Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.mft
File: AXyQZUZTrBUAKFYrMkMUkbUhR9E.mft (raw, json)
Hash identifier: 1/Ia0qMdh0r1oxJ0y5urzSyaWpjbWwaB2TNCPK/608s=
Subject key identifier: A2:9C:70:98:A9:69:80:8F:C7:57:21:2E:68:BD:17:25:3C:4A:96:75
Authority key identifier: 01:7C:90:65:46:53:AC:15:00:28:56:2B:32:43:14:91:B5:21:47:D1
Certificate issuer: /CN=017c90654653ac150028562b32431491b52147d1
Certificate serial: 019A00355C9F29589ED7A800D32EC8ECA45A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AXyQZUZTrBUAKFYrMkMUkbUhR9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.mft
Manifest number: 0EC3
Signing time: Mon 20 Oct 2025 06:01:28 +0000
Manifest this update: Mon 20 Oct 2025 06:01:28 +0000
Manifest next update: Tue 21 Oct 2025 06:01:28 +0000
Files and hashes: 1: AXyQZUZTrBUAKFYrMkMUkbUhR9E.crl (hash: 9a4rlgPTpxALIOVzUvgpkduA+RU+Q+nzfG1F6D8UyvM=)
2: L2lE8nOnlyxmaD3x1ZRACrDCMP8.roa (hash: ZXu28qkdGNNh4liAxQWetF6CZII1uCDb6IiGf6WW5Vw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/AXyQZUZTrBUAKFYrMkMUkbUhR9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 06:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:5c:9f:29:58:9e:d7:a8:00:d3:2e:c8:ec:a4:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=017c90654653ac150028562b32431491b52147d1
Validity
Not Before: Oct 20 06:01:28 2025 GMT
Not After : Oct 21 06:01:28 2025 GMT
Subject: CN=a29c7098a969808fc757212e68bd17253c4a9675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1d:4e:18:58:95:75:16:3f:9c:b3:a2:68:14:
e8:97:dc:f0:10:55:11:d5:b0:ce:80:47:af:47:ef:
17:c8:87:d2:f9:a3:95:7f:20:16:09:b3:c2:9e:93:
d4:26:0c:fe:e5:e4:8a:b8:dc:3a:73:e5:35:1c:47:
d6:0f:af:1a:a5:12:c4:32:c2:41:01:91:e6:e8:4d:
e1:5c:cc:5d:f2:06:c9:67:93:8d:17:6a:e0:d1:88:
e4:05:49:49:b1:cf:6f:c5:91:64:87:78:6a:26:c8:
b9:59:08:bd:ab:19:a3:11:d0:62:26:77:d2:77:a2:
28:83:34:62:13:ba:61:83:12:ce:59:c4:5e:64:b2:
57:95:4d:80:81:e1:f1:84:3a:e7:d6:ed:9f:5e:fb:
08:c6:fa:f1:bc:7c:05:97:7d:55:f1:f3:32:2b:2b:
b5:fd:12:de:2d:fd:13:b6:05:fe:e3:56:09:51:13:
77:43:ef:33:d0:72:84:07:f8:e6:d5:b1:94:d8:ea:
f6:0f:04:86:f1:45:d3:a6:c1:da:96:99:d6:7d:41:
8d:2b:49:21:01:8e:3e:b9:25:46:23:12:eb:e5:71:
d2:f8:74:a7:c3:ed:f2:fe:50:1b:4d:91:85:9f:bc:
54:2b:43:5a:ac:10:74:e7:2a:60:03:60:d7:6d:86:
54:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:9C:70:98:A9:69:80:8F:C7:57:21:2E:68:BD:17:25:3C:4A:96:75
X509v3 Authority Key Identifier:
keyid:01:7C:90:65:46:53:AC:15:00:28:56:2B:32:43:14:91:B5:21:47:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AXyQZUZTrBUAKFYrMkMUkbUhR9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:4b:c4:08:25:75:8a:af:2d:56:3e:0e:17:fe:b2:67:42:94:
42:6e:a3:56:11:71:11:8b:7b:38:4c:18:e9:06:e9:67:cc:6e:
f6:85:2f:25:e9:d5:db:c9:c8:95:db:60:ca:5f:4f:6e:e8:8e:
03:a7:2f:79:ef:c7:e2:99:9e:24:bb:d8:f9:3b:22:8f:2c:b3:
0a:cf:ac:8c:ce:36:27:4d:9b:e4:81:39:c3:55:6d:56:c4:53:
40:e2:bf:97:2b:65:db:60:76:6a:78:14:1b:35:1c:69:a4:1e:
c5:c1:ba:26:4a:75:31:50:3b:70:bf:b8:5b:3a:fe:cc:49:97:
63:3b:1d:f5:d6:94:93:11:8c:96:61:f7:d8:c0:47:22:68:03:
a8:79:82:30:2d:83:66:cd:b5:eb:35:f3:39:9d:e0:2e:60:63:
d9:05:18:f9:c6:4f:7f:9d:6a:30:c8:1e:00:e5:ed:5d:b6:f3:
0d:88:2c:9b:54:4b:6e:90:09:87:77:2c:3b:87:21:75:6b:c2:
42:32:f4:c0:24:08:d1:41:72:6e:a2:2f:7b:95:eb:ba:02:1b:
9d:45:82:34:b4:2b:2b:62:6f:d8:d6:e3:fb:7e:6f:61:4b:3c:
ef:5a:41:1f:d0:79:50:7a:38:23:1e:65:69:8a:44:75:fd:73:
0b:5a:7f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:44:47 2025 by rpki-client