Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft
File: ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft (raw, json)
Hash identifier: f2lRoQ1/eLm8ACgaoTDVqQFX3dIWAz73VCJ06/1lwh8=
Subject key identifier: 67:A8:5D:3C:A6:96:68:14:1C:9E:57:AD:CA:77:30:0E:D6:9D:8D:63
Authority key identifier: A6:97:49:FA:23:37:DB:33:A7:64:74:EB:81:2C:03:4E:30:50:9D:2A
Certificate issuer: /CN=a69749fa2337db33a76474eb812c034e30509d2a
Certificate serial: 0199FB45D19A05C64829A6D7AFE30A4F1BBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ppdJ-iM32zOnZHTrgSwDTjBQnSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft
Manifest number: 0654
Signing time: Sun 19 Oct 2025 07:01:20 +0000
Manifest this update: Sun 19 Oct 2025 07:01:20 +0000
Manifest next update: Mon 20 Oct 2025 07:01:20 +0000
Files and hashes: 1: AKpMQvIIqQzXRs3Ululs7jvONDY.roa (hash: BIy70VCzVM+Xa+CdmKbiFZkREDOaRaKjJ7xUey551TY=)
2: ppdJ-iM32zOnZHTrgSwDTjBQnSo.crl (hash: weGma0QNH5V/KQF5fB1nfN4dvfu3gWVE8HnnFzbDKMQ=)
3: xwhdiFLdj-4M8l9XUnyeFRJXGwQ.roa (hash: VoSzy1kKxVH6beyOekb646N9QsT3/EG5ENUuXQtb21o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ppdJ-iM32zOnZHTrgSwDTjBQnSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:d1:9a:05:c6:48:29:a6:d7:af:e3:0a:4f:1b:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a69749fa2337db33a76474eb812c034e30509d2a
Validity
Not Before: Oct 19 07:01:20 2025 GMT
Not After : Oct 20 07:01:20 2025 GMT
Subject: CN=67a85d3ca69668141c9e57adca77300ed69d8d63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:20:c5:10:97:d5:46:47:bb:5f:25:83:6a:9a:
af:a5:d9:b8:c3:c9:b5:39:55:33:f5:fb:e8:85:97:
be:cf:ef:b5:5f:03:00:29:65:41:23:c1:01:8c:2a:
2e:56:52:2f:af:70:2f:89:ce:33:ca:9d:38:41:2d:
80:17:0c:c8:8a:59:be:9b:e3:3c:91:5f:8b:f4:6b:
6e:0c:27:86:9f:9b:a2:7f:bc:2f:0d:20:e7:69:14:
03:6e:8a:dc:b7:61:c1:a5:11:a6:33:f9:ec:25:91:
ef:91:37:51:b4:cd:3d:d0:25:7a:22:63:98:91:be:
41:00:be:67:bc:43:85:02:2b:e7:4b:89:6d:ef:79:
b4:45:ca:00:44:f7:98:cd:45:09:a2:51:37:31:67:
05:80:f4:d0:ed:4a:40:94:59:f9:41:22:ee:d4:a0:
5d:ed:d5:68:fa:bb:ef:f1:61:52:2c:06:f7:cd:be:
71:55:c9:cc:36:0b:34:09:55:3f:17:ca:27:0f:2d:
b1:8d:a5:d3:6b:b7:7d:0d:49:dc:4d:26:9b:ac:cd:
05:27:53:b3:e2:ab:50:18:27:3f:96:02:dd:f4:b8:
97:1d:53:a1:15:10:a9:8f:12:2c:46:5f:d4:e1:62:
a0:6d:eb:89:66:d9:9a:12:bf:78:97:8f:84:ce:c4:
d4:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:A8:5D:3C:A6:96:68:14:1C:9E:57:AD:CA:77:30:0E:D6:9D:8D:63
X509v3 Authority Key Identifier:
keyid:A6:97:49:FA:23:37:DB:33:A7:64:74:EB:81:2C:03:4E:30:50:9D:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ppdJ-iM32zOnZHTrgSwDTjBQnSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:4b:cc:77:10:a1:10:d3:d0:40:ee:a1:7f:e0:66:66:51:c8:
bc:88:e3:a7:9c:42:28:24:47:29:39:bb:9c:85:49:62:bc:d1:
c4:80:eb:3e:7b:58:d3:56:b6:40:6d:87:b1:54:99:30:79:94:
9f:16:c5:53:2c:3a:cc:b8:05:88:cf:cb:b1:cd:13:34:bb:0d:
24:6f:d3:95:51:f0:e7:38:bb:09:0a:b1:87:03:08:e9:da:c2:
74:ec:8b:1a:86:67:a7:97:f3:e5:b2:2f:3d:61:63:44:02:17:
98:2a:df:60:71:fb:08:f4:0b:b8:07:b8:35:75:79:a3:ef:af:
f7:1f:10:72:c4:e4:d5:71:31:c3:4d:93:6f:dd:13:a8:97:b9:
73:ce:51:ab:64:f9:21:d9:e3:85:cb:52:98:25:0c:54:bf:23:
0c:1e:74:b7:12:28:aa:6d:06:1f:c2:a4:5e:ce:cd:6e:f9:81:
5a:35:5a:72:63:38:38:0f:d6:6d:52:a2:a9:e1:c5:7d:2c:ab:
2a:45:42:19:41:d7:bf:21:8f:54:08:fc:50:d6:73:f0:94:21:
ec:19:d7:c8:a6:01:4a:0b:23:33:ca:5b:42:49:63:d6:49:5d:
e6:33:65:09:98:c7:e4:28:5c:6c:7c:2f:33:7b:ce:56:86:90:
e2:bf:2a:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7RdGaBcZIKabXr+MKTxu9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2OTc0OWZhMjMzN2RiMzNhNzY0NzRlYjgxMmMwMzRlMzA1
MDlkMmEwHhcNMjUxMDE5MDcwMTIwWhcNMjUxMDIwMDcwMTIwWjAzMTEwLwYDVQQD
Eyg2N2E4NWQzY2E2OTY2ODE0MWM5ZTU3YWRjYTc3MzAwZWQ2OWQ4ZDYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyDFEJfVRke7XyWDapqvpdm4w8m1
OVUz9fvohZe+z++1XwMAKWVBI8EBjCouVlIvr3Avic4zyp04QS2AFwzIilm+m+M8
kV+L9GtuDCeGn5uif7wvDSDnaRQDborct2HBpRGmM/nsJZHvkTdRtM090CV6ImOY
kb5BAL5nvEOFAivnS4lt73m0RcoARPeYzUUJolE3MWcFgPTQ7UpAlFn5QSLu1KBd
7dVo+rvv8WFSLAb3zb5xVcnMNgs0CVU/F8onDy2xjaXTa7d9DUncTSabrM0FJ1Oz
4qtQGCc/lgLd9LiXHVOhFRCpjxIsRl/U4WKgbeuJZtmaEr94l4+EzsTUCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGeoXTymlmgUHJ5Xrcp3MA7WnY1jMB8GA1UdIwQY
MBaAFKaXSfojN9szp2R064EsA04wUJ0qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHBkSi1pTTMyek9uWkhUcmdTd0RUakJRblNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9iMWJmNTctNjc5Zi00NTY0LWI3MDEt
Y2IyOTY3MDhkZWM4LzEvcHBkSi1pTTMyek9uWkhUcmdTd0RUakJRblNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9iMWJmNTctNjc5Zi00NTY0LWI3MDEtY2IyOTY3MDhkZWM4
LzEvcHBkSi1pTTMyek9uWkhUcmdTd0RUakJRblNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATEvMdxCh
ENPQQO6hf+BmZlHIvIjjp5xCKCRHKTm7nIVJYrzRxIDrPntY01a2QG2HsVSZMHmU
nxbFUyw6zLgFiM/Lsc0TNLsNJG/TlVHw5zi7CQqxhwMI6drCdOyLGoZnp5fz5bIv
PWFjRAIXmCrfYHH7CPQLuAe4NXV5o++v9x8QcsTk1XExw02Tb90TqJe5c85Rq2T5
IdnjhctSmCUMVL8jDB50txIoqm0GH8KkXs7NbvmBWjVacmM4OA/WbVKiqeHFfSyr
KkVCGUHXvyGPVAj8UNZz8JQh7BnXyKYBSgsjM8pbQklj1kld5jNlCZjH5ChcbHwv
M3vOVoaQ4r8qmA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:26:30 2025 by rpki-client