Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.mft
File: ppWERHKPWreqgm9DeABc5nkgDVI.mft (raw, json)
Hash identifier: 6+vUhweFyrEVNX3YPnB/iu/JO4M2FkS/X1cJnx3TPWM=
Subject key identifier: FE:FD:7A:77:86:BA:A2:E4:9E:9A:FC:44:15:73:DF:CE:E6:E4:A3:0C
Authority key identifier: A6:95:84:44:72:8F:5A:B7:AA:82:6F:43:78:00:5C:E6:79:20:0D:52
Certificate issuer: /CN=a6958444728f5ab7aa826f4378005ce679200d52
Certificate serial: 0197C4CA43A86BB081E41EF3A118B564BA20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ppWERHKPWreqgm9DeABc5nkgDVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.mft
Manifest number: 15BB
Signing time: Tue 01 Jul 2025 07:01:19 +0000
Manifest this update: Tue 01 Jul 2025 07:01:19 +0000
Manifest next update: Wed 02 Jul 2025 07:01:19 +0000
Files and hashes: 1: ppWERHKPWreqgm9DeABc5nkgDVI.crl (hash: pQhnCl0KMI60exUBK8TC0LMWbWxaBKgkPBtQOfdRaoU=)
2: z-LF5XIt0VeWFhY7GK5O7xZnBBE.roa (hash: 1pZ4XtZFpZvLcxR/iScQRob6NYsKteymu5FeNxuRtO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ppWERHKPWreqgm9DeABc5nkgDVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 07:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:ca:43:a8:6b:b0:81:e4:1e:f3:a1:18:b5:64:ba:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6958444728f5ab7aa826f4378005ce679200d52
Validity
Not Before: Jul 1 07:01:19 2025 GMT
Not After : Jul 2 07:01:19 2025 GMT
Subject: CN=fefd7a7786baa2e49e9afc441573dfcee6e4a30c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6f:9d:d5:6a:29:c4:5a:d1:7e:e2:8d:82:5d:
f2:d8:78:1d:c0:69:b3:22:0d:d8:e8:fa:4b:87:75:
d5:51:60:8e:7c:ba:ee:d9:30:e7:82:7f:ac:3a:31:
1b:e2:df:4d:a7:ab:a6:b3:60:7e:56:3f:c4:d0:90:
f0:4d:d6:cd:c3:d4:26:5f:2f:95:c0:54:dc:65:c7:
19:a8:1b:5b:72:6c:e1:af:c3:cb:41:0b:ee:28:a7:
94:1d:21:ca:38:7e:2d:b1:04:f2:b6:52:32:42:8b:
a2:c0:a6:5a:de:41:86:0b:ac:71:9c:ab:3d:94:da:
c6:23:23:cb:72:e1:65:5d:04:05:c9:fc:d2:02:8b:
6f:92:5b:3c:de:2d:87:56:e5:46:4b:e4:38:d9:1b:
4e:da:46:56:d1:eb:54:08:fc:86:9b:0b:70:a4:57:
84:4d:7d:41:d5:c9:c1:6b:56:dc:38:0c:03:14:aa:
fd:37:6a:e5:9e:42:1b:5c:f8:cf:12:b4:ad:be:94:
af:8e:2b:65:5d:df:2d:1b:9f:e2:68:63:c1:6c:55:
7e:a8:02:ca:13:56:3a:e4:09:13:e6:4e:8c:5d:e6:
32:4a:b6:4e:4d:10:76:71:23:61:7d:b6:da:38:6b:
56:f4:cc:ac:9e:39:49:bd:06:53:ed:ca:51:1f:b4:
66:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:FD:7A:77:86:BA:A2:E4:9E:9A:FC:44:15:73:DF:CE:E6:E4:A3:0C
X509v3 Authority Key Identifier:
keyid:A6:95:84:44:72:8F:5A:B7:AA:82:6F:43:78:00:5C:E6:79:20:0D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ppWERHKPWreqgm9DeABc5nkgDVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:8a:7c:4c:7a:45:0b:a7:73:0a:c3:43:24:18:91:9d:6a:cb:
0b:95:03:4f:b1:12:cf:55:bd:b7:f0:ab:5c:18:9b:6b:4d:7d:
15:ad:b1:a4:bc:c7:6b:0a:11:3b:66:8c:13:3e:6b:cb:5c:cf:
cc:c1:c4:67:cf:ee:22:2a:d7:48:82:2f:4d:44:13:11:b1:82:
e9:39:53:03:42:d2:04:5a:4f:5e:a5:02:cf:89:c2:34:45:f8:
95:d0:e7:7a:2b:e9:0d:f1:80:d0:c5:e1:af:9a:0d:4b:3a:72:
c2:db:f0:0f:d1:f4:59:8a:e5:f3:54:39:1b:3d:82:1d:51:38:
8a:37:c8:ec:a3:ab:72:78:71:88:6d:38:df:2b:8b:9c:4c:0e:
fc:1a:f1:c4:7c:a9:6c:6a:fb:15:f1:1a:9d:48:01:83:cc:fa:
c6:aa:e9:3d:32:f0:0c:50:a2:8f:95:97:5e:08:85:dd:13:2b:
2e:c2:b1:be:4e:81:82:fc:5c:18:bc:66:db:f4:c7:ba:b3:64:
57:66:5c:16:97:9e:f0:f4:34:87:a7:66:b7:ab:f4:75:ec:9f:
58:25:15:1f:d8:12:a7:3a:db:dd:2d:db:6d:6d:ad:7c:c4:4b:
7c:25:60:70:88:06:02:55:4f:51:36:12:53:19:9c:89:d9:fc:
9e:6d:eb:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 15:24:59 2025 by rpki-client