Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/ppTwBfWXfDI-zb6pxfjMo2nmXGc.mft
File: ppTwBfWXfDI-zb6pxfjMo2nmXGc.mft (raw, json)
Hash identifier: afNc/r6HvXp+EsA96Xg4q6G5TJ6/SWHWy/sOMwvpa3I=
Subject key identifier: B0:B9:B8:11:82:72:C6:DC:33:6B:18:77:F8:8C:0E:35:B9:B2:BD:95
Authority key identifier: A6:94:F0:05:F5:97:7C:32:3E:CD:BE:A9:C5:F8:CC:A3:69:E6:5C:67
Certificate issuer: /CN=a694f005f5977c323ecdbea9c5f8cca369e65c67
Certificate serial: 019A4EF43ADE69CCCF4743888CC9E8123B76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ppTwBfWXfDI-zb6pxfjMo2nmXGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/ppTwBfWXfDI-zb6pxfjMo2nmXGc.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 13:00:19 +0000
Manifest this update: Tue 04 Nov 2025 13:00:19 +0000
Manifest next update: Wed 05 Nov 2025 13:00:19 +0000
Files and hashes: 1: La2Bx3Kg3yNgjzXlOayck9yYHYs.roa (hash: RlSJSM6obvvJNVAHyjc4ol2rPsLp9JSNr1eJ2DwTo2Q=)
2: MrkyT3HsZnc05eV0DUl_cIOGSb0.roa (hash: Rbd1whscUt8OERBLf2JXNylefFQ5sp0l42mdjx1lxUo=)
3: bkH9wHIb-OrCqJuyQRHuIXtQk1c.roa (hash: JMTNFJ1w/NwtHoH0YImfgSSrGbnKKHMXYAPq6CQxkXc=)
4: ppTwBfWXfDI-zb6pxfjMo2nmXGc.crl (hash: Eip+RPh3px79sbpGjPQuPPgGlxQ2lPfq6n87GIFktG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/ppTwBfWXfDI-zb6pxfjMo2nmXGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/ppTwBfWXfDI-zb6pxfjMo2nmXGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ppTwBfWXfDI-zb6pxfjMo2nmXGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:3a:de:69:cc:cf:47:43:88:8c:c9:e8:12:3b:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a694f005f5977c323ecdbea9c5f8cca369e65c67
Validity
Not Before: Nov 4 13:00:19 2025 GMT
Not After : Nov 5 13:00:19 2025 GMT
Subject: CN=b0b9b8118272c6dc336b1877f88c0e35b9b2bd95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f1:c8:d6:cf:a8:21:a1:e5:cb:01:b9:c7:39:
7c:f6:b1:f3:5b:73:08:bd:fb:6c:4f:6c:a1:90:88:
d9:21:31:42:b0:01:35:c7:eb:18:a4:af:5f:5a:76:
c7:9d:4d:95:af:36:dd:a4:1a:e0:9d:4b:6e:fa:03:
48:00:21:35:b5:f6:ff:25:77:bb:13:8b:d1:9a:fd:
98:54:1c:4e:fd:0e:9a:b3:40:70:f4:02:de:d9:e7:
4f:2d:bb:c3:ad:f7:52:ad:66:c0:d5:54:73:68:c3:
2c:bb:34:1e:69:d8:ee:3e:d5:43:42:04:68:3a:06:
de:83:6d:ff:b5:57:1b:f1:ec:81:75:de:77:bb:bc:
c6:30:cd:88:31:a2:5d:47:6f:af:24:25:3c:f7:6b:
74:7c:01:72:b2:97:62:e9:d8:bb:47:37:7b:d0:26:
fb:96:32:36:f5:49:01:51:e4:c4:45:a7:ed:a3:f0:
73:a7:f8:18:ec:0d:de:b5:94:ab:72:da:af:c6:08:
81:d1:d1:57:3f:d2:2b:93:5c:f6:ce:f7:32:ad:76:
16:72:8d:f9:bb:82:3d:6c:08:54:dd:96:cd:99:bc:
87:88:f8:26:cd:e2:95:1e:4b:ae:10:93:88:65:ea:
72:0d:4d:73:fb:4c:e0:e3:33:f0:21:3a:e1:fc:ea:
38:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:B9:B8:11:82:72:C6:DC:33:6B:18:77:F8:8C:0E:35:B9:B2:BD:95
X509v3 Authority Key Identifier:
keyid:A6:94:F0:05:F5:97:7C:32:3E:CD:BE:A9:C5:F8:CC:A3:69:E6:5C:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ppTwBfWXfDI-zb6pxfjMo2nmXGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/ppTwBfWXfDI-zb6pxfjMo2nmXGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/ppTwBfWXfDI-zb6pxfjMo2nmXGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:62:e8:9c:12:81:86:97:79:92:0b:72:cc:7f:bf:15:25:34:
6c:08:c8:0c:ad:5b:cb:cd:ee:ae:88:46:0d:ba:65:fe:51:a9:
83:e0:66:78:d8:7c:05:74:20:9c:91:34:e8:9e:e8:44:28:6a:
c7:14:07:30:51:1b:c6:4b:3c:02:b2:99:45:9c:d5:ea:f2:8c:
1c:fe:5a:7a:14:a0:e1:e9:1c:75:79:0c:16:8c:c3:17:59:71:
22:09:de:d7:64:aa:af:9a:e7:63:99:80:c4:b1:91:25:f5:ab:
89:f7:2b:81:1c:37:9f:2c:d6:8c:45:f9:e5:22:2d:43:6d:0e:
27:e4:df:ed:55:40:11:49:35:ed:58:84:d6:f7:a3:cd:9c:db:
ff:bb:0f:80:99:b0:b7:c4:fa:44:cd:54:e0:26:07:84:24:d6:
0c:a6:87:02:1f:85:11:09:e9:41:3a:8e:ff:10:a2:64:e3:5a:
8d:6a:67:99:8d:be:cc:35:6c:cc:d8:06:16:8c:6a:e7:a5:59:
e6:9a:86:ad:49:fb:4c:1b:de:40:03:2b:f3:41:37:cd:98:c7:
17:ea:39:94:65:f4:8a:d8:bb:42:6c:31:47:92:83:9f:25:10:
af:c8:27:c3:6c:6d:e6:7c:21:2a:fe:06:99:41:7e:af:bc:bd:
9f:8a:94:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:40:59 2025 by rpki-client