Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft
File: ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft (raw, json)
Hash identifier: mODf1WX3/K5t1+U1FC6dxJXXEBRLCIASt7NyPjZSQh8=
Subject key identifier: 45:52:19:DF:50:C8:FF:84:6C:CE:36:68:DF:35:19:61:4E:BF:4E:9F
Authority key identifier: A6:97:49:FA:23:37:DB:33:A7:64:74:EB:81:2C:03:4E:30:50:9D:2A
Certificate issuer: /CN=a69749fa2337db33a76474eb812c034e30509d2a
Certificate serial: 019749D580D893D0A9F6010386979E83B4CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ppdJ-iM32zOnZHTrgSwDTjBQnSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft
Manifest number: 04EF
Signing time: Sat 07 Jun 2025 10:00:18 +0000
Manifest this update: Sat 07 Jun 2025 10:00:18 +0000
Manifest next update: Sun 08 Jun 2025 10:00:18 +0000
Files and hashes: 1: AKpMQvIIqQzXRs3Ululs7jvONDY.roa (hash: BIy70VCzVM+Xa+CdmKbiFZkREDOaRaKjJ7xUey551TY=)
2: ppdJ-iM32zOnZHTrgSwDTjBQnSo.crl (hash: o8CUrlXQJvlhV+acmuE3BQrEzur3fR2Wmtg3BTF5l0s=)
3: xwhdiFLdj-4M8l9XUnyeFRJXGwQ.roa (hash: VoSzy1kKxVH6beyOekb646N9QsT3/EG5ENUuXQtb21o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ppdJ-iM32zOnZHTrgSwDTjBQnSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:80:d8:93:d0:a9:f6:01:03:86:97:9e:83:b4:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a69749fa2337db33a76474eb812c034e30509d2a
Validity
Not Before: Jun 7 10:00:18 2025 GMT
Not After : Jun 8 10:00:18 2025 GMT
Subject: CN=455219df50c8ff846cce3668df3519614ebf4e9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:da:8c:67:2d:15:85:d4:62:11:18:89:2e:0c:
47:fb:c0:d5:3b:ef:10:5a:62:9c:a8:da:01:c7:7d:
64:d2:7a:58:7e:8b:e7:9f:af:6e:22:d8:2d:38:d3:
25:f0:c9:29:a1:2b:f4:3b:7f:28:3c:96:cc:35:2f:
0d:4e:50:4a:ad:54:ea:80:7e:de:18:69:59:db:c5:
a6:68:d7:df:f1:1d:fc:88:ca:95:33:0e:44:1b:5f:
33:68:d0:a7:ed:ff:a2:c9:cd:53:09:f7:41:63:1f:
88:e6:d7:b8:18:ab:f7:59:1f:db:d2:6e:89:cc:3e:
cc:92:b3:65:d0:23:f1:fe:52:95:20:4f:cc:ac:d7:
39:78:ef:6f:37:43:76:89:42:7c:0a:ce:dd:44:44:
c9:86:63:e6:99:04:0b:bd:ca:65:19:ac:f1:26:a3:
a6:12:c3:b7:b0:50:b3:62:14:db:3f:eb:d7:48:e6:
0b:ab:0b:b3:76:06:86:b0:57:f9:69:a3:61:03:17:
01:fc:dc:78:65:76:ac:67:50:32:54:50:bf:fe:8c:
66:1e:92:49:db:5d:2f:f9:0d:c7:f9:fa:7b:cb:25:
42:4a:2a:8f:46:3a:26:47:47:33:63:9c:ac:e1:c5:
7a:8c:9c:90:6c:a4:0e:9f:82:03:67:ba:cf:54:5b:
c4:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:52:19:DF:50:C8:FF:84:6C:CE:36:68:DF:35:19:61:4E:BF:4E:9F
X509v3 Authority Key Identifier:
keyid:A6:97:49:FA:23:37:DB:33:A7:64:74:EB:81:2C:03:4E:30:50:9D:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ppdJ-iM32zOnZHTrgSwDTjBQnSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:86:14:29:2c:42:52:a8:ab:63:cf:76:5f:f6:83:df:90:93:
df:26:49:4e:cb:40:10:68:ab:0e:c0:0d:03:17:3b:e4:0a:99:
32:fb:e0:19:1c:c4:39:dd:21:8c:66:11:d7:93:2d:92:8c:75:
fa:57:ea:5e:d1:26:d1:e1:5e:c0:81:0a:98:46:28:89:57:99:
34:56:c2:74:28:25:a6:87:79:ee:1a:31:8c:27:f9:04:0e:c6:
87:f8:a6:a9:b5:5b:03:f2:df:ac:11:a3:66:45:f1:0a:91:56:
6b:d2:3e:db:8f:64:31:d7:cc:4b:62:06:d2:6e:37:48:bf:eb:
f2:f1:13:2b:88:76:7f:2e:3f:52:d4:8c:57:1c:a9:75:71:be:
ed:37:c5:b7:74:5c:08:16:8b:89:08:70:84:af:99:3b:f3:15:
da:4f:4f:f0:f1:e1:8a:f6:ad:10:58:3b:f2:20:76:97:09:7a:
57:1a:95:19:59:7b:3b:a9:86:fb:65:6e:6d:fc:35:d9:ef:b4:
ed:ce:2c:a1:4f:90:c8:52:2d:f8:58:5a:9f:47:5c:51:47:d6:
63:4c:12:56:6b:1b:cf:c2:f8:d3:f8:05:cc:38:94:42:44:9d:
0e:b1:45:59:e4:1b:4a:77:40:24:28:b0:4c:0e:1c:53:77:0e:
a1:72:6e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:02:16 2025 by rpki-client