Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft
File: PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft (raw, json)
Hash identifier: yIoEdS6S94lDeiaApgzaejl7Mkd1nFVdl4k+nt+MQEU=
Subject key identifier: C4:07:D4:85:1B:39:12:77:02:C0:76:40:4E:33:23:0D:7C:36:6B:94
Authority key identifier: 3C:FA:A4:0F:62:63:E0:0D:12:91:69:85:76:A6:17:A5:B5:D6:8A:9C
Certificate issuer: /CN=3cfaa40f6263e00d1291698576a617a5b5d68a9c
Certificate serial: 01988A332D33C510E686A1B62102F8702E96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PPqkD2Jj4A0SkWmFdqYXpbXWipw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft
Manifest number: 0D68
Signing time: Fri 08 Aug 2025 15:01:06 +0000
Manifest this update: Fri 08 Aug 2025 15:01:06 +0000
Manifest next update: Sat 09 Aug 2025 15:01:06 +0000
Files and hashes: 1: PPqkD2Jj4A0SkWmFdqYXpbXWipw.crl (hash: sLjLVdi1N1eNc3sRwWmtPppogI3/kgqsOXSQVdxhqfI=)
2: Zudt2t67uMUQbMO8N99rmxJB1wQ.roa (hash: SIlAW/DlBSg5+XbRtnFyzPAIYziyY+yFv6/k5lPUFJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PPqkD2Jj4A0SkWmFdqYXpbXWipw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:33:2d:33:c5:10:e6:86:a1:b6:21:02:f8:70:2e:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cfaa40f6263e00d1291698576a617a5b5d68a9c
Validity
Not Before: Aug 8 15:01:06 2025 GMT
Not After : Aug 9 15:01:06 2025 GMT
Subject: CN=c407d4851b39127702c076404e33230d7c366b94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:89:a1:2b:da:7a:75:03:39:3e:9a:7c:6a:2e:
87:0e:94:e5:6d:f9:1d:6e:65:d6:cd:2f:79:26:dd:
59:09:54:38:23:ef:cf:92:65:37:27:63:eb:ca:df:
99:16:80:ce:d2:9c:f3:e6:ce:c4:7a:c5:e2:79:29:
0a:46:55:c6:48:79:8b:e3:14:19:cc:71:7b:e1:c3:
2c:d2:94:cd:f5:a0:43:5f:30:84:7b:a9:ee:ea:7b:
21:ed:92:70:ef:43:34:47:bd:98:cb:6c:c3:69:bc:
f2:f3:b4:f2:f3:c8:f9:0b:8c:30:9d:a1:7f:1b:79:
5c:9b:ae:23:ce:10:f9:42:ee:ac:22:77:cd:33:d9:
8d:56:cf:9f:93:9b:73:a2:67:17:52:14:dc:43:85:
20:0d:d1:18:fd:cc:02:f1:81:93:0b:05:42:0d:4c:
b6:da:c2:45:ef:d3:25:a4:12:2b:39:12:32:79:88:
a2:ca:47:dd:72:14:35:9b:03:5d:c4:a1:24:a5:14:
de:a7:cc:29:1e:d7:00:60:3e:04:03:a6:61:88:91:
b1:a5:4f:38:f9:9b:c4:d8:59:ab:9e:d5:9d:2a:3b:
d4:15:6e:bd:83:3d:23:20:97:9c:01:de:06:3d:63:
5a:9f:04:61:e7:6f:51:fb:94:6e:a9:22:db:ca:c2:
4e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:07:D4:85:1B:39:12:77:02:C0:76:40:4E:33:23:0D:7C:36:6B:94
X509v3 Authority Key Identifier:
keyid:3C:FA:A4:0F:62:63:E0:0D:12:91:69:85:76:A6:17:A5:B5:D6:8A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PPqkD2Jj4A0SkWmFdqYXpbXWipw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:82:e2:b7:6c:e0:73:be:3c:91:8d:31:f7:f3:1c:0f:bc:8f:
6e:73:71:c4:90:a0:a3:14:40:37:d2:33:58:13:09:be:7a:02:
79:4c:41:aa:3f:5e:32:46:9f:fc:15:44:f3:45:89:63:b8:08:
5a:d1:6f:1c:f3:1e:21:96:5b:65:97:4a:f5:92:96:75:2d:ba:
55:77:c3:a6:93:a8:7d:c8:0a:52:00:10:cf:a7:b8:7c:7a:4b:
c0:08:09:9d:fb:35:1d:9c:96:66:cb:e1:8a:02:0d:f7:e5:8a:
b4:7d:04:68:be:22:67:19:b4:0e:cc:a9:cb:a3:c7:02:cf:f3:
ea:21:2e:88:db:ea:ab:c9:9e:df:a0:f7:79:00:48:8e:d1:3d:
87:b3:08:5e:d0:44:95:02:12:7b:09:dc:0b:1e:f2:e0:f8:a3:
a1:22:89:7a:69:71:bc:1d:25:b2:77:f6:cb:fd:de:b0:37:18:
c9:36:83:10:7f:05:7c:3b:fc:95:25:dc:f1:fb:d8:c8:ac:f7:
5a:4f:1b:ad:df:60:69:5e:05:7f:3b:25:1b:6b:06:2d:2c:9f:
08:ee:78:b2:22:e6:21:b2:1b:e3:17:dd:fc:2d:5d:25:b3:8b:
21:bc:53:99:94:a1:f5:77:eb:7f:31:f0:a3:2c:04:86:09:9a:
fb:3a:00:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiKMy0zxRDmhqG2IQL4cC6WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjZmFhNDBmNjI2M2UwMGQxMjkxNjk4NTc2YTYxN2E1YjVk
NjhhOWMwHhcNMjUwODA4MTUwMTA2WhcNMjUwODA5MTUwMTA2WjAzMTEwLwYDVQQD
EyhjNDA3ZDQ4NTFiMzkxMjc3MDJjMDc2NDA0ZTMzMjMwZDdjMzY2Yjk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyImhK9p6dQM5Ppp8ai6HDpTlbfkd
bmXWzS95Jt1ZCVQ4I+/PkmU3J2Pryt+ZFoDO0pzz5s7EesXieSkKRlXGSHmL4xQZ
zHF74cMs0pTN9aBDXzCEe6nu6nsh7ZJw70M0R72Yy2zDabzy87Ty88j5C4wwnaF/
G3lcm64jzhD5Qu6sInfNM9mNVs+fk5tzomcXUhTcQ4UgDdEY/cwC8YGTCwVCDUy2
2sJF79MlpBIrORIyeYiiykfdchQ1mwNdxKEkpRTep8wpHtcAYD4EA6ZhiJGxpU84
+ZvE2FmrntWdKjvUFW69gz0jIJecAd4GPWNanwRh529R+5RuqSLbysJOEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMQH1IUbORJ3AsB2QE4zIw18NmuUMB8GA1UdIwQY
MBaAFDz6pA9iY+ANEpFphXamF6W11oqcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFBxa0QySmo0QTBTa1dtRmRxWVhwYlhXaXB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC84NDVhZWUtZGFhYy00NjQxLTlmMzEt
OWU3ZjBmOTQxMDQ5LzEvUFBxa0QySmo0QTBTa1dtRmRxWVhwYlhXaXB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC84NDVhZWUtZGFhYy00NjQxLTlmMzEtOWU3ZjBmOTQxMDQ5
LzEvUFBxa0QySmo0QTBTa1dtRmRxWVhwYlhXaXB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJYLit2zg
c748kY0x9/McD7yPbnNxxJCgoxRAN9IzWBMJvnoCeUxBqj9eMkaf/BVE80WJY7gI
WtFvHPMeIZZbZZdK9ZKWdS26VXfDppOofcgKUgAQz6e4fHpLwAgJnfs1HZyWZsvh
igIN9+WKtH0EaL4iZxm0Dsypy6PHAs/z6iEuiNvqq8me36D3eQBIjtE9h7MIXtBE
lQISewncCx7y4PijoSKJemlxvB0lsnf2y/3esDcYyTaDEH8FfDv8lSXc8fvYyKz3
Wk8brd9gaV4FfzslG2sGLSyfCO54siLmIbIb4xfd/C1dJbOLIbxTmZSh9XfrfzHw
oywEhgma+zoAgw==
-----END CERTIFICATE-----
Generated at Fri Aug 8 20:55:07 2025 by rpki-client