Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft
File: ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft (raw, json)
Hash identifier: 7/a4SO/TjrYstuALcIC3sEUu0tML26P+iWeqiFlQveo=
Subject key identifier: 90:81:8E:5D:6F:CB:D4:8B:7E:C3:3A:DD:AE:8C:96:3D:25:CD:D6:9D
Authority key identifier: A6:97:49:FA:23:37:DB:33:A7:64:74:EB:81:2C:03:4E:30:50:9D:2A
Certificate issuer: /CN=a69749fa2337db33a76474eb812c034e30509d2a
Certificate serial: 0198733CF7F9B236257066A5902378F5FA25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ppdJ-iM32zOnZHTrgSwDTjBQnSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft
Manifest number: 0589
Signing time: Mon 04 Aug 2025 04:00:32 +0000
Manifest this update: Mon 04 Aug 2025 04:00:32 +0000
Manifest next update: Tue 05 Aug 2025 04:00:32 +0000
Files and hashes: 1: AKpMQvIIqQzXRs3Ululs7jvONDY.roa (hash: BIy70VCzVM+Xa+CdmKbiFZkREDOaRaKjJ7xUey551TY=)
2: ppdJ-iM32zOnZHTrgSwDTjBQnSo.crl (hash: m/XI9fUVR/x7tSw+IcCIRxlsZJQbKlh01H02qZJJMwY=)
3: xwhdiFLdj-4M8l9XUnyeFRJXGwQ.roa (hash: VoSzy1kKxVH6beyOekb646N9QsT3/EG5ENUuXQtb21o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ppdJ-iM32zOnZHTrgSwDTjBQnSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3c:f7:f9:b2:36:25:70:66:a5:90:23:78:f5:fa:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a69749fa2337db33a76474eb812c034e30509d2a
Validity
Not Before: Aug 4 04:00:32 2025 GMT
Not After : Aug 5 04:00:32 2025 GMT
Subject: CN=90818e5d6fcbd48b7ec33addae8c963d25cdd69d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f8:83:0a:d0:09:f8:32:60:ae:ed:b1:e2:1e:
94:45:c9:4e:25:ca:f5:d4:20:a2:3f:92:4b:a3:e4:
4e:82:5e:80:a8:62:b0:96:a5:da:55:d2:1f:5c:6b:
d0:7f:d7:23:01:51:e9:cd:f6:da:eb:2e:a9:30:c2:
5a:d5:ae:6f:10:a6:62:53:8a:64:e7:11:fb:24:c4:
78:d2:41:b2:ab:8a:70:e5:96:d0:af:5c:a8:da:50:
cc:5d:c6:95:c4:75:ce:b8:f6:01:e9:da:2f:56:43:
56:6a:b9:9a:5b:26:ba:47:ef:e5:02:cf:52:3e:75:
8a:d3:8a:92:e6:db:10:fc:91:e2:f2:6c:55:fe:6f:
dc:66:20:9e:ea:4d:dd:fc:31:51:97:5b:10:16:93:
5e:33:14:f7:be:95:cd:0f:b9:4d:78:17:6b:ea:95:
ef:bd:96:d1:3a:1e:4c:b4:af:b9:a8:02:b1:56:c1:
d6:e8:b3:f8:b3:71:9e:3f:3e:2a:89:95:17:97:6d:
87:4d:65:12:73:c4:e5:b3:21:03:bb:4f:38:fc:93:
49:21:32:11:84:f0:d5:36:d8:44:98:94:7b:fb:1a:
f0:0d:32:51:93:61:60:d0:14:c0:6b:73:09:0d:7d:
cb:82:90:94:f6:98:7d:fa:b5:f1:f6:0d:22:be:a8:
c2:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:81:8E:5D:6F:CB:D4:8B:7E:C3:3A:DD:AE:8C:96:3D:25:CD:D6:9D
X509v3 Authority Key Identifier:
keyid:A6:97:49:FA:23:37:DB:33:A7:64:74:EB:81:2C:03:4E:30:50:9D:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ppdJ-iM32zOnZHTrgSwDTjBQnSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:e7:85:31:57:78:a4:8f:7c:43:d8:f5:c7:42:52:bf:71:9b:
92:b9:9e:d0:70:2a:17:63:ac:f3:6c:19:1b:59:57:bb:50:97:
e3:f2:06:98:ce:f7:bb:1c:c0:e2:7b:14:e7:f8:ff:6d:33:c8:
40:e5:1d:ad:e4:b3:57:0a:73:64:a0:d2:c0:a5:da:14:54:b9:
b6:cd:ad:d1:b0:5a:73:ba:fa:b2:b7:55:81:66:73:71:b5:72:
29:d9:89:b2:9e:a4:85:d8:a4:e4:2b:89:0f:7a:e6:6a:26:dd:
31:7b:da:45:71:5f:cb:be:6d:ef:c6:5a:1e:a2:9c:a1:b3:3e:
af:7c:ef:f9:ef:a5:67:f6:8c:7f:4f:31:62:f0:3b:e0:f4:d0:
4b:ae:53:6f:5a:a0:cf:87:d3:8f:80:fa:dc:b2:6d:bb:1a:7c:
ef:76:10:42:09:d0:24:78:54:0e:73:da:bc:1d:77:4b:16:52:
d7:70:be:71:01:15:52:f1:69:9e:ae:77:15:2a:b4:7a:40:a1:
40:33:5d:ec:71:19:e9:49:ef:d8:92:cd:a5:fd:2e:1a:80:9f:
b0:4b:aa:42:01:25:cf:cc:88:34:3c:29:3e:c3:7c:42:e7:84:
fc:45:dd:ce:a8:18:7a:c7:fd:c7:09:5e:f5:b3:69:b1:e0:6e:
b2:de:41:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:16:21 2025 by rpki-client