Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.mft
File: ppWERHKPWreqgm9DeABc5nkgDVI.mft (raw, json)
Hash identifier: KNqquDFlgifhpdRm/O3YpLFFWtgi/b6FK662KExOKBo=
Subject key identifier: CD:B2:14:28:94:D2:CD:E5:55:75:34:4C:F7:69:15:69:BD:F3:1A:6C
Authority key identifier: A6:95:84:44:72:8F:5A:B7:AA:82:6F:43:78:00:5C:E6:79:20:0D:52
Certificate issuer: /CN=a6958444728f5ab7aa826f4378005ce679200d52
Certificate serial: 0198955B34A3E5768FE59CE2A944F6DB6947
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ppWERHKPWreqgm9DeABc5nkgDVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.mft
Manifest number: 1627
Signing time: Sun 10 Aug 2025 19:00:39 +0000
Manifest this update: Sun 10 Aug 2025 19:00:39 +0000
Manifest next update: Mon 11 Aug 2025 19:00:39 +0000
Files and hashes: 1: ppWERHKPWreqgm9DeABc5nkgDVI.crl (hash: UAKiLPVB9PjGfuOEydkDfBGHjTWZJ5N5+mpq5y4+iIU=)
2: z-LF5XIt0VeWFhY7GK5O7xZnBBE.roa (hash: 1pZ4XtZFpZvLcxR/iScQRob6NYsKteymu5FeNxuRtO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ppWERHKPWreqgm9DeABc5nkgDVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:5b:34:a3:e5:76:8f:e5:9c:e2:a9:44:f6:db:69:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6958444728f5ab7aa826f4378005ce679200d52
Validity
Not Before: Aug 10 19:00:39 2025 GMT
Not After : Aug 11 19:00:39 2025 GMT
Subject: CN=cdb2142894d2cde55575344cf7691569bdf31a6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:eb:9d:50:b1:0c:ac:59:8d:9c:e1:f5:24:d2:
52:9f:05:a2:ce:12:97:36:f4:60:25:e8:f2:8a:e0:
c1:f1:1b:e7:4f:44:a2:87:bb:4a:2e:bb:56:a4:d0:
5c:51:17:99:dc:2e:d5:47:a4:1a:d2:bb:19:d7:73:
26:4a:ea:e2:4e:97:03:ad:4f:be:5e:43:cb:69:c8:
6d:a4:7b:f2:0d:da:bd:c2:b1:7e:aa:7b:1a:93:38:
5a:14:56:ef:c1:76:77:46:72:0c:fe:f8:65:17:c4:
42:3d:a3:61:fc:a8:70:0d:77:6a:d4:75:5d:1b:7a:
79:4d:2c:6a:27:5a:6a:80:9f:e1:37:9a:7d:ad:37:
c5:fe:9a:65:b5:e5:61:68:c5:91:11:91:fb:7e:66:
42:4c:f6:3d:f0:34:0d:66:29:17:f8:c8:6e:1a:b4:
e0:bf:e7:28:81:c8:3c:52:0f:17:4d:22:4b:eb:13:
5c:c1:d8:97:29:e2:cb:da:ed:dd:24:60:84:61:be:
6f:c2:cc:f0:24:b0:9c:5a:63:8d:e8:ba:4e:f2:14:
cf:e7:b6:cb:6c:88:a3:27:a8:5f:bd:9d:a2:92:90:
ae:a3:e7:df:a8:ac:a3:86:1f:e5:09:13:3b:d1:84:
4e:f7:2a:9f:1a:fd:4c:e6:c5:5d:20:5e:18:13:ac:
ba:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:B2:14:28:94:D2:CD:E5:55:75:34:4C:F7:69:15:69:BD:F3:1A:6C
X509v3 Authority Key Identifier:
keyid:A6:95:84:44:72:8F:5A:B7:AA:82:6F:43:78:00:5C:E6:79:20:0D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ppWERHKPWreqgm9DeABc5nkgDVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:4a:ea:47:73:22:8f:73:f5:1b:69:1f:33:ce:10:0e:8d:66:
1c:ce:94:b6:23:65:b6:bf:ca:c6:49:b6:33:e5:88:cc:80:60:
ca:11:ad:5d:9e:f8:65:0f:30:50:fc:4f:3f:94:c1:ce:9e:84:
b5:e1:97:d1:44:40:33:3f:67:70:d3:fd:e8:62:fa:df:8e:08:
a9:e9:fb:f1:a5:4c:0a:b6:d4:b4:77:e0:82:ad:e4:d3:f8:a8:
46:36:6f:45:ab:ad:ff:20:39:52:25:22:a0:99:70:b3:cc:b7:
34:6d:c4:dc:ba:45:28:8d:12:f6:79:8a:18:7b:56:48:9c:92:
fc:8f:89:73:cf:63:6e:72:ac:d2:95:98:5d:5a:be:26:42:0a:
08:07:c3:db:a2:88:b7:a4:4e:04:7b:4f:77:f2:e2:94:0c:f6:
68:b1:ad:1d:0e:b2:93:44:a9:5f:6a:61:c3:86:87:98:f0:ef:
7d:9d:a8:9a:eb:50:b6:d3:6b:f3:7b:69:d7:01:0c:23:ba:17:
68:33:77:00:2e:f4:b7:2b:e3:5d:0e:e3:21:ac:80:7c:0c:15:
85:d5:5b:76:1e:fe:4f:e6:e1:a5:8e:31:97:26:54:9c:fa:e8:
35:01:0e:32:97:8d:21:26:49:93:ba:84:3b:97:7f:10:0a:d5:
c7:95:db:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 20:59:18 2025 by rpki-client