Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.mft
File: ppWERHKPWreqgm9DeABc5nkgDVI.mft (raw, json)
Hash identifier: m6lEXG7bc0llfGIqW9wTrN68Phtq3VBQHT9bdewsB5c=
Subject key identifier: C5:7D:46:EA:75:6D:95:49:F0:EF:84:C6:38:87:63:3F:51:05:9A:FA
Authority key identifier: A6:95:84:44:72:8F:5A:B7:AA:82:6F:43:78:00:5C:E6:79:20:0D:52
Certificate issuer: /CN=a6958444728f5ab7aa826f4378005ce679200d52
Certificate serial: 019A006C43BF0097F35AEA76330D328F9916
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ppWERHKPWreqgm9DeABc5nkgDVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.mft
Manifest number: 16E3
Signing time: Mon 20 Oct 2025 07:01:26 +0000
Manifest this update: Mon 20 Oct 2025 07:01:26 +0000
Manifest next update: Tue 21 Oct 2025 07:01:26 +0000
Files and hashes: 1: ppWERHKPWreqgm9DeABc5nkgDVI.crl (hash: aqvZHvgE+cU/AiS1MfXR8JrPWStw9bI5DrckoIW6lIo=)
2: z-LF5XIt0VeWFhY7GK5O7xZnBBE.roa (hash: 1pZ4XtZFpZvLcxR/iScQRob6NYsKteymu5FeNxuRtO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ppWERHKPWreqgm9DeABc5nkgDVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:6c:43:bf:00:97:f3:5a:ea:76:33:0d:32:8f:99:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6958444728f5ab7aa826f4378005ce679200d52
Validity
Not Before: Oct 20 07:01:26 2025 GMT
Not After : Oct 21 07:01:26 2025 GMT
Subject: CN=c57d46ea756d9549f0ef84c63887633f51059afa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:05:8a:60:3a:97:69:69:d8:6a:06:02:f6:67:
a8:ba:c3:9a:a3:b6:ff:57:ab:0d:fc:09:38:ec:69:
ea:7c:28:23:25:be:6c:a9:65:b7:a2:59:ef:a7:fc:
6a:69:5e:ea:47:c5:8d:c0:42:a2:4b:5a:cd:82:d3:
5e:4f:6c:a9:62:d7:d0:af:fe:d5:9c:e7:91:4d:fa:
12:6e:a1:d7:84:2a:d7:d6:29:d7:7d:f1:70:dc:f9:
f6:1c:e1:8f:52:3c:28:e1:3a:36:74:27:85:6f:92:
ae:5a:14:53:39:12:ac:19:e5:32:ea:58:f1:8e:10:
de:06:46:f7:f4:28:8c:da:1d:7e:2d:a8:92:ea:97:
0c:9d:89:22:b1:30:2b:53:af:98:69:0e:50:67:91:
9a:45:9d:91:ec:71:4c:13:2f:93:b8:2e:dc:77:0c:
ba:b4:b7:a2:3e:04:c7:2a:91:6c:b7:f9:15:a7:5f:
99:7f:2b:07:6c:01:bc:f6:8e:34:a6:5a:9b:91:df:
5e:54:e1:80:ec:04:f8:c7:94:10:00:e7:ac:84:b8:
4e:03:77:0c:10:8c:99:a2:60:4b:b5:89:39:b9:0d:
8e:fd:8f:f7:32:2a:52:56:60:47:21:8f:b7:a7:38:
3b:7e:dd:34:28:93:c2:ec:4d:0a:a9:7f:e6:82:23:
c0:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:7D:46:EA:75:6D:95:49:F0:EF:84:C6:38:87:63:3F:51:05:9A:FA
X509v3 Authority Key Identifier:
keyid:A6:95:84:44:72:8F:5A:B7:AA:82:6F:43:78:00:5C:E6:79:20:0D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ppWERHKPWreqgm9DeABc5nkgDVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:36:77:10:ba:b7:40:ac:1e:21:1f:19:d4:65:01:c7:dd:6c:
ab:49:a4:fe:61:a7:d4:71:52:27:78:ed:0a:60:ab:aa:98:4d:
cb:ff:1c:1f:32:45:46:01:a6:cf:03:06:dc:16:a1:39:b5:7b:
e8:6d:ce:7d:bd:32:3b:bc:82:72:bc:0b:2d:73:dc:46:8d:e0:
28:0a:e8:28:ca:b5:d2:c4:c2:8b:e3:c0:f3:46:8e:fb:bd:05:
71:33:b9:8a:12:f6:32:01:8e:bb:9b:af:21:4b:46:98:15:e8:
a3:22:73:ca:f6:3c:4e:ce:9f:00:18:ba:d7:13:0d:69:3e:6a:
21:5b:b6:01:7d:92:ce:f2:79:56:06:f1:ea:84:d2:70:24:7f:
98:5c:18:66:a1:58:b2:38:78:03:ae:3d:5a:ff:25:fe:ac:fd:
3b:23:fa:84:36:a3:75:d0:0f:4a:49:c6:c1:fa:a9:7a:ef:cb:
4b:00:8d:29:2f:b9:cc:49:19:ca:6a:b1:3d:8f:63:c0:0c:d8:
9b:8a:bb:77:aa:df:e4:08:95:14:dd:c6:94:7c:34:a0:16:9b:
3f:11:34:3f:45:1c:22:06:69:2c:aa:6d:b5:8e:1b:3b:89:92:
7b:68:f8:c9:7c:10:c4:49:ff:50:02:cf:59:fa:58:2f:86:b5:
b7:f5:f2:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:33:30 2025 by rpki-client