Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.mft
File: pPEx4-FQWNk__dtgrHCDvvidLoY.mft (raw, json)
Hash identifier: Ol/sDGSb1aADKVR8seFJkOw7CkFvdVnWSVD3ZIgO1AU=
Subject key identifier: 46:14:4E:6F:15:81:BE:C9:52:6A:B9:94:70:ED:06:2D:41:9D:63:94
Authority key identifier: A4:F1:31:E3:E1:50:58:D9:3F:FD:DB:60:AC:70:83:BE:F8:9D:2E:86
Certificate issuer: /CN=a4f131e3e15058d93ffddb60ac7083bef89d2e86
Certificate serial: 019A4D0783B7F9BE0103940803C7BD7C805C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPEx4-FQWNk__dtgrHCDvvidLoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.mft
Manifest number: 0995
Signing time: Tue 04 Nov 2025 04:02:09 +0000
Manifest this update: Tue 04 Nov 2025 04:02:09 +0000
Manifest next update: Wed 05 Nov 2025 04:02:09 +0000
Files and hashes: 1: ie21omNrQcDm6s8rAnnCfP0t5RQ.roa (hash: mEaLFd1UOa9vUWrxCFXqOi9Y8DlDh7A8FeEm27sklyo=)
2: pPEx4-FQWNk__dtgrHCDvvidLoY.crl (hash: SKNl8JG8yio8pInZvk82cjno9twqdh5Pd+0klH9hFTY=)
3: udLjQFDd9GrhrxwoxkbPJX3fBtU.roa (hash: 79a+ON6zCk0gJVeGJku3aPrCD80HhkzSEq7ZipqcJxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pPEx4-FQWNk__dtgrHCDvvidLoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:07:83:b7:f9:be:01:03:94:08:03:c7:bd:7c:80:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f131e3e15058d93ffddb60ac7083bef89d2e86
Validity
Not Before: Nov 4 04:02:09 2025 GMT
Not After : Nov 5 04:02:09 2025 GMT
Subject: CN=46144e6f1581bec9526ab99470ed062d419d6394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7a:b1:fe:d7:6d:79:9e:56:80:0a:9b:e2:28:
68:61:a0:0c:08:b8:7d:06:96:22:aa:9b:e1:15:77:
dd:c3:8e:23:5b:4d:88:a7:7d:85:67:46:94:e3:8b:
b4:6b:30:a6:eb:8b:e6:04:e8:b6:55:61:f5:ea:34:
92:9f:c7:57:93:e9:74:f7:d6:b8:b3:aa:07:bb:d2:
9b:7f:8f:6e:b5:5f:dd:98:1a:05:24:bf:41:74:12:
2a:4a:24:83:54:da:37:94:2f:24:7a:0c:ed:82:49:
79:1f:93:1e:6d:dd:58:13:10:2f:b9:9b:0d:a9:f5:
4a:b5:aa:a1:0e:ad:ea:7e:ea:5a:8d:4c:cb:36:76:
38:99:75:f7:92:70:1e:e8:c3:1a:c6:d4:94:db:40:
95:35:9f:9e:1e:f8:7f:6c:09:68:63:65:c4:6c:36:
df:0b:db:c3:90:1e:58:4c:dc:ab:d0:0c:37:48:a6:
37:b3:fe:d9:48:d4:03:b7:64:f1:98:5e:10:2e:18:
53:46:1e:f7:e4:9d:9b:99:b8:d8:c4:32:76:da:28:
0f:33:35:c3:3a:f8:b5:92:27:10:f0:f7:ea:4b:a4:
92:74:a7:5c:a4:68:91:cd:6c:ea:80:75:10:13:e1:
de:40:a2:13:c2:98:c3:f5:95:71:e2:98:41:60:e7:
3a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:14:4E:6F:15:81:BE:C9:52:6A:B9:94:70:ED:06:2D:41:9D:63:94
X509v3 Authority Key Identifier:
keyid:A4:F1:31:E3:E1:50:58:D9:3F:FD:DB:60:AC:70:83:BE:F8:9D:2E:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPEx4-FQWNk__dtgrHCDvvidLoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:b3:86:ef:57:ee:30:a8:43:63:1e:89:c9:a2:9d:ce:e1:e8:
61:05:6a:8e:b4:80:8f:38:73:8d:2c:cf:10:35:43:16:e4:ca:
2f:f1:00:b5:94:6d:71:02:42:c3:86:39:a3:e3:71:42:14:35:
d4:74:95:99:97:4e:04:12:b5:8d:89:a0:3d:17:49:ed:40:bd:
df:a0:90:38:36:d0:a6:83:b7:8c:e9:c5:4b:ec:6c:43:4b:2d:
5b:11:3f:cf:e2:7f:bc:38:d3:83:df:dd:f6:b8:d5:e9:58:6b:
0a:95:5f:ef:9b:bd:e5:4f:80:6c:7d:2e:80:2d:91:a9:35:f3:
af:41:db:3e:2d:52:61:53:24:ec:4a:af:0c:83:29:78:d9:75:
e4:1e:01:15:7f:19:c2:31:8b:2a:78:84:df:47:50:85:76:02:
5a:12:c6:c3:0d:ca:52:c3:da:c0:6e:14:25:ce:f9:38:3a:cb:
0b:6e:7f:8a:aa:b0:67:99:b4:36:0b:11:be:3c:26:43:ec:3d:
f5:57:52:31:9d:a6:db:f6:84:cc:e0:d2:9b:a4:e8:20:78:f2:
30:e3:53:39:e7:bc:95:69:10:28:c7:9a:aa:83:8d:61:bc:18:
52:0a:2a:e0:9a:ff:e9:8f:22:95:42:b9:57:5f:4d:b8:96:00:
fe:aa:7c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:51:03 2025 by rpki-client