Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft
File: ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft (raw, json)
Hash identifier: 2FrLOTnJb8lxoYzCHgfkaAbNvrWrYbLCXWGChT8aweA=
Subject key identifier: 09:09:24:9E:89:62:5F:12:28:EE:D6:73:7B:2C:0D:AA:9D:30:A6:B5
Authority key identifier: A6:97:49:FA:23:37:DB:33:A7:64:74:EB:81:2C:03:4E:30:50:9D:2A
Certificate issuer: /CN=a69749fa2337db33a76474eb812c034e30509d2a
Certificate serial: 0197B7EA34E6F5E21E48EDC2B7681CCCE4DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ppdJ-iM32zOnZHTrgSwDTjBQnSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft
Manifest number: 0528
Signing time: Sat 28 Jun 2025 19:01:08 +0000
Manifest this update: Sat 28 Jun 2025 19:01:08 +0000
Manifest next update: Sun 29 Jun 2025 19:01:08 +0000
Files and hashes: 1: AKpMQvIIqQzXRs3Ululs7jvONDY.roa (hash: BIy70VCzVM+Xa+CdmKbiFZkREDOaRaKjJ7xUey551TY=)
2: ppdJ-iM32zOnZHTrgSwDTjBQnSo.crl (hash: nt2pu6eg+sxuScyohjYyiE0Rpt3nIUIZDGf2w7U8ses=)
3: xwhdiFLdj-4M8l9XUnyeFRJXGwQ.roa (hash: VoSzy1kKxVH6beyOekb646N9QsT3/EG5ENUuXQtb21o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ppdJ-iM32zOnZHTrgSwDTjBQnSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:34:e6:f5:e2:1e:48:ed:c2:b7:68:1c:cc:e4:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a69749fa2337db33a76474eb812c034e30509d2a
Validity
Not Before: Jun 28 19:01:08 2025 GMT
Not After : Jun 29 19:01:08 2025 GMT
Subject: CN=0909249e89625f1228eed6737b2c0daa9d30a6b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2b:a7:53:e7:32:3b:d3:c6:34:fc:c6:4b:14:
36:03:8d:84:d8:0e:26:a8:e8:58:67:7e:1a:c5:5c:
d4:e4:20:5a:d5:69:0a:bc:8f:33:bc:62:b3:e0:83:
c3:27:fa:7a:53:98:12:85:d3:73:00:9c:98:99:dc:
66:cd:29:6b:2f:50:67:85:40:ec:b0:a1:ef:df:38:
f3:31:6b:20:36:74:47:57:d4:8f:fd:11:a5:2e:c0:
9e:09:eb:56:e0:e0:ce:47:72:a6:03:f0:cf:5b:71:
7f:2f:c1:1b:98:b9:22:f0:b6:9a:30:e8:cd:82:e1:
5b:e8:f2:bd:0f:17:b9:ba:37:0d:5b:f4:49:77:81:
01:38:b8:26:77:5e:ed:75:80:bd:76:72:3b:ec:75:
8f:4f:8d:d4:c3:81:65:68:0a:83:ae:7e:e2:4b:5f:
44:26:bf:ed:83:e5:a8:f6:34:cf:d1:fe:9d:f6:7f:
49:ac:b8:27:79:c7:cc:b0:e1:9b:92:a8:60:1a:0a:
73:39:60:0d:9d:1e:9b:9b:aa:83:fb:a4:70:38:44:
71:47:d3:ca:03:fc:04:b1:9f:7a:13:7c:1d:94:67:
42:b2:d6:4f:49:6b:31:da:4f:43:4c:2d:cb:63:dc:
3b:2f:0e:a5:2f:29:00:c7:0c:ea:c1:55:87:c4:70:
fc:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:09:24:9E:89:62:5F:12:28:EE:D6:73:7B:2C:0D:AA:9D:30:A6:B5
X509v3 Authority Key Identifier:
keyid:A6:97:49:FA:23:37:DB:33:A7:64:74:EB:81:2C:03:4E:30:50:9D:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ppdJ-iM32zOnZHTrgSwDTjBQnSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:3d:1d:ca:92:5b:d7:ed:a5:ab:73:d2:57:ca:ca:95:02:c7:
05:6d:76:d7:a9:51:10:6e:f3:de:0d:8f:f0:20:d7:2b:05:c1:
e0:10:0e:ae:74:70:37:1f:24:16:57:bb:d6:96:93:82:a2:fb:
38:9a:a4:e5:d3:ef:7f:a2:0f:71:d8:38:d5:99:d4:e3:36:36:
d2:7a:b4:8f:3d:ed:20:93:6c:c4:db:12:0d:49:ad:94:04:d1:
49:77:9e:2c:ff:66:15:89:6f:d9:78:ce:61:0f:28:e1:67:a5:
cb:d3:c5:1e:3d:4b:f6:b4:d4:77:ae:84:de:77:d8:8f:35:3f:
fd:11:72:b1:2d:c1:76:59:58:99:25:28:f7:57:73:55:78:e6:
40:39:19:3c:17:1d:59:9a:a4:81:71:b2:96:b6:87:34:49:a6:
46:d1:5d:98:11:40:75:65:5c:7e:1a:c2:d3:4b:e5:0a:15:69:
93:e9:28:88:14:eb:e6:a2:cc:b2:6c:6d:35:22:7d:76:68:02:
44:a9:c9:86:c1:6b:3a:e9:70:80:ad:2a:2b:e8:f8:e7:c4:ad:
5e:4d:54:11:c0:c1:2d:5c:b4:bc:7b:6c:54:d6:83:ef:71:c5:
92:12:fe:64:8d:3c:cf:b9:63:18:18:3a:67:e3:7e:74:48:8a:
1e:13:10:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:06:03 2025 by rpki-client