Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/2119ab-2f0a-451e-b3fa-98db4d5cdb33/1/pxJZNzLf_jheZ26QVodyMGza63I.mft
File: pxJZNzLf_jheZ26QVodyMGza63I.mft (raw, json)
Hash identifier: PADpwy4de8l00si3qzHR5xyfUR7BMGU3NMglh/CQ/XI=
Subject key identifier: 05:B1:B8:1E:4F:3C:A1:6A:DA:E7:FE:87:35:12:9C:9B:A9:3A:D1:0C
Authority key identifier: A7:12:59:37:32:DF:FE:38:5E:67:6E:90:56:87:72:30:6C:DA:EB:72
Certificate issuer: /CN=a712593732dffe385e676e90568772306cdaeb72
Certificate serial: 0198D54E4674BCE144C3B158335ED0CA3218
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxJZNzLf_jheZ26QVodyMGza63I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/2119ab-2f0a-451e-b3fa-98db4d5cdb33/1/pxJZNzLf_jheZ26QVodyMGza63I.mft
Manifest number: 129E
Signing time: Sat 23 Aug 2025 05:02:13 +0000
Manifest this update: Sat 23 Aug 2025 05:02:13 +0000
Manifest next update: Sun 24 Aug 2025 05:02:13 +0000
Files and hashes: 1: oMRtMf47yIPyY9ZdrVPhNi3G3eo.roa (hash: 4EnKsD8A0kDOzresfp2Oy03JKmata0Bf/rsbX3H3xdM=)
2: pxJZNzLf_jheZ26QVodyMGza63I.crl (hash: n1MH1bPT82o5smhTr6ARt1+xbutEWKMyqMOUEPVn0Do=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/2119ab-2f0a-451e-b3fa-98db4d5cdb33/1/pxJZNzLf_jheZ26QVodyMGza63I.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/2119ab-2f0a-451e-b3fa-98db4d5cdb33/1/pxJZNzLf_jheZ26QVodyMGza63I.mft
rsync://rpki.ripe.net/repository/DEFAULT/pxJZNzLf_jheZ26QVodyMGza63I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:46:74:bc:e1:44:c3:b1:58:33:5e:d0:ca:32:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a712593732dffe385e676e90568772306cdaeb72
Validity
Not Before: Aug 23 05:02:13 2025 GMT
Not After : Aug 24 05:02:13 2025 GMT
Subject: CN=05b1b81e4f3ca16adae7fe8735129c9ba93ad10c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5c:c0:e8:74:79:f3:ff:cb:f5:64:87:82:a8:
61:41:69:35:35:dd:26:39:82:06:34:9a:16:75:60:
38:45:2d:95:84:b2:09:85:8c:1f:a1:d3:a7:06:17:
a0:fc:a9:ca:9a:2a:2b:66:ea:bd:01:00:3a:a3:b3:
59:b4:41:49:12:67:08:3d:0e:b8:69:80:f1:a3:d1:
57:17:17:14:a1:28:e0:d6:ef:dd:8d:b0:04:4c:17:
91:f4:8e:0a:4c:1e:6d:5b:e5:8a:e6:53:8a:84:d3:
77:f1:5a:9e:9c:59:7b:75:c2:3b:54:87:0d:c0:6b:
40:e9:4d:06:b5:6e:9f:5e:e8:6f:18:ac:6e:56:01:
bf:8d:6a:59:30:d6:80:24:6c:16:46:09:a7:2b:89:
5a:8e:13:e3:e7:f9:c0:ef:3e:8e:00:a7:ce:0a:81:
20:a4:68:4b:e5:6f:61:f7:62:d2:e0:77:1d:97:af:
cc:65:f2:40:5f:71:c5:2f:8c:58:03:59:e2:17:a5:
97:c8:14:78:97:1a:b4:96:2c:81:13:5c:80:32:0c:
28:58:82:79:93:26:77:78:80:78:f3:08:84:c6:28:
e9:79:70:97:d1:ba:a5:41:d1:36:d4:71:2d:52:14:
41:fb:e5:38:7c:01:8b:0a:90:05:99:02:f9:6e:c9:
c2:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:B1:B8:1E:4F:3C:A1:6A:DA:E7:FE:87:35:12:9C:9B:A9:3A:D1:0C
X509v3 Authority Key Identifier:
keyid:A7:12:59:37:32:DF:FE:38:5E:67:6E:90:56:87:72:30:6C:DA:EB:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxJZNzLf_jheZ26QVodyMGza63I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/2119ab-2f0a-451e-b3fa-98db4d5cdb33/1/pxJZNzLf_jheZ26QVodyMGza63I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/2119ab-2f0a-451e-b3fa-98db4d5cdb33/1/pxJZNzLf_jheZ26QVodyMGza63I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:d0:e0:4e:a8:65:c6:c8:c5:73:0d:c4:9f:59:3a:ad:02:53:
5e:bb:10:0f:58:2f:89:47:5e:65:30:dd:56:04:2d:40:da:a7:
b5:ce:d7:4b:96:83:2a:da:c5:cc:1a:bb:38:c5:a0:19:0f:be:
c1:5b:13:42:5e:43:01:3c:a1:46:76:b2:0e:79:1c:2d:9c:5f:
b0:40:87:5a:fa:0c:15:25:e1:ca:73:8a:90:ca:a4:8e:09:10:
cf:a8:62:ba:16:9d:79:ad:10:45:d1:f1:b0:e6:68:e8:5f:40:
67:a2:31:e9:a3:eb:10:0d:e7:b0:7d:00:d5:b3:7f:59:ed:07:
ba:1c:72:d7:5a:28:17:d6:a5:94:3b:2a:7e:99:3a:ca:1d:27:
d4:de:f7:7e:a9:87:f4:e8:02:5a:e8:12:89:6f:18:88:d6:45:
5e:dd:b2:5c:d8:08:ae:48:70:07:10:36:84:99:f7:cf:04:e5:
1d:f9:7c:f7:14:a2:9b:30:b1:e8:80:66:dc:d4:0c:38:a3:95:
04:e6:fe:08:cb:6a:29:2e:07:7c:e7:0c:df:ad:55:58:77:1e:
d8:eb:ce:62:08:2d:2f:9d:03:a2:3e:2a:da:fd:aa:37:94:9b:
21:72:d7:dc:ee:f3:97:2a:c4:28:2f:a0:c0:83:fb:0c:bb:b4:
6c:b2:c3:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:36:59 2025 by rpki-client