Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft
File: PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft (raw, json)
Hash identifier: iAkJM/hZZxYZv7x2aqXAwwxA+TvN3Ui1HEPYaVLPAL0=
Subject key identifier: CD:3E:5F:9B:B6:97:6F:90:B3:59:6F:AC:B7:23:98:72:4A:A8:0F:BF
Authority key identifier: 3C:FA:A4:0F:62:63:E0:0D:12:91:69:85:76:A6:17:A5:B5:D6:8A:9C
Certificate issuer: /CN=3cfaa40f6263e00d1291698576a617a5b5d68a9c
Certificate serial: 0198D583D885628534DCD2FBBBACB4BD81F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PPqkD2Jj4A0SkWmFdqYXpbXWipw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft
Manifest number: 0D8F
Signing time: Sat 23 Aug 2025 06:00:44 +0000
Manifest this update: Sat 23 Aug 2025 06:00:44 +0000
Manifest next update: Sun 24 Aug 2025 06:00:44 +0000
Files and hashes: 1: PPqkD2Jj4A0SkWmFdqYXpbXWipw.crl (hash: /OkscbA0gX4UFXUamgza/VaLLZ27U6e4PqU8s0nToS8=)
2: Zudt2t67uMUQbMO8N99rmxJB1wQ.roa (hash: SIlAW/DlBSg5+XbRtnFyzPAIYziyY+yFv6/k5lPUFJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PPqkD2Jj4A0SkWmFdqYXpbXWipw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:d8:85:62:85:34:dc:d2:fb:bb:ac:b4:bd:81:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cfaa40f6263e00d1291698576a617a5b5d68a9c
Validity
Not Before: Aug 23 06:00:44 2025 GMT
Not After : Aug 24 06:00:44 2025 GMT
Subject: CN=cd3e5f9bb6976f90b3596facb72398724aa80fbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2e:cd:b0:70:38:dd:76:03:89:ad:36:bb:e4:
82:8c:dd:fd:69:5a:3c:b8:4b:a9:ed:d4:fd:25:f6:
17:d9:7a:75:9e:1c:85:39:29:85:1e:93:3d:3d:e9:
b0:ca:ee:b6:05:a6:2d:fe:58:59:56:76:67:b1:7b:
8f:9c:c2:79:8f:3c:76:46:d5:57:5c:fd:fb:a6:07:
9c:5e:a4:2c:47:93:7a:8a:54:98:e4:db:d6:0e:ff:
ae:9a:b9:30:15:a1:8d:24:98:7d:ff:f4:e2:49:bd:
d7:b7:5b:5e:0f:07:8c:ba:df:2a:52:32:d6:d6:f3:
77:05:d3:72:23:80:36:a1:3d:90:ea:a5:d5:d4:28:
fc:f6:02:de:c7:77:72:6e:4c:50:76:d5:a1:1b:31:
96:6b:94:91:13:0b:a2:53:c4:22:14:b3:af:ff:90:
1c:10:16:cc:a4:20:ce:3a:4c:04:8a:5c:7e:40:17:
e5:e5:b3:c0:32:91:d0:fb:f1:cc:f4:a6:94:14:19:
21:c1:30:f9:49:a2:c0:de:6a:e9:6c:78:a8:6b:7a:
8c:d1:d2:80:56:75:16:8a:ab:42:5d:e4:b2:67:15:
ad:e2:58:bc:10:e4:de:fb:32:11:0b:af:90:af:5f:
c4:4f:83:a3:01:01:da:fd:82:29:cb:43:f8:d2:1f:
72:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:3E:5F:9B:B6:97:6F:90:B3:59:6F:AC:B7:23:98:72:4A:A8:0F:BF
X509v3 Authority Key Identifier:
keyid:3C:FA:A4:0F:62:63:E0:0D:12:91:69:85:76:A6:17:A5:B5:D6:8A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PPqkD2Jj4A0SkWmFdqYXpbXWipw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:86:2c:76:da:96:ca:19:4e:fc:ba:c2:e6:1b:d7:ea:14:68:
22:cd:b6:b2:a4:b5:19:b7:0e:46:64:d9:dd:2b:7f:0a:04:80:
86:8c:09:7e:75:e6:06:fd:95:69:cc:fb:bc:9e:6f:4f:4c:4d:
c7:0e:d0:cf:43:e6:0e:e3:84:f5:74:6d:4a:82:4a:00:80:ab:
4d:1d:ce:e5:76:ce:78:4a:13:79:15:ef:06:e2:bd:bc:0c:ef:
06:b7:c0:05:c9:c4:03:08:52:98:d0:37:ff:7a:b4:1e:fb:e6:
4b:90:23:08:ca:45:40:6b:39:00:ed:f8:8c:1f:71:1a:41:ce:
61:45:db:e3:7c:e0:3d:bb:bb:7d:f9:ba:81:bb:fa:73:32:85:
49:01:fa:9e:9c:0c:95:53:62:f4:f9:c2:a3:4a:3c:69:0a:41:
36:e8:ee:c2:fb:ea:bb:8d:07:a7:ba:c6:97:de:b8:3d:51:99:
72:91:74:98:36:d6:fc:25:aa:ee:02:7d:e0:04:39:6c:c2:d2:
14:07:0d:ae:8b:7e:35:6d:ef:ee:b0:eb:1b:ed:fd:18:72:b1:
dc:e6:c6:50:e8:33:30:f8:65:30:14:d3:8b:a9:75:37:30:4e:
de:4b:ed:8a:18:f1:64:33:e0:4c:a8:15:2a:ad:84:ed:63:95:
d6:6a:be:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:33 2025 by rpki-client