Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.mft
File: ppWERHKPWreqgm9DeABc5nkgDVI.mft (raw, json)
Hash identifier: 5bMocMld2wxJZSehe0G951JZGPuFhwW+CJTWFLFh/1k=
Subject key identifier: 57:3D:D1:D9:7E:A5:D9:16:ED:54:CA:79:F8:D1:F1:57:7E:5F:41:EF
Authority key identifier: A6:95:84:44:72:8F:5A:B7:AA:82:6F:43:78:00:5C:E6:79:20:0D:52
Certificate issuer: /CN=a6958444728f5ab7aa826f4378005ce679200d52
Certificate serial: 01976FD0D0343910E7F93BF977E0FD1FE6A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ppWERHKPWreqgm9DeABc5nkgDVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 19:00:45 +0000
Manifest this update: Sat 14 Jun 2025 19:00:45 +0000
Manifest next update: Sun 15 Jun 2025 19:00:45 +0000
Files and hashes: 1: ppWERHKPWreqgm9DeABc5nkgDVI.crl (hash: C2Yj3IsU6MhMMExkl7m10QON9d24++65vZ5LA6I2mKQ=)
2: z-LF5XIt0VeWFhY7GK5O7xZnBBE.roa (hash: 1pZ4XtZFpZvLcxR/iScQRob6NYsKteymu5FeNxuRtO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ppWERHKPWreqgm9DeABc5nkgDVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:d0:d0:34:39:10:e7:f9:3b:f9:77:e0:fd:1f:e6:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6958444728f5ab7aa826f4378005ce679200d52
Validity
Not Before: Jun 14 19:00:45 2025 GMT
Not After : Jun 15 19:00:45 2025 GMT
Subject: CN=573dd1d97ea5d916ed54ca79f8d1f1577e5f41ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b6:cf:c3:57:8e:ff:34:5f:c9:ce:3e:51:14:
6a:8d:e2:97:29:ce:94:ab:ae:06:af:a7:00:b2:84:
83:27:bf:c9:3e:c6:5f:84:34:a7:87:7c:95:3c:61:
35:91:b6:f8:af:b7:d1:a6:2d:77:db:69:0e:ec:c2:
e8:e6:fd:fd:3d:30:cb:b6:c5:b3:ef:30:12:e8:d5:
c2:d8:20:a0:e7:4a:37:55:17:19:8b:94:73:d5:05:
50:4b:a3:0d:bb:f3:14:e7:a9:80:39:07:fd:bc:ce:
8c:26:61:36:41:a8:c4:04:67:3d:18:a7:d3:87:43:
39:cf:6c:37:8a:29:af:9f:14:b9:f9:15:db:85:64:
c4:45:b7:9a:45:bb:e1:54:d3:9b:42:84:5e:dd:cd:
d2:20:dc:4c:b6:64:40:71:dc:02:c4:47:73:b0:d5:
9d:70:f1:8a:51:9a:f2:f2:c5:17:18:7d:50:34:9f:
6c:70:7f:6f:61:bf:a8:c6:c3:23:07:91:5b:1f:4b:
ab:66:d2:cd:ee:d8:ae:37:82:47:ae:46:dc:0d:dd:
4f:aa:bb:f8:a5:76:5a:88:05:df:ff:d5:19:c5:19:
f8:03:e5:d8:c6:6d:60:a0:e9:45:6b:29:91:dc:dd:
a6:15:37:62:19:cd:7f:60:c0:38:45:25:ef:91:01:
a3:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:3D:D1:D9:7E:A5:D9:16:ED:54:CA:79:F8:D1:F1:57:7E:5F:41:EF
X509v3 Authority Key Identifier:
keyid:A6:95:84:44:72:8F:5A:B7:AA:82:6F:43:78:00:5C:E6:79:20:0D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ppWERHKPWreqgm9DeABc5nkgDVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:da:32:74:d5:f8:84:3e:5b:b4:f4:26:79:6a:71:ba:20:f3:
4b:e3:03:4e:d2:cf:5c:cd:44:dd:b0:de:56:11:d0:c9:5e:12:
d1:f4:62:5a:20:a7:dc:84:55:d0:a2:59:df:0b:5d:a0:d6:2d:
83:6f:13:96:f8:eb:50:d7:44:37:ef:84:d9:1d:91:df:89:3e:
14:c3:3c:a5:a8:4d:fd:52:04:4c:fa:53:bd:77:07:b7:c7:55:
b8:e2:00:53:c2:e5:4d:29:86:c5:ec:9b:24:cd:bf:49:27:24:
cb:19:f0:0f:45:f4:ac:cf:54:c3:6b:33:e0:b5:fe:d9:19:9d:
8a:b5:10:40:a6:1f:57:cc:f3:77:45:c5:2e:4d:3b:1d:bb:e1:
81:57:fd:d5:5e:1e:92:67:08:44:57:ac:34:6e:89:24:07:c2:
54:29:73:40:d3:4e:da:f4:77:0d:84:5c:0c:22:1c:e6:a6:29:
4a:32:e2:a9:c1:92:46:44:7f:cf:65:95:0c:6a:b5:a6:6b:06:
e3:c9:00:d8:e1:38:bc:56:3e:96:0b:ec:6b:02:15:0f:42:13:
f0:d6:39:1b:aa:28:44:87:09:6d:9c:42:81:49:b4:63:af:e4:
a4:a4:56:fe:11:50:d2:4f:03:c6:28:3d:4b:d6:a7:d8:e7:bb:
83:a7:b7:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:54:09 2025 by rpki-client