Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/1ffebd-bd37-4393-a33d-48c03520faf7/1/axrGkUv4Rz0YC2A4e9CY8dN9rIA.mft
File: axrGkUv4Rz0YC2A4e9CY8dN9rIA.mft (raw, json)
Hash identifier: dLWdWI+KUyKnT0aPNc5jw4RwbHTi87vcG7a83cJzTKs=
Subject key identifier: D9:2D:A4:2E:38:5F:85:7B:B3:E8:A0:05:31:BE:2E:59:E2:07:5C:54
Authority key identifier: 6B:1A:C6:91:4B:F8:47:3D:18:0B:60:38:7B:D0:98:F1:D3:7D:AC:80
Certificate issuer: /CN=6b1ac6914bf8473d180b60387bd098f1d37dac80
Certificate serial: 0198D6CDD3E05047684C4C9EC819DC9738F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axrGkUv4Rz0YC2A4e9CY8dN9rIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/1ffebd-bd37-4393-a33d-48c03520faf7/1/axrGkUv4Rz0YC2A4e9CY8dN9rIA.mft
Manifest number: 02A3
Signing time: Sat 23 Aug 2025 12:01:09 +0000
Manifest this update: Sat 23 Aug 2025 12:01:09 +0000
Manifest next update: Sun 24 Aug 2025 12:01:09 +0000
Files and hashes: 1: axrGkUv4Rz0YC2A4e9CY8dN9rIA.crl (hash: vBLJFoPrqL/8YL0R+DwLT2fVoACrna4Dxc1useXJn90=)
2: nAXNwFgN4oUUiN2gukI8FexiZQY.roa (hash: NwyuW012KA+LOGkG7qw0aPwiZJU8ZOq4NZ4ApNYqggQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/1ffebd-bd37-4393-a33d-48c03520faf7/1/axrGkUv4Rz0YC2A4e9CY8dN9rIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/1ffebd-bd37-4393-a33d-48c03520faf7/1/axrGkUv4Rz0YC2A4e9CY8dN9rIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/axrGkUv4Rz0YC2A4e9CY8dN9rIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:d3:e0:50:47:68:4c:4c:9e:c8:19:dc:97:38:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b1ac6914bf8473d180b60387bd098f1d37dac80
Validity
Not Before: Aug 23 12:01:09 2025 GMT
Not After : Aug 24 12:01:09 2025 GMT
Subject: CN=d92da42e385f857bb3e8a00531be2e59e2075c54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:27:b9:10:8c:04:ab:a6:91:9d:64:10:1f:49:
66:a5:43:23:df:8f:0f:9e:d4:4f:4b:d6:33:da:34:
a9:50:98:b4:a8:6f:f7:6c:73:45:75:b2:2d:ba:94:
ba:34:34:b3:f9:08:a1:6c:99:01:80:c9:f2:04:20:
37:47:2f:0c:3a:a8:61:76:31:cb:df:3f:ec:13:0e:
b4:ca:85:f4:67:ec:56:8a:05:8a:20:cb:82:70:cf:
8d:a0:81:f0:33:8c:68:c3:ea:db:1e:a3:a1:af:37:
97:f4:61:1c:26:e4:bc:d6:21:bb:90:6c:ce:d3:08:
b3:7b:c0:89:cb:41:50:25:63:e6:51:5d:c8:08:a9:
54:78:0b:1c:5c:4a:cb:de:1f:f4:33:1e:2d:f9:64:
83:e5:ff:e0:00:c6:5b:bf:a6:ca:d8:2e:f6:06:14:
99:e8:d1:0c:7c:7a:c4:0b:8d:5f:50:22:bd:49:51:
49:e2:f0:ee:32:38:94:1c:7c:d3:1c:60:d6:c8:77:
e6:18:09:f2:79:51:76:3d:8b:3d:ef:fc:61:6b:66:
29:6f:ee:69:7b:3b:ac:25:74:73:73:05:75:f4:77:
8d:0c:30:74:81:e0:ff:34:75:23:f9:50:29:69:09:
d6:d8:61:23:c1:37:86:32:50:4a:31:78:9d:1d:a0:
0e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:2D:A4:2E:38:5F:85:7B:B3:E8:A0:05:31:BE:2E:59:E2:07:5C:54
X509v3 Authority Key Identifier:
keyid:6B:1A:C6:91:4B:F8:47:3D:18:0B:60:38:7B:D0:98:F1:D3:7D:AC:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axrGkUv4Rz0YC2A4e9CY8dN9rIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1ffebd-bd37-4393-a33d-48c03520faf7/1/axrGkUv4Rz0YC2A4e9CY8dN9rIA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1ffebd-bd37-4393-a33d-48c03520faf7/1/axrGkUv4Rz0YC2A4e9CY8dN9rIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:cd:5d:63:04:57:07:41:04:7f:dc:12:8b:04:83:24:22:3c:
c4:f0:22:e0:1d:9d:d6:b1:5a:23:28:a7:43:3f:6f:e0:2d:98:
61:33:11:d1:d4:10:7d:59:67:60:1b:d4:b9:f3:5f:0a:fe:b7:
a4:4a:75:53:c8:bd:c0:85:89:17:24:c5:e9:ce:ba:bb:af:74:
7c:3d:98:fe:7b:f0:ca:92:f7:10:87:56:00:5c:dc:0a:af:ef:
2d:0a:39:4f:9c:84:b6:69:ec:c5:ef:0a:9f:5e:b0:68:5f:4f:
e3:63:10:6d:7f:e7:75:96:d5:fb:a2:5e:b7:2e:85:87:7d:d6:
16:45:51:d5:dd:8f:81:a5:2a:31:d8:11:1d:7c:78:9e:26:b8:
c9:ab:e1:bc:40:e5:91:4f:9d:ef:eb:e3:60:3e:ad:88:0a:a6:
5b:55:1b:19:57:f5:f0:8c:43:2e:d2:52:32:5e:52:b8:02:a9:
89:09:3f:bc:eb:6f:3b:7d:af:ba:53:a9:66:25:53:d4:eb:0e:
36:b7:b8:19:4f:a3:f2:3a:33:54:1e:4b:f7:3d:1a:c1:5b:1d:
64:91:1b:bf:a7:41:dc:15:32:76:d6:c6:90:1c:2e:cf:fc:54:
e5:f0:39:b0:2e:c2:96:87:08:7e:ed:76:bf:f1:1e:fc:01:9f:
c4:64:35:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:42:09 2025 by rpki-client