Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.mft
File: pPEx4-FQWNk__dtgrHCDvvidLoY.mft (raw, json)
Hash identifier: MuBMUx/eg3jpTGYhJbfQeZRIMaQF+xSbqdNdxtL9kTo=
Subject key identifier: 36:C0:1C:DD:E5:0B:B3:64:30:81:8C:C7:43:5F:51:BD:3B:5A:E2:78
Authority key identifier: A4:F1:31:E3:E1:50:58:D9:3F:FD:DB:60:AC:70:83:BE:F8:9D:2E:86
Certificate issuer: /CN=a4f131e3e15058d93ffddb60ac7083bef89d2e86
Certificate serial: 0198530CF4704C26301C13201ED97E03CFAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPEx4-FQWNk__dtgrHCDvvidLoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.mft
Manifest number: 088F
Signing time: Mon 28 Jul 2025 22:00:14 +0000
Manifest this update: Mon 28 Jul 2025 22:00:14 +0000
Manifest next update: Tue 29 Jul 2025 22:00:14 +0000
Files and hashes: 1: ie21omNrQcDm6s8rAnnCfP0t5RQ.roa (hash: mEaLFd1UOa9vUWrxCFXqOi9Y8DlDh7A8FeEm27sklyo=)
2: pPEx4-FQWNk__dtgrHCDvvidLoY.crl (hash: UGdTgtE7LgUhAJAiPUfyDr6g3otej7llIql/gi5QxRw=)
3: udLjQFDd9GrhrxwoxkbPJX3fBtU.roa (hash: 79a+ON6zCk0gJVeGJku3aPrCD80HhkzSEq7ZipqcJxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pPEx4-FQWNk__dtgrHCDvvidLoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0c:f4:70:4c:26:30:1c:13:20:1e:d9:7e:03:cf:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f131e3e15058d93ffddb60ac7083bef89d2e86
Validity
Not Before: Jul 28 22:00:14 2025 GMT
Not After : Jul 29 22:00:14 2025 GMT
Subject: CN=36c01cdde50bb36430818cc7435f51bd3b5ae278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7a:14:ed:13:f8:98:27:80:6d:79:56:06:b1:
d7:4e:b3:3a:65:fe:ef:f7:46:95:d5:34:c2:29:9b:
7b:14:75:64:75:ce:c2:85:52:df:ea:f4:07:d7:6a:
f4:c7:6c:68:80:c1:7b:1c:8e:4d:56:a1:80:ba:b2:
47:dd:46:4b:50:d3:8e:cc:ae:d7:76:7a:a9:39:aa:
e1:cc:2b:be:0d:32:8b:cc:22:85:ca:78:19:3f:17:
9d:3c:0c:d9:33:2c:d6:4b:b7:1d:74:8f:9e:8e:f3:
20:71:30:b5:85:c8:18:56:3f:27:3b:d2:df:a7:1b:
cd:63:75:4b:fa:88:16:6c:06:af:19:47:26:aa:d6:
97:37:e1:9c:56:d9:7f:00:97:ae:cb:de:08:83:e2:
67:04:06:e8:0e:54:a2:8c:f7:c3:92:b7:b4:21:c5:
35:dd:25:c5:8c:d6:d9:17:6f:54:1e:97:d5:55:99:
38:6c:7a:02:d5:97:a2:dc:48:4c:0f:80:ff:8b:35:
2d:a1:34:9b:94:8e:0e:1c:8c:8f:ef:9f:f7:12:69:
27:03:64:6d:1a:40:b3:9f:8b:68:af:57:64:09:cf:
76:d4:3a:b4:fe:17:0c:eb:17:4e:be:54:b0:96:ce:
bb:23:4a:22:16:a3:89:91:d1:c1:67:83:59:d8:2f:
c6:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:C0:1C:DD:E5:0B:B3:64:30:81:8C:C7:43:5F:51:BD:3B:5A:E2:78
X509v3 Authority Key Identifier:
keyid:A4:F1:31:E3:E1:50:58:D9:3F:FD:DB:60:AC:70:83:BE:F8:9D:2E:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPEx4-FQWNk__dtgrHCDvvidLoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:1c:13:61:be:2c:6c:10:72:dd:ef:f0:ad:b4:19:66:7a:b9:
d0:b8:a1:7c:c8:5e:63:7a:70:ee:19:0c:93:f6:89:e6:2f:df:
00:ba:d6:4a:96:51:8b:26:ff:5d:95:59:1b:61:ef:07:13:7e:
ac:ff:9c:87:a4:0a:b2:0e:cc:07:b2:19:a4:4c:51:ea:78:8e:
81:3c:8f:a6:c2:05:51:ac:5f:49:f5:4e:a3:2e:50:33:8e:63:
d5:c4:91:87:30:0b:70:ed:94:11:e5:f8:24:3c:f7:84:64:6a:
d6:bb:e6:b3:ca:8d:34:bc:ad:d4:ea:49:9e:e9:ff:cb:83:a5:
01:7c:f4:a7:1d:e8:04:ab:58:14:b0:2e:b0:55:0b:b0:80:e0:
0b:a7:ab:bf:e8:59:39:e5:3a:81:32:db:8c:d4:d1:f6:50:75:
ff:88:01:c9:ff:45:d8:6f:97:ab:eb:01:bd:34:be:65:cb:44:
7a:d9:fa:dd:4c:37:d0:ff:ca:3a:c5:78:36:e3:e7:d3:c7:5c:
4a:3c:37:a1:ad:bb:5c:72:c5:94:25:60:25:e9:23:9a:46:51:
d5:70:c1:5b:17:33:d3:98:d8:0a:d7:7b:53:b3:85:b8:35:13:
c7:f3:93:1f:b4:98:07:df:49:ce:80:45:5f:bc:bf:22:ec:e2:
b9:29:ca:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:29:07 2025 by rpki-client