Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.mft
File: ppR2gdoNt_55MV7G29oov41mD8A.mft (raw, json)
Hash identifier: htmwI5raW/0kvkQPm3cNuobtY2/FYwGsdXfzFwiw5Wc=
Subject key identifier: F7:BA:2D:FA:98:77:FD:BF:C9:66:8D:CE:0C:84:BC:78:AA:34:25:79
Authority key identifier: A6:94:76:81:DA:0D:B7:FE:79:31:5E:C6:DB:DA:28:BF:8D:66:0F:C0
Certificate issuer: /CN=a6947681da0db7fe79315ec6dbda28bf8d660fc0
Certificate serial: 0196BE5C45B37BB161BA8E645C3A33BB6906
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ppR2gdoNt_55MV7G29oov41mD8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.mft
Manifest number: 1536
Signing time: Sun 11 May 2025 08:00:40 +0000
Manifest this update: Sun 11 May 2025 08:00:40 +0000
Manifest next update: Mon 12 May 2025 08:00:40 +0000
Files and hashes: 1: W6o9lvJcnnR6KT19lEo85DcjBW4.roa (hash: 4q2mkPLtF8C2yzu3YKcCMenK0cywITJjv++cimOpwfA=)
2: ppR2gdoNt_55MV7G29oov41mD8A.crl (hash: /gmRvEUG6Vw5k6LaLXZUWRaZK8pIGjSIDOUT7J9M3l4=)
3: uGLt9hGh4szGgjBLbl_ULXYRxjI.roa (hash: WEHghF5NVFRIrBkSAbOMCvIKt32/zSBJMSFPbhfZlrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/ppR2gdoNt_55MV7G29oov41mD8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:5c:45:b3:7b:b1:61:ba:8e:64:5c:3a:33:bb:69:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6947681da0db7fe79315ec6dbda28bf8d660fc0
Validity
Not Before: May 11 08:00:40 2025 GMT
Not After : May 12 08:00:40 2025 GMT
Subject: CN=f7ba2dfa9877fdbfc9668dce0c84bc78aa342579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c4:6b:09:fc:c4:c9:a1:0e:a6:58:8c:68:25:
ad:f8:41:76:b6:85:7b:c6:9a:70:96:7f:0a:81:ba:
09:c7:7c:fe:d8:4f:a2:34:e6:33:10:21:1a:4d:8b:
91:6f:c2:fb:de:be:e4:1f:81:8e:e4:06:e1:55:ee:
8b:3e:e5:b3:de:4d:1a:ae:b3:20:1b:97:6a:f6:17:
2a:85:ec:0a:d5:f9:4b:37:ab:ee:41:98:41:aa:ec:
01:48:79:8a:9e:29:de:0c:d3:3f:44:9d:b0:bf:8e:
ff:3b:7a:88:35:09:46:42:c4:0b:62:36:07:70:f4:
46:1a:d1:7c:28:31:f9:c6:3e:d8:de:3d:4b:58:56:
96:2b:ce:a3:5a:38:c9:2a:c3:e4:86:0b:8f:72:73:
21:f8:96:a4:c5:bb:de:22:f3:93:44:d0:30:a8:fd:
05:d8:39:90:d7:e3:0a:16:20:10:cc:ae:90:09:27:
a8:4e:52:2a:69:d3:36:7f:fc:50:43:4d:6b:dc:83:
c6:46:52:33:19:8e:32:db:9e:59:6b:ba:97:73:63:
32:ae:3a:1f:ad:9a:37:80:1a:84:81:4e:7f:17:0a:
df:8c:99:7e:86:3c:ae:a1:a8:89:97:f0:5f:92:90:
5c:a8:4d:b1:fe:77:92:77:8e:d3:41:06:95:c4:08:
20:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:BA:2D:FA:98:77:FD:BF:C9:66:8D:CE:0C:84:BC:78:AA:34:25:79
X509v3 Authority Key Identifier:
keyid:A6:94:76:81:DA:0D:B7:FE:79:31:5E:C6:DB:DA:28:BF:8D:66:0F:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ppR2gdoNt_55MV7G29oov41mD8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:45:fe:34:c8:13:87:b1:f5:74:01:88:27:04:98:26:8a:3b:
da:d2:80:45:e2:ea:d9:56:29:2a:71:f4:d9:e6:24:7e:3d:d3:
bd:57:72:ff:3c:7e:01:a0:9d:46:db:48:bf:a6:1d:59:5e:cf:
ea:4e:2a:b6:7b:97:c3:9e:6b:6a:c4:92:fc:29:93:07:0a:8a:
5c:1e:f2:de:64:47:e3:52:95:29:3c:ff:cf:83:70:b0:dc:97:
f9:fe:5f:05:97:eb:db:a6:c1:b4:61:37:b6:39:e3:8c:ea:3d:
72:5e:8e:91:84:2e:dc:52:bf:26:e4:44:f3:5e:e8:5c:d0:40:
6e:d3:9c:23:63:1c:c1:fa:9e:83:59:76:70:b9:3c:c5:e1:2f:
eb:48:1f:3a:e6:49:2e:52:6d:9a:4e:96:d3:45:83:b4:9c:86:
6c:f8:aa:11:bb:06:36:a6:49:6a:ca:bc:d6:e3:d1:d3:cb:9d:
96:65:42:84:e1:f2:06:ce:49:fd:79:8d:0c:54:1a:c3:18:d9:
31:e4:c3:4d:5e:d7:a5:d5:d6:ed:8f:b0:95:1c:85:d2:75:97:
12:2f:d3:58:eb:73:5c:78:1a:30:f8:6f:a1:67:36:8c:25:1e:
77:9c:2a:d1:e2:d6:a1:a7:ae:41:69:6b:13:e4:2e:12:00:e1:
14:c3:f8:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:53:28 2025 by rpki-client