Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.mft
File: pPEx4-FQWNk__dtgrHCDvvidLoY.mft (raw, json)
Hash identifier: 1IN0z6rr9Kwa98V44IWoPOhlkdWdLmeWpXMFkmQsp0o=
Subject key identifier: 19:BB:80:10:41:CB:6E:E7:33:28:4A:9B:FF:C4:CA:58:CD:68:21:33
Authority key identifier: A4:F1:31:E3:E1:50:58:D9:3F:FD:DB:60:AC:70:83:BE:F8:9D:2E:86
Certificate issuer: /CN=a4f131e3e15058d93ffddb60ac7083bef89d2e86
Certificate serial: 01995F7CD2C361401C04C2298A7E7F88DE78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPEx4-FQWNk__dtgrHCDvvidLoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.mft
Manifest number: 091A
Signing time: Fri 19 Sep 2025 01:00:39 +0000
Manifest this update: Fri 19 Sep 2025 01:00:39 +0000
Manifest next update: Sat 20 Sep 2025 01:00:39 +0000
Files and hashes: 1: ie21omNrQcDm6s8rAnnCfP0t5RQ.roa (hash: mEaLFd1UOa9vUWrxCFXqOi9Y8DlDh7A8FeEm27sklyo=)
2: pPEx4-FQWNk__dtgrHCDvvidLoY.crl (hash: sW8caCy5UopXuJdzx48HQM8JcaquC+AsVWxORuoVKbc=)
3: udLjQFDd9GrhrxwoxkbPJX3fBtU.roa (hash: 79a+ON6zCk0gJVeGJku3aPrCD80HhkzSEq7ZipqcJxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pPEx4-FQWNk__dtgrHCDvvidLoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Sep 2025 22:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:5f:7c:d2:c3:61:40:1c:04:c2:29:8a:7e:7f:88:de:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f131e3e15058d93ffddb60ac7083bef89d2e86
Validity
Not Before: Sep 19 01:00:39 2025 GMT
Not After : Sep 20 01:00:39 2025 GMT
Subject: CN=19bb801041cb6ee733284a9bffc4ca58cd682133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a3:f9:55:87:7f:18:c6:fc:48:fc:8f:a1:cd:
80:e9:d0:f8:fa:f7:d6:71:7e:4a:70:ca:73:33:94:
b8:e4:e1:c7:95:66:8f:b5:55:ab:5d:97:f3:36:f6:
b2:25:91:e9:70:d6:bf:23:c1:f8:e1:d2:89:e1:72:
bc:e3:24:b2:4f:8f:60:23:c1:66:02:b8:7a:02:ac:
23:2c:4d:44:1c:6e:a7:7a:ba:c5:c8:21:7e:c2:3b:
53:e1:bd:75:10:42:00:99:bf:a5:af:ce:74:a2:c8:
22:71:4d:97:5e:54:53:3e:6e:b2:05:3f:8c:09:f1:
b3:30:2a:08:1c:7c:7b:64:ca:fc:7b:6f:14:55:dc:
0f:ee:a6:cc:d8:21:61:20:5f:08:6f:fe:e1:fe:ad:
0e:6a:10:76:50:32:d5:77:c9:95:0a:42:9a:6c:af:
4d:a9:3f:23:c4:60:f1:c9:6e:65:fa:ed:db:bf:2b:
1b:4a:f4:bd:a9:f8:ae:22:af:7a:01:d6:c4:78:85:
c9:ac:de:5b:9c:4f:dd:fb:25:fe:3c:2c:51:73:45:
79:5e:9a:54:c5:56:1f:eb:1c:9d:46:04:0a:fa:da:
e3:b1:3b:de:9f:1f:11:22:84:90:40:a9:d3:91:ff:
90:9c:c9:6f:d4:7a:83:da:dd:fd:35:ab:6a:b4:32:
0b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:BB:80:10:41:CB:6E:E7:33:28:4A:9B:FF:C4:CA:58:CD:68:21:33
X509v3 Authority Key Identifier:
keyid:A4:F1:31:E3:E1:50:58:D9:3F:FD:DB:60:AC:70:83:BE:F8:9D:2E:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPEx4-FQWNk__dtgrHCDvvidLoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:0b:8a:4f:87:7d:d0:02:69:f7:84:dc:76:56:73:fd:0e:33:
60:5b:84:bc:2f:98:33:5a:ce:03:d4:bf:13:82:59:83:24:b8:
7f:c8:aa:48:96:ae:c4:67:13:0b:16:34:aa:98:51:6c:41:ec:
23:fe:0d:21:21:d5:e8:d1:e5:12:8a:4f:9a:01:7b:8f:d1:40:
9a:8a:12:48:60:78:4b:4d:ab:bd:f6:0a:f0:29:49:24:fa:e4:
64:17:29:86:f2:bd:8c:64:fb:7a:11:db:e0:14:d8:d7:77:a2:
2d:3a:5f:a3:1c:3b:e6:72:95:20:26:41:98:7b:d9:2f:66:4a:
b4:fa:f4:e5:b7:1d:8b:4f:c6:60:fc:12:86:c6:0b:d8:0b:2a:
cd:fd:56:85:13:b6:c4:66:84:8c:c0:3e:26:b4:6b:71:a8:4e:
f1:0f:47:2c:c4:ce:33:f1:90:39:bc:c9:fe:80:b3:34:da:4b:
6f:c6:7c:11:d5:4f:e2:a7:3c:87:94:9f:f0:ed:8a:e9:db:2e:
b9:03:1c:04:44:10:df:45:14:a0:3e:fb:0d:86:37:40:1b:ef:
8e:99:a3:a2:92:98:86:2f:0f:13:b0:c7:73:3c:7c:2d:55:2c:
15:7b:e4:82:6d:29:9c:42:6e:fc:4c:e2:17:06:f2:c1:53:08:
9d:c8:8f:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZlffNLDYUAcBMIpin5/iN54MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0ZjEzMWUzZTE1MDU4ZDkzZmZkZGI2MGFjNzA4M2JlZjg5
ZDJlODYwHhcNMjUwOTE5MDEwMDM5WhcNMjUwOTIwMDEwMDM5WjAzMTEwLwYDVQQD
EygxOWJiODAxMDQxY2I2ZWU3MzMyODRhOWJmZmM0Y2E1OGNkNjgyMTMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKP5VYd/GMb8SPyPoc2A6dD4+vfW
cX5KcMpzM5S45OHHlWaPtVWrXZfzNvayJZHpcNa/I8H44dKJ4XK84ySyT49gI8Fm
Arh6AqwjLE1EHG6nerrFyCF+wjtT4b11EEIAmb+lr850osgicU2XXlRTPm6yBT+M
CfGzMCoIHHx7ZMr8e28UVdwP7qbM2CFhIF8Ib/7h/q0OahB2UDLVd8mVCkKabK9N
qT8jxGDxyW5l+u3bvysbSvS9qfiuIq96AdbEeIXJrN5bnE/d+yX+PCxRc0V5XppU
xVYf6xydRgQK+trjsTvenx8RIoSQQKnTkf+QnMlv1HqD2t39NatqtDILawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBm7gBBBy27nMyhKm//EyljNaCEzMB8GA1UdIwQY
MBaAFKTxMePhUFjZP/3bYKxwg774nS6GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFBFeDQtRlFXTmtfX2R0Z3JIQ0R2dmlkTG9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi84NDJlN2YtMDM1MC00YjAyLWE5OTQt
ZjcxYTQ5ZWJhNDhhLzEvcFBFeDQtRlFXTmtfX2R0Z3JIQ0R2dmlkTG9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi84NDJlN2YtMDM1MC00YjAyLWE5OTQtZjcxYTQ5ZWJhNDhh
LzEvcFBFeDQtRlFXTmtfX2R0Z3JIQ0R2dmlkTG9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnAuKT4d9
0AJp94TcdlZz/Q4zYFuEvC+YM1rOA9S/E4JZgyS4f8iqSJauxGcTCxY0qphRbEHs
I/4NISHV6NHlEopPmgF7j9FAmooSSGB4S02rvfYK8ClJJPrkZBcphvK9jGT7ehHb
4BTY13eiLTpfoxw75nKVICZBmHvZL2ZKtPr05bcdi0/GYPwShsYL2Asqzf1WhRO2
xGaEjMA+JrRrcahO8Q9HLMTOM/GQObzJ/oCzNNpLb8Z8EdVP4qc8h5Sf8O2K6dsu
uQMcBEQQ30UUoD77DYY3QBvvjpmjopKYhi8PE7DHczx8LVUsFXvkgm0pnEJu/Ezi
FwbywVMInciPyQ==
-----END CERTIFICATE-----
Generated at Fri Sep 19 02:43:05 2025 by rpki-client