
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/2119ab-2f0a-451e-b3fa-98db4d5cdb33/1/pxJZNzLf_jheZ26QVodyMGza63I.mft
File: pxJZNzLf_jheZ26QVodyMGza63I.mft (raw, json)
Hash identifier: knuEujP0L0OebOgJAM2ff/gCXYGm2dk97TUR5Sg5wN0=
Subject key identifier: F8:37:25:45:E8:F3:FB:28:DE:F9:E8:08:3A:FC:DD:04:BD:A1:D7:86
Authority key identifier: A7:12:59:37:32:DF:FE:38:5E:67:6E:90:56:87:72:30:6C:DA:EB:72
Certificate issuer: /CN=a712593732dffe385e676e90568772306cdaeb72
Certificate serial: 0199FEB47DE814448AE4B6C7306508677445
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxJZNzLf_jheZ26QVodyMGza63I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/2119ab-2f0a-451e-b3fa-98db4d5cdb33/1/pxJZNzLf_jheZ26QVodyMGza63I.mft
Manifest number: 1338
Signing time: Sun 19 Oct 2025 23:01:05 +0000
Manifest this update: Sun 19 Oct 2025 23:01:05 +0000
Manifest next update: Mon 20 Oct 2025 23:01:05 +0000
Files and hashes: 1: oMRtMf47yIPyY9ZdrVPhNi3G3eo.roa (hash: 4EnKsD8A0kDOzresfp2Oy03JKmata0Bf/rsbX3H3xdM=)
2: pxJZNzLf_jheZ26QVodyMGza63I.crl (hash: 3nHdK92wk1fYsFZvJdVmD7+9zvFPXDU7qK3FuF9p/SQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/2119ab-2f0a-451e-b3fa-98db4d5cdb33/1/pxJZNzLf_jheZ26QVodyMGza63I.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/2119ab-2f0a-451e-b3fa-98db4d5cdb33/1/pxJZNzLf_jheZ26QVodyMGza63I.mft
rsync://rpki.ripe.net/repository/DEFAULT/pxJZNzLf_jheZ26QVodyMGza63I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:7d:e8:14:44:8a:e4:b6:c7:30:65:08:67:74:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a712593732dffe385e676e90568772306cdaeb72
Validity
Not Before: Oct 19 23:01:05 2025 GMT
Not After : Oct 20 23:01:05 2025 GMT
Subject: CN=f8372545e8f3fb28def9e8083afcdd04bda1d786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4b:db:77:f9:e2:4d:0a:98:ec:1c:c5:e0:be:
f3:93:ca:c4:7e:bb:94:e3:fc:ea:a8:23:7f:0f:b4:
7d:d9:86:1c:6c:a9:ea:5f:43:dd:2d:49:63:d7:e5:
2b:8d:5f:32:cc:80:0d:75:e5:4b:8e:b1:f9:05:5d:
7a:60:e0:d2:32:1e:95:db:72:e6:3b:28:57:f8:f3:
00:f1:44:a5:7f:8e:3c:d8:11:f1:99:6d:86:51:8a:
27:1e:71:ef:99:23:15:2d:f5:e1:52:c5:2d:cb:ab:
58:2c:e6:91:61:aa:8a:2a:4f:e6:83:6e:63:b5:4f:
c5:1a:42:65:e8:aa:e6:2a:1b:79:4b:41:a1:6e:7f:
6e:c6:9a:d8:9a:8f:77:98:9e:e7:60:e1:3f:63:dc:
73:fc:57:49:97:92:99:a8:00:a6:53:10:9b:da:d1:
71:73:a9:9e:69:c5:05:5c:bd:83:4c:ca:4c:c3:d7:
ce:63:d4:5f:39:91:9a:e7:c5:d3:d0:00:b1:92:ad:
af:76:d6:9c:51:3e:1b:6e:8c:02:c4:73:ad:21:cd:
8a:3b:74:c7:3b:dd:af:98:e7:20:38:71:38:48:24:
66:95:c0:0b:da:4a:48:7d:3c:19:f4:f6:d7:3c:94:
4c:f4:50:3f:9a:64:43:05:3d:80:e7:41:0c:42:8f:
ee:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:37:25:45:E8:F3:FB:28:DE:F9:E8:08:3A:FC:DD:04:BD:A1:D7:86
X509v3 Authority Key Identifier:
keyid:A7:12:59:37:32:DF:FE:38:5E:67:6E:90:56:87:72:30:6C:DA:EB:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxJZNzLf_jheZ26QVodyMGza63I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/2119ab-2f0a-451e-b3fa-98db4d5cdb33/1/pxJZNzLf_jheZ26QVodyMGza63I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/2119ab-2f0a-451e-b3fa-98db4d5cdb33/1/pxJZNzLf_jheZ26QVodyMGza63I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:b0:8e:1f:ba:55:8b:81:39:77:e5:a6:8b:06:10:72:28:76:
58:ad:59:d6:42:ae:73:59:a0:24:64:b0:6e:1c:e7:17:e3:08:
ef:44:5b:13:8f:48:69:1c:ac:ee:68:98:d6:89:ea:b5:94:28:
e7:98:8d:68:c9:aa:76:9d:16:cd:2a:82:71:03:bf:e6:00:da:
17:92:45:3b:30:c0:07:ca:7f:ea:f0:70:88:6b:0c:a9:ff:dd:
60:59:11:71:83:2f:f5:1c:53:46:22:02:5b:b8:96:c2:89:db:
6a:79:05:45:ee:d4:cc:4f:4e:b1:06:b3:b2:6f:db:13:8e:99:
ab:6c:65:b8:26:af:49:9f:60:3b:d6:51:b9:94:64:2e:4b:c8:
20:9a:b8:8f:e4:4d:2f:75:2a:46:9a:50:30:24:3a:60:06:76:
00:bb:ed:fb:11:ca:ec:c6:12:51:88:8e:d4:ba:74:fe:3f:21:
5d:91:2d:cb:1f:d1:89:a4:ca:13:dc:4b:0c:02:a0:51:96:d1:
61:66:7d:f1:c0:5a:b4:2f:4f:2d:2f:e2:23:aa:78:4e:5d:2e:
c8:e1:c5:23:64:9b:39:23:ae:8b:18:4c:ab:98:a9:2c:98:4e:
c7:26:e0:a6:2f:65:5a:b0:46:22:b9:5c:50:62:dc:b8:65:60:
47:da:d5:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:15:39 2025 by rpki-client