Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.mft
File: ppR2gdoNt_55MV7G29oov41mD8A.mft (raw, json)
Hash identifier: dalaUn3wUzBTid5eH4yqeNb+kjEKmSNcFbweMim8X1w=
Subject key identifier: D8:4A:10:2A:A8:1B:2E:11:53:61:3E:85:72:4C:C8:CF:71:6F:7F:26
Authority key identifier: A6:94:76:81:DA:0D:B7:FE:79:31:5E:C6:DB:DA:28:BF:8D:66:0F:C0
Certificate issuer: /CN=a6947681da0db7fe79315ec6dbda28bf8d660fc0
Certificate serial: 0197C6EFCDE54667E44DD83B65CEA44F81C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ppR2gdoNt_55MV7G29oov41mD8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.mft
Manifest number: 15BF
Signing time: Tue 01 Jul 2025 17:01:33 +0000
Manifest this update: Tue 01 Jul 2025 17:01:33 +0000
Manifest next update: Wed 02 Jul 2025 17:01:33 +0000
Files and hashes: 1: W6o9lvJcnnR6KT19lEo85DcjBW4.roa (hash: 4q2mkPLtF8C2yzu3YKcCMenK0cywITJjv++cimOpwfA=)
2: ppR2gdoNt_55MV7G29oov41mD8A.crl (hash: FaBt84u9C2cHyeTQhfqWt4AFngUUm19hcxCI3U73eMg=)
3: uGLt9hGh4szGgjBLbl_ULXYRxjI.roa (hash: WEHghF5NVFRIrBkSAbOMCvIKt32/zSBJMSFPbhfZlrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/ppR2gdoNt_55MV7G29oov41mD8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 16:57:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:ef:cd:e5:46:67:e4:4d:d8:3b:65:ce:a4:4f:81:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6947681da0db7fe79315ec6dbda28bf8d660fc0
Validity
Not Before: Jul 1 17:01:33 2025 GMT
Not After : Jul 2 17:01:33 2025 GMT
Subject: CN=d84a102aa81b2e1153613e85724cc8cf716f7f26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:59:26:a2:be:14:33:23:98:47:fa:1d:00:18:
53:12:00:67:ca:95:9d:48:64:bd:41:82:1f:3f:e7:
fe:c8:ed:1a:4c:2c:3c:9f:41:c5:e0:cd:1d:66:47:
38:4b:96:11:97:41:43:cb:c8:e4:52:69:cc:95:f5:
d5:c9:5c:65:dc:43:ff:21:f2:f9:b9:ad:b1:f5:8e:
89:2d:3c:99:7b:8c:28:6c:58:a5:ac:55:75:32:c4:
2a:70:52:39:cf:b2:7b:88:62:40:76:8d:41:2d:52:
de:36:9f:05:e9:25:5c:16:f0:59:9d:c4:7a:10:0f:
26:14:e6:5b:06:5b:92:d2:77:1d:72:17:46:5b:a6:
18:4b:63:29:eb:70:04:2c:d6:6e:30:1c:31:76:f3:
96:fd:9c:48:49:aa:b5:ff:4b:5b:88:0a:73:e8:17:
78:5a:3e:e2:94:5e:f7:e4:c3:ba:d8:1d:aa:72:fc:
65:50:75:dd:69:65:7a:00:b7:df:cb:91:46:e8:a9:
6f:95:9d:c9:a9:f0:3f:e9:47:8a:ce:8d:69:88:4d:
bf:96:a0:15:99:d4:e4:5b:87:09:a1:20:a0:31:9d:
9e:7a:05:91:50:8f:2e:b7:ca:0c:00:84:f6:52:38:
6d:76:72:6e:3c:6b:db:6a:a4:3b:45:52:3f:8a:14:
3b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:4A:10:2A:A8:1B:2E:11:53:61:3E:85:72:4C:C8:CF:71:6F:7F:26
X509v3 Authority Key Identifier:
keyid:A6:94:76:81:DA:0D:B7:FE:79:31:5E:C6:DB:DA:28:BF:8D:66:0F:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ppR2gdoNt_55MV7G29oov41mD8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:d9:d3:be:37:66:5c:ae:20:eb:a0:9e:a9:f6:84:e4:67:d5:
46:dc:d1:3f:3c:65:9d:e7:b6:71:c5:81:bf:1c:c1:e2:9e:21:
ef:ce:db:7c:fb:9a:2d:87:a1:cd:08:1d:7c:18:15:56:8b:5b:
7c:83:56:27:6f:52:0a:f5:a3:4c:de:ef:b5:5a:df:f0:36:11:
5b:63:62:50:6e:5f:68:ce:68:c5:bd:01:7f:f9:03:95:49:55:
32:c9:a5:69:1e:06:bd:d6:ea:02:e7:83:07:27:e6:17:93:fc:
c5:28:a3:39:00:03:00:49:73:1e:ad:8f:5e:52:ba:09:cf:c5:
d8:ea:f6:3e:ad:c6:bc:0b:9e:d8:f0:b8:56:dc:09:2c:3c:e8:
b4:02:9f:93:e2:e7:5d:20:00:27:d6:b2:47:e1:c8:ae:1a:3a:
9e:96:f6:0b:4b:a4:50:c8:fe:51:ac:c6:71:b4:ad:86:89:62:
ca:a0:bf:77:03:bc:3e:9e:ef:7d:37:72:31:94:55:16:f4:62:
08:c4:09:87:bc:84:65:74:36:11:f7:51:9b:a1:3c:bb:0f:c9:
ca:cf:b6:d7:e9:a5:65:14:89:bf:39:e5:61:5d:0c:a2:a8:66:
fd:82:db:18:32:4c:fd:06:15:1a:59:1e:7c:6f:ce:67:41:c2:
ed:91:d1:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfG783lRmfkTdg7Zc6kT4HBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2OTQ3NjgxZGEwZGI3ZmU3OTMxNWVjNmRiZGEyOGJmOGQ2
NjBmYzAwHhcNMjUwNzAxMTcwMTMzWhcNMjUwNzAyMTcwMTMzWjAzMTEwLwYDVQQD
EyhkODRhMTAyYWE4MWIyZTExNTM2MTNlODU3MjRjYzhjZjcxNmY3ZjI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA71kmor4UMyOYR/odABhTEgBnypWd
SGS9QYIfP+f+yO0aTCw8n0HF4M0dZkc4S5YRl0FDy8jkUmnMlfXVyVxl3EP/IfL5
ua2x9Y6JLTyZe4wobFilrFV1MsQqcFI5z7J7iGJAdo1BLVLeNp8F6SVcFvBZncR6
EA8mFOZbBluS0ncdchdGW6YYS2Mp63AELNZuMBwxdvOW/ZxISaq1/0tbiApz6Bd4
Wj7ilF735MO62B2qcvxlUHXdaWV6ALffy5FG6KlvlZ3JqfA/6UeKzo1piE2/lqAV
mdTkW4cJoSCgMZ2eegWRUI8ut8oMAIT2UjhtdnJuPGvbaqQ7RVI/ihQ7MwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNhKECqoGy4RU2E+hXJMyM9xb38mMB8GA1UdIwQY
MBaAFKaUdoHaDbf+eTFextvaKL+NZg/AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHBSMmdkb050XzU1TVY3RzI5b292NDFtRDhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9mNjQ5YTItNTE4ZC00NDU2LTk4YTct
MjNjM2RmODJjMjMwLzEvcHBSMmdkb050XzU1TVY3RzI5b292NDFtRDhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9mNjQ5YTItNTE4ZC00NDU2LTk4YTctMjNjM2RmODJjMjMw
LzEvcHBSMmdkb050XzU1TVY3RzI5b292NDFtRDhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJtnTvjdm
XK4g66CeqfaE5GfVRtzRPzxlnee2ccWBvxzB4p4h787bfPuaLYehzQgdfBgVVotb
fINWJ29SCvWjTN7vtVrf8DYRW2NiUG5faM5oxb0Bf/kDlUlVMsmlaR4GvdbqAueD
ByfmF5P8xSijOQADAElzHq2PXlK6Cc/F2Or2Pq3GvAue2PC4VtwJLDzotAKfk+Ln
XSAAJ9ayR+HIrho6npb2C0ukUMj+UazGcbStholiyqC/dwO8Pp7vfTdyMZRVFvRi
CMQJh7yEZXQ2EfdRm6E8uw/Jys+21+mlZRSJvznlYV0Moqhm/YLbGDJM/QYVGlke
fG/OZ0HC7ZHRHQ==
-----END CERTIFICATE-----
Generated at Tue Jul 1 21:23:43 2025 by rpki-client