Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.mft
File: ppWERHKPWreqgm9DeABc5nkgDVI.mft (raw, json)
Hash identifier: TssHikhcb4A36NzzSu2SvBm2xOMOIYoq5ei1ltabzF0=
Subject key identifier: 0D:CF:96:6E:CA:1C:8D:AA:D2:91:A4:78:6A:FB:8F:8D:20:64:3B:E5
Authority key identifier: A6:95:84:44:72:8F:5A:B7:AA:82:6F:43:78:00:5C:E6:79:20:0D:52
Certificate issuer: /CN=a6958444728f5ab7aa826f4378005ce679200d52
Certificate serial: 019657CB8BC0AFB51BDF2A83C6F3D0D6B13C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ppWERHKPWreqgm9DeABc5nkgDVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.mft
Manifest number: 14FE
Signing time: Mon 21 Apr 2025 10:01:19 +0000
Manifest this update: Mon 21 Apr 2025 10:01:19 +0000
Manifest next update: Tue 22 Apr 2025 10:01:19 +0000
Files and hashes: 1: ppWERHKPWreqgm9DeABc5nkgDVI.crl (hash: dcuEIBJ/f1kOMsGGi3jsvYNGNyupPYiB9i0ti9PKGn8=)
2: z-LF5XIt0VeWFhY7GK5O7xZnBBE.roa (hash: 1pZ4XtZFpZvLcxR/iScQRob6NYsKteymu5FeNxuRtO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ppWERHKPWreqgm9DeABc5nkgDVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:cb:8b:c0:af:b5:1b:df:2a:83:c6:f3:d0:d6:b1:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6958444728f5ab7aa826f4378005ce679200d52
Validity
Not Before: Apr 21 10:01:19 2025 GMT
Not After : Apr 22 10:01:19 2025 GMT
Subject: CN=0dcf966eca1c8daad291a4786afb8f8d20643be5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:bd:3d:a0:d5:dd:98:e1:8c:3c:8d:dd:94:c9:
09:18:ea:9a:64:40:9b:54:b3:b1:ff:9e:1f:f0:10:
f9:24:db:c7:d8:f5:42:2b:13:d0:23:42:0e:dd:e0:
09:bc:5b:f9:89:5d:9a:8b:9e:1c:b6:78:37:0d:84:
65:98:e1:77:35:2c:5c:3b:7f:7f:aa:d2:21:7b:2c:
60:65:fb:bd:3e:55:a1:1f:49:8d:0e:85:8f:3f:44:
33:79:60:b3:24:18:3b:50:10:1b:b7:74:22:75:74:
98:71:50:f6:23:d6:c2:bc:c6:cd:3d:44:34:73:cb:
40:fe:e0:13:45:9f:2a:c0:e1:01:b5:a2:5a:34:c1:
9d:57:2e:b8:9f:72:ba:59:73:4f:8f:22:24:dd:5f:
ed:32:97:09:72:fa:00:e7:67:7e:42:5c:ad:f6:9b:
f4:eb:69:36:88:08:13:9d:44:24:d4:33:94:69:04:
b2:dd:e6:81:78:dc:f4:99:99:1b:4d:ef:b8:3f:b5:
d1:8f:48:07:2a:9a:f1:bd:64:1a:d7:96:f7:e2:29:
3b:3c:00:84:60:a2:0b:30:46:21:a1:4e:93:f1:ff:
36:3e:2a:a6:b7:56:36:1f:8c:b0:36:6f:c0:c8:f7:
e9:b5:49:6f:a6:b4:83:35:b0:e0:2b:c2:83:a8:ec:
82:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:CF:96:6E:CA:1C:8D:AA:D2:91:A4:78:6A:FB:8F:8D:20:64:3B:E5
X509v3 Authority Key Identifier:
keyid:A6:95:84:44:72:8F:5A:B7:AA:82:6F:43:78:00:5C:E6:79:20:0D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ppWERHKPWreqgm9DeABc5nkgDVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:58:f0:9c:6d:93:f0:f6:bb:ec:c2:eb:c8:00:68:13:4e:ae:
0d:f9:6c:c1:3b:74:7e:0d:a6:d2:fe:26:9f:a5:37:d7:04:63:
d4:25:ea:b2:2d:23:02:00:67:d5:f1:ea:9c:64:a8:00:67:25:
7d:8c:c4:d5:25:f3:3d:3c:97:a9:2e:8b:75:99:37:01:6f:93:
b5:5d:61:92:22:12:a9:80:a8:8d:4e:5a:4c:1b:51:5d:46:f6:
95:0e:1f:7d:4e:ca:5a:3d:2f:b7:0f:63:19:11:4d:a5:54:06:
ae:e5:7e:65:f9:fd:9e:c9:14:c9:e1:fa:39:58:4f:21:61:99:
27:df:38:4c:7e:b4:ae:60:78:06:1e:f9:2e:ab:58:97:fd:1c:
3d:ff:14:ec:25:83:82:1d:d8:15:df:73:44:78:ac:cb:7d:8b:
2b:bf:18:c9:cf:81:90:db:17:6e:b3:b0:79:3a:86:ee:34:5d:
c2:09:97:e1:9d:15:84:51:8c:1e:7c:4d:53:28:0e:f6:54:8c:
23:e1:f7:46:45:e1:f6:2a:cb:65:db:8c:7a:a9:38:cb:19:95:
d3:12:02:9b:25:55:f3:17:4d:2f:b8:13:0b:de:b4:b0:f2:9d:
11:a1:76:0b:eb:f2:fe:8c:cc:68:41:1e:c6:f5:b0:3c:6f:e6:
92:9f:87:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZXy4vAr7Ub3yqDxvPQ1rE8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2OTU4NDQ0NzI4ZjVhYjdhYTgyNmY0Mzc4MDA1Y2U2Nzky
MDBkNTIwHhcNMjUwNDIxMTAwMTE5WhcNMjUwNDIyMTAwMTE5WjAzMTEwLwYDVQQD
EygwZGNmOTY2ZWNhMWM4ZGFhZDI5MWE0Nzg2YWZiOGY4ZDIwNjQzYmU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwr09oNXdmOGMPI3dlMkJGOqaZECb
VLOx/54f8BD5JNvH2PVCKxPQI0IO3eAJvFv5iV2ai54ctng3DYRlmOF3NSxcO39/
qtIheyxgZfu9PlWhH0mNDoWPP0QzeWCzJBg7UBAbt3QidXSYcVD2I9bCvMbNPUQ0
c8tA/uATRZ8qwOEBtaJaNMGdVy64n3K6WXNPjyIk3V/tMpcJcvoA52d+Qlyt9pv0
62k2iAgTnUQk1DOUaQSy3eaBeNz0mZkbTe+4P7XRj0gHKprxvWQa15b34ik7PACE
YKILMEYhoU6T8f82Piqmt1Y2H4ywNm/AyPfptUlvprSDNbDgK8KDqOyCvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA3Plm7KHI2q0pGkeGr7j40gZDvlMB8GA1UdIwQY
MBaAFKaVhERyj1q3qoJvQ3gAXOZ5IA1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHBXRVJIS1BXcmVxZ205RGVBQmM1bmtnRFZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9iZGMxZjEtYzE1Ny00MDhiLWFmZTEt
MWI1MTFjNjYzOTc4LzEvcHBXRVJIS1BXcmVxZ205RGVBQmM1bmtnRFZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi9iZGMxZjEtYzE1Ny00MDhiLWFmZTEtMWI1MTFjNjYzOTc4
LzEvcHBXRVJIS1BXcmVxZ205RGVBQmM1bmtnRFZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ1jwnG2T
8Pa77MLryABoE06uDflswTt0fg2m0v4mn6U31wRj1CXqsi0jAgBn1fHqnGSoAGcl
fYzE1SXzPTyXqS6LdZk3AW+TtV1hkiISqYCojU5aTBtRXUb2lQ4ffU7KWj0vtw9j
GRFNpVQGruV+Zfn9nskUyeH6OVhPIWGZJ984TH60rmB4Bh75LqtYl/0cPf8U7CWD
gh3YFd9zRHisy32LK78Yyc+BkNsXbrOweTqG7jRdwgmX4Z0VhFGMHnxNUygO9lSM
I+H3RkXh9irLZduMeqk4yxmV0xICmyVV8xdNL7gTC960sPKdEaF2C+vy/ozMaEEe
xvWwPG/mkp+H+A==
-----END CERTIFICATE-----
Generated at Mon Apr 21 20:09:36 2025 by rpki-client