Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
File: axBPHkq67B7_gPJixi-WwlQ4yOE.mft (raw, json)
Hash identifier: 3SNRIDdYCOuY3+plyw6Hqyx1lrdCs9fBhR6RjUmwK08=
Subject key identifier: D4:DB:59:84:6A:13:DE:7E:A0:79:64:47:2B:B8:E8:74:D3:EA:39:ED
Authority key identifier: 6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
Certificate issuer: /CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Certificate serial: 0198D4DFE425CA9D285E05A140F8951CABE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
Manifest number: 0E43
Signing time: Sat 23 Aug 2025 03:01:39 +0000
Manifest this update: Sat 23 Aug 2025 03:01:39 +0000
Manifest next update: Sun 24 Aug 2025 03:01:39 +0000
Files and hashes: 1: RTtZB_vcGF989dORyH7nDjg3amU.roa (hash: b1jDzIoauefx4FgyRzqcDh5Ob3YxifiP6BI5Q41QUgA=)
2: axBPHkq67B7_gPJixi-WwlQ4yOE.crl (hash: E58Rb9TJXCMiaqpPtidfXMpwK/DX98zGuziPJiGbk8w=)
3: jmQbzN1n5vNJfqIg6TS1BfIphoY.roa (hash: y+FBfFHbRZXtqBw859tF/IM/aozMONRZt3b+w+wHC3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:e4:25:ca:9d:28:5e:05:a1:40:f8:95:1c:ab:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Validity
Not Before: Aug 23 03:01:39 2025 GMT
Not After : Aug 24 03:01:39 2025 GMT
Subject: CN=d4db59846a13de7ea07964472bb8e874d3ea39ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ff:e3:4c:00:e9:fb:34:23:44:45:3f:84:01:
47:cf:94:82:04:f2:1f:5d:8b:1e:47:42:2d:4f:4a:
78:19:f0:56:38:c6:f0:75:6e:4d:04:bd:32:d2:43:
7f:e1:45:16:68:ae:da:53:ef:21:a9:79:cb:d8:98:
af:5d:09:39:d4:66:b2:34:27:37:1c:63:85:e9:c9:
93:3a:f3:b8:2d:8a:e5:c9:39:02:8b:83:66:a2:5c:
8c:5a:26:5c:67:1b:ce:d1:0e:13:03:30:94:19:12:
62:25:41:63:b0:e3:67:c0:d3:45:22:1a:cc:24:a1:
b8:dd:47:39:77:0f:d5:e1:b6:f5:8a:d9:00:d2:64:
1a:23:14:30:6f:df:2c:48:47:b4:da:4c:db:15:d1:
45:da:99:a1:f0:bf:54:f8:2b:52:a0:ca:cc:70:94:
2e:ab:7b:8e:73:23:7d:e7:c1:55:b9:37:62:62:79:
ca:c6:e9:eb:2c:a5:46:37:e3:4e:3d:07:78:ac:97:
56:a4:8d:e2:c2:7d:5a:03:03:cf:5f:52:43:83:dc:
f8:a9:c2:47:ad:d6:6c:48:9c:c9:07:2c:6f:04:f7:
d0:5f:cc:9f:8b:98:33:70:d6:54:d5:0b:46:2a:3b:
e8:c9:96:5c:3a:b9:e0:7e:61:8e:16:ea:79:1f:a0:
90:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:DB:59:84:6A:13:DE:7E:A0:79:64:47:2B:B8:E8:74:D3:EA:39:ED
X509v3 Authority Key Identifier:
keyid:6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:b7:22:c8:48:94:c6:aa:19:4e:f9:c3:47:4c:93:29:e5:1e:
24:da:5d:6f:48:80:03:1b:98:bd:22:9e:ed:1a:7a:91:e3:e8:
83:44:25:4d:d5:14:4a:ad:f4:99:05:8d:50:db:43:0c:f5:f5:
77:26:6f:93:fe:15:bd:9b:d1:e8:e5:14:e9:c8:b1:d9:fc:76:
b3:12:90:5c:24:97:24:3e:70:7f:2b:f8:b4:16:8e:a1:d9:cb:
34:a4:c5:49:d8:3f:7d:12:b4:c7:59:74:58:6d:95:00:28:17:
9a:22:62:e2:de:4f:d3:43:c9:07:19:7e:84:17:12:b2:fe:48:
d5:18:6e:57:32:cc:ed:af:0d:d3:42:a1:68:29:97:77:15:b9:
dc:f2:3a:02:f1:18:68:d5:87:76:b1:69:82:99:87:46:ca:06:
b5:81:3a:dd:d1:00:a5:d0:5d:02:10:70:73:5b:ab:81:93:6b:
0b:e2:24:20:b1:59:86:44:c3:96:2a:0a:ca:b5:4d:fe:9a:96:
c0:fc:f0:16:cd:b8:0a:c0:ed:e2:48:e9:2d:50:9a:54:c4:6c:
98:6e:af:ea:94:47:16:c7:7b:9f:35:48:ba:4d:e0:3f:78:06:
b9:98:25:ec:da:bc:b6:3b:13:3b:99:7c:39:bd:13:24:74:fe:
24:fb:a1:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU3+Qlyp0oXgWhQPiVHKvlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiMTA0ZjFlNGFiYWVjMWVmZjgwZjI2MmM2MmY5NmMyNTQz
OGM4ZTEwHhcNMjUwODIzMDMwMTM5WhcNMjUwODI0MDMwMTM5WjAzMTEwLwYDVQQD
EyhkNGRiNTk4NDZhMTNkZTdlYTA3OTY0NDcyYmI4ZTg3NGQzZWEzOWVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1//jTADp+zQjREU/hAFHz5SCBPIf
XYseR0ItT0p4GfBWOMbwdW5NBL0y0kN/4UUWaK7aU+8hqXnL2JivXQk51GayNCc3
HGOF6cmTOvO4LYrlyTkCi4NmolyMWiZcZxvO0Q4TAzCUGRJiJUFjsONnwNNFIhrM
JKG43Uc5dw/V4bb1itkA0mQaIxQwb98sSEe02kzbFdFF2pmh8L9U+CtSoMrMcJQu
q3uOcyN958FVuTdiYnnKxunrLKVGN+NOPQd4rJdWpI3iwn1aAwPPX1JDg9z4qcJH
rdZsSJzJByxvBPfQX8yfi5gzcNZU1QtGKjvoyZZcOrngfmGOFup5H6CQDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNTbWYRqE95+oHlkRyu46HTT6jntMB8GA1UdIwQY
MBaAFGsQTx5Kuuwe/4DyYsYvlsJUOMjhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXhCUEhrcTY3QjdfZ1BKaXhpLVd3bFE0eU9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS82NTNjMjQtNjhlNS00YWQ4LWI3NjMt
MzBjOWRlMjA1YWZjLzEvYXhCUEhrcTY3QjdfZ1BKaXhpLVd3bFE0eU9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS82NTNjMjQtNjhlNS00YWQ4LWI3NjMtMzBjOWRlMjA1YWZj
LzEvYXhCUEhrcTY3QjdfZ1BKaXhpLVd3bFE0eU9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMrciyEiU
xqoZTvnDR0yTKeUeJNpdb0iAAxuYvSKe7Rp6kePog0QlTdUUSq30mQWNUNtDDPX1
dyZvk/4VvZvR6OUU6cix2fx2sxKQXCSXJD5wfyv4tBaOodnLNKTFSdg/fRK0x1l0
WG2VACgXmiJi4t5P00PJBxl+hBcSsv5I1RhuVzLM7a8N00KhaCmXdxW53PI6AvEY
aNWHdrFpgpmHRsoGtYE63dEApdBdAhBwc1urgZNrC+IkILFZhkTDlioKyrVN/pqW
wPzwFs24CsDt4kjpLVCaVMRsmG6v6pRHFsd7nzVIuk3gP3gGuZgl7Nq8tjsTO5l8
Ob0TJHT+JPuhBw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:38:09 2025 by rpki-client