Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.mft
File: ppWERHKPWreqgm9DeABc5nkgDVI.mft (raw, json)
Hash identifier: kG2jb3lQ2RDmRr86eBzip8doRspscFtRHAUto4W7jTo=
Subject key identifier: F5:DF:B3:5A:02:F1:0B:7E:E2:8D:34:26:B6:14:BF:9C:EF:4C:ED:66
Authority key identifier: A6:95:84:44:72:8F:5A:B7:AA:82:6F:43:78:00:5C:E6:79:20:0D:52
Certificate issuer: /CN=a6958444728f5ab7aa826f4378005ce679200d52
Certificate serial: 0199225545EAB1FEDB3D11BA99AE81C1BFA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ppWERHKPWreqgm9DeABc5nkgDVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.mft
Manifest number: 1670
Signing time: Sun 07 Sep 2025 04:00:37 +0000
Manifest this update: Sun 07 Sep 2025 04:00:37 +0000
Manifest next update: Mon 08 Sep 2025 04:00:37 +0000
Files and hashes: 1: ppWERHKPWreqgm9DeABc5nkgDVI.crl (hash: /wT+fNauxBePBsDxIh7uJW2GIczsdKIFelQ1O/u4Vq0=)
2: z-LF5XIt0VeWFhY7GK5O7xZnBBE.roa (hash: 1pZ4XtZFpZvLcxR/iScQRob6NYsKteymu5FeNxuRtO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ppWERHKPWreqgm9DeABc5nkgDVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:45:ea:b1:fe:db:3d:11:ba:99:ae:81:c1:bf:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6958444728f5ab7aa826f4378005ce679200d52
Validity
Not Before: Sep 7 04:00:37 2025 GMT
Not After : Sep 8 04:00:37 2025 GMT
Subject: CN=f5dfb35a02f10b7ee28d3426b614bf9cef4ced66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1c:75:d3:3d:70:14:6a:8f:b3:28:25:0f:9e:
0f:d9:bb:3b:a0:c4:15:36:a9:da:0d:bc:39:f9:f3:
41:25:86:af:2e:9b:22:86:0c:6f:50:23:80:a5:d4:
1d:01:4d:a6:e3:d7:78:9c:75:fb:e8:5b:b6:06:1c:
f4:f1:5d:b8:89:6e:86:76:08:2d:a4:12:cd:b4:23:
9d:15:32:b7:88:b0:c9:2e:f5:57:f9:7d:b7:42:cc:
53:5f:5e:f5:bc:4a:d8:6a:f2:7c:7f:b5:c1:06:38:
4d:a3:72:ed:02:cc:ee:60:c5:4d:e0:8f:37:39:d2:
e5:6a:69:9f:db:a2:52:c7:8b:8f:ce:70:8d:6d:23:
ad:d2:4b:fa:6c:42:7b:3d:99:3a:52:91:cc:c4:a6:
b6:34:3d:e7:fa:ec:fe:bf:f4:8f:63:97:b1:33:a7:
eb:8d:91:b5:d8:64:4a:6d:5c:b9:12:7a:e3:cf:96:
db:53:68:8a:24:54:6c:8c:df:a2:4c:22:b4:de:68:
50:6f:56:5a:bb:75:d0:86:6c:5a:1c:58:b8:59:ad:
18:9a:c0:a5:d8:09:a5:c8:e4:ae:7f:ff:10:4d:e0:
5b:8c:18:d8:46:0e:c3:85:81:ae:2e:0d:b7:74:2a:
11:f0:a1:79:33:a9:f8:ae:ff:6c:f2:44:c8:85:52:
5e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:DF:B3:5A:02:F1:0B:7E:E2:8D:34:26:B6:14:BF:9C:EF:4C:ED:66
X509v3 Authority Key Identifier:
keyid:A6:95:84:44:72:8F:5A:B7:AA:82:6F:43:78:00:5C:E6:79:20:0D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ppWERHKPWreqgm9DeABc5nkgDVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:ba:1a:8f:1e:f8:97:b2:d6:93:05:92:66:e9:72:48:5c:31:
b7:83:c7:93:b6:1f:a5:63:f8:1d:9e:4f:98:fb:21:9d:de:82:
86:7d:e4:c7:b5:df:93:96:26:25:31:9c:8e:21:98:3d:2c:fc:
fe:10:a1:d9:e0:a1:bf:46:67:74:dc:a6:00:84:50:0a:ed:58:
d8:b0:35:c1:4a:6c:53:d2:2f:e1:14:e4:b9:2c:26:c1:8c:2c:
22:72:69:da:49:36:e3:41:99:c4:4e:a9:14:90:71:76:0f:cf:
c4:84:05:35:28:68:86:ff:ae:84:e4:44:ad:60:a8:b0:5b:10:
e4:3e:08:9d:57:3b:ce:8e:f6:ce:ef:07:21:55:d3:c6:bf:da:
97:68:2e:2d:78:f5:6a:ef:97:d6:1d:1c:ae:8c:c4:c1:74:be:
cc:d0:1a:2a:33:60:ae:df:6a:78:84:79:c0:be:28:f9:3a:98:
de:3e:31:b5:b1:d6:ec:b3:26:36:80:3d:ac:e8:03:67:a8:ec:
29:b0:45:47:ea:49:f2:a4:65:78:2b:d4:a2:30:25:51:87:5d:
3a:f2:15:ff:56:00:7f:9d:dc:32:14:85:4c:cd:03:c3:ca:80:
fa:86:ce:2b:7f:f0:90:18:f8:a6:c9:9c:e8:ff:9e:ad:d1:ab:
b0:aa:63:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiVUXqsf7bPRG6ma6Bwb+oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2OTU4NDQ0NzI4ZjVhYjdhYTgyNmY0Mzc4MDA1Y2U2Nzky
MDBkNTIwHhcNMjUwOTA3MDQwMDM3WhcNMjUwOTA4MDQwMDM3WjAzMTEwLwYDVQQD
EyhmNWRmYjM1YTAyZjEwYjdlZTI4ZDM0MjZiNjE0YmY5Y2VmNGNlZDY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRx10z1wFGqPsyglD54P2bs7oMQV
NqnaDbw5+fNBJYavLpsihgxvUCOApdQdAU2m49d4nHX76Fu2Bhz08V24iW6Gdggt
pBLNtCOdFTK3iLDJLvVX+X23QsxTX171vErYavJ8f7XBBjhNo3LtAszuYMVN4I83
OdLlammf26JSx4uPznCNbSOt0kv6bEJ7PZk6UpHMxKa2ND3n+uz+v/SPY5exM6fr
jZG12GRKbVy5Enrjz5bbU2iKJFRsjN+iTCK03mhQb1Zau3XQhmxaHFi4Wa0YmsCl
2AmlyOSuf/8QTeBbjBjYRg7DhYGuLg23dCoR8KF5M6n4rv9s8kTIhVJeVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPXfs1oC8Qt+4o00JrYUv5zvTO1mMB8GA1UdIwQY
MBaAFKaVhERyj1q3qoJvQ3gAXOZ5IA1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHBXRVJIS1BXcmVxZ205RGVBQmM1bmtnRFZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9iZGMxZjEtYzE1Ny00MDhiLWFmZTEt
MWI1MTFjNjYzOTc4LzEvcHBXRVJIS1BXcmVxZ205RGVBQmM1bmtnRFZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi9iZGMxZjEtYzE1Ny00MDhiLWFmZTEtMWI1MTFjNjYzOTc4
LzEvcHBXRVJIS1BXcmVxZ205RGVBQmM1bmtnRFZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApboajx74
l7LWkwWSZulySFwxt4PHk7YfpWP4HZ5PmPshnd6Chn3kx7Xfk5YmJTGcjiGYPSz8
/hCh2eChv0ZndNymAIRQCu1Y2LA1wUpsU9Iv4RTkuSwmwYwsInJp2kk240GZxE6p
FJBxdg/PxIQFNShohv+uhORErWCosFsQ5D4InVc7zo72zu8HIVXTxr/al2guLXj1
au+X1h0crozEwXS+zNAaKjNgrt9qeIR5wL4o+TqY3j4xtbHW7LMmNoA9rOgDZ6js
KbBFR+pJ8qRleCvUojAlUYddOvIV/1YAf53cMhSFTM0Dw8qA+obOK3/wkBj4psmc
6P+erdGrsKpjOA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:08:23 2025 by rpki-client