Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft
File: ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft (raw, json)
Hash identifier: vep7uE2Eze/RCwuHz4cSn0ODJOBl4UvuPQcoWPsXw28=
Subject key identifier: 28:82:C6:0E:80:E4:16:35:76:03:4B:8A:97:13:6B:87:8B:97:DA:BD
Authority key identifier: A6:97:49:FA:23:37:DB:33:A7:64:74:EB:81:2C:03:4E:30:50:9D:2A
Certificate issuer: /CN=a69749fa2337db33a76474eb812c034e30509d2a
Certificate serial: 01976E86D16C51E2E3D59D3103B48877289F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ppdJ-iM32zOnZHTrgSwDTjBQnSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft
Manifest number: 0502
Signing time: Sat 14 Jun 2025 13:00:18 +0000
Manifest this update: Sat 14 Jun 2025 13:00:18 +0000
Manifest next update: Sun 15 Jun 2025 13:00:18 +0000
Files and hashes: 1: AKpMQvIIqQzXRs3Ululs7jvONDY.roa (hash: BIy70VCzVM+Xa+CdmKbiFZkREDOaRaKjJ7xUey551TY=)
2: ppdJ-iM32zOnZHTrgSwDTjBQnSo.crl (hash: wAl0tpHYTb/qsbzRKOSkib/7yjt32MN/rbTQJG0elYA=)
3: xwhdiFLdj-4M8l9XUnyeFRJXGwQ.roa (hash: VoSzy1kKxVH6beyOekb646N9QsT3/EG5ENUuXQtb21o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ppdJ-iM32zOnZHTrgSwDTjBQnSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:86:d1:6c:51:e2:e3:d5:9d:31:03:b4:88:77:28:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a69749fa2337db33a76474eb812c034e30509d2a
Validity
Not Before: Jun 14 13:00:18 2025 GMT
Not After : Jun 15 13:00:18 2025 GMT
Subject: CN=2882c60e80e4163576034b8a97136b878b97dabd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:92:1d:35:2f:bf:11:79:3e:cd:8e:85:ab:21:
f1:31:f7:30:75:ec:85:3e:57:45:c7:58:f8:c4:b0:
25:bd:64:e4:2a:cc:d0:27:58:e5:b1:34:77:69:8a:
48:e3:50:22:af:ac:13:7d:d1:2d:aa:2a:e1:93:37:
1c:6d:fd:25:c4:79:6a:43:fb:6c:4e:0d:8f:25:85:
14:32:0f:45:d6:21:11:a8:6d:11:98:ee:88:bc:fb:
d8:de:39:33:41:76:52:ef:f4:8f:ea:ba:a1:e2:bc:
78:be:9d:fa:38:2c:f5:12:0a:4f:ae:97:be:08:95:
f0:56:83:73:d9:63:04:62:5c:0b:45:1d:23:d0:19:
31:32:e3:0a:46:cc:f0:1d:94:c5:24:cd:c1:1e:33:
a0:c7:93:42:9f:a6:ed:5d:4b:c9:4d:cd:e9:a5:94:
90:f6:27:4d:97:dc:87:b4:b1:7f:60:6f:e1:96:f6:
de:29:e5:5a:49:51:b9:c0:a8:09:55:d8:5d:a1:b6:
1a:ea:5a:45:c4:f8:dd:e9:2e:90:68:22:61:19:46:
d9:ca:8c:95:b5:fd:c9:4f:46:34:e9:74:3b:1c:63:
20:7c:6b:5a:a2:ed:d7:1e:70:4f:02:d4:c1:44:ec:
1e:89:00:41:45:ab:ff:c1:e2:f9:07:37:7d:ed:e4:
39:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:82:C6:0E:80:E4:16:35:76:03:4B:8A:97:13:6B:87:8B:97:DA:BD
X509v3 Authority Key Identifier:
keyid:A6:97:49:FA:23:37:DB:33:A7:64:74:EB:81:2C:03:4E:30:50:9D:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ppdJ-iM32zOnZHTrgSwDTjBQnSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:8a:52:3f:36:6f:3f:b1:1c:79:8f:b0:8f:e8:0f:05:27:a6:
9c:84:a2:0f:f2:65:33:87:8e:e6:f5:5f:19:bc:a5:a0:b2:73:
4a:df:ca:e1:d3:aa:6d:ef:d0:67:f7:f3:5f:a7:5b:c2:01:6b:
99:89:51:4d:78:91:e1:b3:a2:b4:8b:9d:22:2f:0e:b8:6c:50:
91:6c:de:df:70:b3:67:e6:a4:a1:8f:54:09:1f:e9:75:c5:af:
61:03:3a:5a:86:3d:4d:08:1b:6a:5d:1d:97:30:3c:a1:a9:37:
ad:53:f2:3b:89:a4:06:bb:4e:07:20:c5:d7:20:9d:03:f5:ae:
57:65:d5:cf:fe:5b:4a:98:33:43:ae:ec:07:6f:57:61:94:03:
eb:0d:62:2e:2f:97:4b:dd:19:39:60:b0:4b:fc:97:f1:db:66:
60:e3:12:7d:95:50:e8:05:03:66:54:2d:74:2d:9f:68:be:c2:
3f:3f:40:67:33:19:24:2f:07:f4:f4:38:27:5b:8d:87:94:97:
c5:bd:4d:73:76:28:fd:cd:82:dd:aa:5d:36:bc:0e:6a:a9:97:
62:07:ce:9e:9d:65:50:57:42:97:c8:41:05:c8:78:6f:7e:a7:
44:47:d5:a0:dd:03:2c:52:04:0e:28:f8:83:6e:19:c3:4e:5c:
df:22:13:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 20:11:09 2025 by rpki-client