Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/9e22b8-4eb1-4d2f-a807-7b94fb43b60a/1/ppv5fceDSX88N716huWZSs7ngbA.mft
File: ppv5fceDSX88N716huWZSs7ngbA.mft (raw, json)
Hash identifier: owUqwiFUgRdiGZJDF1KpPsPwGd4MmAQlfNOhCENlnwg=
Subject key identifier: 74:EF:ED:8A:CA:BA:4C:66:85:02:DA:61:20:1C:89:49:65:6A:A9:3F
Authority key identifier: A6:9B:F9:7D:C7:83:49:7F:3C:37:BD:7A:86:E5:99:4A:CE:E7:81:B0
Certificate issuer: /CN=a69bf97dc783497f3c37bd7a86e5994acee781b0
Certificate serial: 0197B6A24DF3BE0E461D3802D671F8506CF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ppv5fceDSX88N716huWZSs7ngbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/9e22b8-4eb1-4d2f-a807-7b94fb43b60a/1/ppv5fceDSX88N716huWZSs7ngbA.mft
Manifest number: 0FAD
Signing time: Sat 28 Jun 2025 13:02:59 +0000
Manifest this update: Sat 28 Jun 2025 13:02:59 +0000
Manifest next update: Sun 29 Jun 2025 13:02:59 +0000
Files and hashes: 1: ppv5fceDSX88N716huWZSs7ngbA.crl (hash: WKiltBahoBT9yAXDfJYYMbmGaAc5B+Cfhqzh+knEekA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/9e22b8-4eb1-4d2f-a807-7b94fb43b60a/1/ppv5fceDSX88N716huWZSs7ngbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/9e22b8-4eb1-4d2f-a807-7b94fb43b60a/1/ppv5fceDSX88N716huWZSs7ngbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ppv5fceDSX88N716huWZSs7ngbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:4d:f3:be:0e:46:1d:38:02:d6:71:f8:50:6c:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a69bf97dc783497f3c37bd7a86e5994acee781b0
Validity
Not Before: Jun 28 13:02:59 2025 GMT
Not After : Jun 29 13:02:59 2025 GMT
Subject: CN=74efed8acaba4c668502da61201c8949656aa93f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:af:00:58:9a:c8:90:48:7e:d6:7c:b3:55:47:
52:c0:3b:be:24:b3:6c:36:3d:cf:92:fe:4b:08:7e:
2f:7e:25:3d:e0:2f:ea:84:98:dd:bb:67:1f:37:9a:
86:a0:33:cd:f7:34:b6:90:f9:d9:92:63:29:5d:79:
4e:7b:5e:57:63:df:fe:bb:c3:20:d3:b2:8f:ff:b9:
d9:fd:d9:ce:1b:1f:9a:67:5d:1f:ca:d5:01:01:ea:
28:c0:91:50:d2:0a:e1:b3:93:92:bc:78:45:a3:37:
09:ba:9e:7b:33:e8:1a:e2:ec:bc:a6:3d:cb:b8:a0:
4f:03:9a:6f:e6:ec:31:1f:d1:29:09:60:c5:36:d2:
2a:6b:b0:dd:d7:c6:99:f2:3e:bf:76:a1:1f:94:d2:
ce:e9:62:23:d8:10:3e:b7:c5:84:4d:aa:62:f4:48:
3a:87:14:cc:22:e3:d1:5a:80:2c:01:16:ff:08:7c:
26:ca:53:93:76:86:b0:30:a1:16:55:10:cf:db:23:
8a:24:0b:ac:42:77:6f:86:81:12:f8:ca:98:71:fc:
c9:5c:cc:46:b6:5c:ef:c0:14:29:16:39:e4:30:e2:
a6:04:9b:d4:df:ac:86:13:cf:c3:68:44:38:a8:1e:
82:1a:96:17:3e:bb:0a:0f:1e:87:fb:69:c6:af:63:
b2:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:EF:ED:8A:CA:BA:4C:66:85:02:DA:61:20:1C:89:49:65:6A:A9:3F
X509v3 Authority Key Identifier:
keyid:A6:9B:F9:7D:C7:83:49:7F:3C:37:BD:7A:86:E5:99:4A:CE:E7:81:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ppv5fceDSX88N716huWZSs7ngbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9e22b8-4eb1-4d2f-a807-7b94fb43b60a/1/ppv5fceDSX88N716huWZSs7ngbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9e22b8-4eb1-4d2f-a807-7b94fb43b60a/1/ppv5fceDSX88N716huWZSs7ngbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:5a:87:37:37:32:f7:79:66:f4:16:a9:ab:36:fa:84:62:07:
41:fe:69:c7:fe:cb:de:99:fd:92:ef:93:b3:26:61:4f:de:f1:
33:ca:47:00:db:d0:c2:62:3a:67:03:28:11:02:94:fa:4b:1f:
c4:82:00:49:ed:d5:04:4d:18:86:a1:95:ca:02:14:d9:54:a0:
8f:61:58:48:81:da:09:91:55:3a:66:36:5a:01:a7:dc:cb:e9:
1d:ba:30:2e:f3:07:d2:95:77:e4:de:dc:1a:d7:e2:df:db:d3:
76:58:38:87:55:5b:92:5e:28:80:2d:ee:ea:e3:10:61:16:99:
8f:ca:e3:4a:06:6b:ff:82:80:cb:0d:c8:8c:ab:9c:1d:f3:5b:
2e:4e:29:a3:e8:ce:1d:33:32:23:c9:c5:3b:e5:c1:8a:a3:a8:
21:40:28:c0:4c:15:6e:1c:3e:87:7f:94:15:85:fe:b6:c9:7b:
cc:04:a8:c0:da:09:43:41:82:e2:94:9e:c1:8f:13:3b:57:50:
66:22:fa:c0:3f:ef:18:53:4b:04:d2:dd:59:cf:db:91:a7:b8:
e1:77:b1:a5:51:a4:08:da:2f:cd:d6:89:c8:91:93:07:c8:f2:
ed:02:b9:48:73:d5:c2:67:1c:e9:70:6a:f1:5b:a7:92:a4:72:
81:01:63:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2ok3zvg5GHTgC1nH4UGz3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2OWJmOTdkYzc4MzQ5N2YzYzM3YmQ3YTg2ZTU5OTRhY2Vl
NzgxYjAwHhcNMjUwNjI4MTMwMjU5WhcNMjUwNjI5MTMwMjU5WjAzMTEwLwYDVQQD
Eyg3NGVmZWQ4YWNhYmE0YzY2ODUwMmRhNjEyMDFjODk0OTY1NmFhOTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvK8AWJrIkEh+1nyzVUdSwDu+JLNs
Nj3Pkv5LCH4vfiU94C/qhJjdu2cfN5qGoDPN9zS2kPnZkmMpXXlOe15XY9/+u8Mg
07KP/7nZ/dnOGx+aZ10fytUBAeoowJFQ0grhs5OSvHhFozcJup57M+ga4uy8pj3L
uKBPA5pv5uwxH9EpCWDFNtIqa7Dd18aZ8j6/dqEflNLO6WIj2BA+t8WETapi9Eg6
hxTMIuPRWoAsARb/CHwmylOTdoawMKEWVRDP2yOKJAusQndvhoES+MqYcfzJXMxG
tlzvwBQpFjnkMOKmBJvU36yGE8/DaEQ4qB6CGpYXPrsKDx6H+2nGr2OywQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHTv7YrKukxmhQLaYSAciUllaqk/MB8GA1UdIwQY
MBaAFKab+X3Hg0l/PDe9eoblmUrO54GwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHB2NWZjZURTWDg4TjcxNmh1V1pTczduZ2JBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My85ZTIyYjgtNGViMS00ZDJmLWE4MDct
N2I5NGZiNDNiNjBhLzEvcHB2NWZjZURTWDg4TjcxNmh1V1pTczduZ2JBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My85ZTIyYjgtNGViMS00ZDJmLWE4MDctN2I5NGZiNDNiNjBh
LzEvcHB2NWZjZURTWDg4TjcxNmh1V1pTczduZ2JBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF1qHNzcy
93lm9Bapqzb6hGIHQf5px/7L3pn9ku+TsyZhT97xM8pHANvQwmI6ZwMoEQKU+ksf
xIIASe3VBE0YhqGVygIU2VSgj2FYSIHaCZFVOmY2WgGn3MvpHbowLvMH0pV35N7c
Gtfi39vTdlg4h1Vbkl4ogC3u6uMQYRaZj8rjSgZr/4KAyw3IjKucHfNbLk4po+jO
HTMyI8nFO+XBiqOoIUAowEwVbhw+h3+UFYX+tsl7zASowNoJQ0GC4pSewY8TO1dQ
ZiL6wD/vGFNLBNLdWc/bkae44XexpVGkCNovzdaJyJGTB8jy7QK5SHPVwmcc6XBq
8VunkqRygQFjpw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:07:10 2025 by rpki-client