Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/71cbe5-4a29-4567-a1fa-7888428225b4/1/pxErNcd6Sxb761YSHJdNWdVmeEs.mft
File: pxErNcd6Sxb761YSHJdNWdVmeEs.mft (raw, json)
Hash identifier: OgV8l9JEQySnrYHH/y5BNKRfLXcSuFqAUWuK7bNMvvM=
Subject key identifier: B1:5F:02:8E:F7:3C:D5:0D:57:C5:CF:40:A4:3E:61:8B:54:68:61:2F
Authority key identifier: A7:11:2B:35:C7:7A:4B:16:FB:EB:56:12:1C:97:4D:59:D5:66:78:4B
Certificate issuer: /CN=a7112b35c77a4b16fbeb56121c974d59d566784b
Certificate serial: 01989223C11200CF7949C0BC0203E9BB16C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxErNcd6Sxb761YSHJdNWdVmeEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/71cbe5-4a29-4567-a1fa-7888428225b4/1/pxErNcd6Sxb761YSHJdNWdVmeEs.mft
Manifest number: 1625
Signing time: Sun 10 Aug 2025 04:01:13 +0000
Manifest this update: Sun 10 Aug 2025 04:01:13 +0000
Manifest next update: Mon 11 Aug 2025 04:01:13 +0000
Files and hashes: 1: BwH9GKC4b7MR-_mPUkvo5kX6MbM.roa (hash: RyMXzPGYxLYPm9LtvHil8vaRU4zoAb2AHBWbWaC8/jg=)
2: pxErNcd6Sxb761YSHJdNWdVmeEs.crl (hash: 0k6K9HEXGlRsXfm/cOe/KpzYnfCbQ+I+kFMQyOBa3fE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/71cbe5-4a29-4567-a1fa-7888428225b4/1/pxErNcd6Sxb761YSHJdNWdVmeEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/71cbe5-4a29-4567-a1fa-7888428225b4/1/pxErNcd6Sxb761YSHJdNWdVmeEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pxErNcd6Sxb761YSHJdNWdVmeEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 04:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:23:c1:12:00:cf:79:49:c0:bc:02:03:e9:bb:16:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7112b35c77a4b16fbeb56121c974d59d566784b
Validity
Not Before: Aug 10 04:01:13 2025 GMT
Not After : Aug 11 04:01:13 2025 GMT
Subject: CN=b15f028ef73cd50d57c5cf40a43e618b5468612f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fc:43:77:92:d5:3a:f6:15:69:36:6b:19:29:
96:32:93:2f:09:4a:2d:2a:5b:c3:ff:e0:88:74:01:
17:b8:b6:32:e3:9f:98:0e:6c:86:b3:28:93:9a:a7:
9c:7c:60:a6:58:b4:9b:05:81:e2:5c:62:be:6c:58:
4f:59:91:23:cb:9b:d4:01:f8:84:13:bc:52:84:26:
91:b3:2d:48:fa:83:80:00:c7:47:ce:75:00:a7:56:
66:4d:b9:02:64:00:5b:51:32:8b:aa:65:2f:f4:e1:
9d:b6:21:88:ee:7c:bd:68:55:ad:7b:ce:b7:4e:ae:
60:35:1f:0b:fd:9b:c4:ed:df:c6:41:7e:8b:5c:3d:
77:db:e2:06:be:6c:f0:ed:7c:ac:8f:19:a2:28:05:
cc:5e:d8:2c:4d:91:8f:1c:94:80:2c:fe:bf:21:5b:
ae:5e:2a:b2:40:c9:e0:90:a0:32:d5:1b:9f:6f:c1:
bf:e4:c1:86:25:27:26:bf:a7:c6:57:c1:23:de:db:
1c:c9:4b:7b:3a:b6:8d:3d:b5:ae:ae:6f:1d:02:82:
f8:bb:78:f0:12:da:2a:61:0e:b3:a9:65:b3:99:62:
0a:b8:b2:b0:74:25:5c:31:77:8b:b7:d2:e3:58:ed:
9b:c6:7f:df:1d:23:1a:17:d3:38:f1:b8:8c:78:ad:
dd:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:5F:02:8E:F7:3C:D5:0D:57:C5:CF:40:A4:3E:61:8B:54:68:61:2F
X509v3 Authority Key Identifier:
keyid:A7:11:2B:35:C7:7A:4B:16:FB:EB:56:12:1C:97:4D:59:D5:66:78:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxErNcd6Sxb761YSHJdNWdVmeEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/71cbe5-4a29-4567-a1fa-7888428225b4/1/pxErNcd6Sxb761YSHJdNWdVmeEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/71cbe5-4a29-4567-a1fa-7888428225b4/1/pxErNcd6Sxb761YSHJdNWdVmeEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:99:c3:4d:93:c1:85:75:99:4f:9b:d4:33:34:c2:35:ed:f8:
7e:dc:40:64:20:74:8c:a3:75:ec:a0:6a:1e:f7:66:42:32:d8:
14:e2:3e:e9:8f:5e:65:d3:36:3e:96:ad:da:22:05:56:70:f6:
61:77:93:6e:ed:8a:1b:73:25:f7:3a:8f:79:30:51:82:7f:73:
a6:fe:e5:82:34:a8:8d:75:ff:fa:d0:75:7d:af:34:74:63:01:
b9:b3:8c:00:99:a1:82:35:c6:f9:e1:cc:72:f2:ac:97:3c:07:
86:03:20:c4:fb:3e:f3:25:56:ca:fb:a4:ca:12:1d:cc:df:c2:
ed:d2:67:b0:39:c5:16:3e:26:f2:4d:db:fa:47:47:db:38:47:
fc:f3:77:62:44:9d:85:b9:f7:1b:4a:61:ec:14:00:6c:ff:ce:
f8:c9:13:71:79:48:b9:63:ec:3f:81:6b:cf:c5:24:93:23:7d:
7e:15:98:e5:6d:13:fe:6e:0a:9c:fe:17:62:5c:c6:17:67:98:
6b:e6:28:73:e5:69:4c:fb:3c:23:8b:3d:2c:ff:e2:6a:94:fa:
33:62:8f:77:5e:dd:a6:a8:20:fe:e3:05:b2:3d:3f:f8:ef:47:
e7:57:50:8e:12:8a:f1:49:5d:0d:ea:d5:b4:4b:9a:5e:e7:c3:
32:f8:f2:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:43:30 2025 by rpki-client