Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/c51fd6-3d08-4205-b747-b80530a5e042/1/px4O7lkN4v2N7Epn6HvIlv_IsrU.mft
File: px4O7lkN4v2N7Epn6HvIlv_IsrU.mft (raw, json)
Hash identifier: juGI8wAK4jYmmcLx+AfNDjZMZPYpALZR3YGMDkSLUyE=
Subject key identifier: 00:93:BF:EF:44:02:9C:B9:48:2D:45:F6:F2:A9:59:6A:AE:8F:4A:90
Authority key identifier: A7:1E:0E:EE:59:0D:E2:FD:8D:EC:4A:67:E8:7B:C8:96:FF:C8:B2:B5
Certificate issuer: /CN=a71e0eee590de2fd8dec4a67e87bc896ffc8b2b5
Certificate serial: 019A4DE1CEAFB0C17477A81186FB29879294
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/px4O7lkN4v2N7Epn6HvIlv_IsrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/c51fd6-3d08-4205-b747-b80530a5e042/1/px4O7lkN4v2N7Epn6HvIlv_IsrU.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 08:00:35 +0000
Manifest this update: Tue 04 Nov 2025 08:00:35 +0000
Manifest next update: Wed 05 Nov 2025 08:00:35 +0000
Files and hashes: 1: gACG_CZ-Iug99I2lwvBj2F9-h5o.roa (hash: nmlBka4iP6DO0ZjdL5pCRw7PZdQRFau0PkO/pT9dD0g=)
2: px4O7lkN4v2N7Epn6HvIlv_IsrU.crl (hash: 39w40+EFur+AI5EgigOhZ3MceR8g43lODHo76fh4eEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/c51fd6-3d08-4205-b747-b80530a5e042/1/px4O7lkN4v2N7Epn6HvIlv_IsrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/c51fd6-3d08-4205-b747-b80530a5e042/1/px4O7lkN4v2N7Epn6HvIlv_IsrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/px4O7lkN4v2N7Epn6HvIlv_IsrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:ce:af:b0:c1:74:77:a8:11:86:fb:29:87:92:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a71e0eee590de2fd8dec4a67e87bc896ffc8b2b5
Validity
Not Before: Nov 4 08:00:35 2025 GMT
Not After : Nov 5 08:00:35 2025 GMT
Subject: CN=0093bfef44029cb9482d45f6f2a9596aae8f4a90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:41:b5:7a:3c:2d:38:b3:88:96:ac:e7:23:2c:
e6:71:6b:73:db:19:93:d1:66:e0:a6:8d:d1:71:7d:
ae:eb:39:03:87:df:4f:5e:b5:d3:0b:53:d3:7a:51:
26:f6:f2:c1:2b:13:4f:7b:41:ec:03:f4:0b:14:90:
8d:eb:69:48:ae:11:49:3b:92:11:08:32:1e:cd:33:
57:72:9e:64:69:82:85:68:7f:7b:bf:80:1b:19:75:
94:14:36:d3:c0:91:ee:14:e3:7c:37:f0:e7:e5:74:
38:be:ae:ed:0a:40:dd:a0:0b:5b:89:30:c5:4b:a6:
c5:96:e3:09:e0:fd:f5:57:b5:b2:fd:19:98:9e:ed:
9a:13:57:13:9a:33:25:cb:c7:c2:ce:87:6d:1a:93:
06:80:ab:b4:48:a8:70:91:8e:08:89:8e:0b:ee:36:
c3:4a:2f:71:9b:d1:47:a0:73:f0:48:c8:4a:d5:29:
3f:f7:99:e4:c1:42:58:3d:63:6f:86:47:be:55:f0:
07:9e:f9:c3:56:32:7a:a2:0e:53:93:3a:14:6a:ec:
89:f1:c3:1c:c6:2b:31:43:79:34:45:1d:b0:cd:63:
07:e6:32:62:8d:40:10:95:cf:94:f3:7c:49:cb:d0:
32:d8:46:dc:c1:0f:6f:86:0f:20:9e:11:5c:c5:90:
da:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:93:BF:EF:44:02:9C:B9:48:2D:45:F6:F2:A9:59:6A:AE:8F:4A:90
X509v3 Authority Key Identifier:
keyid:A7:1E:0E:EE:59:0D:E2:FD:8D:EC:4A:67:E8:7B:C8:96:FF:C8:B2:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/px4O7lkN4v2N7Epn6HvIlv_IsrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/c51fd6-3d08-4205-b747-b80530a5e042/1/px4O7lkN4v2N7Epn6HvIlv_IsrU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/c51fd6-3d08-4205-b747-b80530a5e042/1/px4O7lkN4v2N7Epn6HvIlv_IsrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:1f:7e:05:68:ae:b8:3d:df:6c:7a:a2:3b:40:49:c7:75:9b:
47:39:a2:f9:13:a8:b7:0a:07:84:a8:bc:42:5c:99:04:02:ac:
78:4f:2f:87:16:ae:94:88:db:9e:69:dc:d8:1d:37:43:a4:e8:
b8:1a:fb:2f:b5:d7:8d:be:d9:98:56:0e:1c:45:53:ad:26:e1:
14:e5:73:21:84:84:ad:c7:af:fc:66:91:30:58:81:33:92:ab:
bd:9d:59:c3:ff:e4:30:9d:6a:9c:d1:98:54:83:c0:30:69:f7:
2a:f7:33:ce:30:ab:87:27:07:98:74:38:d2:76:75:a3:cf:1f:
43:4d:1c:ab:8b:ba:cc:a9:2c:56:bf:51:64:b9:81:64:6c:89:
79:3c:c4:b0:b9:6e:1d:5f:6e:64:7f:28:28:cd:d5:46:22:8f:
b8:59:04:8e:3d:fe:66:c0:1c:07:33:2c:df:cc:00:c0:d2:ea:
4e:56:65:7d:a2:c3:7c:80:44:25:e4:f2:6b:99:e8:d9:99:39:
f6:e8:ca:7e:e0:7b:3e:30:bc:f9:ec:82:34:3b:1c:d6:9f:5d:
c4:3d:b0:9c:6f:c3:bc:aa:9b:be:64:c8:6b:67:1c:bd:3b:9f:
fd:1d:5d:c6:ab:66:82:1e:da:0b:04:b6:c8:a6:b8:62:3b:39:
dc:33:2b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:05 2025 by rpki-client