Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/71cbe5-4a29-4567-a1fa-7888428225b4/1/pxErNcd6Sxb761YSHJdNWdVmeEs.mft
File: pxErNcd6Sxb761YSHJdNWdVmeEs.mft (raw, json)
Hash identifier: F8343eZ6RRiqEZbU1c8sLGm2ExFt8+/NLsrXfBx4TnE=
Subject key identifier: 0C:95:D3:86:8F:7E:9C:DA:EC:66:F0:6C:3F:BE:6B:4A:68:1A:CA:F6
Authority key identifier: A7:11:2B:35:C7:7A:4B:16:FB:EB:56:12:1C:97:4D:59:D5:66:78:4B
Certificate issuer: /CN=a7112b35c77a4b16fbeb56121c974d59d566784b
Certificate serial: 0199FD33ED6756C31D560971CCB8DAA0D00F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxErNcd6Sxb761YSHJdNWdVmeEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/71cbe5-4a29-4567-a1fa-7888428225b4/1/pxErNcd6Sxb761YSHJdNWdVmeEs.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 16:01:02 +0000
Manifest this update: Sun 19 Oct 2025 16:01:02 +0000
Manifest next update: Mon 20 Oct 2025 16:01:02 +0000
Files and hashes: 1: BwH9GKC4b7MR-_mPUkvo5kX6MbM.roa (hash: RyMXzPGYxLYPm9LtvHil8vaRU4zoAb2AHBWbWaC8/jg=)
2: pxErNcd6Sxb761YSHJdNWdVmeEs.crl (hash: FEF1Wuigu5re8Z6wk5eFl+XiTKraM1+wZNBeG2nkGqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/71cbe5-4a29-4567-a1fa-7888428225b4/1/pxErNcd6Sxb761YSHJdNWdVmeEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/71cbe5-4a29-4567-a1fa-7888428225b4/1/pxErNcd6Sxb761YSHJdNWdVmeEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pxErNcd6Sxb761YSHJdNWdVmeEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:33:ed:67:56:c3:1d:56:09:71:cc:b8:da:a0:d0:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7112b35c77a4b16fbeb56121c974d59d566784b
Validity
Not Before: Oct 19 16:01:02 2025 GMT
Not After : Oct 20 16:01:02 2025 GMT
Subject: CN=0c95d3868f7e9cdaec66f06c3fbe6b4a681acaf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:22:d9:5c:80:af:83:4e:18:4b:a0:99:f5:f8:
82:82:5a:a0:31:3b:22:b2:8a:c1:37:0e:5a:1a:96:
88:01:af:2a:d4:06:53:dc:5c:e7:1d:14:f1:78:f6:
86:fd:10:29:cc:7a:23:dd:ef:c4:81:85:32:cd:91:
35:24:f4:d6:1d:2f:46:95:62:ca:f3:84:03:83:8c:
fe:87:4b:cf:b6:a7:23:b3:b9:ed:7a:b8:d4:5a:46:
f7:b4:e6:3f:97:5d:da:4f:cc:7a:e8:f0:72:ba:c4:
10:bf:20:8c:d1:d6:31:84:da:8a:ff:a7:04:00:8f:
b7:cd:1c:32:2b:06:c5:61:24:34:fd:7a:ef:69:bd:
3b:99:cb:be:26:57:86:c0:41:bf:37:ba:76:8d:93:
31:f5:35:3c:8a:35:f3:92:be:43:45:7c:df:9c:2c:
ac:39:50:05:c7:cb:57:25:11:0a:01:39:55:ee:a9:
e7:37:27:04:57:11:6b:f0:49:8a:f5:8a:b3:aa:f7:
3d:e3:b6:b9:f2:7c:79:bc:84:bd:2c:df:d5:18:26:
f3:f4:53:de:33:bc:17:8b:be:98:2c:29:3f:71:79:
ae:d6:36:9a:40:8e:1b:1f:e6:cf:e0:f0:ea:83:85:
94:4a:c5:13:1d:c7:0b:48:d0:46:6f:22:2a:49:39:
2d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:95:D3:86:8F:7E:9C:DA:EC:66:F0:6C:3F:BE:6B:4A:68:1A:CA:F6
X509v3 Authority Key Identifier:
keyid:A7:11:2B:35:C7:7A:4B:16:FB:EB:56:12:1C:97:4D:59:D5:66:78:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxErNcd6Sxb761YSHJdNWdVmeEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/71cbe5-4a29-4567-a1fa-7888428225b4/1/pxErNcd6Sxb761YSHJdNWdVmeEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/71cbe5-4a29-4567-a1fa-7888428225b4/1/pxErNcd6Sxb761YSHJdNWdVmeEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:1c:13:d7:d2:b7:0a:20:2c:dd:23:7e:53:de:f4:6c:f1:3f:
79:3f:9c:74:c8:72:3c:00:92:fc:ee:9b:b5:99:40:57:9b:52:
a6:39:59:49:0a:de:26:f5:5a:ab:51:c0:95:9c:8a:87:f0:cd:
4f:a4:10:99:38:40:69:56:25:64:ce:3e:29:c7:cc:53:a3:c5:
ac:49:58:d5:da:3a:6a:be:b5:04:0b:27:e6:fb:d5:9c:dd:12:
92:c1:b0:32:27:9f:b1:d1:83:f0:9f:40:58:89:88:7d:ec:9c:
ee:3c:1e:16:36:0f:6f:f8:f0:46:40:25:a2:6e:42:91:de:62:
16:c9:c5:d8:84:c5:a6:04:9c:77:a9:49:2a:4b:cc:05:11:c7:
61:3f:77:07:91:38:95:a2:63:48:29:a9:55:e5:72:04:ff:82:
43:be:5c:92:0d:ac:6c:5d:14:d1:f4:14:bd:e2:61:fa:78:9a:
d7:cb:fa:c6:0a:5f:80:b2:86:4c:d9:64:79:cc:8e:d8:4a:fd:
b1:1a:d9:25:ec:5f:26:86:0b:b2:0a:3e:fd:9a:49:7d:4a:6e:
86:8a:33:9d:fe:7a:51:6e:4e:71:3e:3e:23:1c:fe:7b:1d:d4:
e4:1b:7c:74:5d:cb:61:57:f4:5c:4d:ac:33:fc:9b:0d:ea:0e:
5e:96:14:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:16:01 2025 by rpki-client