Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.mft
File: pPEx4-FQWNk__dtgrHCDvvidLoY.mft (raw, json)
Hash identifier: t76MuCMi5qwugePtHRSrxe6rvHpL9iooBYVntBn97Es=
Subject key identifier: 40:1D:C3:30:74:01:4D:A2:5F:DA:2F:8B:27:70:FF:17:EB:B1:E9:59
Authority key identifier: A4:F1:31:E3:E1:50:58:D9:3F:FD:DB:60:AC:70:83:BE:F8:9D:2E:86
Certificate issuer: /CN=a4f131e3e15058d93ffddb60ac7083bef89d2e86
Certificate serial: 0197B6A107E4A057CDA3D3F233DC6925D3BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPEx4-FQWNk__dtgrHCDvvidLoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.mft
Manifest number: 083E
Signing time: Sat 28 Jun 2025 13:01:36 +0000
Manifest this update: Sat 28 Jun 2025 13:01:36 +0000
Manifest next update: Sun 29 Jun 2025 13:01:36 +0000
Files and hashes: 1: ie21omNrQcDm6s8rAnnCfP0t5RQ.roa (hash: mEaLFd1UOa9vUWrxCFXqOi9Y8DlDh7A8FeEm27sklyo=)
2: pPEx4-FQWNk__dtgrHCDvvidLoY.crl (hash: +/zDRah6c4vJkbXoQIbf3MgYtACnLJtlOZZJwaT6kdU=)
3: udLjQFDd9GrhrxwoxkbPJX3fBtU.roa (hash: 79a+ON6zCk0gJVeGJku3aPrCD80HhkzSEq7ZipqcJxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pPEx4-FQWNk__dtgrHCDvvidLoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:07:e4:a0:57:cd:a3:d3:f2:33:dc:69:25:d3:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f131e3e15058d93ffddb60ac7083bef89d2e86
Validity
Not Before: Jun 28 13:01:36 2025 GMT
Not After : Jun 29 13:01:36 2025 GMT
Subject: CN=401dc33074014da25fda2f8b2770ff17ebb1e959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d1:0a:88:7f:2d:0c:13:43:43:83:cb:bd:20:
57:d6:c2:cd:97:f2:d5:7a:98:8f:d8:f6:93:27:c9:
af:71:26:92:6d:3d:76:e3:5c:62:5f:2e:9c:b8:ee:
db:04:64:0a:66:22:dc:c1:98:99:bc:d1:fd:0d:1b:
1d:46:42:a5:31:e2:aa:9d:1c:75:79:55:d1:97:d0:
a4:c3:cb:e2:6a:36:31:b2:1e:b3:26:ca:59:c4:d9:
a2:c9:38:80:42:72:0a:a9:bc:5b:c3:88:8a:51:18:
d8:08:cf:08:f6:fc:ec:2d:1e:8c:49:33:0d:32:f1:
cb:08:61:c3:9a:d1:e9:0d:78:e2:dd:d5:61:93:01:
e2:86:d0:b9:8b:05:e8:72:24:c4:76:b6:46:b9:10:
28:0b:3a:83:17:81:a8:cc:3f:38:6f:62:f0:1d:72:
54:65:5b:28:ba:58:99:6a:e3:d2:f7:cd:05:98:a5:
85:af:64:e9:46:3c:ff:b1:08:a0:54:1d:74:55:df:
dd:bd:8d:9e:4b:50:d7:6f:fc:63:d8:e4:c1:b0:99:
4e:a3:b0:24:c6:f7:fc:c0:11:d1:7b:04:49:44:19:
2c:78:24:d0:d0:30:cb:05:96:bf:73:25:f4:61:22:
e7:a1:59:32:b5:a7:a5:88:f1:a0:85:7b:85:9a:57:
6e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:1D:C3:30:74:01:4D:A2:5F:DA:2F:8B:27:70:FF:17:EB:B1:E9:59
X509v3 Authority Key Identifier:
keyid:A4:F1:31:E3:E1:50:58:D9:3F:FD:DB:60:AC:70:83:BE:F8:9D:2E:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPEx4-FQWNk__dtgrHCDvvidLoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:2d:81:38:cf:34:a8:d7:73:4c:21:c0:57:33:5d:d7:e2:a8:
77:aa:4c:e8:d1:01:c7:49:56:d4:51:b9:b2:14:63:f0:49:98:
b3:ff:5a:99:ec:26:ae:ea:7b:f1:c7:65:2f:02:e9:0a:54:19:
47:f5:6d:3d:0d:b4:9e:e4:8e:74:bf:6b:0e:96:7b:6d:74:2f:
14:5c:ec:1e:50:97:4b:ac:88:4e:79:f6:5b:7c:f2:45:a1:ab:
16:62:99:ac:a4:e7:51:a4:26:94:48:6a:64:61:88:33:17:27:
25:e9:78:7e:b8:df:59:f6:0e:17:9f:70:b4:8d:af:3b:f7:ed:
f1:38:6e:4a:fb:db:4d:e7:80:a9:c8:a6:0e:59:8a:55:c8:5a:
bf:2d:a7:61:c7:a2:b5:2b:1c:a7:ce:68:78:80:9e:d2:b3:24:
2b:d2:c2:f2:83:62:8a:a6:3f:9b:45:f0:78:7d:51:9a:7b:9f:
ea:c0:18:2b:38:ad:55:18:73:3f:93:a9:20:77:10:2e:c8:cb:
04:30:ae:15:b1:25:dd:c0:e9:ab:8c:91:cd:e5:b7:8b:7e:92:
48:91:e3:02:ce:94:2a:b5:7d:20:28:10:83:ac:7f:e7:f5:4c:
ad:ea:d4:e8:e2:2d:4a:6a:94:c1:1f:ab:1e:b1:e6:04:ca:39:
4d:32:9d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:42:00 2025 by rpki-client