Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft
File: ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft (raw, json)
Hash identifier: PFOEuw83kEvhZoK7IWUW96XQvaMEItokYh5Zba7rPx0=
Subject key identifier: BA:8F:FC:18:35:0D:62:6F:CA:E9:1A:BB:F6:B7:88:6C:A5:E3:D8:C7
Authority key identifier: A6:97:49:FA:23:37:DB:33:A7:64:74:EB:81:2C:03:4E:30:50:9D:2A
Certificate issuer: /CN=a69749fa2337db33a76474eb812c034e30509d2a
Certificate serial: 0196379B233618856317D551212DEF305AB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ppdJ-iM32zOnZHTrgSwDTjBQnSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft
Manifest number: 0461
Signing time: Tue 15 Apr 2025 04:00:36 +0000
Manifest this update: Tue 15 Apr 2025 04:00:36 +0000
Manifest next update: Wed 16 Apr 2025 04:00:36 +0000
Files and hashes: 1: AKpMQvIIqQzXRs3Ululs7jvONDY.roa (hash: BIy70VCzVM+Xa+CdmKbiFZkREDOaRaKjJ7xUey551TY=)
2: ppdJ-iM32zOnZHTrgSwDTjBQnSo.crl (hash: Xj5VRa/tuZFuBuXXbtgOXuHUAAZx0Mbes0mn/cYKB6Y=)
3: xwhdiFLdj-4M8l9XUnyeFRJXGwQ.roa (hash: VoSzy1kKxVH6beyOekb646N9QsT3/EG5ENUuXQtb21o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ppdJ-iM32zOnZHTrgSwDTjBQnSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 04:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:37:9b:23:36:18:85:63:17:d5:51:21:2d:ef:30:5a:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a69749fa2337db33a76474eb812c034e30509d2a
Validity
Not Before: Apr 15 04:00:36 2025 GMT
Not After : Apr 16 04:00:36 2025 GMT
Subject: CN=ba8ffc18350d626fcae91abbf6b7886ca5e3d8c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6a:df:35:a4:f5:40:3b:f6:e9:42:3e:92:39:
bb:a7:08:fd:9d:95:bf:5e:0c:91:cb:42:af:b0:c1:
7e:40:5c:a9:ce:54:93:48:08:aa:9f:c7:74:bb:ef:
cd:aa:2d:c4:ef:77:32:b2:4e:9d:9c:d6:f2:09:1c:
4c:05:74:3b:e4:9e:e8:3f:fd:28:ef:1c:b8:61:39:
9b:e8:3d:09:41:9d:a7:cf:d1:25:5c:ca:54:f1:c5:
c4:30:65:5b:e4:62:92:96:e1:73:21:e9:3f:b7:da:
79:fa:d5:ae:2f:4b:64:c0:0d:34:24:ff:11:80:0b:
4f:dc:d7:0f:27:10:61:55:53:cf:9d:78:3f:c2:47:
21:8a:c6:37:76:12:b9:33:7d:5e:66:91:3c:77:de:
bc:f6:55:7d:d7:3b:07:d1:42:dc:67:cc:5c:b1:2a:
3f:5f:42:67:79:8b:ff:60:38:f6:20:1f:e3:4c:d2:
a1:32:55:49:4e:45:d9:0f:0f:c5:3a:a7:2e:1e:51:
7e:0f:35:11:63:13:45:0a:57:53:99:3e:f6:13:cd:
17:f8:12:78:4c:43:8c:92:e1:27:b3:ed:40:cd:79:
3f:a4:aa:e2:d5:68:b2:60:e1:c8:61:59:4c:8a:f1:
09:57:ec:5b:7a:dd:80:ed:69:13:bc:96:d7:6e:ee:
a4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:8F:FC:18:35:0D:62:6F:CA:E9:1A:BB:F6:B7:88:6C:A5:E3:D8:C7
X509v3 Authority Key Identifier:
keyid:A6:97:49:FA:23:37:DB:33:A7:64:74:EB:81:2C:03:4E:30:50:9D:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ppdJ-iM32zOnZHTrgSwDTjBQnSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:72:e6:86:25:75:04:5c:84:03:7f:7e:99:b7:16:75:49:28:
01:4d:51:1a:f0:c1:1f:34:1e:35:31:5b:fb:54:75:0d:9c:dd:
9d:14:8a:f7:e3:44:86:f8:32:16:ec:7a:64:da:a9:46:f1:0a:
1b:b5:08:c0:14:ad:28:d4:b8:6e:e4:9d:7a:7c:23:15:fe:58:
30:ca:1d:0b:83:5f:69:f9:ce:5a:91:b8:a9:54:43:f3:f4:e5:
01:5e:23:0e:a3:4b:07:c6:6c:40:26:4f:51:eb:fd:c9:62:2b:
e9:67:b7:00:4f:f2:b3:d8:4c:2c:fe:18:1a:24:59:f5:5b:71:
4f:ee:80:7e:3a:82:9c:03:7d:6f:69:ee:06:18:76:ec:a9:c1:
17:2f:20:e5:bc:e3:5c:ac:98:e3:4f:a5:21:5b:53:e6:09:4e:
70:a8:7f:69:6a:b9:91:f7:4c:ae:5e:19:f6:fe:2c:ac:a0:67:
d9:90:d2:5f:66:3c:22:ae:32:76:87:3b:1d:db:91:13:33:93:
2c:c2:c9:d2:02:de:da:55:ca:db:ed:4f:ad:7a:af:c9:4c:e7:
16:30:b0:9a:68:1e:9b:26:7e:ca:0b:21:8f:d5:ae:cf:59:18:
35:5d:3c:8d:6e:9e:bd:bd:fc:e9:cd:b8:6b:8a:83:fb:04:50:
3e:a3:37:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZY3myM2GIVjF9VRIS3vMFq2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2OTc0OWZhMjMzN2RiMzNhNzY0NzRlYjgxMmMwMzRlMzA1
MDlkMmEwHhcNMjUwNDE1MDQwMDM2WhcNMjUwNDE2MDQwMDM2WjAzMTEwLwYDVQQD
EyhiYThmZmMxODM1MGQ2MjZmY2FlOTFhYmJmNmI3ODg2Y2E1ZTNkOGM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2rfNaT1QDv26UI+kjm7pwj9nZW/
XgyRy0KvsMF+QFypzlSTSAiqn8d0u+/Nqi3E73cysk6dnNbyCRxMBXQ75J7oP/0o
7xy4YTmb6D0JQZ2nz9ElXMpU8cXEMGVb5GKSluFzIek/t9p5+tWuL0tkwA00JP8R
gAtP3NcPJxBhVVPPnXg/wkchisY3dhK5M31eZpE8d9689lV91zsH0ULcZ8xcsSo/
X0JneYv/YDj2IB/jTNKhMlVJTkXZDw/FOqcuHlF+DzURYxNFCldTmT72E80X+BJ4
TEOMkuEns+1AzXk/pKri1WiyYOHIYVlMivEJV+xbet2A7WkTvJbXbu6khwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLqP/Bg1DWJvyukau/a3iGyl49jHMB8GA1UdIwQY
MBaAFKaXSfojN9szp2R064EsA04wUJ0qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHBkSi1pTTMyek9uWkhUcmdTd0RUakJRblNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9iMWJmNTctNjc5Zi00NTY0LWI3MDEt
Y2IyOTY3MDhkZWM4LzEvcHBkSi1pTTMyek9uWkhUcmdTd0RUakJRblNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9iMWJmNTctNjc5Zi00NTY0LWI3MDEtY2IyOTY3MDhkZWM4
LzEvcHBkSi1pTTMyek9uWkhUcmdTd0RUakJRblNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFXLmhiV1
BFyEA39+mbcWdUkoAU1RGvDBHzQeNTFb+1R1DZzdnRSK9+NEhvgyFux6ZNqpRvEK
G7UIwBStKNS4buSdenwjFf5YMModC4NfafnOWpG4qVRD8/TlAV4jDqNLB8ZsQCZP
Uev9yWIr6We3AE/ys9hMLP4YGiRZ9VtxT+6AfjqCnAN9b2nuBhh27KnBFy8g5bzj
XKyY40+lIVtT5glOcKh/aWq5kfdMrl4Z9v4srKBn2ZDSX2Y8Iq4ydoc7HduREzOT
LMLJ0gLe2lXK2+1PrXqvyUznFjCwmmgemyZ+ygshj9Wuz1kYNV08jW6evb386c24
a4qD+wRQPqM3ew==
-----END CERTIFICATE-----
Generated at Tue Apr 15 12:39:33 2025 by rpki-client