Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft
File: ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft (raw, json)
Hash identifier: liXGVth/aahHFTUhQsQVhADQBeL+1Zo73AzRbDQMPfg=
Subject key identifier: 5C:C6:23:B3:A0:95:2E:45:AF:F4:47:58:03:63:15:21:A7:7B:8B:6A
Authority key identifier: A6:97:49:FA:23:37:DB:33:A7:64:74:EB:81:2C:03:4E:30:50:9D:2A
Certificate issuer: /CN=a69749fa2337db33a76474eb812c034e30509d2a
Certificate serial: 019A503DF38111DD0785B3DDCB0924FA5028
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ppdJ-iM32zOnZHTrgSwDTjBQnSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft
Manifest number: 0680
Signing time: Tue 04 Nov 2025 19:00:28 +0000
Manifest this update: Tue 04 Nov 2025 19:00:28 +0000
Manifest next update: Wed 05 Nov 2025 19:00:28 +0000
Files and hashes: 1: AKpMQvIIqQzXRs3Ululs7jvONDY.roa (hash: BIy70VCzVM+Xa+CdmKbiFZkREDOaRaKjJ7xUey551TY=)
2: ppdJ-iM32zOnZHTrgSwDTjBQnSo.crl (hash: sLO78mKWwp7jncpFu3VOIc4QeSLcK5twf8qktkxan+4=)
3: xwhdiFLdj-4M8l9XUnyeFRJXGwQ.roa (hash: VoSzy1kKxVH6beyOekb646N9QsT3/EG5ENUuXQtb21o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ppdJ-iM32zOnZHTrgSwDTjBQnSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:f3:81:11:dd:07:85:b3:dd:cb:09:24:fa:50:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a69749fa2337db33a76474eb812c034e30509d2a
Validity
Not Before: Nov 4 19:00:28 2025 GMT
Not After : Nov 5 19:00:28 2025 GMT
Subject: CN=5cc623b3a0952e45aff4475803631521a77b8b6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:83:ba:48:e8:43:4a:3e:33:2f:ab:c7:a4:86:
0f:b8:15:0c:de:d1:2e:51:d7:1e:07:a2:60:2c:f8:
d1:0c:bb:88:b1:49:06:16:aa:6f:53:0e:3c:5c:90:
2b:53:ba:96:58:01:eb:78:e3:be:39:3a:34:4d:d7:
de:f0:d6:77:7d:32:26:e3:23:1a:e1:57:35:f7:9c:
00:de:11:6b:7b:2b:ac:80:87:98:c8:96:88:bd:9e:
1b:1d:f6:b8:3f:80:64:10:30:a1:43:af:81:3b:65:
00:af:00:07:33:9f:cc:50:d9:ff:a0:42:67:bf:f3:
37:35:41:c8:cd:a4:dc:4e:0f:68:c7:87:cc:ff:ef:
fb:ae:e6:51:76:54:7a:ca:e3:20:bc:c2:f3:b7:06:
1e:80:e3:ce:c8:a3:44:1d:20:ca:60:63:10:72:95:
18:9b:65:67:9f:59:e0:c2:3d:4f:3e:04:d7:20:b2:
12:49:3d:31:6e:ba:c1:c2:01:6d:d4:b0:2a:96:89:
09:71:57:64:cb:7c:1b:18:31:95:af:7b:0a:1b:68:
be:b2:a3:49:5c:b4:97:be:f0:d9:ec:b5:9b:d1:1e:
e6:50:fa:ae:69:52:45:51:58:e6:4e:c5:2a:d8:32:
43:c6:59:61:34:bb:2f:e4:f9:37:38:35:b1:24:a8:
cc:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:C6:23:B3:A0:95:2E:45:AF:F4:47:58:03:63:15:21:A7:7B:8B:6A
X509v3 Authority Key Identifier:
keyid:A6:97:49:FA:23:37:DB:33:A7:64:74:EB:81:2C:03:4E:30:50:9D:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ppdJ-iM32zOnZHTrgSwDTjBQnSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:91:a4:58:08:b6:9c:1a:d6:ea:1b:26:a8:4c:1a:92:6f:53:
26:3c:c9:58:75:39:5c:b6:ed:ae:0a:4a:8d:52:f3:81:ae:62:
09:ce:b0:c6:2c:fa:82:05:9b:57:59:31:60:c2:c0:5e:8f:b7:
f1:98:6d:fc:93:6a:13:67:1d:48:47:06:bf:4f:b4:a5:f5:f6:
99:aa:ee:74:5f:70:2b:e1:fb:a8:5f:86:2d:fc:b0:a6:af:08:
38:f1:71:4f:e7:e4:1a:a1:76:16:86:35:6b:e1:fa:e5:6e:25:
86:d3:00:1f:f5:cf:c9:b6:3b:15:29:bb:96:3c:ee:49:37:1c:
38:12:34:2e:57:c3:3e:db:a4:ec:d9:2a:a8:ff:fe:23:fd:02:
86:35:b4:2e:06:05:ef:1d:f3:9c:c1:f8:89:35:33:7e:b9:6d:
bb:68:da:75:ff:e8:ad:19:85:86:f4:d3:db:7c:e4:44:c2:1c:
95:b4:18:9b:8d:3b:b4:2f:46:d8:b2:fe:0e:da:7a:1e:0a:db:
8f:29:c1:eb:d7:57:7d:51:ed:21:95:6e:00:65:57:47:87:e6:
68:de:fd:72:05:4c:81:10:b4:f7:40:84:10:ba:36:7f:1e:e0:
bc:15:6d:ed:0b:21:fd:bc:14:49:be:81:22:64:06:f5:b8:0b:
3b:79:99:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:38:47 2025 by rpki-client