Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft
File: ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft (raw, json)
Hash identifier: +8zvjA8d0m8WFdCxeRSIseptJhWNGAXMI/Ylcg2BUDQ=
Subject key identifier: DE:D7:F3:17:84:9D:DD:16:A5:0C:43:A5:D3:AC:9E:3D:DF:ED:26:2A
Authority key identifier: A6:97:49:FA:23:37:DB:33:A7:64:74:EB:81:2C:03:4E:30:50:9D:2A
Certificate issuer: /CN=a69749fa2337db33a76474eb812c034e30509d2a
Certificate serial: 019682EBC8EA84A5D0E097EE0500B7EAC0E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ppdJ-iM32zOnZHTrgSwDTjBQnSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft
Manifest number: 0488
Signing time: Tue 29 Apr 2025 19:00:12 +0000
Manifest this update: Tue 29 Apr 2025 19:00:12 +0000
Manifest next update: Wed 30 Apr 2025 19:00:12 +0000
Files and hashes: 1: AKpMQvIIqQzXRs3Ululs7jvONDY.roa (hash: BIy70VCzVM+Xa+CdmKbiFZkREDOaRaKjJ7xUey551TY=)
2: ppdJ-iM32zOnZHTrgSwDTjBQnSo.crl (hash: fLWpN9jrKPuZBFlwLHMId5RyW1+nYIwjgMMF+565j8k=)
3: xwhdiFLdj-4M8l9XUnyeFRJXGwQ.roa (hash: VoSzy1kKxVH6beyOekb646N9QsT3/EG5ENUuXQtb21o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ppdJ-iM32zOnZHTrgSwDTjBQnSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 19:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:eb:c8:ea:84:a5:d0:e0:97:ee:05:00:b7:ea:c0:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a69749fa2337db33a76474eb812c034e30509d2a
Validity
Not Before: Apr 29 19:00:12 2025 GMT
Not After : Apr 30 19:00:12 2025 GMT
Subject: CN=ded7f317849ddd16a50c43a5d3ac9e3ddfed262a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:06:20:86:0e:ec:52:7a:ee:d0:c9:d4:16:5f:
0c:d5:d1:f7:a0:3a:ea:bf:c9:b5:8b:ec:1f:d1:0f:
04:16:7b:85:48:06:c4:7f:45:71:1b:03:a9:4b:4c:
a7:d3:39:b4:d2:b3:86:fa:48:ab:ab:08:ad:d7:fe:
e4:00:56:d8:98:d9:2d:e4:a6:33:c8:eb:e8:52:4d:
20:53:c2:96:b9:a7:ca:06:c4:5b:b9:88:67:16:e4:
64:98:41:32:14:0a:1b:b8:3d:91:31:ad:60:f3:f0:
2f:67:3a:1e:98:d5:f0:15:d5:f0:fa:75:bc:16:d4:
cb:be:34:cb:73:ac:6a:94:64:48:be:97:5c:fc:52:
30:cf:e3:04:7a:5d:1d:97:56:78:dd:c5:49:39:95:
7f:c7:7c:96:3f:35:4d:9e:e0:7d:a0:3a:5e:30:f3:
bd:28:a1:cb:8c:01:07:09:44:97:08:a4:37:20:a3:
66:37:23:39:5a:7b:4a:0d:58:16:f5:43:ae:a0:05:
ba:91:4a:f3:6c:6f:d8:71:d5:63:58:63:53:06:ca:
fb:d8:84:e6:62:c1:c8:61:28:e6:f8:0b:7e:62:78:
07:0c:c5:18:fc:7c:16:73:ab:93:3a:ac:e6:4e:f7:
36:e4:f3:4c:ad:41:97:ec:f1:e9:2a:76:14:c5:bb:
b3:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:D7:F3:17:84:9D:DD:16:A5:0C:43:A5:D3:AC:9E:3D:DF:ED:26:2A
X509v3 Authority Key Identifier:
keyid:A6:97:49:FA:23:37:DB:33:A7:64:74:EB:81:2C:03:4E:30:50:9D:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ppdJ-iM32zOnZHTrgSwDTjBQnSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:e4:cd:a0:6b:cb:ff:2c:91:1c:48:27:cc:c9:ae:d0:9e:07:
0f:9d:49:d3:56:29:24:23:5c:76:b6:e8:f7:eb:bc:e4:bf:b6:
a2:ff:a1:b8:5e:03:2d:24:85:7a:da:e2:84:db:1a:d0:17:71:
19:2a:d9:69:44:0d:79:a3:d9:2c:bb:93:8d:12:d1:ac:c7:d6:
02:a2:4d:53:45:ba:af:15:a5:c3:73:f0:c8:0a:29:25:7b:12:
f7:8f:80:98:ef:a5:d2:c1:ef:af:23:14:07:63:4c:ca:3c:21:
b3:ac:7f:0a:26:62:34:ff:5e:f9:08:53:93:df:dd:4f:52:33:
e8:80:c4:5d:88:06:e2:9d:61:fe:8b:1d:b7:a8:ef:8d:34:42:
db:5b:20:e6:f5:8a:de:f0:6f:b0:d7:39:15:24:87:2c:09:74:
e5:61:69:d7:49:ec:be:9b:4d:ea:50:26:48:a2:73:e6:50:fc:
22:d5:a9:d5:46:e7:c6:d8:20:53:13:77:30:16:f2:82:da:28:
56:53:71:44:5d:ac:74:47:fa:ed:ff:0f:1a:2f:1f:ed:48:f5:
cc:71:78:d3:76:d1:51:be:97:85:f3:1b:02:63:17:0d:25:52:
b3:c9:a2:da:c5:0d:73:28:c7:92:d4:ef:f3:61:a9:67:52:e3:
49:eb:9c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:38:47 2025 by rpki-client