Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/d516a3-8974-45db-8226-8174ddae31d3/1/aXIKkQPhrgDMeIxd7P4JSMhLzRs.mft
File: aXIKkQPhrgDMeIxd7P4JSMhLzRs.mft (raw, json)
Hash identifier: PICj+k8PE/sJa6aAuaPEFtS8y4DcP+fz13lF+Aha+jE=
Subject key identifier: D0:36:47:70:EC:15:1A:41:2E:99:FB:32:86:2F:F5:F1:B1:9F:B5:56
Authority key identifier: 69:72:0A:91:03:E1:AE:00:CC:78:8C:5D:EC:FE:09:48:C8:4B:CD:1B
Certificate issuer: /CN=69720a9103e1ae00cc788c5decfe0948c84bcd1b
Certificate serial: 0199FC585866465C5E9C314F7DCF7DF20AB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aXIKkQPhrgDMeIxd7P4JSMhLzRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/d516a3-8974-45db-8226-8174ddae31d3/1/aXIKkQPhrgDMeIxd7P4JSMhLzRs.mft
Manifest number: 0DF6
Signing time: Sun 19 Oct 2025 12:01:12 +0000
Manifest this update: Sun 19 Oct 2025 12:01:12 +0000
Manifest next update: Mon 20 Oct 2025 12:01:12 +0000
Files and hashes: 1: aXIKkQPhrgDMeIxd7P4JSMhLzRs.crl (hash: R4p42Ehhg3M/y6/1RLgwrFldthAlqLOp6Lh387bgZAU=)
2: jT8P4HyIvKh8r7FQFBaidUndh0Q.roa (hash: Wroxjw87hFNcZdv8/bJmsCuX0IjtBBcn8Xp1138BSK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/d516a3-8974-45db-8226-8174ddae31d3/1/aXIKkQPhrgDMeIxd7P4JSMhLzRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/d516a3-8974-45db-8226-8174ddae31d3/1/aXIKkQPhrgDMeIxd7P4JSMhLzRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/aXIKkQPhrgDMeIxd7P4JSMhLzRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:58:66:46:5c:5e:9c:31:4f:7d:cf:7d:f2:0a:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69720a9103e1ae00cc788c5decfe0948c84bcd1b
Validity
Not Before: Oct 19 12:01:12 2025 GMT
Not After : Oct 20 12:01:12 2025 GMT
Subject: CN=d0364770ec151a412e99fb32862ff5f1b19fb556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:c4:71:06:60:2f:42:60:37:cf:19:06:3e:de:
b8:ab:c8:18:12:62:5c:89:29:f8:46:35:f8:21:8c:
9d:98:2b:c6:72:4b:25:2c:5b:89:75:ec:29:43:ae:
54:cd:48:82:ed:17:f5:0b:14:5c:12:86:50:38:67:
58:5d:11:96:1d:dd:98:6b:9d:3b:5f:bc:c6:6e:5b:
67:f3:95:c9:60:ad:d2:c5:8b:79:20:be:e4:cb:ab:
d4:5a:5d:1b:24:96:b6:08:6b:34:d7:d4:8f:12:c4:
d3:04:68:39:3f:e1:29:d3:87:a2:69:dd:6c:85:cb:
20:2e:34:54:3c:4a:f8:74:aa:05:2b:49:68:05:5a:
97:9f:dd:59:60:5d:d3:72:5a:a5:1f:eb:9b:07:c6:
73:51:09:e9:12:9a:f9:8e:05:91:2c:a0:53:7c:a2:
9e:ad:34:73:25:e9:c6:04:7b:c0:d6:ab:4f:e4:f7:
c7:7d:69:f2:d1:b4:ba:46:23:98:9e:ea:13:bc:7d:
ec:12:8b:79:fe:ba:bf:cc:a1:9b:7b:0a:41:63:b2:
d3:e5:62:b3:16:28:1f:b2:4a:01:5d:be:43:f7:75:
03:3c:1d:66:83:f0:19:98:15:48:3b:1a:8c:b7:30:
cb:2d:1a:09:10:f5:56:bd:65:cc:05:b7:a3:eb:90:
c4:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:36:47:70:EC:15:1A:41:2E:99:FB:32:86:2F:F5:F1:B1:9F:B5:56
X509v3 Authority Key Identifier:
keyid:69:72:0A:91:03:E1:AE:00:CC:78:8C:5D:EC:FE:09:48:C8:4B:CD:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXIKkQPhrgDMeIxd7P4JSMhLzRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/d516a3-8974-45db-8226-8174ddae31d3/1/aXIKkQPhrgDMeIxd7P4JSMhLzRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/d516a3-8974-45db-8226-8174ddae31d3/1/aXIKkQPhrgDMeIxd7P4JSMhLzRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:23:dd:ad:39:55:df:cc:77:c9:df:1e:fa:41:30:c4:a7:76:
59:50:d3:20:09:ac:11:e8:e9:78:ad:41:7f:72:fa:a8:6e:02:
94:41:e5:9e:de:b5:f6:2f:45:b5:14:97:29:09:48:71:90:38:
a3:8f:90:08:b2:02:ab:f5:a9:a1:c9:d2:42:60:f3:e9:24:b2:
94:ac:84:c7:10:cb:a0:55:a7:70:a6:1b:a8:c7:99:a9:ce:81:
70:04:f1:c3:1f:d3:da:cf:1f:38:fd:5b:99:fd:ee:42:a2:a0:
b5:d3:2c:a9:05:30:73:a9:98:be:cf:fe:6e:33:56:b7:f9:dd:
d2:a6:23:13:89:54:93:40:4a:94:d9:f5:e3:7e:0c:52:f1:d3:
46:ea:ad:be:94:dd:9c:bb:41:2c:5c:80:40:ee:96:f7:8e:b6:
fe:9c:95:9b:1f:80:37:97:26:5c:e5:91:81:03:37:e2:3a:3e:
df:1e:aa:69:79:66:8d:43:49:b1:50:e9:7e:d7:48:5c:bb:64:
9b:16:5d:c9:06:5b:4f:09:eb:70:fd:6f:c5:2a:8c:f9:39:4f:
38:60:4f:86:f2:44:cc:5c:fb:f2:7f:40:0a:14:b0:92:8d:47:
29:8b:0a:40:9c:87:ff:46:e4:60:0b:9b:2e:1e:bd:1e:09:9b:
e7:e2:63:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WFhmRlxenDFPfc998gqxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5NzIwYTkxMDNlMWFlMDBjYzc4OGM1ZGVjZmUwOTQ4Yzg0
YmNkMWIwHhcNMjUxMDE5MTIwMTEyWhcNMjUxMDIwMTIwMTEyWjAzMTEwLwYDVQQD
EyhkMDM2NDc3MGVjMTUxYTQxMmU5OWZiMzI4NjJmZjVmMWIxOWZiNTU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6MRxBmAvQmA3zxkGPt64q8gYEmJc
iSn4RjX4IYydmCvGckslLFuJdewpQ65UzUiC7Rf1CxRcEoZQOGdYXRGWHd2Ya507
X7zGbltn85XJYK3SxYt5IL7ky6vUWl0bJJa2CGs019SPEsTTBGg5P+Ep04eiad1s
hcsgLjRUPEr4dKoFK0loBVqXn91ZYF3TclqlH+ubB8ZzUQnpEpr5jgWRLKBTfKKe
rTRzJenGBHvA1qtP5PfHfWny0bS6RiOYnuoTvH3sEot5/rq/zKGbewpBY7LT5WKz
FigfskoBXb5D93UDPB1mg/AZmBVIOxqMtzDLLRoJEPVWvWXMBbej65DEqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNA2R3DsFRpBLpn7MoYv9fGxn7VWMB8GA1UdIwQY
MBaAFGlyCpED4a4AzHiMXez+CUjIS80bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVhJS2tRUGhyZ0RNZUl4ZDdQNEpTTWhMelJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9kNTE2YTMtODk3NC00NWRiLTgyMjYt
ODE3NGRkYWUzMWQzLzEvYVhJS2tRUGhyZ0RNZUl4ZDdQNEpTTWhMelJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9kNTE2YTMtODk3NC00NWRiLTgyMjYtODE3NGRkYWUzMWQz
LzEvYVhJS2tRUGhyZ0RNZUl4ZDdQNEpTTWhMelJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsyPdrTlV
38x3yd8e+kEwxKd2WVDTIAmsEejpeK1Bf3L6qG4ClEHlnt619i9FtRSXKQlIcZA4
o4+QCLICq/WpocnSQmDz6SSylKyExxDLoFWncKYbqMeZqc6BcATxwx/T2s8fOP1b
mf3uQqKgtdMsqQUwc6mYvs/+bjNWt/nd0qYjE4lUk0BKlNn1434MUvHTRuqtvpTd
nLtBLFyAQO6W9462/pyVmx+AN5cmXOWRgQM34jo+3x6qaXlmjUNJsVDpftdIXLtk
mxZdyQZbTwnrcP1vxSqM+TlPOGBPhvJEzFz78n9AChSwko1HKYsKQJyH/0bkYAub
Lh69Hgmb5+JjhQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:54:49 2025 by rpki-client