Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.mft
File: ppWERHKPWreqgm9DeABc5nkgDVI.mft (raw, json)
Hash identifier: PCqX/EZpPl3u1jc48HIhRgiqWJTvZ+AuntsR6A1c6V8=
Subject key identifier: AF:0C:BF:04:96:8C:3C:BF:4C:B9:C6:FF:79:82:70:6E:E5:24:A9:94
Authority key identifier: A6:95:84:44:72:8F:5A:B7:AA:82:6F:43:78:00:5C:E6:79:20:0D:52
Certificate issuer: /CN=a6958444728f5ab7aa826f4378005ce679200d52
Certificate serial: 0196C014015D66D2056811EF0EB922CD2EBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ppWERHKPWreqgm9DeABc5nkgDVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.mft
Manifest number: 1534
Signing time: Sun 11 May 2025 16:00:58 +0000
Manifest this update: Sun 11 May 2025 16:00:58 +0000
Manifest next update: Mon 12 May 2025 16:00:58 +0000
Files and hashes: 1: ppWERHKPWreqgm9DeABc5nkgDVI.crl (hash: Bo+20ni+19rhbZ6GCscVjlCJvEKHgCYaKLGDgtQS4pU=)
2: z-LF5XIt0VeWFhY7GK5O7xZnBBE.roa (hash: 1pZ4XtZFpZvLcxR/iScQRob6NYsKteymu5FeNxuRtO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ppWERHKPWreqgm9DeABc5nkgDVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:14:01:5d:66:d2:05:68:11:ef:0e:b9:22:cd:2e:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6958444728f5ab7aa826f4378005ce679200d52
Validity
Not Before: May 11 16:00:58 2025 GMT
Not After : May 12 16:00:58 2025 GMT
Subject: CN=af0cbf04968c3cbf4cb9c6ff7982706ee524a994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b5:e2:61:9b:30:d9:fc:c1:e8:5f:55:c1:84:
d8:65:38:77:b8:b7:8d:f3:e6:4c:80:cb:49:1f:08:
b1:ce:b4:f6:d9:05:db:00:1e:dd:e3:0e:31:0c:63:
e0:67:e8:39:02:93:1e:f4:3d:fc:16:3f:c7:5d:5d:
52:54:4d:7d:d9:57:d2:9f:49:ed:ad:4d:99:43:51:
b8:48:7d:da:54:55:88:41:b1:c3:9b:90:06:4e:e8:
1a:a3:53:b6:56:b0:25:5b:27:58:17:de:7f:0b:69:
73:80:f6:7c:44:cb:04:77:5e:24:5a:f1:70:1a:eb:
8a:85:ee:87:f0:68:2d:f4:4a:7e:4a:bf:99:a5:d3:
c2:73:c4:4c:7b:8e:72:1e:8c:a8:23:bb:f8:c8:3f:
b6:87:76:f7:14:9e:37:b5:79:2a:a4:b7:fd:5a:be:
85:b7:d7:8d:3b:99:02:48:4d:dc:d8:fd:ff:45:f1:
d8:58:f2:20:96:37:ea:3e:81:d4:51:83:36:38:ea:
06:f0:01:9a:8a:eb:1b:73:cc:0c:de:35:08:6d:b4:
b7:4d:d6:58:d3:fa:7c:91:1d:87:d1:4b:b3:e1:bd:
62:7b:9b:45:e9:8a:57:cd:4a:df:e2:7e:49:1f:98:
f4:8a:03:4e:02:2b:5e:f5:6d:5c:5f:ec:96:e6:46:
f3:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:0C:BF:04:96:8C:3C:BF:4C:B9:C6:FF:79:82:70:6E:E5:24:A9:94
X509v3 Authority Key Identifier:
keyid:A6:95:84:44:72:8F:5A:B7:AA:82:6F:43:78:00:5C:E6:79:20:0D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ppWERHKPWreqgm9DeABc5nkgDVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bdc1f1-c157-408b-afe1-1b511c663978/1/ppWERHKPWreqgm9DeABc5nkgDVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:3e:a0:3d:92:8d:e5:d5:a7:97:93:1c:73:a6:90:14:c5:61:
9b:89:75:21:8e:09:25:c8:40:16:ce:9b:c8:1e:69:59:cc:32:
45:98:9c:54:42:40:0f:68:a2:92:d8:42:00:02:d5:b5:fb:19:
7d:a4:50:d3:7f:a1:b5:fc:89:c6:d7:2a:b2:01:50:e1:72:fd:
55:c4:85:44:5c:e6:07:a8:44:75:28:07:82:3f:37:17:4e:82:
ab:70:fc:ef:7a:2e:1e:c1:97:91:fb:17:97:fd:4a:8d:a3:b3:
a5:4e:55:ec:1e:ce:fd:60:73:94:33:e0:9a:c9:68:04:b1:d4:
c1:77:dd:54:57:c2:0b:1f:9e:89:eb:3d:21:6b:5b:d6:d2:c6:
6d:a9:34:de:e6:ab:13:89:84:b1:25:ed:41:04:32:cd:23:c9:
b7:54:a3:9e:68:5a:71:51:8c:7d:c2:b9:82:27:02:fe:4b:de:
0c:a7:e3:c5:10:48:46:ae:9d:cd:59:2d:6b:83:5b:cc:3c:9e:
03:0b:90:c8:34:f4:bb:54:ef:cc:87:83:a2:0e:d9:68:fe:3b:
4a:20:9e:9a:99:88:6f:7e:37:55:f4:75:d0:b6:d9:b8:63:8f:
a5:e1:26:35:83:ee:0a:c5:65:81:54:78:f8:e8:4c:35:aa:d1:
6f:41:64:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 18:23:00 2025 by rpki-client