Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.mft
File: pPEx4-FQWNk__dtgrHCDvvidLoY.mft (raw, json)
Hash identifier: 8TDq2Stx4JM5EUs59lpmfwhKSEvizr/1NrN6Qik5HVU=
Subject key identifier: EA:32:30:EB:30:A3:D4:44:01:09:98:30:27:9B:23:6E:8E:EE:8E:BC
Authority key identifier: A4:F1:31:E3:E1:50:58:D9:3F:FD:DB:60:AC:70:83:BE:F8:9D:2E:86
Certificate issuer: /CN=a4f131e3e15058d93ffddb60ac7083bef89d2e86
Certificate serial: 0199FBEA7E0C6C486AD9B8491BDAC321D0D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPEx4-FQWNk__dtgrHCDvvidLoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.mft
Manifest number: 096B
Signing time: Sun 19 Oct 2025 10:01:12 +0000
Manifest this update: Sun 19 Oct 2025 10:01:12 +0000
Manifest next update: Mon 20 Oct 2025 10:01:12 +0000
Files and hashes: 1: ie21omNrQcDm6s8rAnnCfP0t5RQ.roa (hash: mEaLFd1UOa9vUWrxCFXqOi9Y8DlDh7A8FeEm27sklyo=)
2: pPEx4-FQWNk__dtgrHCDvvidLoY.crl (hash: 4Vx2ZmDC6+cj+RiPNL6vBOJObyI8HcIH4QXLaUb3uAc=)
3: udLjQFDd9GrhrxwoxkbPJX3fBtU.roa (hash: 79a+ON6zCk0gJVeGJku3aPrCD80HhkzSEq7ZipqcJxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pPEx4-FQWNk__dtgrHCDvvidLoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:7e:0c:6c:48:6a:d9:b8:49:1b:da:c3:21:d0:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f131e3e15058d93ffddb60ac7083bef89d2e86
Validity
Not Before: Oct 19 10:01:12 2025 GMT
Not After : Oct 20 10:01:12 2025 GMT
Subject: CN=ea3230eb30a3d44401099830279b236e8eee8ebc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:50:7d:96:2c:90:25:75:3b:1a:d8:75:24:ee:
09:37:bf:f4:03:77:fa:b2:6d:44:fc:05:7c:82:39:
95:c2:c0:43:53:86:b4:2c:0f:50:26:24:de:3a:cf:
38:25:8e:9d:7a:77:f7:66:4c:41:84:51:87:30:30:
c4:5c:a1:58:05:66:ea:4b:65:98:9a:a9:53:69:62:
e3:92:86:e0:68:5d:a7:68:8c:37:27:4e:5b:1c:47:
10:cb:06:e3:82:71:84:ec:84:c1:3e:ad:14:bf:63:
5c:77:10:9f:7a:fe:36:bf:9a:11:7b:8a:3c:45:f8:
58:6b:31:cf:43:fc:ff:e4:75:67:b3:a5:24:9f:bd:
9a:e2:07:69:41:04:59:b7:5b:1d:b7:d7:2e:4f:59:
69:e9:d0:1d:eb:35:87:c8:36:90:fc:be:a5:9e:de:
fc:2c:a9:6d:bf:50:d6:1a:1b:c2:8c:f2:7b:f0:94:
d0:3e:60:1b:37:80:a6:22:89:16:22:12:ce:c8:eb:
1e:b6:3b:a0:8d:ab:76:a6:15:4e:04:f5:6d:7e:5a:
ac:66:95:ce:ea:0e:46:d8:05:2e:0b:e5:9d:56:46:
d4:d6:31:80:2e:6c:ca:26:ba:ea:35:2b:0a:35:ec:
fd:4a:c8:d4:98:c0:8e:d2:5e:ef:4e:ac:9c:c3:b5:
1f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:32:30:EB:30:A3:D4:44:01:09:98:30:27:9B:23:6E:8E:EE:8E:BC
X509v3 Authority Key Identifier:
keyid:A4:F1:31:E3:E1:50:58:D9:3F:FD:DB:60:AC:70:83:BE:F8:9D:2E:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPEx4-FQWNk__dtgrHCDvvidLoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:f7:95:af:19:94:5f:13:e1:46:b9:5e:85:00:c8:83:a8:19:
29:54:fc:60:79:15:40:74:ba:95:25:58:d4:62:65:25:86:fa:
7b:a1:f3:c9:f9:72:23:6b:73:fd:08:bb:74:86:71:79:71:41:
ec:f4:f4:5c:b9:e7:72:fd:42:45:9f:3b:46:59:da:79:7c:da:
e9:7f:ec:07:30:dc:58:1d:8d:13:2c:70:a6:9c:aa:e1:f4:3c:
92:8d:d5:74:26:c9:dd:e1:8f:f6:51:49:1b:91:b0:8f:5c:d9:
73:24:e6:cc:1c:a0:3d:af:b8:f9:fd:9c:76:ae:b6:b6:81:8a:
d3:e3:79:4f:59:c5:ab:c7:b1:96:7e:f3:b7:8f:5f:7f:20:24:
7c:79:22:90:4b:a9:d4:72:14:5c:6d:9a:f0:b7:39:4a:7a:01:
01:ed:8f:3b:fe:91:93:3d:4f:14:d3:36:15:91:5d:77:5c:f4:
76:72:f0:36:a9:a1:f8:52:fd:58:1f:40:4b:f8:42:8f:ea:0c:
7d:43:0f:d8:a6:aa:2b:1e:4b:92:13:c9:e0:76:68:57:17:e7:
9e:2f:f2:eb:f5:93:d0:e6:76:79:59:24:81:61:9d:30:28:2a:
cb:ca:a9:b7:6d:22:04:49:b5:c7:57:2d:e7:6a:22:45:6a:07:
09:04:fb:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76n4MbEhq2bhJG9rDIdDRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0ZjEzMWUzZTE1MDU4ZDkzZmZkZGI2MGFjNzA4M2JlZjg5
ZDJlODYwHhcNMjUxMDE5MTAwMTEyWhcNMjUxMDIwMTAwMTEyWjAzMTEwLwYDVQQD
EyhlYTMyMzBlYjMwYTNkNDQ0MDEwOTk4MzAyNzliMjM2ZThlZWU4ZWJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFB9liyQJXU7Gth1JO4JN7/0A3f6
sm1E/AV8gjmVwsBDU4a0LA9QJiTeOs84JY6denf3ZkxBhFGHMDDEXKFYBWbqS2WY
mqlTaWLjkobgaF2naIw3J05bHEcQywbjgnGE7ITBPq0Uv2NcdxCfev42v5oRe4o8
RfhYazHPQ/z/5HVns6Ukn72a4gdpQQRZt1sdt9cuT1lp6dAd6zWHyDaQ/L6lnt78
LKltv1DWGhvCjPJ78JTQPmAbN4CmIokWIhLOyOsetjugjat2phVOBPVtflqsZpXO
6g5G2AUuC+WdVkbU1jGALmzKJrrqNSsKNez9SsjUmMCO0l7vTqycw7UfPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOoyMOswo9REAQmYMCebI26O7o68MB8GA1UdIwQY
MBaAFKTxMePhUFjZP/3bYKxwg774nS6GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFBFeDQtRlFXTmtfX2R0Z3JIQ0R2dmlkTG9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi84NDJlN2YtMDM1MC00YjAyLWE5OTQt
ZjcxYTQ5ZWJhNDhhLzEvcFBFeDQtRlFXTmtfX2R0Z3JIQ0R2dmlkTG9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi84NDJlN2YtMDM1MC00YjAyLWE5OTQtZjcxYTQ5ZWJhNDhh
LzEvcFBFeDQtRlFXTmtfX2R0Z3JIQ0R2dmlkTG9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqfeVrxmU
XxPhRrlehQDIg6gZKVT8YHkVQHS6lSVY1GJlJYb6e6HzyflyI2tz/Qi7dIZxeXFB
7PT0XLnncv1CRZ87RlnaeXza6X/sBzDcWB2NEyxwppyq4fQ8ko3VdCbJ3eGP9lFJ
G5Gwj1zZcyTmzBygPa+4+f2cdq62toGK0+N5T1nFq8exln7zt49ffyAkfHkikEup
1HIUXG2a8Lc5SnoBAe2PO/6Rkz1PFNM2FZFdd1z0dnLwNqmh+FL9WB9AS/hCj+oM
fUMP2KaqKx5LkhPJ4HZoVxfnni/y6/WT0OZ2eVkkgWGdMCgqy8qpt20iBEm1x1ct
52oiRWoHCQT7Pg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:10:16 2025 by rpki-client