Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft
File: AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft (raw, json)
Hash identifier: pJty0XwVxlFl/ANcw7RACc8t/YbgoqIJ3kdQHnJqxcY=
Subject key identifier: 48:B7:0E:0F:8F:54:B8:8B:5E:92:1E:C0:9A:72:E3:64:4E:09:29:94
Authority key identifier: 01:72:35:06:71:8D:FC:F2:A8:BD:17:6D:4E:A2:4E:27:53:22:FC:FB
Certificate issuer: /CN=01723506718dfcf2a8bd176d4ea24e275322fcfb
Certificate serial: 0199FBEAE1380B099E17CFEDBB729CB2DF2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 10:01:38 +0000
Manifest this update: Sun 19 Oct 2025 10:01:38 +0000
Manifest next update: Mon 20 Oct 2025 10:01:38 +0000
Files and hashes: 1: AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.crl (hash: mlTFHyrIJ1lWmAwvZEXlht7bSwpWLStEJ+hQQzzY8+k=)
2: SYZlptmfwW05iDvw4BXOJL_fG8M.roa (hash: h6Di4p8kHK2EYyUSqyx3mMW/pVHzVV5hYvjCX+I4Wgk=)
3: upUlmeYdk5_sFXYFi0NBtTtEwO8.roa (hash: xuu1QVb2zW3SwdOeuq3QKp9w0IPCF0Qyp8OFF9tk1jc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:e1:38:0b:09:9e:17:cf:ed:bb:72:9c:b2:df:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01723506718dfcf2a8bd176d4ea24e275322fcfb
Validity
Not Before: Oct 19 10:01:38 2025 GMT
Not After : Oct 20 10:01:38 2025 GMT
Subject: CN=48b70e0f8f54b88b5e921ec09a72e3644e092994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:15:fc:e7:b4:09:10:b6:71:45:08:f5:67:64:
7e:01:36:73:03:87:47:c2:5b:0a:fa:c6:b0:1c:a3:
0b:82:a9:bc:6d:2d:ab:46:ac:66:8c:84:90:b8:06:
86:44:4c:7f:e4:fd:d8:2c:53:dc:e2:ab:b6:aa:7e:
ac:7e:bb:60:d1:07:a0:a1:8c:1f:2a:0a:b9:30:1b:
2c:96:7f:82:97:f9:0f:19:06:df:11:c7:50:61:5c:
e5:30:8f:76:dd:9c:0d:bc:82:2f:89:7b:c0:f1:15:
39:ba:c3:02:b7:45:52:31:11:24:92:5d:1b:0c:17:
b1:36:c9:f4:10:c8:8a:91:4c:8a:8b:c5:3b:b6:78:
2b:62:08:fc:40:50:c9:50:aa:68:80:af:cc:f7:c9:
39:73:65:37:2d:bd:ff:e8:9c:81:d8:80:51:03:7c:
d4:d5:11:7d:e9:04:7d:66:55:cf:3d:1e:52:0a:8f:
ee:55:47:a6:58:21:94:7c:63:92:6e:49:7c:7e:b4:
f7:c5:6b:24:c6:19:29:a1:4b:ab:cc:35:7e:95:b1:
4c:4e:71:41:64:f3:0b:ff:d2:b8:20:d4:3c:b3:18:
b2:19:5a:f0:da:8e:66:31:63:61:dd:3e:b1:8a:09:
57:94:fc:e3:17:9a:c9:40:67:5b:86:bd:02:33:92:
37:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:B7:0E:0F:8F:54:B8:8B:5E:92:1E:C0:9A:72:E3:64:4E:09:29:94
X509v3 Authority Key Identifier:
keyid:01:72:35:06:71:8D:FC:F2:A8:BD:17:6D:4E:A2:4E:27:53:22:FC:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:53:21:76:71:12:19:4f:58:3a:c2:c0:23:17:1f:76:7a:79:
70:d0:a8:d0:09:bd:e8:c1:45:f3:15:a0:06:5e:57:3f:a0:71:
b0:78:c8:25:fd:c7:9b:15:e0:b6:68:79:da:42:f0:77:ec:2d:
04:8c:3f:3b:79:88:f8:68:44:a6:27:19:b3:f6:63:08:c6:08:
69:04:98:a7:51:82:07:3b:46:9f:04:f9:10:f3:8a:16:ca:c3:
05:72:3d:53:71:af:4f:67:88:31:37:e9:4e:f1:45:6b:34:4d:
a4:87:ec:fc:ad:bc:e6:34:c8:5c:ee:18:f0:33:b8:19:8a:5a:
f4:3d:6f:57:3e:80:2e:89:57:89:b1:6f:37:2d:a5:28:bd:bd:
99:c4:42:fb:2e:e2:dd:fa:2a:ee:89:7c:98:5b:d0:84:93:aa:
86:9a:c7:bf:b1:cc:26:9d:94:97:b7:c7:9e:1d:50:ba:3d:32:
cd:ef:09:99:01:78:fd:b9:94:31:b9:9c:ce:89:c5:53:e3:40:
df:93:52:f6:89:11:e8:94:38:09:17:5f:7d:7a:18:c3:30:1c:
d7:ac:41:5b:3f:98:c3:27:a2:d2:1a:2e:c2:31:d3:84:b0:6c:
7f:66:ca:ad:bd:05:93:f3:e8:ba:7b:ca:cd:3d:65:58:a4:05:
88:4e:c9:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:03 2025 by rpki-client