Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.mft
File: pPEx4-FQWNk__dtgrHCDvvidLoY.mft (raw, json)
Hash identifier: cNCNictedW/NFb1hfd4CG+zhAqTPQhmS693fyYx1bJs=
Subject key identifier: 3A:FC:D6:AE:06:95:0C:DD:00:F2:FB:EF:9C:E6:71:FF:EC:3E:32:7A
Authority key identifier: A4:F1:31:E3:E1:50:58:D9:3F:FD:DB:60:AC:70:83:BE:F8:9D:2E:86
Certificate issuer: /CN=a4f131e3e15058d93ffddb60ac7083bef89d2e86
Certificate serial: 0198D4730F7835FA8A4D8ED5535F23A720FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPEx4-FQWNk__dtgrHCDvvidLoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.mft
Manifest number: 08D2
Signing time: Sat 23 Aug 2025 01:02:47 +0000
Manifest this update: Sat 23 Aug 2025 01:02:47 +0000
Manifest next update: Sun 24 Aug 2025 01:02:47 +0000
Files and hashes: 1: ie21omNrQcDm6s8rAnnCfP0t5RQ.roa (hash: mEaLFd1UOa9vUWrxCFXqOi9Y8DlDh7A8FeEm27sklyo=)
2: pPEx4-FQWNk__dtgrHCDvvidLoY.crl (hash: 0G51Ktm5r2aCEFkQrVF9fykujlSCnibZlGemfOQ8p10=)
3: udLjQFDd9GrhrxwoxkbPJX3fBtU.roa (hash: 79a+ON6zCk0gJVeGJku3aPrCD80HhkzSEq7ZipqcJxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pPEx4-FQWNk__dtgrHCDvvidLoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:0f:78:35:fa:8a:4d:8e:d5:53:5f:23:a7:20:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f131e3e15058d93ffddb60ac7083bef89d2e86
Validity
Not Before: Aug 23 01:02:47 2025 GMT
Not After : Aug 24 01:02:47 2025 GMT
Subject: CN=3afcd6ae06950cdd00f2fbef9ce671ffec3e327a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8c:d3:a8:a0:d3:0f:fd:8e:9c:54:69:63:9c:
53:07:9c:bb:39:8c:28:f3:56:c6:8e:d4:62:e5:47:
7e:4b:54:3f:bb:40:12:5b:8b:f4:d8:fc:3a:7f:bc:
ce:69:78:3a:ab:20:14:9f:2e:70:77:5f:7d:36:13:
6e:90:c4:f7:27:f2:81:25:1d:c4:5c:c3:ef:a1:32:
9b:5a:b7:39:a7:e9:ea:4d:36:ef:5b:81:73:98:1f:
f2:77:01:af:31:00:cb:69:5a:24:fd:6f:2c:2c:0b:
d7:bc:4c:9c:56:f2:f8:75:ca:ed:5b:ad:c0:cd:01:
b0:27:72:93:ea:27:6d:4f:1f:5d:06:0f:10:e9:fb:
3a:7a:85:6c:fd:7f:60:e4:98:65:fb:be:a3:96:ce:
0d:11:77:0d:ac:71:55:77:b0:9b:ab:1a:32:b4:60:
f9:1f:c4:58:f6:18:e3:83:ae:92:48:20:b9:d2:b9:
33:6a:9c:0b:91:c7:2a:7a:41:1c:12:58:e1:56:65:
71:98:9a:bf:56:d3:8d:2e:17:db:69:8b:11:f6:01:
db:47:87:50:27:70:97:e9:0e:55:73:e6:f0:35:73:
e9:0a:83:72:3b:c2:4d:68:0b:fd:84:70:63:54:c0:
ca:16:67:90:b9:dc:76:1b:fd:6a:e1:fb:53:dc:e2:
75:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:FC:D6:AE:06:95:0C:DD:00:F2:FB:EF:9C:E6:71:FF:EC:3E:32:7A
X509v3 Authority Key Identifier:
keyid:A4:F1:31:E3:E1:50:58:D9:3F:FD:DB:60:AC:70:83:BE:F8:9D:2E:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPEx4-FQWNk__dtgrHCDvvidLoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:6b:76:95:8c:bb:b7:c1:d9:a1:28:3c:2c:79:d6:cd:ff:4b:
68:a7:ca:b2:a9:3e:33:40:1c:3d:a0:87:46:e9:65:34:12:8c:
ab:e3:5c:73:d9:6f:64:b9:02:32:20:0a:84:5d:63:c1:e4:e3:
ad:c0:3b:18:6f:d0:9a:5c:be:4b:f3:46:3c:05:67:b5:75:2b:
82:cb:39:15:0f:9d:0a:f1:79:0d:ea:bc:67:13:37:f3:a1:11:
80:ec:c4:db:00:9f:3e:4f:34:2c:21:38:05:ec:a2:e1:f5:97:
0d:9b:b7:d9:69:76:07:36:a2:11:9c:d8:e3:b9:e2:1a:68:f1:
21:12:b4:e6:d4:3d:8e:c6:a7:bb:8b:f6:4b:aa:bd:05:84:c2:
51:f8:b5:2e:7f:0d:96:d3:bd:66:5c:a1:22:1b:51:1d:90:7b:
43:f1:3f:c6:61:e9:78:66:73:06:1b:67:53:e3:35:a1:39:f9:
1a:1c:3b:30:0a:53:0a:28:da:09:b4:92:56:de:1d:f6:7e:da:
4f:a3:c2:a1:e5:7e:70:9e:59:f5:39:c7:64:4c:c5:c9:74:26:
fd:39:25:b2:1a:1b:1a:52:3b:1c:ef:7f:0b:fc:32:ba:e1:f9:
21:cc:93:54:6a:7e:85:a6:87:f9:48:03:a3:93:4c:a8:28:bf:
08:59:e4:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:50:49 2025 by rpki-client