Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/9e22b8-4eb1-4d2f-a807-7b94fb43b60a/1/ppv5fceDSX88N716huWZSs7ngbA.mft
File: ppv5fceDSX88N716huWZSs7ngbA.mft (raw, json)
Hash identifier: udx6JX0TqGwN2+F+ovz8VlKEqwNGjM/n3ZmzYN2XqXM=
Subject key identifier: B7:74:3B:7A:83:4E:11:19:3B:87:72:63:7A:B0:F9:0C:F9:ED:3B:4E
Authority key identifier: A6:9B:F9:7D:C7:83:49:7F:3C:37:BD:7A:86:E5:99:4A:CE:E7:81:B0
Certificate issuer: /CN=a69bf97dc783497f3c37bd7a86e5994acee781b0
Certificate serial: 019A4EF5CBF9BDCC0D0F41248D9876E5FDE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ppv5fceDSX88N716huWZSs7ngbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/9e22b8-4eb1-4d2f-a807-7b94fb43b60a/1/ppv5fceDSX88N716huWZSs7ngbA.mft
Manifest number: 1105
Signing time: Tue 04 Nov 2025 13:02:02 +0000
Manifest this update: Tue 04 Nov 2025 13:02:02 +0000
Manifest next update: Wed 05 Nov 2025 13:02:02 +0000
Files and hashes: 1: ppv5fceDSX88N716huWZSs7ngbA.crl (hash: atYI/pO5hiKw+VgerKxX8Y0KBJAdX5lANwnztu1ro3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/9e22b8-4eb1-4d2f-a807-7b94fb43b60a/1/ppv5fceDSX88N716huWZSs7ngbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/9e22b8-4eb1-4d2f-a807-7b94fb43b60a/1/ppv5fceDSX88N716huWZSs7ngbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ppv5fceDSX88N716huWZSs7ngbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:cb:f9:bd:cc:0d:0f:41:24:8d:98:76:e5:fd:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a69bf97dc783497f3c37bd7a86e5994acee781b0
Validity
Not Before: Nov 4 13:02:02 2025 GMT
Not After : Nov 5 13:02:02 2025 GMT
Subject: CN=b7743b7a834e11193b8772637ab0f90cf9ed3b4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:24:f6:ca:21:2f:5e:07:f4:5a:34:c2:32:10:
07:20:f7:a4:2d:9f:de:a8:79:b0:6e:58:9d:dd:00:
65:32:08:3c:0d:4a:4c:d4:e6:a6:eb:1b:51:22:c2:
c2:8d:08:9f:15:cb:e7:ec:b8:5d:65:a6:fd:e9:b8:
c9:11:06:e3:42:5c:82:14:93:ea:a3:fc:6e:ee:b1:
d0:3b:d1:a5:af:d5:a9:3a:ea:be:ca:27:64:e8:bf:
e7:35:7d:2b:d9:16:4f:e5:19:30:6f:42:81:33:07:
87:0f:67:bc:e1:a5:78:18:af:e1:46:77:76:2a:45:
86:81:07:ee:5b:98:b3:99:c0:b3:82:13:0d:ba:2b:
49:96:78:3e:7f:01:0e:5b:7b:4e:67:8c:9e:d0:ae:
5a:bb:19:34:93:7e:2c:d2:84:0f:69:34:c5:4a:41:
2b:4c:f8:d6:3f:90:9d:2c:25:c9:9d:d1:06:6d:3a:
32:2d:0c:2a:47:15:a7:9a:bd:26:41:86:40:c4:1e:
6e:46:60:0e:65:dc:9b:be:25:0c:73:b6:7e:7e:51:
46:3a:1e:56:70:d5:69:c9:49:24:b6:25:ff:19:cd:
28:f5:2c:f2:64:f3:de:9e:30:95:4b:28:4f:1e:64:
bc:0f:1a:64:15:67:e2:80:2e:df:38:36:8a:9d:7e:
9e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:74:3B:7A:83:4E:11:19:3B:87:72:63:7A:B0:F9:0C:F9:ED:3B:4E
X509v3 Authority Key Identifier:
keyid:A6:9B:F9:7D:C7:83:49:7F:3C:37:BD:7A:86:E5:99:4A:CE:E7:81:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ppv5fceDSX88N716huWZSs7ngbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9e22b8-4eb1-4d2f-a807-7b94fb43b60a/1/ppv5fceDSX88N716huWZSs7ngbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9e22b8-4eb1-4d2f-a807-7b94fb43b60a/1/ppv5fceDSX88N716huWZSs7ngbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:d5:de:a7:2e:d3:38:70:ea:26:96:c7:5b:6c:62:79:88:2f:
7a:c0:cc:7c:e1:74:52:10:85:4d:02:3a:62:e4:f9:64:51:78:
06:ac:ed:ef:81:dd:0b:09:db:eb:9e:50:7b:9a:20:a8:42:09:
c7:12:b8:9f:b2:67:86:00:63:7b:ae:2f:a3:21:91:89:d4:7a:
b3:67:68:d7:e6:ce:11:9a:f2:86:99:73:5f:30:00:03:ca:9f:
f2:fd:e1:8f:a4:be:0c:69:e8:a2:40:e0:59:a1:ab:58:3a:84:
ee:c3:30:f8:c7:95:d9:a4:43:64:23:82:5e:d4:24:23:41:a0:
be:9b:62:d1:36:5f:f6:30:ac:65:c3:5b:ac:d4:01:03:23:3c:
d1:1c:b0:2d:da:05:e2:86:b0:59:58:0f:9b:8a:cf:06:d1:f4:
78:d4:50:ee:f0:63:34:0f:fc:06:ae:e0:2a:d9:1c:bf:4d:37:
7c:83:df:95:28:21:7e:3b:f3:60:5f:a4:b4:da:33:53:0e:d9:
ef:10:9d:e2:35:e0:56:5c:8a:bf:b0:91:01:9c:8e:b0:79:1e:
52:85:f8:2c:ca:a7:d0:13:4a:76:35:0b:b6:70:af:a6:9e:da:
6d:16:51:5c:b5:6b:d3:1c:56:9a:eb:a6:34:47:cd:61:59:6a:
0a:76:3b:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:38:14 2025 by rpki-client