Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.mft
File: ppWERHKPWreqgm9DeABc5nkgDVI.mft (raw, json)
Hash identifier: Nlfdx0NL6kgrDlMChirtL/XlrGGoyVRdRlOk5K8Z+bQ=
Subject key identifier: 7B:CE:CB:64:4D:E8:20:47:8E:14:6B:29:41:E2:20:4B:44:4B:CE:68
Authority key identifier: A6:95:84:44:72:8F:5A:B7:AA:82:6F:43:78:00:5C:E6:79:20:0D:52
Certificate issuer: /CN=a6958444728f5ab7aa826f4378005ce679200d52
Certificate serial: 019A4F98C72742C7A1667189295E97818C95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ppWERHKPWreqgm9DeABc5nkgDVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 16:00:03 +0000
Manifest this update: Tue 04 Nov 2025 16:00:03 +0000
Manifest next update: Wed 05 Nov 2025 16:00:03 +0000
Files and hashes: 1: ppWERHKPWreqgm9DeABc5nkgDVI.crl (hash: 7e4PSifP/Zkm6aon961OlJk3wcBpQgscsf5V1j+y67E=)
2: z-LF5XIt0VeWFhY7GK5O7xZnBBE.roa (hash: 1pZ4XtZFpZvLcxR/iScQRob6NYsKteymu5FeNxuRtO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ppWERHKPWreqgm9DeABc5nkgDVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:98:c7:27:42:c7:a1:66:71:89:29:5e:97:81:8c:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6958444728f5ab7aa826f4378005ce679200d52
Validity
Not Before: Nov 4 16:00:03 2025 GMT
Not After : Nov 5 16:00:03 2025 GMT
Subject: CN=7bcecb644de820478e146b2941e2204b444bce68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5c:1e:54:0d:b3:b4:5b:a6:f8:6e:31:76:3e:
1f:b1:d5:9b:00:3d:37:d2:08:be:dd:fb:5f:30:e7:
bd:31:8f:4f:dc:2b:c9:17:1d:34:04:53:d6:83:48:
74:1d:50:ad:f7:4b:04:34:f8:53:fa:d1:62:a8:62:
62:0f:e0:07:5d:da:a0:13:92:30:1d:a0:45:50:14:
21:a5:fb:8f:1b:4f:66:f7:71:fe:1e:44:24:50:0a:
d0:fe:af:fe:1b:1f:0a:95:f8:62:4b:71:55:3b:35:
4c:0c:07:70:7a:9b:42:bd:5c:eb:4e:fd:eb:74:07:
d0:b4:95:b7:e1:da:ed:e4:28:a3:00:3e:3c:fb:11:
6a:c1:cd:49:50:79:e9:81:d5:cb:50:53:4f:4f:35:
20:97:a9:19:f1:30:93:dc:4c:ca:ed:ee:53:64:55:
0f:e0:55:f5:dc:65:18:0c:92:9e:d3:e7:ad:7f:0b:
82:71:69:56:f9:b2:00:32:18:d8:22:4b:1e:aa:25:
ae:91:76:58:48:c0:1c:3b:f6:fc:e8:e4:a9:51:2d:
16:98:53:80:e0:d6:ae:0d:3a:5e:8a:3c:a5:04:bd:
34:83:0a:c9:52:07:4c:78:c3:22:36:31:e9:82:b5:
0b:73:22:66:46:28:ad:c2:c1:33:80:cc:38:c1:7e:
6b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:CE:CB:64:4D:E8:20:47:8E:14:6B:29:41:E2:20:4B:44:4B:CE:68
X509v3 Authority Key Identifier:
keyid:A6:95:84:44:72:8F:5A:B7:AA:82:6F:43:78:00:5C:E6:79:20:0D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ppWERHKPWreqgm9DeABc5nkgDVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:9d:f8:9e:c2:f1:51:45:02:02:36:e2:ef:82:7b:bd:1c:09:
a4:97:88:59:b5:e3:d5:fe:10:e2:a2:16:0d:da:81:7f:12:27:
a6:aa:7e:8e:43:33:48:cc:77:47:8b:e4:78:1e:80:19:ca:5b:
0f:66:e2:2f:51:3b:9d:49:40:ce:5b:55:50:26:4a:9f:c9:9d:
1b:bd:91:2a:be:01:99:19:04:dd:e8:5d:29:4f:54:18:40:85:
45:cd:62:d2:e5:5f:05:94:0b:d0:d9:6b:01:94:4b:0c:9d:92:
cc:e5:55:7e:4e:eb:76:bd:a3:a7:78:8f:39:85:71:6c:5a:a3:
22:a8:c6:ff:55:6e:d9:57:b6:99:7c:c6:88:b1:bb:51:2b:8c:
af:f7:80:01:14:75:eb:cf:76:a0:2e:24:9f:eb:9b:97:99:97:
dd:c3:5d:37:ad:46:75:ac:1a:1c:6a:b6:4c:06:0c:1d:e3:7c:
bc:e6:d8:d7:c7:46:df:7e:f4:94:b9:45:dc:9b:10:ae:f2:b3:
c8:53:98:74:10:e7:01:74:e8:53:64:7e:f3:99:fa:bf:73:c9:
a9:08:c0:b1:39:3f:b5:74:66:89:40:83:07:dc:fd:69:90:c7:
a3:ba:58:26:47:1a:8f:03:98:37:0b:13:c7:d3:1d:dc:75:7e:
5c:fb:35:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPmMcnQsehZnGJKV6XgYyVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2OTU4NDQ0NzI4ZjVhYjdhYTgyNmY0Mzc4MDA1Y2U2Nzky
MDBkNTIwHhcNMjUxMTA0MTYwMDAzWhcNMjUxMTA1MTYwMDAzWjAzMTEwLwYDVQQD
Eyg3YmNlY2I2NDRkZTgyMDQ3OGUxNDZiMjk0MWUyMjA0YjQ0NGJjZTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlweVA2ztFum+G4xdj4fsdWbAD03
0gi+3ftfMOe9MY9P3CvJFx00BFPWg0h0HVCt90sENPhT+tFiqGJiD+AHXdqgE5Iw
HaBFUBQhpfuPG09m93H+HkQkUArQ/q/+Gx8KlfhiS3FVOzVMDAdweptCvVzrTv3r
dAfQtJW34drt5CijAD48+xFqwc1JUHnpgdXLUFNPTzUgl6kZ8TCT3EzK7e5TZFUP
4FX13GUYDJKe0+etfwuCcWlW+bIAMhjYIkseqiWukXZYSMAcO/b86OSpUS0WmFOA
4NauDTpeijylBL00gwrJUgdMeMMiNjHpgrULcyJmRiitwsEzgMw4wX5rGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHvOy2RN6CBHjhRrKUHiIEtES85oMB8GA1UdIwQY
MBaAFKaVhERyj1q3qoJvQ3gAXOZ5IA1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHBXRVJIS1BXcmVxZ205RGVBQmM1bmtnRFZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9iZGMxZjEtYzE1Ny00MDhiLWFmZTEt
MWI1MTFjNjYzOTc4LzEvcHBXRVJIS1BXcmVxZ205RGVBQmM1bmtnRFZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi9iZGMxZjEtYzE1Ny00MDhiLWFmZTEtMWI1MTFjNjYzOTc4
LzEvcHBXRVJIS1BXcmVxZ205RGVBQmM1bmtnRFZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEp34nsLx
UUUCAjbi74J7vRwJpJeIWbXj1f4Q4qIWDdqBfxInpqp+jkMzSMx3R4vkeB6AGcpb
D2biL1E7nUlAzltVUCZKn8mdG72RKr4BmRkE3ehdKU9UGECFRc1i0uVfBZQL0Nlr
AZRLDJ2SzOVVfk7rdr2jp3iPOYVxbFqjIqjG/1Vu2Ve2mXzGiLG7USuMr/eAARR1
6892oC4kn+ubl5mX3cNdN61GdawaHGq2TAYMHeN8vObY18dG3370lLlF3JsQrvKz
yFOYdBDnAXToU2R+85n6v3PJqQjAsTk/tXRmiUCDB9z9aZDHo7pYJkcajwOYNwsT
x9Md3HV+XPs1YQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 00:08:13 2025 by rpki-client