Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/03228c-8c98-4597-a37f-583c98a06301/1/axa8EQuqKsnRYgwlBxdXfeZKkks.mft
File: axa8EQuqKsnRYgwlBxdXfeZKkks.mft (raw, json)
Hash identifier: v3riy1EsxWjFDO4PWaBX3ejeH+Op2qusOavBiicyI8U=
Subject key identifier: 3A:7F:C4:B4:67:28:0A:0F:1B:23:D6:AF:25:51:FF:04:59:D6:3E:81
Authority key identifier: 6B:16:BC:11:0B:AA:2A:C9:D1:62:0C:25:07:17:57:7D:E6:4A:92:4B
Certificate issuer: /CN=6b16bc110baa2ac9d1620c250717577de64a924b
Certificate serial: 0198D472F4CE7E133B06304BD3D0367272C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axa8EQuqKsnRYgwlBxdXfeZKkks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/03228c-8c98-4597-a37f-583c98a06301/1/axa8EQuqKsnRYgwlBxdXfeZKkks.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 01:02:40 +0000
Manifest this update: Sat 23 Aug 2025 01:02:40 +0000
Manifest next update: Sun 24 Aug 2025 01:02:40 +0000
Files and hashes: 1: axa8EQuqKsnRYgwlBxdXfeZKkks.crl (hash: EiYAl+VotzGOLu+MD0UvfvG+DopiaqfmASPDexZXTCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/03228c-8c98-4597-a37f-583c98a06301/1/axa8EQuqKsnRYgwlBxdXfeZKkks.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/03228c-8c98-4597-a37f-583c98a06301/1/axa8EQuqKsnRYgwlBxdXfeZKkks.mft
rsync://rpki.ripe.net/repository/DEFAULT/axa8EQuqKsnRYgwlBxdXfeZKkks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:f4:ce:7e:13:3b:06:30:4b:d3:d0:36:72:72:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b16bc110baa2ac9d1620c250717577de64a924b
Validity
Not Before: Aug 23 01:02:40 2025 GMT
Not After : Aug 24 01:02:40 2025 GMT
Subject: CN=3a7fc4b467280a0f1b23d6af2551ff0459d63e81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7c:8e:95:dd:dc:40:3b:a8:53:e9:23:3e:ca:
27:e2:46:e9:c7:55:67:e8:19:5d:09:79:53:82:25:
9a:cb:7c:c9:3a:5f:4b:71:80:0c:cd:ad:41:3a:33:
df:d1:80:33:93:d7:c4:8f:88:d8:05:7d:8a:d2:43:
14:27:f0:44:e7:a6:55:a6:95:61:8f:af:80:df:88:
69:66:cb:3e:58:dd:65:19:98:d4:47:94:ef:dd:9e:
d4:36:7f:23:d3:61:9e:0b:2b:ae:67:84:e2:0c:cb:
a9:52:be:58:36:6a:4e:1c:9d:aa:3d:96:f2:5d:45:
5f:53:fc:cd:f4:eb:38:fd:60:be:0d:e3:0c:ba:cd:
e7:83:27:50:fe:9a:29:8a:ea:c7:f7:ff:07:7c:ab:
1f:a8:9d:75:d8:83:54:c0:d7:0d:a7:ca:12:97:ef:
28:84:f9:55:85:d6:fd:14:3b:17:0a:99:ec:f4:b6:
94:af:f4:85:00:14:54:16:9e:d9:11:24:97:1a:19:
02:23:41:ba:71:4c:47:af:3b:3a:1f:9b:ef:5e:04:
b8:38:c2:61:dc:02:3d:21:9a:38:90:d5:62:f6:b4:
f6:59:ea:8c:14:28:12:2b:1d:9a:b1:1a:7a:23:f6:
46:10:a3:5e:9b:d1:0b:e8:65:b5:e6:ba:40:34:62:
b6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:7F:C4:B4:67:28:0A:0F:1B:23:D6:AF:25:51:FF:04:59:D6:3E:81
X509v3 Authority Key Identifier:
keyid:6B:16:BC:11:0B:AA:2A:C9:D1:62:0C:25:07:17:57:7D:E6:4A:92:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axa8EQuqKsnRYgwlBxdXfeZKkks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/03228c-8c98-4597-a37f-583c98a06301/1/axa8EQuqKsnRYgwlBxdXfeZKkks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/03228c-8c98-4597-a37f-583c98a06301/1/axa8EQuqKsnRYgwlBxdXfeZKkks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:51:8c:80:86:e1:19:a0:c8:f0:27:a6:99:88:1f:d4:46:6f:
4c:d7:f6:1a:78:13:ed:62:2e:72:ca:df:e5:f6:2b:d2:5f:04:
80:85:26:2d:b4:e6:2e:24:b0:59:12:74:f3:ae:ed:2b:7f:8c:
c1:19:86:47:76:cb:b8:4f:bf:20:bf:4f:92:af:d4:15:87:1b:
1e:bc:71:6b:e7:70:ea:6f:c2:f1:21:31:1c:b6:87:a8:6c:46:
59:49:a9:13:3c:96:c7:b4:6e:a7:19:05:6a:63:44:ca:61:20:
d8:9a:27:ae:a5:73:72:76:c2:22:33:ec:11:cc:09:59:03:17:
45:72:6f:fd:dd:f8:98:d7:c3:a7:12:cf:dc:b5:8e:9c:24:26:
b9:cd:22:43:ac:d2:4e:61:bb:07:c4:2f:48:b1:34:1b:8a:83:
61:4e:b8:74:42:f5:e4:7b:4a:e7:fa:87:e9:7a:d6:90:8d:71:
aa:02:20:53:c6:7c:aa:f2:2f:85:35:cb:39:05:1f:da:a8:c8:
62:ba:a2:f5:0f:e8:e5:a3:cc:92:4d:d8:95:f7:3e:57:51:ce:
1c:50:8a:bd:a8:4d:a3:99:b2:2e:04:ac:7f:b0:91:1c:23:a1:
04:d6:c9:30:28:7e:f3:64:91:a3:16:7d:87:d2:a5:90:ab:4f:
d4:cf:f4:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:29:03 2025 by rpki-client