Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.mft
File: ppR2gdoNt_55MV7G29oov41mD8A.mft (raw, json)
Hash identifier: cz4CtpFn4WjNngSDKii8LNi/EQ4+xTxeLf1V5SCBe50=
Subject key identifier: B1:D3:30:82:CA:80:E8:EA:3A:40:D5:37:61:1C:92:28:83:43:C0:50
Authority key identifier: A6:94:76:81:DA:0D:B7:FE:79:31:5E:C6:DB:DA:28:BF:8D:66:0F:C0
Certificate issuer: /CN=a6947681da0db7fe79315ec6dbda28bf8d660fc0
Certificate serial: 01988BEA0FAE1C29505FB7A9EF669EF733C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ppR2gdoNt_55MV7G29oov41mD8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.mft
Manifest number: 1625
Signing time: Fri 08 Aug 2025 23:00:29 +0000
Manifest this update: Fri 08 Aug 2025 23:00:29 +0000
Manifest next update: Sat 09 Aug 2025 23:00:29 +0000
Files and hashes: 1: W6o9lvJcnnR6KT19lEo85DcjBW4.roa (hash: 4q2mkPLtF8C2yzu3YKcCMenK0cywITJjv++cimOpwfA=)
2: ppR2gdoNt_55MV7G29oov41mD8A.crl (hash: 05oIP8pwp+G1E+MUSKkOdbONvfMYyWhs58G5c9inCFk=)
3: uGLt9hGh4szGgjBLbl_ULXYRxjI.roa (hash: WEHghF5NVFRIrBkSAbOMCvIKt32/zSBJMSFPbhfZlrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/ppR2gdoNt_55MV7G29oov41mD8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:ea:0f:ae:1c:29:50:5f:b7:a9:ef:66:9e:f7:33:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6947681da0db7fe79315ec6dbda28bf8d660fc0
Validity
Not Before: Aug 8 23:00:29 2025 GMT
Not After : Aug 9 23:00:29 2025 GMT
Subject: CN=b1d33082ca80e8ea3a40d537611c92288343c050
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f4:b5:7a:b8:f8:70:ca:41:21:0b:2f:4e:dd:
0e:ed:1f:fe:b7:bc:97:e8:c1:1c:57:bf:a2:3a:4e:
ec:f3:d2:b8:58:ff:a7:33:4c:f2:ef:76:63:6f:f5:
5c:ab:1d:94:96:ab:23:61:44:96:98:3f:1d:b6:9f:
5f:bd:03:ca:8c:4a:69:a6:c9:07:8c:40:ee:a0:7d:
58:f1:4f:29:aa:97:05:38:55:d8:5e:1e:af:04:b5:
ec:db:de:bd:a4:4d:f8:d0:55:70:00:5a:08:53:5a:
64:51:31:99:76:fa:ea:da:d0:48:a0:7d:6a:33:5f:
53:8d:bb:61:6f:3e:d3:89:de:ad:d8:37:60:62:0b:
e2:b7:0e:f2:0c:e8:f3:71:42:06:c0:9a:d1:7b:b3:
0d:76:73:8e:8a:11:60:19:3c:9b:a6:6b:bf:07:5b:
34:0a:4e:2c:1c:e7:3d:cb:b9:67:fe:84:9a:45:16:
ba:cf:62:d9:ba:f2:75:45:d9:23:8f:bd:86:e2:97:
e8:76:f5:44:5d:54:bb:8d:34:d2:9a:85:39:89:b9:
74:a2:bd:ad:8a:7e:26:db:da:a3:5a:40:44:ef:7a:
3b:6f:27:7a:54:45:2b:3e:22:20:d6:11:ca:ec:a6:
64:37:5b:67:8b:33:2f:fa:cf:6b:c1:f5:26:c0:22:
4f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:D3:30:82:CA:80:E8:EA:3A:40:D5:37:61:1C:92:28:83:43:C0:50
X509v3 Authority Key Identifier:
keyid:A6:94:76:81:DA:0D:B7:FE:79:31:5E:C6:DB:DA:28:BF:8D:66:0F:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ppR2gdoNt_55MV7G29oov41mD8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:c0:48:37:ae:ab:81:e1:ed:09:bb:56:d3:68:76:27:3e:ae:
3e:5a:d3:d8:45:71:f7:f5:c2:36:ee:8f:eb:3e:38:53:b1:da:
d3:25:96:ea:7c:0f:32:3a:70:19:7c:f9:ca:03:68:6f:7f:e4:
c7:45:6b:bd:9e:af:72:f4:8f:9b:67:c8:7c:ae:e5:76:6f:da:
31:46:8f:92:86:83:90:18:c0:d9:32:61:b7:6d:70:41:86:0a:
2d:cd:0d:44:0d:c5:0c:16:8d:c6:30:4c:f7:b0:fb:9b:a5:0e:
47:e0:bc:98:87:6a:5e:a0:ff:00:3e:a0:92:18:9e:ad:44:3c:
40:59:48:4f:93:5f:c8:a2:ac:50:99:c6:a0:14:a0:d8:66:90:
14:fa:6b:2b:2d:f2:4a:26:6d:4a:0f:28:cd:76:58:e6:07:f7:
e2:46:b4:a4:b8:51:4b:8c:04:23:18:08:43:dc:9a:6e:b5:87:
f1:ee:77:98:3a:c5:f5:7e:2d:b5:ce:fb:0d:0c:d6:31:f2:5e:
43:4c:86:84:83:0f:04:59:24:81:16:99:9b:0c:08:e9:af:4f:
77:3e:8f:79:43:d1:ef:50:0e:85:7d:df:7e:82:e3:79:11:d7:
b2:de:b1:2f:d1:37:eb:f5:0c:fd:a5:48:86:2d:2f:31:97:2b:
50:7d:33:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:02:45 2025 by rpki-client