Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft
File: PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft (raw, json)
Hash identifier: QkKUkMa+fiJ3BlrjW6GtlW6xY2aZRSV0wFhxtbcMA1g=
Subject key identifier: 83:9B:D7:76:AA:F5:11:D8:C0:28:2D:30:A6:2B:7E:D2:B5:71:26:C3
Authority key identifier: 3C:FA:A4:0F:62:63:E0:0D:12:91:69:85:76:A6:17:A5:B5:D6:8A:9C
Certificate issuer: /CN=3cfaa40f6263e00d1291698576a617a5b5d68a9c
Certificate serial: 019688804735CC12FCEAA45324B5E4B9F28C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PPqkD2Jj4A0SkWmFdqYXpbXWipw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft
Manifest number: 0C5E
Signing time: Wed 30 Apr 2025 21:00:30 +0000
Manifest this update: Wed 30 Apr 2025 21:00:30 +0000
Manifest next update: Thu 01 May 2025 21:00:30 +0000
Files and hashes: 1: PPqkD2Jj4A0SkWmFdqYXpbXWipw.crl (hash: sruTB+AW5xByNc4uHbdyuyCEYc87WQuU/v7AjMSrsok=)
2: Zudt2t67uMUQbMO8N99rmxJB1wQ.roa (hash: SIlAW/DlBSg5+XbRtnFyzPAIYziyY+yFv6/k5lPUFJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PPqkD2Jj4A0SkWmFdqYXpbXWipw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 21:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:88:80:47:35:cc:12:fc:ea:a4:53:24:b5:e4:b9:f2:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cfaa40f6263e00d1291698576a617a5b5d68a9c
Validity
Not Before: Apr 30 21:00:30 2025 GMT
Not After : May 1 21:00:30 2025 GMT
Subject: CN=839bd776aaf511d8c0282d30a62b7ed2b57126c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4e:74:8b:c0:4f:2b:15:c7:a1:63:3a:c2:f8:
98:87:df:7d:4b:26:ab:b6:19:61:2f:a6:d9:e0:7d:
94:08:a1:f2:0e:5b:ff:14:92:58:a5:92:4b:58:0e:
79:46:4b:5f:ec:9b:0d:89:bc:69:22:4a:0e:94:6f:
f8:b9:59:7f:fc:65:43:ea:5f:a5:f1:fd:ed:53:a9:
e8:c8:26:ef:b9:ea:ca:6f:79:5b:5b:f6:fa:2d:8b:
ad:54:a0:be:c1:d1:7e:78:5e:62:0a:cd:68:38:dd:
6f:f3:3b:8d:3e:74:30:84:29:cc:96:11:5e:99:89:
79:14:f8:b2:f9:ef:41:84:83:be:69:dd:91:d6:69:
04:5a:b0:67:39:47:26:7c:1d:50:16:fd:19:65:8c:
fb:74:97:cc:00:8c:6e:0f:e2:7d:02:2e:3b:b6:fc:
c1:65:71:7b:f7:1e:db:56:0c:47:e0:2b:4c:cf:47:
8f:45:bf:0c:e4:42:03:39:e0:22:70:4a:80:44:96:
f8:b6:77:20:43:2c:93:57:12:53:82:a2:2e:3a:cb:
8f:a5:12:51:a2:f1:74:c3:5f:ca:c7:38:cf:39:b9:
a0:fb:96:fc:6f:be:00:75:8e:26:15:c2:e0:67:93:
96:c2:75:ee:1e:e7:dc:f9:24:9a:e0:9a:2b:bf:58:
44:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:9B:D7:76:AA:F5:11:D8:C0:28:2D:30:A6:2B:7E:D2:B5:71:26:C3
X509v3 Authority Key Identifier:
keyid:3C:FA:A4:0F:62:63:E0:0D:12:91:69:85:76:A6:17:A5:B5:D6:8A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PPqkD2Jj4A0SkWmFdqYXpbXWipw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:b7:19:62:fb:a1:94:e8:f9:7e:70:16:50:1e:7c:90:15:66:
86:68:55:2a:75:26:37:31:24:8c:95:76:66:c8:e8:7f:a1:50:
66:ce:18:0a:67:5d:aa:bb:4f:1c:c2:78:f3:7e:a8:50:b0:c6:
6f:cd:82:ba:40:c6:95:e2:02:72:ae:71:01:a4:0a:bc:62:57:
6e:13:1c:e3:75:27:db:2a:10:bd:a6:03:49:90:cf:d2:bf:ef:
68:1b:af:a5:2e:7b:8e:04:1d:9f:51:67:f5:e8:68:2d:fe:6b:
67:41:63:b8:b6:f1:b2:02:43:22:6c:d4:85:ae:f4:ab:32:82:
d3:6e:1f:c5:9b:f2:29:f7:48:66:87:91:05:25:57:87:ca:d2:
41:55:c8:2e:2e:73:da:75:ca:a6:69:7e:77:19:c5:5e:1e:76:
71:16:a3:33:c9:9b:79:f6:e8:9d:20:f8:52:0c:1e:15:d4:1e:
5f:05:14:91:3a:31:eb:7b:ce:fa:1b:9e:dc:4f:21:b1:bf:78:
f6:5d:24:4e:9b:b8:2b:a0:78:7a:a0:b1:c7:61:ff:d1:d7:04:
51:39:c8:79:a0:ae:a5:b1:a2:46:40:69:8c:16:35:18:01:a5:
41:e3:f5:8d:42:69:d7:ec:7c:c6:e9:7b:cf:47:71:6f:96:0c:
ca:11:d1:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaIgEc1zBL86qRTJLXkufKMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjZmFhNDBmNjI2M2UwMGQxMjkxNjk4NTc2YTYxN2E1YjVk
NjhhOWMwHhcNMjUwNDMwMjEwMDMwWhcNMjUwNTAxMjEwMDMwWjAzMTEwLwYDVQQD
Eyg4MzliZDc3NmFhZjUxMWQ4YzAyODJkMzBhNjJiN2VkMmI1NzEyNmMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwE50i8BPKxXHoWM6wviYh999Syar
thlhL6bZ4H2UCKHyDlv/FJJYpZJLWA55Rktf7JsNibxpIkoOlG/4uVl//GVD6l+l
8f3tU6noyCbvuerKb3lbW/b6LYutVKC+wdF+eF5iCs1oON1v8zuNPnQwhCnMlhFe
mYl5FPiy+e9BhIO+ad2R1mkEWrBnOUcmfB1QFv0ZZYz7dJfMAIxuD+J9Ai47tvzB
ZXF79x7bVgxH4CtMz0ePRb8M5EIDOeAicEqARJb4tncgQyyTVxJTgqIuOsuPpRJR
ovF0w1/KxzjPObmg+5b8b74AdY4mFcLgZ5OWwnXuHufc+SSa4Jorv1hEIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIOb13aq9RHYwCgtMKYrftK1cSbDMB8GA1UdIwQY
MBaAFDz6pA9iY+ANEpFphXamF6W11oqcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFBxa0QySmo0QTBTa1dtRmRxWVhwYlhXaXB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC84NDVhZWUtZGFhYy00NjQxLTlmMzEt
OWU3ZjBmOTQxMDQ5LzEvUFBxa0QySmo0QTBTa1dtRmRxWVhwYlhXaXB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC84NDVhZWUtZGFhYy00NjQxLTlmMzEtOWU3ZjBmOTQxMDQ5
LzEvUFBxa0QySmo0QTBTa1dtRmRxWVhwYlhXaXB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfbcZYvuh
lOj5fnAWUB58kBVmhmhVKnUmNzEkjJV2Zsjof6FQZs4YCmddqrtPHMJ4836oULDG
b82CukDGleICcq5xAaQKvGJXbhMc43Un2yoQvaYDSZDP0r/vaBuvpS57jgQdn1Fn
9ehoLf5rZ0FjuLbxsgJDImzUha70qzKC024fxZvyKfdIZoeRBSVXh8rSQVXILi5z
2nXKpml+dxnFXh52cRajM8mbefbonSD4UgweFdQeXwUUkTox63vO+hue3E8hsb94
9l0kTpu4K6B4eqCxx2H/0dcEUTnIeaCupbGiRkBpjBY1GAGlQeP1jUJp1+x8xul7
z0dxb5YMyhHRTg==
-----END CERTIFICATE-----
Generated at Thu May 1 01:10:43 2025 by rpki-client