Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.mft
File: r-Px7RtJxbp8wfGSpAJHZaJTZk4.mft (raw, json)
Hash identifier: 7KQN1RHFJF+7UHDLFO1xqRKF416gi/R3foFR67MplNM=
Subject key identifier: FA:85:98:62:D9:19:59:42:C5:39:AC:A2:94:70:5E:84:AC:96:61:8B
Authority key identifier: AF:E3:F1:ED:1B:49:C5:BA:7C:C1:F1:92:A4:02:47:65:A2:53:66:4E
Certificate issuer: /CN=afe3f1ed1b49c5ba7cc1f192a4024765a253664e
Certificate serial: 01992330CBC855FC2C57EA445746C07371E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-Px7RtJxbp8wfGSpAJHZaJTZk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.mft
Manifest number: 135F
Signing time: Sun 07 Sep 2025 08:00:24 +0000
Manifest this update: Sun 07 Sep 2025 08:00:24 +0000
Manifest next update: Mon 08 Sep 2025 08:00:24 +0000
Files and hashes: 1: BMtrajiT8kc1Pg7kzTaWX9dZggk.roa (hash: OKRwb7gvAgyjstxUa1W7+46wLP3OqM3yM6o0/CqxEn0=)
2: r-Px7RtJxbp8wfGSpAJHZaJTZk4.crl (hash: ME0ebfmygDbtKbYXZB5jlLyaA39WE+vd2LWR0l0D8VM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-Px7RtJxbp8wfGSpAJHZaJTZk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:30:cb:c8:55:fc:2c:57:ea:44:57:46:c0:73:71:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afe3f1ed1b49c5ba7cc1f192a4024765a253664e
Validity
Not Before: Sep 7 08:00:24 2025 GMT
Not After : Sep 8 08:00:24 2025 GMT
Subject: CN=fa859862d9195942c539aca294705e84ac96618b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:3e:2d:b3:82:be:d7:68:de:52:6e:94:12:9b:
4c:f0:b9:09:23:71:cf:4e:2c:70:98:bd:55:6e:8c:
07:68:61:4e:25:fd:7e:f3:33:9f:40:f2:7f:b8:1a:
82:fe:9a:51:8d:b8:56:27:f2:00:4e:df:23:f1:99:
dc:2a:75:8a:74:cf:05:e9:79:71:b8:bf:7f:b7:c2:
df:96:30:6f:53:32:11:80:28:35:9a:23:b5:74:ec:
3c:bb:70:e3:09:63:9d:6a:53:8f:6e:fd:6e:0e:52:
67:49:81:47:61:c3:b6:ea:24:85:6d:fa:ec:03:17:
e2:cb:d6:01:9a:ad:10:e1:47:41:ab:06:45:da:38:
6d:a8:bd:14:28:0b:de:e4:27:c0:e9:aa:26:4e:c9:
86:1c:5d:69:af:ad:47:cb:dc:28:11:71:fd:37:ec:
63:d2:52:2d:2e:d9:62:84:94:1c:b7:1e:c0:75:72:
85:25:10:3c:ce:cb:ea:83:82:d5:0e:44:c2:55:cb:
de:d1:e1:d7:be:f9:9b:11:b9:0f:59:f3:fb:0b:15:
3f:a2:1d:5f:01:76:7b:be:e6:8b:50:7e:ac:0b:26:
40:c7:b0:e3:d7:0c:6e:75:52:ef:0a:00:85:11:af:
b7:2c:ac:72:97:8b:e0:79:dd:63:7c:ab:ff:26:6f:
f1:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:85:98:62:D9:19:59:42:C5:39:AC:A2:94:70:5E:84:AC:96:61:8B
X509v3 Authority Key Identifier:
keyid:AF:E3:F1:ED:1B:49:C5:BA:7C:C1:F1:92:A4:02:47:65:A2:53:66:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-Px7RtJxbp8wfGSpAJHZaJTZk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:bf:c9:a3:0a:37:85:19:0e:91:9e:46:18:aa:15:11:60:f1:
bd:7a:ba:60:22:02:70:81:26:ab:e6:2b:51:56:88:fc:d1:bf:
ce:1d:26:8a:15:b3:82:c5:2e:91:f9:6a:38:77:ad:8b:8f:f8:
13:17:61:65:c4:48:ae:fe:6d:0b:f4:8d:c0:04:5e:40:6d:ae:
1c:ba:9b:d3:a9:a3:23:9d:b9:32:b2:08:2e:14:88:c9:f1:a7:
90:a4:cf:48:54:c9:3b:51:f6:c5:cc:e3:42:87:0f:16:09:89:
15:10:84:dd:af:67:d7:ff:cd:c0:40:6c:68:ba:5a:5d:28:7b:
58:88:db:33:60:0e:de:67:cf:f9:79:59:8a:df:c4:43:2e:14:
49:c7:c3:2f:b1:9a:90:2b:1f:6b:19:73:ed:94:f1:74:6f:69:
d8:70:ca:46:e5:b3:b2:58:d9:19:94:77:f8:3b:4e:a2:5f:9d:
05:69:9b:ea:a1:a7:50:cf:98:79:6b:54:57:d8:44:24:50:42:
eb:95:d6:a3:70:87:e3:f9:dc:2d:0a:bc:29:f7:e2:ee:13:25:
79:73:7b:aa:f9:64:c7:01:54:d2:cb:61:f4:36:6e:56:d6:fa:
22:93:75:00:f1:6f:c0:bb:4d:ec:53:ce:93:2c:7f:4a:c9:28:
20:d3:fc:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:41:37 2025 by rpki-client