Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft
File: PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft (raw, json)
Hash identifier: zkV3s7WAIjc2Kaa6Twnkb3mGYMXa4zwpkzwPWTWpp9Y=
Subject key identifier: 52:3A:69:3D:90:69:4B:2C:08:84:77:F0:72:BC:BB:CF:B4:B0:63:C0
Authority key identifier: 3C:FA:A4:0F:62:63:E0:0D:12:91:69:85:76:A6:17:A5:B5:D6:8A:9C
Certificate issuer: /CN=3cfaa40f6263e00d1291698576a617a5b5d68a9c
Certificate serial: 0197B7B2E6FE7BF0532BE9FA6B791D0B039F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PPqkD2Jj4A0SkWmFdqYXpbXWipw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft
Manifest number: 0CFB
Signing time: Sat 28 Jun 2025 18:00:44 +0000
Manifest this update: Sat 28 Jun 2025 18:00:44 +0000
Manifest next update: Sun 29 Jun 2025 18:00:44 +0000
Files and hashes: 1: PPqkD2Jj4A0SkWmFdqYXpbXWipw.crl (hash: wSUkF2xA4SK9cG23FeG5BizhIhS5hFSq0IA7E2nK6Ig=)
2: Zudt2t67uMUQbMO8N99rmxJB1wQ.roa (hash: SIlAW/DlBSg5+XbRtnFyzPAIYziyY+yFv6/k5lPUFJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PPqkD2Jj4A0SkWmFdqYXpbXWipw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b2:e6:fe:7b:f0:53:2b:e9:fa:6b:79:1d:0b:03:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cfaa40f6263e00d1291698576a617a5b5d68a9c
Validity
Not Before: Jun 28 18:00:44 2025 GMT
Not After : Jun 29 18:00:44 2025 GMT
Subject: CN=523a693d90694b2c088477f072bcbbcfb4b063c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:40:31:02:ad:51:bc:58:ce:86:fd:90:ee:0f:
93:6b:12:e5:fd:c4:07:be:86:01:56:f9:06:83:1b:
b9:13:e7:26:fc:39:03:05:4f:71:6d:35:ce:6f:45:
05:28:db:dd:d1:6b:48:3f:5e:52:ac:ac:e7:42:e9:
b7:b1:75:64:a3:67:c3:f8:21:73:20:69:85:5c:7e:
bc:23:e8:c5:14:0a:a1:eb:f7:56:6b:3e:fc:d6:06:
5a:66:a6:f0:f2:ce:d7:2c:98:4c:99:e3:3a:bf:c7:
12:d4:3d:f3:1d:2f:d5:f2:c9:8a:c7:d1:82:6f:d8:
df:63:19:e8:01:a4:f9:47:27:a0:c8:75:d6:c4:8f:
00:fd:a5:10:ae:c8:6b:cf:d1:76:a8:c0:ee:42:c2:
5c:18:c2:04:0c:84:f9:5f:fa:5d:0d:ee:9a:a0:bf:
6a:bf:65:94:d3:5f:52:c6:6d:e2:24:8a:3a:54:ec:
d4:cb:2e:6c:c2:96:bc:65:04:61:c3:53:6b:86:ec:
4c:58:ba:28:31:a1:be:c9:b6:5f:20:11:24:eb:e7:
11:3e:fd:27:9c:ff:31:d4:fc:e0:2c:df:ce:bb:f4:
aa:6d:48:74:a3:e3:52:83:05:92:a9:c4:0e:58:d3:
b8:c3:31:93:6b:f5:42:b6:a9:60:a4:37:24:c3:0b:
c0:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:3A:69:3D:90:69:4B:2C:08:84:77:F0:72:BC:BB:CF:B4:B0:63:C0
X509v3 Authority Key Identifier:
keyid:3C:FA:A4:0F:62:63:E0:0D:12:91:69:85:76:A6:17:A5:B5:D6:8A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PPqkD2Jj4A0SkWmFdqYXpbXWipw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:52:2a:3c:b1:75:7d:5a:56:18:0c:69:80:3f:ca:81:40:9f:
63:d9:fc:23:65:8a:fc:32:78:ed:f8:d0:40:23:dd:d0:ad:7d:
1d:09:98:f6:58:c6:31:3f:4c:c7:6f:2c:f3:ac:87:8e:70:c4:
bd:ee:ba:8b:27:43:c5:d6:87:8f:59:07:33:fc:82:f2:53:90:
ff:b1:16:45:08:f4:3c:66:0a:5e:3c:28:b2:48:12:78:af:f5:
1d:b5:95:88:bc:1b:70:ac:9b:c1:58:b9:b1:26:78:fa:da:16:
9c:0c:41:c9:27:6d:a4:3a:5e:24:49:42:a7:3e:7e:ea:e7:e0:
a1:e6:70:bc:95:1b:53:4c:a3:b5:aa:8f:95:99:8d:69:05:19:
e9:ff:0c:ff:ff:d6:89:64:0d:0d:cb:c8:f8:c6:ab:ee:52:23:
56:cc:57:7e:c4:c0:c5:da:f3:00:37:30:a6:87:16:21:29:20:
c8:9a:fc:fc:af:24:96:1a:88:cb:64:3f:ff:f8:21:f3:60:6d:
7f:91:8f:61:3f:79:43:9f:c7:3d:5c:37:37:fd:a3:76:ef:64:
17:16:55:70:e9:72:51:8c:77:4b:a6:a8:cb:75:34:2e:0a:30:
18:41:b3:c8:16:c5:69:15:50:9b:a1:d6:8a:ba:1c:7c:ab:2f:
85:50:74:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:00:41 2025 by rpki-client