Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/03228c-8c98-4597-a37f-583c98a06301/1/axa8EQuqKsnRYgwlBxdXfeZKkks.mft
File: axa8EQuqKsnRYgwlBxdXfeZKkks.mft (raw, json)
Hash identifier: 2WRxPSgPFEhAmxM1z5Z3GMbnKmtI5HaGHi+lZ4qyO90=
Subject key identifier: 40:52:3F:1C:20:E8:97:76:05:DD:61:81:F2:01:40:84:A5:A4:5F:0C
Authority key identifier: 6B:16:BC:11:0B:AA:2A:C9:D1:62:0C:25:07:17:57:7D:E6:4A:92:4B
Certificate issuer: /CN=6b16bc110baa2ac9d1620c250717577de64a924b
Certificate serial: 0197B8903E2D7E2D16D436446AFB5C532977
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axa8EQuqKsnRYgwlBxdXfeZKkks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/03228c-8c98-4597-a37f-583c98a06301/1/axa8EQuqKsnRYgwlBxdXfeZKkks.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 22:02:30 +0000
Manifest this update: Sat 28 Jun 2025 22:02:30 +0000
Manifest next update: Sun 29 Jun 2025 22:02:30 +0000
Files and hashes: 1: axa8EQuqKsnRYgwlBxdXfeZKkks.crl (hash: r71ALUu7XRPUzysJyGtwCtPN7SANgLU6rC5fsSQbKoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/03228c-8c98-4597-a37f-583c98a06301/1/axa8EQuqKsnRYgwlBxdXfeZKkks.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/03228c-8c98-4597-a37f-583c98a06301/1/axa8EQuqKsnRYgwlBxdXfeZKkks.mft
rsync://rpki.ripe.net/repository/DEFAULT/axa8EQuqKsnRYgwlBxdXfeZKkks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:3e:2d:7e:2d:16:d4:36:44:6a:fb:5c:53:29:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b16bc110baa2ac9d1620c250717577de64a924b
Validity
Not Before: Jun 28 22:02:30 2025 GMT
Not After : Jun 29 22:02:30 2025 GMT
Subject: CN=40523f1c20e8977605dd6181f2014084a5a45f0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:33:aa:7c:35:1d:5d:1c:4f:7a:cf:34:a2:6d:
88:8e:63:3b:17:3d:72:e9:8d:7e:b4:89:5c:d5:56:
57:96:f7:a0:f3:28:e9:df:8d:99:25:9f:fe:2c:db:
22:da:02:69:9c:9b:49:ab:af:a1:37:8a:7b:3f:75:
23:9e:2f:70:ab:68:c7:73:73:79:b7:9b:00:54:82:
25:5b:1e:43:fd:5f:5b:e0:fe:39:1e:5e:e2:5c:e8:
8d:25:4b:a1:fb:18:73:16:56:e0:c1:c2:8e:f5:4f:
b6:22:e2:6c:68:ec:2e:39:d5:be:e8:ce:2c:06:a8:
56:1c:7a:22:67:12:da:93:68:61:e8:47:20:2a:88:
03:6c:c4:fc:a6:54:d1:6a:62:ce:e7:af:cf:e7:dc:
cd:63:fc:a4:cd:d6:db:60:8a:d9:0c:03:99:94:31:
55:f2:24:0f:3d:99:e6:a8:9a:a5:17:18:b2:a4:24:
81:eb:f2:91:b4:f7:77:58:8d:a9:05:fd:e9:79:8f:
92:f5:12:03:29:d7:ea:df:c8:77:be:c4:d5:89:8d:
98:01:10:9a:95:5b:0b:b4:65:e2:1d:97:78:1c:15:
66:48:96:7a:3b:5f:25:59:74:34:fc:54:bb:cb:06:
0a:89:13:96:90:68:cb:5b:7a:30:ce:4b:ce:7f:8c:
96:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:52:3F:1C:20:E8:97:76:05:DD:61:81:F2:01:40:84:A5:A4:5F:0C
X509v3 Authority Key Identifier:
keyid:6B:16:BC:11:0B:AA:2A:C9:D1:62:0C:25:07:17:57:7D:E6:4A:92:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axa8EQuqKsnRYgwlBxdXfeZKkks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/03228c-8c98-4597-a37f-583c98a06301/1/axa8EQuqKsnRYgwlBxdXfeZKkks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/03228c-8c98-4597-a37f-583c98a06301/1/axa8EQuqKsnRYgwlBxdXfeZKkks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:bc:d2:55:fb:30:23:04:38:ec:a7:f6:b2:af:1c:9f:9d:df:
6e:2b:c6:98:c2:09:2f:0e:55:42:59:ae:c2:93:b0:51:60:31:
72:7c:e6:ae:5d:c9:96:3d:d2:f2:ab:b4:9b:cd:15:5d:62:59:
92:dd:42:ec:96:67:80:36:71:e7:bf:4b:f8:ab:cf:8b:b4:bf:
8b:d9:9d:8f:ce:cd:1c:9b:3b:07:6b:0d:68:d6:7d:ac:a1:f7:
c6:27:93:01:bf:bc:69:d7:03:71:e2:e8:12:4c:19:e5:8d:0f:
ee:cb:4b:21:1a:72:87:58:ef:fe:f4:6f:f8:67:41:38:11:c0:
4e:09:e5:85:f4:f7:da:dd:f4:8f:d6:71:5a:9c:a0:10:74:84:
74:26:de:59:84:0e:9a:eb:12:44:ec:4b:12:f4:ae:06:8e:1c:
8a:61:e8:0f:f4:c2:c3:57:bf:8e:7b:72:ec:9a:27:e3:e6:63:
21:2b:d4:7a:03:ae:a5:b4:2e:62:bb:59:db:d5:e7:68:af:d0:
ad:a4:f8:67:d3:13:f7:1b:aa:a6:63:85:60:2f:44:ce:ef:72:
f8:e0:b6:ff:29:9e:eb:94:80:ef:d2:a3:7c:eb:8a:22:3b:47:
0e:ea:91:85:65:df:03:30:5e:8f:fa:72:4d:30:31:b8:13:a7:
21:14:2a:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4kD4tfi0W1DZEavtcUyl3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiMTZiYzExMGJhYTJhYzlkMTYyMGMyNTA3MTc1NzdkZTY0
YTkyNGIwHhcNMjUwNjI4MjIwMjMwWhcNMjUwNjI5MjIwMjMwWjAzMTEwLwYDVQQD
Eyg0MDUyM2YxYzIwZTg5Nzc2MDVkZDYxODFmMjAxNDA4NGE1YTQ1ZjBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDOqfDUdXRxPes80om2IjmM7Fz1y
6Y1+tIlc1VZXlveg8yjp342ZJZ/+LNsi2gJpnJtJq6+hN4p7P3Ujni9wq2jHc3N5
t5sAVIIlWx5D/V9b4P45Hl7iXOiNJUuh+xhzFlbgwcKO9U+2IuJsaOwuOdW+6M4s
BqhWHHoiZxLak2hh6EcgKogDbMT8plTRamLO56/P59zNY/ykzdbbYIrZDAOZlDFV
8iQPPZnmqJqlFxiypCSB6/KRtPd3WI2pBf3peY+S9RIDKdfq38h3vsTViY2YARCa
lVsLtGXiHZd4HBVmSJZ6O18lWXQ0/FS7ywYKiROWkGjLW3owzkvOf4yWEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEBSPxwg6Jd2Bd1hgfIBQISlpF8MMB8GA1UdIwQY
MBaAFGsWvBELqirJ0WIMJQcXV33mSpJLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXhhOEVRdXFLc25SWWd3bEJ4ZFhmZVpLa2tzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8wMzIyOGMtOGM5OC00NTk3LWEzN2Yt
NTgzYzk4YTA2MzAxLzEvYXhhOEVRdXFLc25SWWd3bEJ4ZFhmZVpLa2tzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8wMzIyOGMtOGM5OC00NTk3LWEzN2YtNTgzYzk4YTA2MzAx
LzEvYXhhOEVRdXFLc25SWWd3bEJ4ZFhmZVpLa2tzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARbzSVfsw
IwQ47Kf2sq8cn53fbivGmMIJLw5VQlmuwpOwUWAxcnzmrl3Jlj3S8qu0m80VXWJZ
kt1C7JZngDZx579L+KvPi7S/i9mdj87NHJs7B2sNaNZ9rKH3xieTAb+8adcDceLo
EkwZ5Y0P7stLIRpyh1jv/vRv+GdBOBHATgnlhfT32t30j9ZxWpygEHSEdCbeWYQO
musSROxLEvSuBo4cimHoD/TCw1e/jnty7Jon4+ZjISvUegOupbQuYrtZ29XnaK/Q
raT4Z9MT9xuqpmOFYC9Ezu9y+OC2/yme65SA79KjfOuKIjtHDuqRhWXfAzBej/py
TTAxuBOnIRQqlQ==
-----END CERTIFICATE-----
Generated at Sun Jun 29 01:19:42 2025 by rpki-client