Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.mft
File: axpX8G73IAfdYZP5YKYWNEtzMB8.mft (raw, json)
Hash identifier: lsr2SaHZ34VocDjAj3sQbOMElBh8lOJbkO5K7lyMUy8=
Subject key identifier: 12:F7:50:7E:27:FF:D1:16:EC:41:79:53:EF:68:02:F3:BE:51:61:8F
Authority key identifier: 6B:1A:57:F0:6E:F7:20:07:DD:61:93:F9:60:A6:16:34:4B:73:30:1F
Certificate issuer: /CN=6b1a57f06ef72007dd6193f960a616344b73301f
Certificate serial: 0199FC5863D83AA44FB478D84824897115D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axpX8G73IAfdYZP5YKYWNEtzMB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.mft
Manifest number: 13F9
Signing time: Sun 19 Oct 2025 12:01:15 +0000
Manifest this update: Sun 19 Oct 2025 12:01:15 +0000
Manifest next update: Mon 20 Oct 2025 12:01:15 +0000
Files and hashes: 1: 00KT0pkGsHJg3rMPte4BXARpxEs.roa (hash: Rp/NUlFtLgmOY8HOyBWonQv6w2IyoFIU596KejYUomw=)
2: axpX8G73IAfdYZP5YKYWNEtzMB8.crl (hash: GcyU8A5kOa/J68TJmYU57drmbEXbfYv41hBf6k++E1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/axpX8G73IAfdYZP5YKYWNEtzMB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:63:d8:3a:a4:4f:b4:78:d8:48:24:89:71:15:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b1a57f06ef72007dd6193f960a616344b73301f
Validity
Not Before: Oct 19 12:01:15 2025 GMT
Not After : Oct 20 12:01:15 2025 GMT
Subject: CN=12f7507e27ffd116ec417953ef6802f3be51618f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:64:c0:c5:20:3c:2e:58:3a:30:3c:f0:e3:52:
0e:2e:5e:2c:10:49:4e:54:1b:0f:6c:4e:c0:7a:bb:
26:dd:27:33:ed:e5:ab:cc:4d:61:fa:60:70:7d:34:
44:a6:68:c6:22:e1:2e:55:12:cf:e1:26:37:c2:45:
d4:da:95:49:44:4e:39:3b:df:f4:3f:8f:8a:1f:80:
b7:2a:2e:1a:56:7b:cf:ae:56:a4:b9:26:3a:af:af:
94:7d:00:8d:9c:a6:c2:bc:07:4f:35:1c:a7:dd:56:
97:33:69:0d:fa:0e:c8:ad:25:4c:cc:80:ac:96:ea:
e0:2f:af:5b:d7:a5:7e:d8:0b:cc:ba:91:8a:84:a5:
a3:b9:de:2c:27:a0:6e:be:38:bd:57:01:3e:06:f0:
05:0a:8b:b5:d1:e8:8d:7a:12:a8:7f:0f:c5:ea:b1:
8a:62:a2:79:50:10:52:f4:17:db:36:14:fc:49:4c:
90:e4:50:f2:41:d8:dc:8f:96:03:78:22:55:a2:5a:
55:29:7d:62:cb:00:b4:23:49:c2:aa:50:e8:96:55:
ef:a7:54:62:e8:a3:d5:e6:3b:1d:68:4c:81:7e:4f:
e5:9f:36:13:9b:3c:bb:24:29:fd:57:36:5f:e8:0c:
9b:45:bc:79:13:0e:1d:e4:40:c4:7d:e1:34:e0:e7:
e2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:F7:50:7E:27:FF:D1:16:EC:41:79:53:EF:68:02:F3:BE:51:61:8F
X509v3 Authority Key Identifier:
keyid:6B:1A:57:F0:6E:F7:20:07:DD:61:93:F9:60:A6:16:34:4B:73:30:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axpX8G73IAfdYZP5YKYWNEtzMB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:86:af:8d:63:c8:6c:9b:68:0e:9d:0b:d6:7c:5b:24:f8:b6:
9e:97:fd:98:cf:32:06:cf:88:9f:7d:fc:b6:66:1e:cf:4d:ca:
75:6f:6e:93:93:2c:8d:a2:94:d3:81:31:c6:8f:5c:fb:5c:7c:
4f:6b:93:50:a1:67:3e:0e:86:f5:5a:3a:7a:e4:2c:ec:6f:41:
ac:00:92:8b:e4:87:59:ba:02:20:90:f4:09:ab:bd:b0:70:69:
ba:14:1c:a0:a1:1d:f0:16:12:64:c4:11:c6:48:aa:5f:5a:26:
64:bd:f9:81:f0:6d:13:1d:96:cc:23:7d:d5:4d:75:e7:b9:b6:
64:5e:75:22:e9:c8:1c:42:40:70:90:1d:b1:fd:12:c7:25:58:
43:80:08:2b:0f:78:1a:b9:89:78:27:f0:89:1c:48:51:44:43:
e7:8b:4b:b9:9d:b4:ae:6a:57:57:6a:45:e0:86:06:4e:5f:15:
96:57:a1:2c:d1:d3:54:c7:ad:7c:0c:1d:49:12:58:9a:95:a8:
ac:07:4a:6e:e2:c1:c6:46:52:d0:1e:43:90:c2:17:ba:ff:7b:
e4:03:63:9d:cc:bf:d9:5d:2f:23:a7:2b:f1:f2:fc:07:1a:c9:
b0:42:de:22:c1:21:6a:0d:6a:ef:bf:36:e2:64:fa:2f:a9:e6:
55:5f:72:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WGPYOqRPtHjYSCSJcRXWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiMWE1N2YwNmVmNzIwMDdkZDYxOTNmOTYwYTYxNjM0NGI3
MzMwMWYwHhcNMjUxMDE5MTIwMTE1WhcNMjUxMDIwMTIwMTE1WjAzMTEwLwYDVQQD
EygxMmY3NTA3ZTI3ZmZkMTE2ZWM0MTc5NTNlZjY4MDJmM2JlNTE2MThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2GTAxSA8Llg6MDzw41IOLl4sEElO
VBsPbE7Aersm3Scz7eWrzE1h+mBwfTREpmjGIuEuVRLP4SY3wkXU2pVJRE45O9/0
P4+KH4C3Ki4aVnvPrlakuSY6r6+UfQCNnKbCvAdPNRyn3VaXM2kN+g7IrSVMzICs
lurgL69b16V+2AvMupGKhKWjud4sJ6Buvji9VwE+BvAFCou10eiNehKofw/F6rGK
YqJ5UBBS9BfbNhT8SUyQ5FDyQdjcj5YDeCJVolpVKX1iywC0I0nCqlDollXvp1Ri
6KPV5jsdaEyBfk/lnzYTmzy7JCn9VzZf6AybRbx5Ew4d5EDEfeE04OfiOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBL3UH4n/9EW7EF5U+9oAvO+UWGPMB8GA1UdIwQY
MBaAFGsaV/Bu9yAH3WGT+WCmFjRLczAfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXhwWDhHNzNJQWZkWVpQNVlLWVdORXR6TUI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9jOTYyNDctZTk3OS00ZTU4LTg5ZjYt
ZWViZGNiZDNhZWU4LzEvYXhwWDhHNzNJQWZkWVpQNVlLWVdORXR6TUI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS9jOTYyNDctZTk3OS00ZTU4LTg5ZjYtZWViZGNiZDNhZWU4
LzEvYXhwWDhHNzNJQWZkWVpQNVlLWVdORXR6TUI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0oavjWPI
bJtoDp0L1nxbJPi2npf9mM8yBs+In338tmYez03KdW9uk5MsjaKU04Exxo9c+1x8
T2uTUKFnPg6G9Vo6euQs7G9BrACSi+SHWboCIJD0Cau9sHBpuhQcoKEd8BYSZMQR
xkiqX1omZL35gfBtEx2WzCN91U1157m2ZF51IunIHEJAcJAdsf0SxyVYQ4AIKw94
GrmJeCfwiRxIUURD54tLuZ20rmpXV2pF4IYGTl8VllehLNHTVMetfAwdSRJYmpWo
rAdKbuLBxkZS0B5DkMIXuv975ANjncy/2V0vI6cr8fL8BxrJsELeIsEhag1q7782
4mT6L6nmVV9yeg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:53 2025 by rpki-client