Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/58a94a-9e28-47a5-9fd6-9c91b1c5158a/1/pPAKrld-dFH4jqYEv2ozc0zQMAk.mft
File: pPAKrld-dFH4jqYEv2ozc0zQMAk.mft (raw, json)
Hash identifier: XekxOdrRY7r3a7PAikH/aR9rnxIUTeL33w2szOFTZFw=
Subject key identifier: C4:1B:FB:D8:29:57:3F:06:B1:2B:60:90:5A:A1:5D:CE:0B:EF:A8:37
Authority key identifier: A4:F0:0A:AE:57:7E:74:51:F8:8E:A6:04:BF:6A:33:73:4C:D0:30:09
Certificate issuer: /CN=a4f00aae577e7451f88ea604bf6a33734cd03009
Certificate serial: 0199FCC624844459095EBA2984421E5943E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPAKrld-dFH4jqYEv2ozc0zQMAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/58a94a-9e28-47a5-9fd6-9c91b1c5158a/1/pPAKrld-dFH4jqYEv2ozc0zQMAk.mft
Manifest number: 0F41
Signing time: Sun 19 Oct 2025 14:01:07 +0000
Manifest this update: Sun 19 Oct 2025 14:01:07 +0000
Manifest next update: Mon 20 Oct 2025 14:01:07 +0000
Files and hashes: 1: XRYyvh6J7DkVdKbz1yypWyD6-m0.roa (hash: 6+dNcwPteiKzyDYvKh6xy6mmMEyhqVqNL5Sm9+oU6rA=)
2: pPAKrld-dFH4jqYEv2ozc0zQMAk.crl (hash: RlV/upBOQ1ByigOWJ/s6R0HbTIRAM61k45E4rPf9sAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/58a94a-9e28-47a5-9fd6-9c91b1c5158a/1/pPAKrld-dFH4jqYEv2ozc0zQMAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/58a94a-9e28-47a5-9fd6-9c91b1c5158a/1/pPAKrld-dFH4jqYEv2ozc0zQMAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pPAKrld-dFH4jqYEv2ozc0zQMAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:24:84:44:59:09:5e:ba:29:84:42:1e:59:43:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f00aae577e7451f88ea604bf6a33734cd03009
Validity
Not Before: Oct 19 14:01:07 2025 GMT
Not After : Oct 20 14:01:07 2025 GMT
Subject: CN=c41bfbd829573f06b12b60905aa15dce0befa837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:30:a3:68:ca:46:d1:a4:c3:cc:e2:e4:8a:30:
da:fe:3c:46:64:56:fb:15:cb:3a:6f:23:66:29:f2:
20:9f:20:8a:3e:d3:b0:3b:f9:5a:24:3e:a1:25:76:
30:5a:d0:6b:01:b9:2c:b0:b6:0a:bc:73:b5:92:b6:
c8:04:bb:90:8e:04:12:4c:fb:dc:f5:6e:0c:d4:f7:
b4:f9:be:86:14:b8:85:82:a2:dc:ed:99:ee:70:38:
a7:88:c7:b4:78:b6:47:01:59:5a:eb:b5:46:9e:28:
a4:e6:7c:35:78:0c:a6:6f:5b:ea:17:00:0b:08:3b:
71:33:ff:d4:57:8c:be:18:2f:fb:76:82:68:c0:90:
64:18:2c:73:13:02:8f:72:2a:98:9e:e5:ff:37:cc:
56:1e:65:e1:ba:33:93:56:9a:43:03:5d:89:00:d6:
41:b8:57:53:7e:94:05:88:4f:94:14:1d:fa:76:34:
f9:18:80:06:fb:57:14:bd:45:c1:e3:b5:ac:0e:19:
c1:44:79:9a:c8:ba:48:dd:88:c4:87:de:49:6c:c3:
eb:0a:ce:d8:75:3a:9d:7d:c7:eb:76:41:8a:4a:a9:
83:cf:55:8a:33:47:64:1c:32:cf:91:8c:89:e8:cf:
89:3d:b2:b0:1f:82:b7:df:0f:cc:50:f3:2f:dc:74:
af:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:1B:FB:D8:29:57:3F:06:B1:2B:60:90:5A:A1:5D:CE:0B:EF:A8:37
X509v3 Authority Key Identifier:
keyid:A4:F0:0A:AE:57:7E:74:51:F8:8E:A6:04:BF:6A:33:73:4C:D0:30:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPAKrld-dFH4jqYEv2ozc0zQMAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/58a94a-9e28-47a5-9fd6-9c91b1c5158a/1/pPAKrld-dFH4jqYEv2ozc0zQMAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/58a94a-9e28-47a5-9fd6-9c91b1c5158a/1/pPAKrld-dFH4jqYEv2ozc0zQMAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:76:ed:b0:d1:1f:50:00:27:b3:12:29:64:da:55:c8:70:1a:
d5:57:f8:a0:83:08:0d:c2:2e:fd:03:2f:e8:18:f8:f8:28:69:
a1:0d:e3:be:58:2d:2e:0a:f2:ec:64:ba:7b:5f:d8:7a:ac:47:
b5:98:e9:40:e8:07:b3:89:0c:ef:cf:76:74:52:7a:59:e4:8c:
ff:7b:2e:48:39:e4:8c:c2:ba:05:03:45:41:7c:9e:51:16:dc:
a7:35:0c:07:42:c9:20:c0:4c:00:69:6c:13:16:e0:79:47:91:
fa:bd:88:59:02:e2:ba:cf:2c:4e:89:c0:a8:ba:2c:fe:17:7a:
be:a6:93:19:8b:02:06:e1:f1:42:92:90:3a:7c:83:d1:bd:d6:
b3:7e:71:22:af:9c:a2:1c:4e:f0:89:da:2f:e0:2c:e2:ff:df:
a2:f5:18:8f:0c:b0:9d:0d:d0:19:0c:74:9c:08:f4:da:1d:72:
6f:9f:f5:d4:98:b3:f9:4f:dd:d0:22:db:28:38:59:4a:c1:b5:
5f:34:b9:71:7b:57:02:6e:f9:26:a2:bb:69:bd:09:7f:08:b5:
7e:62:ed:b8:75:14:ba:0b:e2:0c:44:fe:92:85:74:b0:88:e8:
80:52:6e:66:10:6c:2f:85:3f:18:e9:5d:1c:53:4e:02:ed:84:
41:12:f0:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:46:58 2025 by rpki-client