Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/2119ab-2f0a-451e-b3fa-98db4d5cdb33/1/pxJZNzLf_jheZ26QVodyMGza63I.mft
File: pxJZNzLf_jheZ26QVodyMGza63I.mft (raw, json)
Hash identifier: J4yXs6byUj0W25aYw3x6/0twHN3vEOvJmJEv9xyYB/A=
Subject key identifier: 71:61:E2:EF:24:F6:E5:1D:87:5C:58:66:2F:27:B6:69:1F:EA:38:6C
Authority key identifier: A7:12:59:37:32:DF:FE:38:5E:67:6E:90:56:87:72:30:6C:DA:EB:72
Certificate issuer: /CN=a712593732dffe385e676e90568772306cdaeb72
Certificate serial: 0199228C8FC904D34334ECB7AD1A9A5DB8DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxJZNzLf_jheZ26QVodyMGza63I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/2119ab-2f0a-451e-b3fa-98db4d5cdb33/1/pxJZNzLf_jheZ26QVodyMGza63I.mft
Manifest number: 12C6
Signing time: Sun 07 Sep 2025 05:01:01 +0000
Manifest this update: Sun 07 Sep 2025 05:01:01 +0000
Manifest next update: Mon 08 Sep 2025 05:01:01 +0000
Files and hashes: 1: oMRtMf47yIPyY9ZdrVPhNi3G3eo.roa (hash: 4EnKsD8A0kDOzresfp2Oy03JKmata0Bf/rsbX3H3xdM=)
2: pxJZNzLf_jheZ26QVodyMGza63I.crl (hash: 8JCBSAIcUjl2aYJVpqt9wtnSldM68j4xGShjIUqdpgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/2119ab-2f0a-451e-b3fa-98db4d5cdb33/1/pxJZNzLf_jheZ26QVodyMGza63I.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/2119ab-2f0a-451e-b3fa-98db4d5cdb33/1/pxJZNzLf_jheZ26QVodyMGza63I.mft
rsync://rpki.ripe.net/repository/DEFAULT/pxJZNzLf_jheZ26QVodyMGza63I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:8f:c9:04:d3:43:34:ec:b7:ad:1a:9a:5d:b8:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a712593732dffe385e676e90568772306cdaeb72
Validity
Not Before: Sep 7 05:01:01 2025 GMT
Not After : Sep 8 05:01:01 2025 GMT
Subject: CN=7161e2ef24f6e51d875c58662f27b6691fea386c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:09:89:25:0c:40:54:36:75:b2:75:e6:8e:a0:
f8:82:27:4a:dd:86:f2:89:1e:66:db:2e:37:eb:5b:
37:d3:55:1c:be:3a:e9:d7:e4:47:f2:94:65:1e:b2:
95:fb:a2:34:da:eb:8f:af:d4:d2:02:c1:ba:2f:fa:
9d:9a:89:8f:b3:1a:d6:c7:25:08:66:c9:0b:ee:0a:
ed:fb:3c:3f:33:cf:ea:96:7a:f9:b1:b6:7a:10:3a:
ec:cf:33:c9:95:63:6e:62:ae:2d:bf:b8:7c:12:02:
70:28:a3:f6:e2:71:3e:0d:6d:18:2e:ab:e0:32:92:
5a:10:87:0d:17:a3:b1:d6:d7:36:66:dd:e7:82:ff:
a7:94:29:dd:bd:32:1c:0d:a7:31:6b:c2:16:5d:67:
f2:09:00:9c:ea:a4:f8:cd:4f:e8:cd:46:78:c5:d5:
2b:87:a9:f3:06:42:6f:0b:6b:07:5b:98:d7:e5:e4:
7a:ee:c9:4e:37:87:f7:13:49:43:0b:c4:1b:3c:32:
aa:f2:52:0b:75:ff:44:e0:0c:f1:b8:7e:e4:55:3b:
82:5a:23:17:23:91:14:59:47:7c:01:a8:fa:ec:09:
c5:f9:83:a6:d0:7a:46:82:83:eb:0a:fe:87:4d:5f:
da:f2:0e:58:e2:f9:9e:d0:3b:83:b9:b1:0e:78:a1:
60:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:61:E2:EF:24:F6:E5:1D:87:5C:58:66:2F:27:B6:69:1F:EA:38:6C
X509v3 Authority Key Identifier:
keyid:A7:12:59:37:32:DF:FE:38:5E:67:6E:90:56:87:72:30:6C:DA:EB:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxJZNzLf_jheZ26QVodyMGza63I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/2119ab-2f0a-451e-b3fa-98db4d5cdb33/1/pxJZNzLf_jheZ26QVodyMGza63I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/2119ab-2f0a-451e-b3fa-98db4d5cdb33/1/pxJZNzLf_jheZ26QVodyMGza63I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:fe:9a:64:1a:fc:2a:2f:6a:2c:3a:69:5f:74:04:1b:1c:8e:
f0:eb:03:3f:ab:4f:d8:a6:0a:c9:f9:6f:83:60:b7:a5:92:36:
69:98:3c:e0:49:5e:26:84:e7:fb:27:15:01:3b:ca:3f:0e:78:
45:37:4a:e0:85:d8:58:34:2e:a9:6e:6f:43:9a:26:b9:a4:14:
23:bd:15:8e:f0:97:fa:6a:3f:98:e5:e3:9e:0a:20:8e:38:66:
51:f0:fe:2b:33:cd:d7:d0:dc:56:b3:be:dc:a2:f4:37:4d:6b:
83:8d:ad:71:99:ae:3f:a2:d4:2c:9b:28:66:28:e4:b7:a2:dd:
49:d5:7d:d8:15:88:64:ea:2a:b7:ce:4f:32:36:29:b3:13:bc:
dd:59:70:f3:8d:b8:21:8a:51:7c:c6:ee:f2:72:8b:c5:43:2b:
13:90:31:68:2c:24:3b:5e:c0:67:b0:de:06:b0:9d:0f:8b:c7:
0a:fb:40:bd:84:de:ae:59:f7:a0:d3:96:26:c9:f9:6b:e1:a3:
9a:f1:d4:cc:22:0f:1f:ed:ae:c4:02:58:dd:45:a7:6b:8d:a5:
43:c1:1c:df:f0:68:fb:b6:f7:a1:22:ee:a6:7c:c4:2d:4c:06:
b4:96:53:d4:32:4f:4e:98:ff:7c:a7:52:ae:e4:e1:19:59:e8:
09:00:5b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:18 2025 by rpki-client