Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft
File: ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft (raw, json)
Hash identifier: q3LbjZNSfMc7hdVge+gQAJuTW8YNnSIPwtP5L0yneWQ=
Subject key identifier: 7A:A8:F9:D5:8A:37:64:81:38:D6:FB:CC:18:5F:BB:4C:DB:86:8A:AF
Authority key identifier: A6:97:49:FA:23:37:DB:33:A7:64:74:EB:81:2C:03:4E:30:50:9D:2A
Certificate issuer: /CN=a69749fa2337db33a76474eb812c034e30509d2a
Certificate serial: 0196C2A6E3BFA9589FFC48BE16A8AA3EC531
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ppdJ-iM32zOnZHTrgSwDTjBQnSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft
Manifest number: 04A9
Signing time: Mon 12 May 2025 04:00:39 +0000
Manifest this update: Mon 12 May 2025 04:00:39 +0000
Manifest next update: Tue 13 May 2025 04:00:39 +0000
Files and hashes: 1: AKpMQvIIqQzXRs3Ululs7jvONDY.roa (hash: BIy70VCzVM+Xa+CdmKbiFZkREDOaRaKjJ7xUey551TY=)
2: ppdJ-iM32zOnZHTrgSwDTjBQnSo.crl (hash: IlQNxu4+gfcW1BsWj+3PEcAFXW6wMXlNB5rQNisEVtk=)
3: xwhdiFLdj-4M8l9XUnyeFRJXGwQ.roa (hash: VoSzy1kKxVH6beyOekb646N9QsT3/EG5ENUuXQtb21o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ppdJ-iM32zOnZHTrgSwDTjBQnSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:a6:e3:bf:a9:58:9f:fc:48:be:16:a8:aa:3e:c5:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a69749fa2337db33a76474eb812c034e30509d2a
Validity
Not Before: May 12 04:00:39 2025 GMT
Not After : May 13 04:00:39 2025 GMT
Subject: CN=7aa8f9d58a37648138d6fbcc185fbb4cdb868aaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b3:25:72:cc:18:18:f3:28:4a:03:15:d5:ed:
57:3a:4c:4d:92:a4:d4:c8:81:95:3f:fb:a7:f4:89:
ae:76:7f:7a:a1:d9:1e:85:fb:26:d7:0e:f2:27:55:
b8:75:e7:39:b9:5a:e0:94:61:fe:53:ef:3d:2a:45:
ca:7d:a3:b9:bd:07:6e:e7:97:1e:3e:20:bc:80:fa:
3f:db:04:7b:b7:57:eb:9f:87:81:16:6c:39:ce:a9:
fe:af:b0:11:99:81:60:42:85:9d:4c:8a:6e:d8:96:
ac:57:f5:88:ed:a9:2c:fd:74:b2:56:c5:3a:75:2e:
aa:3d:27:24:18:64:0b:83:a2:ab:b5:52:85:6b:d0:
d2:13:39:30:05:47:57:09:81:46:21:ed:22:c0:07:
cd:0c:fa:aa:8d:15:f0:8b:66:1c:5c:87:4f:72:93:
80:cf:7c:1f:3a:b3:49:aa:00:30:57:6c:84:77:ad:
d4:81:5e:81:ac:ab:d4:5d:da:fd:19:8c:14:86:db:
52:00:3f:c3:78:61:71:32:cb:68:bd:21:75:4c:06:
d0:51:cb:dc:5b:6d:8d:19:36:1d:de:b3:e6:73:82:
5e:af:3a:8b:50:01:73:c2:68:5f:32:89:78:4d:31:
98:8c:36:d0:08:52:68:9b:b8:3f:80:3d:23:75:ad:
9b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:A8:F9:D5:8A:37:64:81:38:D6:FB:CC:18:5F:BB:4C:DB:86:8A:AF
X509v3 Authority Key Identifier:
keyid:A6:97:49:FA:23:37:DB:33:A7:64:74:EB:81:2C:03:4E:30:50:9D:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ppdJ-iM32zOnZHTrgSwDTjBQnSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:21:16:49:85:92:b3:83:fe:41:81:23:c0:f0:88:6b:a9:b1:
a0:a1:f8:0a:f4:b7:09:49:02:f9:11:ad:71:8c:b6:da:fd:a9:
4c:d9:3f:a5:c2:4d:d1:72:0c:99:7e:dc:2e:1c:2e:f6:c2:6c:
07:6c:5c:76:c3:97:cc:e7:63:08:0b:b0:2d:3a:aa:d8:6d:f4:
bd:81:18:41:f7:df:c2:f7:b2:45:aa:9e:4e:96:7c:9c:09:fc:
a1:71:bb:09:c9:4d:d0:fc:48:b8:d8:fb:b8:5b:6a:5b:ef:14:
4e:05:66:0c:93:ad:e3:49:3a:9b:2f:c5:6f:f6:4f:07:34:10:
54:96:59:4b:ef:92:57:2e:62:ab:8c:c6:9e:73:99:f7:15:36:
b6:d4:1b:3e:7a:be:35:c3:41:1f:a8:8d:14:00:59:51:1a:53:
0d:ab:2e:2b:90:b4:30:bd:f6:02:e7:75:a1:e4:29:cb:33:4b:
7e:34:53:df:b6:91:eb:59:a5:2e:c7:15:80:ba:45:95:d6:82:
b0:b9:15:80:02:6e:2c:2d:63:cc:f4:28:11:cc:28:8a:21:4d:
12:33:30:4b:5f:a5:a5:84:00:26:89:8e:7c:4e:7c:9f:10:d9:
f7:57:6f:6f:9a:11:9a:7d:f9:5a:42:b8:84:25:37:31:53:08:
a6:66:2f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:41:19 2025 by rpki-client