Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft
File: AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft (raw, json)
Hash identifier: jXeMbEnQraITSzFhOtg79v2K1xCTH6VACsVoKe36Qpw=
Subject key identifier: E0:EB:75:AA:45:8F:82:94:41:F3:79:A5:BC:0E:E5:96:96:BA:2B:06
Authority key identifier: 01:72:35:06:71:8D:FC:F2:A8:BD:17:6D:4E:A2:4E:27:53:22:FC:FB
Certificate issuer: /CN=01723506718dfcf2a8bd176d4ea24e275322fcfb
Certificate serial: 0198D65FF900272AE65E84D8CDD1B64F5B1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 10:01:10 +0000
Manifest this update: Sat 23 Aug 2025 10:01:10 +0000
Manifest next update: Sun 24 Aug 2025 10:01:10 +0000
Files and hashes: 1: AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.crl (hash: gwCUUNVbKcTMn1uk+iF9FE3GDQlNxJf2A10JYM8GqKU=)
2: SYZlptmfwW05iDvw4BXOJL_fG8M.roa (hash: h6Di4p8kHK2EYyUSqyx3mMW/pVHzVV5hYvjCX+I4Wgk=)
3: upUlmeYdk5_sFXYFi0NBtTtEwO8.roa (hash: xuu1QVb2zW3SwdOeuq3QKp9w0IPCF0Qyp8OFF9tk1jc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:f9:00:27:2a:e6:5e:84:d8:cd:d1:b6:4f:5b:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01723506718dfcf2a8bd176d4ea24e275322fcfb
Validity
Not Before: Aug 23 10:01:10 2025 GMT
Not After : Aug 24 10:01:10 2025 GMT
Subject: CN=e0eb75aa458f829441f379a5bc0ee59696ba2b06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:fe:fc:9f:32:42:46:f2:72:cb:24:fd:b8:f5:
d3:4e:62:47:fa:0d:2c:57:06:77:3c:44:a6:37:eb:
35:ea:73:a2:1c:3a:97:9b:93:72:6a:3d:4d:bb:d3:
6c:d2:4c:4b:d2:a8:e0:35:f6:5b:6e:36:8f:99:59:
de:07:05:9d:31:37:7a:f4:09:bf:ed:2b:a9:ab:9e:
88:2f:35:03:ff:70:8c:2c:16:c7:74:30:b4:e5:80:
a9:e9:97:e0:2e:40:5e:ee:7d:22:cf:8b:29:f7:47:
32:e0:21:f5:56:bd:11:23:f5:d2:69:8c:b6:f4:a1:
43:23:b0:63:f3:40:da:ff:73:eb:60:6e:60:dc:22:
6c:51:7e:9e:dc:08:ec:32:c9:a8:59:51:bc:44:44:
77:37:34:ff:8b:4e:e7:a6:4c:32:a6:fe:13:f5:ca:
a8:1c:fd:94:d9:29:24:a7:62:12:f7:3e:35:f5:13:
8a:d0:13:6c:87:c8:74:01:8f:82:85:4e:d2:0b:31:
0e:8a:87:85:88:41:f3:c7:d4:c8:63:0a:25:eb:64:
54:56:07:ef:51:5d:3a:ba:67:b3:de:4e:b7:14:7c:
32:b3:3a:19:a5:bb:35:1f:75:42:7e:ce:f8:56:b8:
0f:a9:65:88:2d:84:ce:70:b9:37:59:ca:2b:a2:75:
ef:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:EB:75:AA:45:8F:82:94:41:F3:79:A5:BC:0E:E5:96:96:BA:2B:06
X509v3 Authority Key Identifier:
keyid:01:72:35:06:71:8D:FC:F2:A8:BD:17:6D:4E:A2:4E:27:53:22:FC:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:0f:44:7d:af:46:68:ed:b3:08:f5:4f:8c:ff:ea:9d:91:da:
83:d7:6e:7b:5c:ee:ee:bb:05:f5:d2:de:6f:5c:94:c3:54:61:
d3:99:75:af:c3:98:23:8a:d3:a0:e0:22:28:11:20:1b:1f:7e:
b1:7f:01:61:91:a7:31:65:0b:1f:50:18:0f:98:a7:37:79:5f:
38:9e:41:95:3d:64:75:d7:f6:65:5f:a1:53:ff:c4:c8:f5:30:
d2:cc:6b:90:e6:4d:9c:f4:21:77:c0:e5:44:39:04:5f:4e:09:
b0:ee:c0:60:cb:3b:27:58:f7:4d:fc:d7:b3:82:2b:68:66:ec:
17:9a:b7:5d:1a:71:c0:c5:d1:1c:73:94:5e:99:9a:d9:99:cb:
62:64:45:f7:59:1e:69:b9:14:5e:18:b8:b7:92:90:44:e6:a1:
aa:77:69:a8:a8:dd:82:96:6a:1e:e0:b6:fa:47:1c:7a:ca:df:
b4:21:a5:37:af:90:a7:73:1c:b2:53:8e:2a:97:9b:56:52:a5:
bb:e7:c6:70:50:89:42:f7:29:d5:bd:3f:d1:6b:db:26:3c:69:
2e:27:12:f8:b8:58:23:9a:76:49:28:37:18:97:49:3a:3a:a0:
28:9b:9e:d1:99:23:4f:19:28:85:b3:d5:56:d2:d5:f7:88:6f:
18:7e:65:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:55:49 2025 by rpki-client