
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/2119ab-2f0a-451e-b3fa-98db4d5cdb33/1/pxJZNzLf_jheZ26QVodyMGza63I.mft
File: pxJZNzLf_jheZ26QVodyMGza63I.mft (raw, json)
Hash identifier: B6zZYEhWX8jY5NipzFX8WfcQwGoeNes2HiJLWv7wJDg=
Subject key identifier: B8:39:62:26:7B:5D:1D:45:04:54:5B:92:8F:4E:43:57:73:89:DC:DF
Authority key identifier: A7:12:59:37:32:DF:FE:38:5E:67:6E:90:56:87:72:30:6C:DA:EB:72
Certificate issuer: /CN=a712593732dffe385e676e90568772306cdaeb72
Certificate serial: 0197684DDDDCC300D274CEE4E976278CA3C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxJZNzLf_jheZ26QVodyMGza63I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/2119ab-2f0a-451e-b3fa-98db4d5cdb33/1/pxJZNzLf_jheZ26QVodyMGza63I.mft
Manifest number: 11E1
Signing time: Fri 13 Jun 2025 08:00:22 +0000
Manifest this update: Fri 13 Jun 2025 08:00:22 +0000
Manifest next update: Sat 14 Jun 2025 08:00:22 +0000
Files and hashes: 1: oMRtMf47yIPyY9ZdrVPhNi3G3eo.roa (hash: 4EnKsD8A0kDOzresfp2Oy03JKmata0Bf/rsbX3H3xdM=)
2: pxJZNzLf_jheZ26QVodyMGza63I.crl (hash: F+xmC8Zd7DoGtrZUfLvgOCPLvhnUEGlQuccFWqq7Wu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/2119ab-2f0a-451e-b3fa-98db4d5cdb33/1/pxJZNzLf_jheZ26QVodyMGza63I.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/2119ab-2f0a-451e-b3fa-98db4d5cdb33/1/pxJZNzLf_jheZ26QVodyMGza63I.mft
rsync://rpki.ripe.net/repository/DEFAULT/pxJZNzLf_jheZ26QVodyMGza63I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 08:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4d:dd:dc:c3:00:d2:74:ce:e4:e9:76:27:8c:a3:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a712593732dffe385e676e90568772306cdaeb72
Validity
Not Before: Jun 13 08:00:22 2025 GMT
Not After : Jun 14 08:00:22 2025 GMT
Subject: CN=b83962267b5d1d4504545b928f4e43577389dcdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:20:a0:d8:7c:66:63:31:a7:8a:27:f0:1c:3d:
a8:fe:e5:25:62:0d:3f:a7:aa:fa:8f:da:a5:7c:72:
d6:05:17:9b:41:51:d3:84:bb:37:f1:aa:39:50:47:
00:de:1d:8c:a7:4e:0c:cd:cf:97:28:29:37:9c:b0:
62:cd:55:53:da:b6:07:6c:1c:9b:99:e0:78:9d:3d:
ef:4d:e8:3c:7e:b5:6d:aa:c6:a9:01:69:8e:b1:37:
64:88:44:0c:06:5f:74:2a:d3:d8:e0:a7:eb:a1:51:
29:8c:b7:9e:e6:78:76:e1:0a:59:e3:72:96:dd:a8:
81:40:6b:dc:e8:bd:ab:0c:87:32:22:b4:23:1a:d0:
d8:12:52:da:e1:8e:15:b7:d0:05:c1:9b:27:84:1f:
ba:99:c3:c4:7e:a3:64:e2:f0:37:35:f2:e5:4c:c1:
9c:96:5f:fa:bf:02:4d:f9:93:8c:37:92:ad:e9:e7:
c7:d7:ed:a6:f0:9d:f2:86:ec:2a:73:19:ff:c7:bf:
ab:95:3f:98:27:81:98:c7:06:ac:8c:7f:5b:0a:c1:
f0:be:8d:72:c5:68:eb:40:c8:64:01:82:50:16:84:
7e:9c:c8:0b:99:9d:e2:dd:53:5a:07:f9:c2:a7:5a:
ba:3f:fc:07:6a:50:ae:01:d3:d4:04:84:69:36:91:
51:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:39:62:26:7B:5D:1D:45:04:54:5B:92:8F:4E:43:57:73:89:DC:DF
X509v3 Authority Key Identifier:
keyid:A7:12:59:37:32:DF:FE:38:5E:67:6E:90:56:87:72:30:6C:DA:EB:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxJZNzLf_jheZ26QVodyMGza63I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/2119ab-2f0a-451e-b3fa-98db4d5cdb33/1/pxJZNzLf_jheZ26QVodyMGza63I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/2119ab-2f0a-451e-b3fa-98db4d5cdb33/1/pxJZNzLf_jheZ26QVodyMGza63I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:cc:f6:d9:3b:a1:33:b6:d8:b9:7a:98:ae:7c:2f:09:76:9e:
1b:66:08:02:49:15:28:39:f2:d8:eb:45:c1:2a:d6:e6:fe:3e:
ca:82:07:ae:97:2b:9d:90:04:e2:06:d8:ad:18:d4:d2:fe:2c:
f1:fc:ef:be:ce:62:86:c0:1e:8b:df:56:ce:86:82:18:9a:50:
dd:b4:d4:ed:a8:26:25:18:52:c3:c6:af:1a:7b:25:cc:bd:f3:
9b:61:b5:e0:c1:72:e2:43:5b:e3:a0:2f:fc:85:bf:44:d5:21:
ca:4e:7f:5a:f7:41:75:b0:a3:6d:c0:b1:f0:5a:39:f3:ed:43:
d4:2f:35:9a:b6:a0:39:b1:b1:dd:3b:28:b4:3b:4a:60:f0:07:
2e:22:35:3f:4f:db:f4:8c:84:da:f0:7c:28:9e:50:2c:70:52:
14:98:20:5a:72:b1:c8:02:8e:ec:6c:7d:02:73:01:4d:5e:32:
26:55:c2:a2:be:c1:ff:68:05:c9:5b:4f:de:56:05:3e:ef:0f:
e8:0e:aa:8b:d7:4b:f9:fd:d0:5a:fb:8a:be:05:3e:3d:d7:8a:
0f:f3:bf:e1:f2:58:34:8f:29:5e:92:0e:64:e7:c4:2a:9b:88:
ca:f6:89:e4:f9:7e:2b:32:0f:01:4d:ae:24:1d:39:a3:89:f0:
15:60:28:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdoTd3cwwDSdM7k6XYnjKPIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3MTI1OTM3MzJkZmZlMzg1ZTY3NmU5MDU2ODc3MjMwNmNk
YWViNzIwHhcNMjUwNjEzMDgwMDIyWhcNMjUwNjE0MDgwMDIyWjAzMTEwLwYDVQQD
EyhiODM5NjIyNjdiNWQxZDQ1MDQ1NDViOTI4ZjRlNDM1NzczODlkY2RmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiCg2HxmYzGniifwHD2o/uUlYg0/
p6r6j9qlfHLWBRebQVHThLs38ao5UEcA3h2Mp04Mzc+XKCk3nLBizVVT2rYHbByb
meB4nT3vTeg8frVtqsapAWmOsTdkiEQMBl90KtPY4KfroVEpjLee5nh24QpZ43KW
3aiBQGvc6L2rDIcyIrQjGtDYElLa4Y4Vt9AFwZsnhB+6mcPEfqNk4vA3NfLlTMGc
ll/6vwJN+ZOMN5Kt6efH1+2m8J3yhuwqcxn/x7+rlT+YJ4GYxwasjH9bCsHwvo1y
xWjrQMhkAYJQFoR+nMgLmZ3i3VNaB/nCp1q6P/wHalCuAdPUBIRpNpFR+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLg5YiZ7XR1FBFRbko9OQ1dzidzfMB8GA1UdIwQY
MBaAFKcSWTcy3/44XmdukFaHcjBs2utyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHhKWk56TGZfamhlWjI2UVZvZHlNR3phNjNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8yMTE5YWItMmYwYS00NTFlLWIzZmEt
OThkYjRkNWNkYjMzLzEvcHhKWk56TGZfamhlWjI2UVZvZHlNR3phNjNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS8yMTE5YWItMmYwYS00NTFlLWIzZmEtOThkYjRkNWNkYjMz
LzEvcHhKWk56TGZfamhlWjI2UVZvZHlNR3phNjNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALMz22Tuh
M7bYuXqYrnwvCXaeG2YIAkkVKDny2OtFwSrW5v4+yoIHrpcrnZAE4gbYrRjU0v4s
8fzvvs5ihsAei99WzoaCGJpQ3bTU7agmJRhSw8avGnslzL3zm2G14MFy4kNb46Av
/IW/RNUhyk5/WvdBdbCjbcCx8Fo58+1D1C81mragObGx3TsotDtKYPAHLiI1P0/b
9IyE2vB8KJ5QLHBSFJggWnKxyAKO7Gx9AnMBTV4yJlXCor7B/2gFyVtP3lYFPu8P
6A6qi9dL+f3QWvuKvgU+PdeKD/O/4fJYNI8pXpIOZOfEKpuIyvaJ5Pl+KzIPAU2u
JB05o4nwFWAoOQ==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:23:18 2025 by rpki-client