Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.mft
File: AXyQZUZTrBUAKFYrMkMUkbUhR9E.mft (raw, json)
Hash identifier: MSWcONwnlFHxoCEysXuta+SY+7BHhu2vEpVKZ5KATBQ=
Subject key identifier: FF:12:DE:A4:0B:33:B9:2D:C2:54:55:B8:14:3B:4A:60:92:A4:A6:10
Authority key identifier: 01:7C:90:65:46:53:AC:15:00:28:56:2B:32:43:14:91:B5:21:47:D1
Certificate issuer: /CN=017c90654653ac150028562b32431491b52147d1
Certificate serial: 0197B70EBF9745C6025BD02F05C9ED95ADCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AXyQZUZTrBUAKFYrMkMUkbUhR9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.mft
Manifest number: 0D94
Signing time: Sat 28 Jun 2025 15:01:26 +0000
Manifest this update: Sat 28 Jun 2025 15:01:26 +0000
Manifest next update: Sun 29 Jun 2025 15:01:26 +0000
Files and hashes: 1: AXyQZUZTrBUAKFYrMkMUkbUhR9E.crl (hash: V7veEZ7M/Tgblf6czcw53AqrxEkfTipYbX1E8QL2Za4=)
2: L2lE8nOnlyxmaD3x1ZRACrDCMP8.roa (hash: ZXu28qkdGNNh4liAxQWetF6CZII1uCDb6IiGf6WW5Vw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/AXyQZUZTrBUAKFYrMkMUkbUhR9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:bf:97:45:c6:02:5b:d0:2f:05:c9:ed:95:ad:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=017c90654653ac150028562b32431491b52147d1
Validity
Not Before: Jun 28 15:01:26 2025 GMT
Not After : Jun 29 15:01:26 2025 GMT
Subject: CN=ff12dea40b33b92dc25455b8143b4a6092a4a610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:fb:20:44:5e:7b:40:26:f6:90:52:f6:5e:8e:
10:e0:8f:90:df:73:9e:21:d7:e8:26:a7:96:55:2e:
9f:2e:39:b6:8c:60:c0:1e:9f:9f:c7:12:61:35:9a:
f3:f1:43:98:39:45:23:0d:78:bd:61:bf:9f:7e:76:
ff:3b:98:a1:41:f2:da:e8:57:60:20:68:ec:d1:f0:
1c:44:59:d0:aa:70:68:93:a6:32:55:67:07:4e:7e:
cc:4d:03:6c:cb:3d:44:45:2c:06:d7:62:d4:94:8d:
51:70:e0:aa:b3:3e:2c:a7:7d:92:a5:f6:b0:33:75:
f2:18:fb:86:06:06:e6:46:04:72:ae:87:0a:a5:f8:
26:90:2e:77:4d:0c:a3:7c:0e:96:9f:0b:60:a7:60:
8b:be:64:6d:24:15:39:bc:fa:10:78:34:ea:47:e1:
84:7e:83:76:d2:f1:17:8f:49:a1:8e:47:ef:b5:3c:
af:87:39:32:c8:ea:23:29:ce:f4:07:85:e7:f4:c5:
d6:9b:10:af:4b:0d:cc:33:02:e6:f3:2a:ae:1a:a4:
78:2b:5d:57:c7:78:47:0f:67:e0:30:94:0b:3c:30:
5e:1d:b1:9c:ad:b2:50:a9:87:7f:81:1f:32:bd:75:
56:90:c9:fa:67:1c:ac:66:10:94:d4:3f:f8:81:7b:
4b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:12:DE:A4:0B:33:B9:2D:C2:54:55:B8:14:3B:4A:60:92:A4:A6:10
X509v3 Authority Key Identifier:
keyid:01:7C:90:65:46:53:AC:15:00:28:56:2B:32:43:14:91:B5:21:47:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AXyQZUZTrBUAKFYrMkMUkbUhR9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:23:06:6b:da:63:ab:bb:f8:b0:56:e0:21:b0:53:3b:72:c2:
3c:49:09:e9:68:40:79:52:39:d8:f8:d8:0d:23:38:8e:af:1b:
c1:b6:58:79:c2:e9:a4:0c:dd:74:aa:69:22:19:10:45:10:ba:
3b:65:c9:79:e7:fa:f8:e6:43:a8:55:61:3f:2f:ca:4a:2f:78:
d6:f2:eb:94:b1:d4:87:44:9a:42:2d:5b:b2:b8:fd:db:1c:21:
c7:f3:5e:6b:48:07:c0:29:9e:fd:4d:07:21:ba:3f:38:eb:41:
a3:3d:7e:3c:69:53:56:8c:5c:f4:9a:f2:72:b3:1e:08:46:f9:
50:ee:17:48:fa:a9:c3:a2:48:0e:b5:44:fa:03:da:93:78:cd:
af:7b:88:9e:21:a0:d5:92:d3:74:e2:43:b5:aa:f4:13:e9:d5:
34:3f:f2:9e:a7:a8:a6:90:c8:84:12:21:30:43:bc:7c:ca:57:
e9:cf:e5:1c:78:29:f5:21:7c:0a:6e:7d:1f:31:d2:e2:e0:6b:
04:c4:74:81:54:f2:2c:7b:93:aa:32:13:95:48:46:b9:06:21:
23:30:e4:ba:79:a7:9d:73:df:91:ce:28:98:07:76:50:d4:e7:
a6:c9:38:18:b0:56:c3:55:2a:a5:ca:34:08:b0:73:ed:64:ba:
35:c1:20:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3Dr+XRcYCW9AvBcntla3KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxN2M5MDY1NDY1M2FjMTUwMDI4NTYyYjMyNDMxNDkxYjUy
MTQ3ZDEwHhcNMjUwNjI4MTUwMTI2WhcNMjUwNjI5MTUwMTI2WjAzMTEwLwYDVQQD
EyhmZjEyZGVhNDBiMzNiOTJkYzI1NDU1YjgxNDNiNGE2MDkyYTRhNjEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2/sgRF57QCb2kFL2Xo4Q4I+Q33Oe
IdfoJqeWVS6fLjm2jGDAHp+fxxJhNZrz8UOYOUUjDXi9Yb+ffnb/O5ihQfLa6Fdg
IGjs0fAcRFnQqnBok6YyVWcHTn7MTQNsyz1ERSwG12LUlI1RcOCqsz4sp32Spfaw
M3XyGPuGBgbmRgRyrocKpfgmkC53TQyjfA6Wnwtgp2CLvmRtJBU5vPoQeDTqR+GE
foN20vEXj0mhjkfvtTyvhzkyyOojKc70B4Xn9MXWmxCvSw3MMwLm8yquGqR4K11X
x3hHD2fgMJQLPDBeHbGcrbJQqYd/gR8yvXVWkMn6ZxysZhCU1D/4gXtLPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP8S3qQLM7ktwlRVuBQ7SmCSpKYQMB8GA1UdIwQY
MBaAFAF8kGVGU6wVAChWKzJDFJG1IUfRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVh5UVpVWlRyQlVBS0ZZck1rTVVrYlVoUjlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8zNWI3ZTUtODg2NC00NzU5LWJiODYt
NzAxM2E2YzQzOTg1LzEvQVh5UVpVWlRyQlVBS0ZZck1rTVVrYlVoUjlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi8zNWI3ZTUtODg2NC00NzU5LWJiODYtNzAxM2E2YzQzOTg1
LzEvQVh5UVpVWlRyQlVBS0ZZck1rTVVrYlVoUjlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQyMGa9pj
q7v4sFbgIbBTO3LCPEkJ6WhAeVI52PjYDSM4jq8bwbZYecLppAzddKppIhkQRRC6
O2XJeef6+OZDqFVhPy/KSi941vLrlLHUh0SaQi1bsrj92xwhx/Nea0gHwCme/U0H
Ibo/OOtBoz1+PGlTVoxc9JrycrMeCEb5UO4XSPqpw6JIDrVE+gPak3jNr3uIniGg
1ZLTdOJDtar0E+nVND/ynqeoppDIhBIhMEO8fMpX6c/lHHgp9SF8Cm59HzHS4uBr
BMR0gVTyLHuTqjITlUhGuQYhIzDkunmnnXPfkc4omAd2UNTnpsk4GLBWw1Uqpco0
CLBz7WS6NcEgbA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:32:56 2025 by rpki-client