6b:fb:
95:dc:d7:6a:0a:3f:8d:6c:0a:47:14:cb:e2:98:bf:
17:52:95:2d:f0:a5:f4:e2:45:8b:b9:b9:da:86:9e:
79:6e:2a:30:38:28:f1:25:68:5d:8d:e0:14:bb:2a:
6f:ac:5b:37:27:8d:a9:f3:5c:15:27:7a:cf:0a:42:
ea:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:E7:52:69:C3:18:25:2F:8E:2F:FA:46:20:81:41:14:C4:A6:9F:AF
X509v3 Authority Key Identifier:
keyid:A6:95:84:44:72:8F:5A:B7:AA:82:6F:43:78:00:5C:E6:79:20:0D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ppWERHKPWreqgm9DeABc5nkgDVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:14:eb:0c:9e:e7:a8:3e:b5:cb:7b:82:19:fe:d1:43:88:3c:
08:1e:ba:2c:10:a4:e1:93:05:50:03:c7:31:cb:aa:c0:d5:2e:
a8:95:f8:34:29:7e:62:a5:69:7d:0c:ae:9a:e4:b7:a5:6b:2d:
a0:cc:9a:23:de:bd:64:8b:c9:20:cf:f5:b9:bb:07:a0:a3:cb:
94:0a:f2:45:1d:ef:94:4b:37:bc:61:73:1a:62:e9:86:87:f5:
49:fc:34:a8:e5:f8:7e:27:34:0a:2a:ea:8e:db:39:38:a7:7c:
44:29:51:c9:1a:2f:14:16:11:e5:dc:f9:40:4b:8c:84:d2:37:
5c:bc:3a:6a:70:da:dd:f0:3f:99:9d:52:c1:f3:a4:23:1c:8c:
4f:bc:c2:73:2a:fe:13:0a:54:3c:26:62:12:67:00:55:71:4e:
8b:e6:4a:78:ae:26:86:0f:b7:24:53:6f:e0:fc:69:72:86:ad:
2b:8a:e5:64:4d:7d:f7:c3:80:cb:9f:47:79:47:e2:33:f2:5a:
da:a9:2e:51:81:47:63:9b:52:e7:93:d2:89:4d:a3:ff:38:59:
fe:f3:f3:fd:cc:f4:d7:7c:15:0e:cd:8f:5a:3f:9b:e8:50:43:
86:0b:1d:04:93:56:1c:4f:eb:d0:4d:8f:16:d9:1e:39:80:18:
47:ff:db:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:20 2025 by rpki-client