Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/2119ab-2f0a-451e-b3fa-98db4d5cdb33/1/pxJZNzLf_jheZ26QVodyMGza63I.mft
File: pxJZNzLf_jheZ26QVodyMGza63I.mft (raw, json)
Hash identifier: O3m5b5OeHqxcCGoRZ6CzgIloWQ7r4viGgfqnvoQA0Ic=
Subject key identifier: 07:FB:99:8A:71:0D:5E:08:E0:BD:BA:9B:FD:94:24:86:E1:C8:72:E4
Authority key identifier: A7:12:59:37:32:DF:FE:38:5E:67:6E:90:56:87:72:30:6C:DA:EB:72
Certificate issuer: /CN=a712593732dffe385e676e90568772306cdaeb72
Certificate serial: 019A7293902181D6DF7A7A75C2EB16971250
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxJZNzLf_jheZ26QVodyMGza63I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/2119ab-2f0a-451e-b3fa-98db4d5cdb33/1/pxJZNzLf_jheZ26QVodyMGza63I.mft
Manifest number: 1374
Signing time: Tue 11 Nov 2025 11:01:04 +0000
Manifest this update: Tue 11 Nov 2025 11:01:04 +0000
Manifest next update: Wed 12 Nov 2025 11:01:04 +0000
Files and hashes: 1: oMRtMf47yIPyY9ZdrVPhNi3G3eo.roa (hash: 4EnKsD8A0kDOzresfp2Oy03JKmata0Bf/rsbX3H3xdM=)
2: pxJZNzLf_jheZ26QVodyMGza63I.crl (hash: Li/Ou17WEKD5LM/Ucp02E1z4xoRC8/+BqbjEpbNLLlQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/2119ab-2f0a-451e-b3fa-98db4d5cdb33/1/pxJZNzLf_jheZ26QVodyMGza63I.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/2119ab-2f0a-451e-b3fa-98db4d5cdb33/1/pxJZNzLf_jheZ26QVodyMGza63I.mft
rsync://rpki.ripe.net/repository/DEFAULT/pxJZNzLf_jheZ26QVodyMGza63I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:90:21:81:d6:df:7a:7a:75:c2:eb:16:97:12:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a712593732dffe385e676e90568772306cdaeb72
Validity
Not Before: Nov 11 11:01:04 2025 GMT
Not After : Nov 12 11:01:04 2025 GMT
Subject: CN=07fb998a710d5e08e0bdba9bfd942486e1c872e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:a1:d9:27:ac:b3:df:02:b4:66:c0:8d:68:2a:
c4:cc:89:77:07:15:11:bd:b7:36:f7:6c:e2:c4:de:
c5:2f:06:c6:9b:fb:af:7c:07:29:92:d0:d2:99:dd:
cc:e9:12:eb:b5:9e:fd:d5:eb:a7:2c:8c:65:91:cd:
6e:2f:b5:75:bd:d5:96:97:7d:25:5b:5a:68:41:c2:
d8:c0:74:a6:dd:55:bf:d0:3d:58:82:db:fe:b5:d9:
4e:9c:78:8c:d8:01:85:73:4d:2f:2c:81:83:3a:ed:
9b:78:6f:26:2e:2a:a3:be:b0:82:53:43:e8:f3:70:
d6:59:e1:dc:ed:cf:07:17:0e:8c:7d:ee:d0:77:a2:
fe:6a:91:f3:e7:83:28:80:57:d2:ab:42:1c:14:ce:
68:3b:b9:47:96:d7:7b:1e:f1:d1:5d:00:fb:e8:ab:
c7:19:92:95:26:9e:1a:fc:c1:52:b4:51:b2:ea:35:
4e:cc:d5:8c:c9:ba:ea:20:b9:ab:f7:03:7d:9a:38:
f0:4d:b1:9a:47:96:bc:de:a1:f7:e1:3e:e4:4e:5c:
44:22:b7:1a:79:f7:c1:69:49:5b:6a:f5:e4:93:41:
64:7e:05:ea:e3:bd:84:df:36:6b:7e:74:4e:5e:98:
4b:79:42:74:20:c5:85:30:ce:7a:37:8f:2d:6f:5e:
dd:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:FB:99:8A:71:0D:5E:08:E0:BD:BA:9B:FD:94:24:86:E1:C8:72:E4
X509v3 Authority Key Identifier:
keyid:A7:12:59:37:32:DF:FE:38:5E:67:6E:90:56:87:72:30:6C:DA:EB:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxJZNzLf_jheZ26QVodyMGza63I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/2119ab-2f0a-451e-b3fa-98db4d5cdb33/1/pxJZNzLf_jheZ26QVodyMGza63I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/2119ab-2f0a-451e-b3fa-98db4d5cdb33/1/pxJZNzLf_jheZ26QVodyMGza63I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:43:38:9c:58:3e:00:2f:25:48:2f:55:f2:60:46:3d:9f:f3:
34:9d:a5:03:b0:9e:6c:37:3c:98:7a:05:a7:cf:f2:a1:d9:ff:
99:b1:03:9a:6a:26:bc:7e:f6:ed:ef:4c:36:0c:be:1c:5d:ce:
86:fe:00:c2:cc:ee:9f:55:b3:0c:71:54:a3:70:0f:c8:74:91:
3a:5d:dc:d3:74:7d:b9:41:45:63:f1:b9:f1:ba:60:cd:70:72:
ad:8d:f2:18:e0:98:57:9d:09:95:0a:7a:44:1f:0d:9f:67:ca:
2c:42:27:1e:1e:81:37:34:01:a9:1e:02:65:92:88:77:46:27:
d5:de:21:da:5d:80:3f:7e:6a:5a:96:f2:7d:91:0a:1a:25:a8:
0b:33:75:04:52:16:1b:93:99:f7:14:2a:8e:8f:62:2b:00:57:
3e:17:98:06:60:89:58:65:d7:8a:bc:aa:8c:d9:8b:ea:77:c3:
56:8a:00:fb:fe:31:dc:40:9c:2c:95:6e:78:57:9c:60:fa:f6:
59:52:35:13:10:8c:4d:10:0d:c7:72:ac:d7:ce:4a:f2:08:b0:
9d:15:45:14:e9:e6:98:b8:c6:fc:69:f2:64:9f:82:55:86:6b:
de:77:cb:33:33:2b:85:fa:7f:60:22:2c:27:1e:c8:d5:31:94:
2f:f8:1d:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:40:43 2025 by rpki-client