Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.mft
File: ppR2gdoNt_55MV7G29oov41mD8A.mft (raw, json)
Hash identifier: 5q/aes/VmZI088MzMC0tcrqHfxcbML2ZUPrh1yNcRR8=
Subject key identifier: 53:E1:7F:8C:C4:DA:DE:EE:A9:16:50:5A:05:87:71:EA:CA:F7:D2:E6
Authority key identifier: A6:94:76:81:DA:0D:B7:FE:79:31:5E:C6:DB:DA:28:BF:8D:66:0F:C0
Certificate issuer: /CN=a6947681da0db7fe79315ec6dbda28bf8d660fc0
Certificate serial: 01996246CFDAE22C83543CC57FE831684C15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ppR2gdoNt_55MV7G29oov41mD8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.mft
Manifest number: 1694
Signing time: Fri 19 Sep 2025 14:00:31 +0000
Manifest this update: Fri 19 Sep 2025 14:00:31 +0000
Manifest next update: Sat 20 Sep 2025 14:00:31 +0000
Files and hashes: 1: W6o9lvJcnnR6KT19lEo85DcjBW4.roa (hash: 4q2mkPLtF8C2yzu3YKcCMenK0cywITJjv++cimOpwfA=)
2: ppR2gdoNt_55MV7G29oov41mD8A.crl (hash: di8MO0UmoPpj1vQUSpZUlgiO+SrDBXMKP/JGVr2GnlU=)
3: uGLt9hGh4szGgjBLbl_ULXYRxjI.roa (hash: WEHghF5NVFRIrBkSAbOMCvIKt32/zSBJMSFPbhfZlrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/ppR2gdoNt_55MV7G29oov41mD8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Sep 2025 14:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:62:46:cf:da:e2:2c:83:54:3c:c5:7f:e8:31:68:4c:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6947681da0db7fe79315ec6dbda28bf8d660fc0
Validity
Not Before: Sep 19 14:00:31 2025 GMT
Not After : Sep 20 14:00:31 2025 GMT
Subject: CN=53e17f8cc4dadeeea916505a058771eacaf7d2e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:33:12:ac:a1:c4:42:c3:2f:0b:ca:ba:f6:37:
17:9d:3e:57:2f:38:2e:80:b2:02:93:5b:fa:8e:a6:
52:86:be:4d:32:07:37:62:fd:27:81:da:ae:d6:9c:
2a:01:00:fa:ff:d7:17:e3:06:c6:91:c2:be:6f:3f:
9a:90:bd:64:ac:e1:c7:83:e2:6f:f3:0d:53:38:82:
b4:b1:8f:09:b7:77:e5:87:dd:76:b8:6c:f8:50:35:
73:eb:c6:2f:bf:33:75:01:1f:79:a7:f4:09:f6:ee:
58:c9:f9:e0:a1:78:77:32:7c:d4:c3:35:1c:96:f6:
61:58:5a:56:ee:02:e7:24:65:d6:a3:57:1b:fa:cf:
ea:77:50:15:1e:9e:91:09:3c:62:39:15:19:b8:c6:
0c:09:66:b2:6b:19:9f:bf:10:13:4e:68:1b:5e:7f:
60:a3:9e:26:a9:e1:48:81:d3:ae:af:22:ae:7a:50:
05:40:04:dc:82:59:a1:8a:6c:bc:b9:b8:6e:ca:65:
21:41:33:fe:4c:18:4d:ed:71:ea:42:50:e1:01:5c:
f0:29:50:70:6d:95:de:7d:db:8d:bf:2f:a6:35:89:
33:d8:2e:8d:55:8b:dc:91:a8:f8:bd:3a:38:8e:bb:
b5:61:52:ed:d9:c3:ec:b7:55:ca:c3:d6:09:ef:38:
ff:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:E1:7F:8C:C4:DA:DE:EE:A9:16:50:5A:05:87:71:EA:CA:F7:D2:E6
X509v3 Authority Key Identifier:
keyid:A6:94:76:81:DA:0D:B7:FE:79:31:5E:C6:DB:DA:28:BF:8D:66:0F:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ppR2gdoNt_55MV7G29oov41mD8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:52:de:30:56:0f:1e:0c:43:08:e2:89:bf:3e:0f:32:8d:bd:
5d:df:a9:47:6a:73:1d:95:3a:f0:12:d4:ee:77:88:38:12:1e:
56:e7:fd:36:89:59:ce:28:ab:d4:e2:4e:bc:46:a7:47:82:0c:
c1:6c:55:2c:96:ee:08:a4:91:b9:c8:63:17:11:d9:ad:4a:e5:
3a:80:d0:d4:c6:66:73:3c:c5:75:3c:b8:cd:c2:5d:38:7e:b4:
4b:e4:fe:28:f8:52:b7:7b:8d:2d:c4:4b:1d:25:e7:3c:c2:d6:
55:ba:29:f0:8e:f4:6e:2f:04:1d:e7:ee:90:a2:99:d1:4d:92:
1b:c4:33:0c:1f:5a:ac:08:9b:f0:bb:1c:95:1d:2c:5b:61:95:
5b:25:5c:7a:e3:39:3c:1f:39:ed:c7:b4:36:53:c1:d7:51:48:
81:47:00:3e:ca:74:31:db:78:f3:ea:df:4c:ff:3a:eb:69:0a:
69:c0:50:71:cc:6f:aa:42:89:dd:d4:0f:9f:ae:f0:69:03:a4:
2b:27:22:32:14:32:ee:e0:da:f5:bf:6b:f3:58:28:94:ef:15:
3e:d4:98:74:e0:81:87:63:34:88:78:94:ca:c4:a3:f7:9e:ab:
48:1a:ae:43:76:6d:df:d0:40:1f:4d:90:9d:aa:73:ff:01:7c:
5e:15:9b:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 18:10:18 2025 by rpki-client