Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/9e22b8-4eb1-4d2f-a807-7b94fb43b60a/1/ppv5fceDSX88N716huWZSs7ngbA.mft
File: ppv5fceDSX88N716huWZSs7ngbA.mft (raw, json)
Hash identifier: U980XW8iw4BeOSndKHWiWMsuUpUssue2swpOtn/UGpM=
Subject key identifier: B3:42:FB:C2:67:BB:17:38:71:3E:70:B1:7D:56:DA:19:22:1E:69:2A
Authority key identifier: A6:9B:F9:7D:C7:83:49:7F:3C:37:BD:7A:86:E5:99:4A:CE:E7:81:B0
Certificate issuer: /CN=a69bf97dc783497f3c37bd7a86e5994acee781b0
Certificate serial: 0198D473E787C3FB3128C7C9827BF927307C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ppv5fceDSX88N716huWZSs7ngbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/9e22b8-4eb1-4d2f-a807-7b94fb43b60a/1/ppv5fceDSX88N716huWZSs7ngbA.mft
Manifest number: 1041
Signing time: Sat 23 Aug 2025 01:03:42 +0000
Manifest this update: Sat 23 Aug 2025 01:03:42 +0000
Manifest next update: Sun 24 Aug 2025 01:03:42 +0000
Files and hashes: 1: ppv5fceDSX88N716huWZSs7ngbA.crl (hash: BKLUUiws0fcAWNzuB/TosSmeJHgqHRRuhU8m8+WlsLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/9e22b8-4eb1-4d2f-a807-7b94fb43b60a/1/ppv5fceDSX88N716huWZSs7ngbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/9e22b8-4eb1-4d2f-a807-7b94fb43b60a/1/ppv5fceDSX88N716huWZSs7ngbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ppv5fceDSX88N716huWZSs7ngbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:e7:87:c3:fb:31:28:c7:c9:82:7b:f9:27:30:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a69bf97dc783497f3c37bd7a86e5994acee781b0
Validity
Not Before: Aug 23 01:03:42 2025 GMT
Not After : Aug 24 01:03:42 2025 GMT
Subject: CN=b342fbc267bb1738713e70b17d56da19221e692a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:09:e3:f9:d5:21:35:12:f0:be:34:8c:ee:de:
9f:cc:74:ae:66:6f:00:df:42:67:98:61:63:57:c3:
c3:7e:96:b7:32:db:46:1d:55:0c:45:22:94:6a:ac:
8e:26:f0:16:52:53:c9:e6:50:51:40:47:fa:e3:2a:
31:20:85:c6:e4:16:f0:80:39:d4:3e:07:96:79:32:
ad:43:ee:7e:a1:3e:52:04:83:87:d7:6c:6e:2b:4e:
6e:ac:a3:06:14:96:0d:b3:dd:d1:f6:fb:01:90:2c:
9c:e5:55:d7:9b:b5:b8:d5:63:ef:84:be:5d:c3:e4:
4c:7d:a3:25:51:30:7f:26:bb:ad:7e:4e:9e:a9:ea:
d4:9f:c6:e5:86:22:24:ca:cd:52:14:c7:02:99:3f:
cb:ec:50:6c:ef:0c:8e:bc:9e:3d:95:d7:a5:21:36:
f0:fe:d6:0f:70:ce:bd:4a:bd:26:cb:db:02:15:e5:
25:2d:c0:6b:a2:72:47:ce:0f:7b:57:f9:f6:97:f7:
22:fa:ed:55:a9:2f:ed:b6:e8:d0:0a:88:a9:eb:90:
06:ff:ca:1d:9f:7f:ce:59:7a:2d:2e:14:c0:02:26:
d5:25:76:3e:4e:bf:12:8f:3e:95:f2:ff:c7:e9:67:
a1:26:d7:e6:a5:99:1c:7e:c7:d8:5e:15:33:49:70:
8b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:42:FB:C2:67:BB:17:38:71:3E:70:B1:7D:56:DA:19:22:1E:69:2A
X509v3 Authority Key Identifier:
keyid:A6:9B:F9:7D:C7:83:49:7F:3C:37:BD:7A:86:E5:99:4A:CE:E7:81:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ppv5fceDSX88N716huWZSs7ngbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9e22b8-4eb1-4d2f-a807-7b94fb43b60a/1/ppv5fceDSX88N716huWZSs7ngbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9e22b8-4eb1-4d2f-a807-7b94fb43b60a/1/ppv5fceDSX88N716huWZSs7ngbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:f7:42:f9:8b:cd:00:79:85:cc:49:99:5a:2d:c8:a9:a2:f6:
19:7f:70:d5:c9:e3:f8:53:3f:56:17:28:c4:18:75:fc:15:f1:
47:ae:24:d6:64:05:55:d6:e7:cf:db:24:73:68:05:d9:44:27:
c4:fe:35:41:d4:ab:97:c0:53:9e:33:bd:d2:db:b4:c9:cc:c0:
b1:c2:b6:e8:6d:7e:c8:f2:ad:cd:84:ac:a1:d3:32:d9:0c:17:
7c:11:cb:46:ad:95:29:5e:ec:de:8f:1b:21:c7:e0:eb:b6:fb:
97:c5:db:9f:27:f5:bd:95:71:7d:97:69:d8:98:a6:89:c0:1b:
7b:47:e0:f3:15:f1:b8:8a:74:17:29:a7:96:20:fc:95:3b:56:
f8:f9:d3:89:0d:0f:bb:c6:24:df:96:99:fd:de:fc:4c:05:ef:
fa:39:52:3e:34:98:c9:57:f3:b5:27:23:02:c0:ff:9a:fc:6b:
8a:31:da:23:88:09:5e:73:fc:3c:7f:5b:56:14:44:65:21:b6:
ef:31:2c:07:63:38:86:af:a8:69:fd:17:2c:5c:bd:df:80:27:
de:cd:cd:2b:d2:41:b0:9a:be:e1:34:36:e9:47:88:00:30:4d:
da:0a:10:d4:43:90:da:c3:37:c8:67:73:02:14:19:6b:0e:cf:
9e:7a:e8:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:12:45 2025 by rpki-client