Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
File: axBPHkq67B7_gPJixi-WwlQ4yOE.mft (raw, json)
Hash identifier: FwthLhg8bCXDmEOnLuchbktZJHJ2iC1jaDD0NS5BX7k=
Subject key identifier: 4F:6B:2B:6E:59:5E:56:A6:3D:B3:C0:9E:06:B5:68:89:00:53:C4:02
Authority key identifier: 6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
Certificate issuer: /CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Certificate serial: 019A017E8FBD7F741161D8AD3C33B5557DA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
Manifest number: 0EE0
Signing time: Mon 20 Oct 2025 12:01:02 +0000
Manifest this update: Mon 20 Oct 2025 12:01:02 +0000
Manifest next update: Tue 21 Oct 2025 12:01:02 +0000
Files and hashes: 1: FqQkTFQWdBdjU6UXWoqexyJXArk.roa (hash: dqroengNWVJpTvi6imMlKuB2r0Lvi7vllPawj21jEC4=)
2: RTtZB_vcGF989dORyH7nDjg3amU.roa (hash: b1jDzIoauefx4FgyRzqcDh5Ob3YxifiP6BI5Q41QUgA=)
3: axBPHkq67B7_gPJixi-WwlQ4yOE.crl (hash: ig+zgN4UC5oHA7Xv+kvC1kAs3swfHcx3gTgKrplSB94=)
4: jmQbzN1n5vNJfqIg6TS1BfIphoY.roa (hash: y+FBfFHbRZXtqBw859tF/IM/aozMONRZt3b+w+wHC3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 12:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:7e:8f:bd:7f:74:11:61:d8:ad:3c:33:b5:55:7d:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Validity
Not Before: Oct 20 12:01:02 2025 GMT
Not After : Oct 21 12:01:02 2025 GMT
Subject: CN=4f6b2b6e595e56a63db3c09e06b568890053c402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:51:71:15:df:9f:3e:fc:e3:9d:39:3c:02:52:
e2:59:5e:8c:a9:33:67:a8:39:68:84:ad:91:d5:8c:
78:7a:cd:ce:46:ad:e4:e8:73:70:4d:e6:cc:6c:65:
f6:bf:19:57:c9:86:1f:10:19:22:44:94:32:de:6b:
1c:4f:27:4e:30:a5:65:74:12:a5:a9:d3:15:79:93:
f8:ee:05:40:4d:41:f5:6f:40:8c:a5:7c:cc:73:3d:
2b:72:bf:cd:0a:3e:69:f3:08:b7:8e:8f:9a:21:f2:
df:c7:8a:d9:ef:e0:4e:aa:00:cf:f5:ab:2a:a8:36:
95:5a:bb:47:99:a6:37:75:ed:72:b5:23:93:e6:bb:
8d:52:45:5c:7b:79:02:6c:9a:20:31:ed:ad:70:e5:
ec:5b:72:dc:02:f9:c3:14:13:40:9c:89:6d:8d:66:
59:86:08:4e:23:2a:7a:38:e0:b6:38:48:90:3d:6f:
71:5e:a6:d9:55:bf:07:bb:f8:a7:41:91:38:66:32:
d4:b5:9c:f4:b1:71:a6:90:8c:0f:22:af:12:2d:19:
a0:73:b0:e7:5b:95:c9:a4:2d:ab:e1:f2:b4:17:5c:
1a:59:5e:f9:d1:a0:42:21:af:8d:63:e8:4d:a5:20:
ca:3c:be:e3:4b:e0:86:9c:af:3b:15:a1:c0:a9:5d:
db:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:6B:2B:6E:59:5E:56:A6:3D:B3:C0:9E:06:B5:68:89:00:53:C4:02
X509v3 Authority Key Identifier:
keyid:6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:5a:b8:ac:d8:6a:2a:8b:21:f7:88:43:24:1e:67:d7:3b:72:
61:7b:31:bb:d4:8c:a4:dc:be:12:46:df:d7:e3:56:b3:4a:3d:
3c:fe:99:68:51:c5:52:4d:eb:9d:18:b6:33:1c:77:97:a5:9a:
f0:13:8d:c2:11:ce:ad:94:de:c8:08:55:42:7d:8b:bf:29:81:
6f:42:df:5d:fa:2d:08:e3:39:d3:1f:0b:f8:d2:fc:cb:27:7e:
25:e6:8d:bb:74:64:0b:d3:d9:73:03:af:13:6a:d9:0a:dc:0b:
82:03:b7:4f:c8:f8:39:ca:53:e9:39:fe:77:ee:d3:66:26:53:
04:46:32:85:d1:eb:ce:db:44:af:ac:67:8e:3d:32:e3:02:de:
26:f5:31:80:58:63:ba:f2:10:0d:b9:e4:49:a8:f4:2a:9a:1f:
34:fd:95:47:8c:1d:ad:cc:61:c8:57:d5:76:fb:12:16:8e:8e:
93:7e:e0:bf:4f:65:26:39:7a:1e:98:c3:00:8b:4d:94:46:a6:
e6:2d:b3:bf:c3:be:d0:64:21:3f:59:d4:5d:6e:f7:d5:d0:14:
67:6a:50:14:2d:98:6e:76:70:68:60:7c:b8:ff:61:62:ff:99:
91:b4:b7:62:d0:22:31:8a:8b:1d:c2:57:e8:f9:2e:ee:d7:b0:
a7:38:a8:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:39:59 2025 by rpki-client