Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/9e22b8-4eb1-4d2f-a807-7b94fb43b60a/1/ppv5fceDSX88N716huWZSs7ngbA.mft
File: ppv5fceDSX88N716huWZSs7ngbA.mft (raw, json)
Hash identifier: Be5QV/fIMfDfwtuZesWhJGjhyWmAOLkFxJFgE/+blSQ=
Subject key identifier: 6F:C0:3D:6F:F7:46:F6:4D:E5:CD:58:51:97:D9:1C:29:0A:AB:35:B0
Authority key identifier: A6:9B:F9:7D:C7:83:49:7F:3C:37:BD:7A:86:E5:99:4A:CE:E7:81:B0
Certificate issuer: /CN=a69bf97dc783497f3c37bd7a86e5994acee781b0
Certificate serial: 0199FBEACC913197481CE97CF12C01154F14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ppv5fceDSX88N716huWZSs7ngbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/9e22b8-4eb1-4d2f-a807-7b94fb43b60a/1/ppv5fceDSX88N716huWZSs7ngbA.mft
Manifest number: 10DA
Signing time: Sun 19 Oct 2025 10:01:32 +0000
Manifest this update: Sun 19 Oct 2025 10:01:32 +0000
Manifest next update: Mon 20 Oct 2025 10:01:32 +0000
Files and hashes: 1: ppv5fceDSX88N716huWZSs7ngbA.crl (hash: 6TNUReQogRXGBkMvZxfx/gTPICaX5QHovN5b1tEC2p0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/9e22b8-4eb1-4d2f-a807-7b94fb43b60a/1/ppv5fceDSX88N716huWZSs7ngbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/9e22b8-4eb1-4d2f-a807-7b94fb43b60a/1/ppv5fceDSX88N716huWZSs7ngbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ppv5fceDSX88N716huWZSs7ngbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:cc:91:31:97:48:1c:e9:7c:f1:2c:01:15:4f:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a69bf97dc783497f3c37bd7a86e5994acee781b0
Validity
Not Before: Oct 19 10:01:32 2025 GMT
Not After : Oct 20 10:01:32 2025 GMT
Subject: CN=6fc03d6ff746f64de5cd585197d91c290aab35b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:5a:d6:cd:7b:6f:4a:a4:8c:87:84:e8:c1:b6:
ce:e8:f9:30:be:74:20:79:20:44:85:aa:f3:84:6b:
86:34:c2:23:30:81:08:0a:a2:d0:e6:34:a2:35:ee:
ff:66:51:26:a6:06:16:bb:44:0a:99:f8:8e:77:3f:
41:4e:ea:7c:c0:a1:03:21:f0:8c:19:bc:e0:0a:6c:
6e:dd:c8:1d:0c:18:8e:b7:51:a2:d3:fc:66:66:04:
30:b0:2f:ea:de:4f:58:bb:7e:30:f0:c5:82:37:25:
0d:c4:4f:99:08:77:19:a2:ca:0b:3b:ec:9c:13:fb:
28:61:45:3c:bf:72:e2:b7:f9:8a:9d:6c:28:60:d6:
ac:ff:81:51:80:04:52:ae:d1:44:da:4a:33:26:72:
97:84:6b:42:88:f0:10:c5:00:84:03:d3:fe:68:37:
86:ef:17:4f:ad:ec:cc:a4:1b:56:e8:d4:36:b8:d2:
db:9d:67:f5:49:c8:56:98:ed:cd:23:1b:ac:00:7b:
6c:82:6f:96:54:90:ee:11:5f:f3:ef:d6:55:1d:13:
dd:75:e4:d6:79:ce:12:26:6c:bb:8a:35:ee:e0:41:
41:f0:7d:9e:61:95:45:f8:f4:8a:96:e7:79:4d:4f:
7b:c9:f5:3b:13:3f:a9:bc:40:00:98:f5:51:08:cf:
bd:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:C0:3D:6F:F7:46:F6:4D:E5:CD:58:51:97:D9:1C:29:0A:AB:35:B0
X509v3 Authority Key Identifier:
keyid:A6:9B:F9:7D:C7:83:49:7F:3C:37:BD:7A:86:E5:99:4A:CE:E7:81:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ppv5fceDSX88N716huWZSs7ngbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9e22b8-4eb1-4d2f-a807-7b94fb43b60a/1/ppv5fceDSX88N716huWZSs7ngbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9e22b8-4eb1-4d2f-a807-7b94fb43b60a/1/ppv5fceDSX88N716huWZSs7ngbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:be:a9:e5:1d:50:ec:f0:be:3d:2a:8a:09:49:93:90:4d:56:
a9:5f:7b:54:24:50:56:5d:0e:50:4d:37:86:9c:f0:a3:4b:96:
46:f4:88:bc:29:5d:d1:87:a8:30:97:1f:eb:41:82:a0:df:34:
e2:18:ef:0b:c4:1a:28:50:d1:7c:c6:47:28:6b:57:aa:9b:14:
8d:85:b5:af:66:fa:06:b5:f6:bd:67:67:96:5b:1f:e5:81:db:
94:7d:21:9b:7b:18:5c:d6:da:2b:ee:7d:ff:7a:d8:8a:4b:7e:
fd:0b:68:fd:d7:9f:ce:1a:8b:fd:a5:db:e3:b3:0e:2d:2a:03:
07:3c:1b:87:e9:78:25:8a:e9:af:39:e1:f5:24:6d:2e:08:3c:
60:c2:50:21:6d:96:bc:45:37:d2:f7:3c:94:dd:16:69:da:32:
e8:43:e1:a9:89:53:8e:d6:bf:ef:78:6c:81:d9:7c:d5:57:41:
cb:18:6e:03:e7:31:eb:67:2f:0b:82:a9:0a:d9:61:ac:7e:bf:
f0:f9:93:b5:26:28:7a:d0:a6:eb:fc:8e:f1:5a:6c:8d:d3:d4:
9b:24:3f:bd:22:9e:ff:e2:bd:57:bc:35:e5:50:ee:01:90:d4:
a1:81:d5:e8:5e:34:cc:d8:b9:8b:ce:0f:12:0a:a9:87:81:f8:
87:31:e6:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:26:10 2025 by rpki-client