Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.mft
File: pPEx4-FQWNk__dtgrHCDvvidLoY.mft (raw, json)
Hash identifier: P9oMwqBmk6SImby2lx8Uss2GZjxXpZ25iUjWhgK0uvI=
Subject key identifier: EA:63:D4:E5:9D:C1:CE:04:E5:E5:F2:7F:21:75:50:FE:CD:2D:C4:EA
Authority key identifier: A4:F1:31:E3:E1:50:58:D9:3F:FD:DB:60:AC:70:83:BE:F8:9D:2E:86
Certificate issuer: /CN=a4f131e3e15058d93ffddb60ac7083bef89d2e86
Certificate serial: 01976F2C3F8F0A94C64D9326406F892A1352
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPEx4-FQWNk__dtgrHCDvvidLoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.mft
Manifest number: 0819
Signing time: Sat 14 Jun 2025 16:01:00 +0000
Manifest this update: Sat 14 Jun 2025 16:01:00 +0000
Manifest next update: Sun 15 Jun 2025 16:01:00 +0000
Files and hashes: 1: ie21omNrQcDm6s8rAnnCfP0t5RQ.roa (hash: mEaLFd1UOa9vUWrxCFXqOi9Y8DlDh7A8FeEm27sklyo=)
2: pPEx4-FQWNk__dtgrHCDvvidLoY.crl (hash: CQI8svlFpi9ScCEzkNsIS/VpT/szPv50/43gb8yCvxw=)
3: udLjQFDd9GrhrxwoxkbPJX3fBtU.roa (hash: 79a+ON6zCk0gJVeGJku3aPrCD80HhkzSEq7ZipqcJxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pPEx4-FQWNk__dtgrHCDvvidLoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:3f:8f:0a:94:c6:4d:93:26:40:6f:89:2a:13:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f131e3e15058d93ffddb60ac7083bef89d2e86
Validity
Not Before: Jun 14 16:01:00 2025 GMT
Not After : Jun 15 16:01:00 2025 GMT
Subject: CN=ea63d4e59dc1ce04e5e5f27f217550fecd2dc4ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:de:79:2c:3b:e4:6d:da:a9:7a:f5:9e:de:14:
13:00:00:27:ff:50:72:e3:21:77:8b:73:98:76:f5:
71:e0:ff:d3:5f:12:56:d2:3f:b8:c2:56:ec:22:60:
96:c2:31:47:42:de:0a:ee:17:8b:9b:cb:ff:c3:bb:
da:c5:20:7f:dd:77:17:ab:fe:2a:7d:71:53:19:ff:
32:bd:06:46:3a:3c:be:53:b3:8a:75:5d:9e:62:e1:
3c:5a:28:d5:b2:42:80:36:c7:61:de:46:93:81:cc:
4d:c0:aa:f0:19:fc:9e:e4:36:b6:19:99:f7:cf:f9:
e3:54:7d:ee:33:36:f7:4e:66:8a:ad:6d:96:03:dc:
69:1c:7a:8d:65:59:56:48:08:cc:2f:82:f9:e1:57:
e9:c6:1b:d4:dc:f8:40:16:f6:bf:06:a6:a9:95:6b:
0d:7d:74:12:5c:33:a1:f7:5a:bc:d6:19:a8:77:94:
62:2e:87:74:be:a1:66:5f:7f:0e:ce:ec:a1:cc:9f:
72:59:bc:98:c5:d1:e1:47:35:ab:e2:f5:c0:90:e6:
82:5e:88:a8:51:dc:e6:6c:24:5a:18:f7:ce:ba:e3:
c3:84:93:4f:01:e0:73:f5:12:05:fb:a5:b4:fd:bd:
f5:4d:df:1a:5c:25:40:69:c3:3b:58:af:ee:f4:6e:
c9:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:63:D4:E5:9D:C1:CE:04:E5:E5:F2:7F:21:75:50:FE:CD:2D:C4:EA
X509v3 Authority Key Identifier:
keyid:A4:F1:31:E3:E1:50:58:D9:3F:FD:DB:60:AC:70:83:BE:F8:9D:2E:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPEx4-FQWNk__dtgrHCDvvidLoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/842e7f-0350-4b02-a994-f71a49eba48a/1/pPEx4-FQWNk__dtgrHCDvvidLoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:0a:da:aa:de:e0:83:20:8f:1a:63:46:ec:53:ca:1e:8b:17:
bb:ab:23:67:23:b9:c2:7c:ab:54:cd:fd:99:1e:77:d6:8c:1e:
b4:3d:d8:66:11:8d:4c:d0:65:25:84:6d:3e:08:8e:38:f6:3f:
fe:23:4b:d1:9b:b2:96:6f:7b:da:9d:df:5b:02:fa:ae:b1:83:
2f:20:16:ed:1a:bd:f2:15:f9:b1:4b:9e:fc:cc:16:4f:5b:0a:
b8:84:c5:fd:21:3d:40:09:44:69:27:b3:03:fe:a7:67:08:0e:
62:99:4e:4c:df:57:4a:42:58:c8:a8:2f:90:84:f4:d2:18:8f:
a8:dd:c7:94:f5:cf:ba:c9:ba:31:17:29:38:54:2a:3e:f6:62:
c4:2f:57:dc:65:8a:3f:3b:9d:8d:fd:83:4d:80:2c:31:5f:08:
93:1a:e5:d8:9d:b4:7c:2d:95:da:62:f1:d6:fe:8e:d7:d2:da:
c7:9f:b6:98:43:f3:fd:d9:02:e4:49:27:ff:8b:f4:69:f6:4a:
5c:ab:0c:6f:a9:b4:7c:ea:b4:93:2e:c2:f1:1e:27:0d:3b:96:
07:e5:87:dd:6b:7d:0e:84:61:50:5e:34:43:dd:f5:cf:7b:35:
0d:3a:cc:fe:96:dd:df:65:02:9f:26:61:3a:55:b7:10:f2:47:
41:a2:a0:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 21:46:08 2025 by rpki-client