Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.mft
File: AxyOjMB1wtBDE7kR2T1h_iqa3qI.mft (raw, json)
Hash identifier: e8o85o5j3hsQ2QFAPsFvpiOIr8gSGXzeu5Rg4iEvWWQ=
Subject key identifier: 3D:4C:C9:E1:63:22:66:D1:DC:1E:7C:B2:3F:14:0C:9F:88:BF:EC:E3
Authority key identifier: 03:1C:8E:8C:C0:75:C2:D0:43:13:B9:11:D9:3D:61:FE:2A:9A:DE:A2
Certificate issuer: /CN=031c8e8cc075c2d04313b911d93d61fe2a9adea2
Certificate serial: 0199FBEB19EB82E3E31374FB467AF884687C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AxyOjMB1wtBDE7kR2T1h_iqa3qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.mft
Manifest number: 0661
Signing time: Sun 19 Oct 2025 10:01:52 +0000
Manifest this update: Sun 19 Oct 2025 10:01:52 +0000
Manifest next update: Mon 20 Oct 2025 10:01:52 +0000
Files and hashes: 1: AxyOjMB1wtBDE7kR2T1h_iqa3qI.crl (hash: it9tJ3TzRfHOZAD1Bgr8RkriyRlRVPZir2ndNwF5LSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AxyOjMB1wtBDE7kR2T1h_iqa3qI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:19:eb:82:e3:e3:13:74:fb:46:7a:f8:84:68:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=031c8e8cc075c2d04313b911d93d61fe2a9adea2
Validity
Not Before: Oct 19 10:01:52 2025 GMT
Not After : Oct 20 10:01:52 2025 GMT
Subject: CN=3d4cc9e1632266d1dc1e7cb23f140c9f88bfece3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:21:16:47:fa:1c:7b:c4:4b:da:49:61:59:30:
ae:fd:40:09:ae:3a:32:d3:b5:9c:1d:26:75:e8:81:
a6:0e:22:9f:51:11:5f:ef:2b:33:3e:60:d8:67:07:
d1:06:4c:26:c2:28:33:1e:31:52:0c:40:36:e4:85:
97:af:63:0e:17:53:93:c7:6b:f4:e8:67:c9:79:72:
dd:80:e5:e3:c4:31:3b:1c:8f:9b:4d:ce:72:29:d5:
73:dd:30:66:18:a0:77:7c:94:0d:ae:19:df:89:14:
b5:81:a1:3b:75:c1:c2:b0:a6:bf:19:ab:6e:38:c1:
c0:bf:ae:a2:64:aa:d6:1f:e2:a8:4e:e3:5e:e7:4e:
88:04:38:3e:ac:34:bc:80:0b:23:28:88:e4:dc:7d:
46:89:72:67:64:c4:c5:9a:e2:70:6f:d6:05:b8:e1:
f9:dd:32:c8:22:79:7c:81:4d:8d:ea:3d:f9:06:20:
a9:30:b6:aa:9f:0d:d8:e0:b3:c3:1a:d0:47:77:6e:
94:15:84:47:f3:f3:50:94:59:c9:b1:f1:33:b7:3d:
9e:99:0a:f4:b5:f1:d5:7b:4f:07:c5:92:83:a9:e8:
07:00:e5:e0:96:8f:55:fb:74:a0:8e:5f:d0:54:e6:
80:26:bc:64:97:21:e5:9a:60:5e:d3:ba:4b:3a:5f:
d2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:4C:C9:E1:63:22:66:D1:DC:1E:7C:B2:3F:14:0C:9F:88:BF:EC:E3
X509v3 Authority Key Identifier:
keyid:03:1C:8E:8C:C0:75:C2:D0:43:13:B9:11:D9:3D:61:FE:2A:9A:DE:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AxyOjMB1wtBDE7kR2T1h_iqa3qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/75213d-01a4-4b61-b594-6268cedabd84/1/AxyOjMB1wtBDE7kR2T1h_iqa3qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:ab:19:6e:35:1b:e0:5c:ae:d8:b8:a1:be:d9:ce:c2:4d:bf:
26:ba:a1:33:2d:f3:50:99:d2:a9:de:1e:9d:d7:d1:b7:89:ad:
3c:f1:46:49:48:7a:48:82:8c:bb:d8:71:20:07:a7:35:07:ec:
0b:ca:fb:10:82:81:dd:96:10:50:45:6c:33:fe:ca:94:c4:d7:
38:82:2a:ef:e6:95:2a:86:e5:2a:80:36:10:5b:de:7b:94:dc:
d0:ee:a0:a6:85:1a:47:7c:c5:7f:6a:5f:3a:76:9a:9d:ed:26:
c4:2f:c1:3e:28:9b:8f:b2:f2:ea:e9:bd:80:e9:9c:49:25:23:
eb:a0:e2:9e:3e:46:fc:60:98:57:99:c3:23:f3:ac:89:bb:5e:
bf:e3:84:d0:ad:71:f9:da:93:f0:90:a0:38:b0:85:14:0d:7c:
b0:8c:d6:42:47:8c:f9:b1:70:3a:13:ac:ec:9d:1b:4d:05:6f:
dd:8a:7b:f3:b7:ef:78:5f:86:13:cf:07:02:63:34:b3:60:54:
b2:91:94:7f:70:2d:7d:0d:17:5b:1f:cf:49:34:8a:a7:5e:68:
5a:54:65:98:e6:f3:cf:15:c6:d1:de:a3:84:71:42:95:6b:40:
ce:d3:4f:f6:4f:9a:d7:7c:d0:96:e2:b8:ac:64:7f:b6:ab:07:
14:59:a5:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:31:36 2025 by rpki-client