Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.mft
File: ppR2gdoNt_55MV7G29oov41mD8A.mft (raw, json)
Hash identifier: rgckD6vv6/OTnz6HhChjY+IcrNHngfSWJXMUvnenaf4=
Subject key identifier: FB:D3:75:26:BB:F5:CC:61:0D:D6:99:50:95:5F:8F:75:27:7F:51:B3
Authority key identifier: A6:94:76:81:DA:0D:B7:FE:79:31:5E:C6:DB:DA:28:BF:8D:66:0F:C0
Certificate issuer: /CN=a6947681da0db7fe79315ec6dbda28bf8d660fc0
Certificate serial: 019A4FCFD93C396FEF2D0846E736732B4655
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ppR2gdoNt_55MV7G29oov41mD8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 17:00:12 +0000
Manifest this update: Tue 04 Nov 2025 17:00:12 +0000
Manifest next update: Wed 05 Nov 2025 17:00:12 +0000
Files and hashes: 1: W6o9lvJcnnR6KT19lEo85DcjBW4.roa (hash: 4q2mkPLtF8C2yzu3YKcCMenK0cywITJjv++cimOpwfA=)
2: ppR2gdoNt_55MV7G29oov41mD8A.crl (hash: lZVx9NbRIm7AOJisD0eg5NFyDaR/MiyV3IsEVDZcd0U=)
3: uGLt9hGh4szGgjBLbl_ULXYRxjI.roa (hash: WEHghF5NVFRIrBkSAbOMCvIKt32/zSBJMSFPbhfZlrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/ppR2gdoNt_55MV7G29oov41mD8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:cf:d9:3c:39:6f:ef:2d:08:46:e7:36:73:2b:46:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6947681da0db7fe79315ec6dbda28bf8d660fc0
Validity
Not Before: Nov 4 17:00:12 2025 GMT
Not After : Nov 5 17:00:12 2025 GMT
Subject: CN=fbd37526bbf5cc610dd69950955f8f75277f51b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:48:55:b3:c8:df:b7:1f:0e:f2:0d:ff:5f:64:
65:34:5b:5b:fa:b1:9e:f2:88:aa:92:8a:ef:df:38:
f3:ae:67:21:c2:e1:b1:37:0a:fa:f5:41:78:be:5a:
be:56:dd:bc:d1:08:95:1b:69:3d:f3:e6:2d:39:92:
a9:3e:34:9f:31:b6:69:12:2d:db:51:10:2d:a5:18:
28:40:73:36:b5:c3:32:93:25:de:bc:76:18:87:d5:
6b:2a:9a:25:b6:56:6b:5f:da:a7:d5:5c:69:ef:42:
5b:2b:4e:4d:56:fe:ca:3e:2f:41:6f:4c:5c:2e:d1:
92:36:3b:dd:de:6e:1a:13:6f:bb:ec:22:ea:16:f4:
77:8d:01:3a:b7:e0:f1:b3:42:ef:60:17:f4:0e:1e:
77:8c:8e:2c:43:58:c7:58:e1:81:dc:bf:28:04:02:
23:c4:ca:e0:56:2b:9f:d7:56:f6:ad:f5:10:3c:92:
1f:42:83:b6:66:c3:37:8d:7e:38:1f:a4:26:7d:4c:
3d:66:34:94:8f:52:5b:6c:81:e9:83:e2:66:d8:8e:
40:ff:6e:a1:22:39:a5:72:7d:8c:7a:30:be:e4:18:
26:8e:b9:52:76:b7:90:da:16:8a:28:39:7e:f0:e2:
0b:93:5e:47:72:57:68:2d:1f:43:b6:6b:cf:87:eb:
33:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:D3:75:26:BB:F5:CC:61:0D:D6:99:50:95:5F:8F:75:27:7F:51:B3
X509v3 Authority Key Identifier:
keyid:A6:94:76:81:DA:0D:B7:FE:79:31:5E:C6:DB:DA:28:BF:8D:66:0F:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ppR2gdoNt_55MV7G29oov41mD8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:81:d6:b3:09:a8:e8:59:21:1a:1a:d8:30:2a:d3:ce:c4:65:
93:ea:29:35:a7:fc:3a:cd:1f:09:fd:5f:7e:64:93:88:60:50:
07:48:ac:b3:f8:67:24:e9:99:87:7e:3a:3b:49:95:7e:59:6e:
3e:11:10:98:90:c9:0e:af:73:32:6a:a6:a9:82:4d:97:16:b2:
df:b6:5a:7c:06:d6:7c:1f:89:3c:95:4f:44:8d:e5:95:67:8f:
9d:8d:c2:11:78:b1:7a:d1:0d:0c:6e:58:fd:d3:2e:ce:5e:bc:
23:9f:15:32:f2:16:f0:0a:cc:49:0c:e4:c3:5d:0f:85:da:2b:
86:3b:be:0f:9e:d5:b2:d7:46:55:cd:2c:a7:14:04:29:e0:94:
93:48:93:d1:7c:91:a7:83:6c:b8:a9:f8:01:98:df:63:23:a6:
44:31:f0:82:30:2c:08:33:10:7e:de:67:9d:13:4c:6f:07:f0:
e4:c4:67:ac:97:04:de:e0:22:9b:5b:41:71:85:c8:19:8c:28:
a2:46:e7:12:05:b2:ae:41:ec:6b:b0:28:58:86:20:d6:6e:66:
fa:29:90:be:b6:d6:e1:a5:73:63:6e:6d:f7:3d:c2:cc:97:f0:
73:db:bd:db:3e:3e:98:43:64:a5:af:7a:2e:f2:29:28:51:f4:
51:b9:fe:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:20:50 2025 by rpki-client