Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/dff181-2b76-4ca2-96e4-6b158b22b48f/1/AxRRSJegqj_79FtIYGEkYn8V5QY.mft
File: AxRRSJegqj_79FtIYGEkYn8V5QY.mft (raw, json)
Hash identifier: 248RGJQrZBjQPylYvberEFsthHcHWGQ+D3TapY7XfUc=
Subject key identifier: 97:17:32:91:E0:C8:87:26:F2:E7:AF:1A:4C:43:29:6C:1F:04:08:4D
Authority key identifier: 03:14:51:48:97:A0:AA:3F:FB:F4:5B:48:60:61:24:62:7F:15:E5:06
Certificate issuer: /CN=0314514897a0aa3ffbf45b48606124627f15e506
Certificate serial: 0199FFC8AEB9F9B56CD7A8D998121AE3DC09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AxRRSJegqj_79FtIYGEkYn8V5QY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/dff181-2b76-4ca2-96e4-6b158b22b48f/1/AxRRSJegqj_79FtIYGEkYn8V5QY.mft
Manifest number: 1065
Signing time: Mon 20 Oct 2025 04:02:45 +0000
Manifest this update: Mon 20 Oct 2025 04:02:45 +0000
Manifest next update: Tue 21 Oct 2025 04:02:45 +0000
Files and hashes: 1: AxRRSJegqj_79FtIYGEkYn8V5QY.crl (hash: MK03KWGnIy8k/tHZpkWcsoQvaVJHmXF9gQPvcp2rTOQ=)
2: GNbx1AkAYLoFm6m_mtXwLVmpV74.roa (hash: YFrQLxcCpcb9UJSugeyFwUHTNma06dw5BDIyFPPH3Gs=)
3: JFc-fPYxRwpWTL5aYEEZGZcBLZI.roa (hash: QC2E/f+bgiIyYcCoCVg6tWDTa7s+wgp5cwum53PFTzc=)
4: hMX16ycD_uk-plT2tgBVk_QRIts.roa (hash: BUm/1cBRJ7uJXrwWDMYU8YunYRBuyMSTCIxHnMPsW0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/dff181-2b76-4ca2-96e4-6b158b22b48f/1/AxRRSJegqj_79FtIYGEkYn8V5QY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/dff181-2b76-4ca2-96e4-6b158b22b48f/1/AxRRSJegqj_79FtIYGEkYn8V5QY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AxRRSJegqj_79FtIYGEkYn8V5QY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:ae:b9:f9:b5:6c:d7:a8:d9:98:12:1a:e3:dc:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0314514897a0aa3ffbf45b48606124627f15e506
Validity
Not Before: Oct 20 04:02:45 2025 GMT
Not After : Oct 21 04:02:45 2025 GMT
Subject: CN=97173291e0c88726f2e7af1a4c43296c1f04084d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:68:a4:e5:ee:70:a9:4e:fb:1d:b6:b4:e2:fe:
a5:79:62:1c:a8:ac:75:85:bc:f7:2c:46:55:bf:ba:
ee:e3:0b:58:f6:7b:0e:5c:74:ee:0e:cf:78:eb:1f:
e9:7d:61:02:47:51:b7:7a:66:42:b0:2a:69:a1:95:
74:55:fe:8a:9c:1b:78:d8:cf:c1:50:20:f5:34:33:
1d:94:bd:29:52:76:9f:59:4f:62:62:cb:3c:e6:e8:
59:cd:01:c0:7e:02:19:0f:a2:4d:3b:26:56:44:17:
c7:65:77:68:99:f3:fc:b7:bb:2f:62:8b:20:cd:75:
da:92:e9:c2:3e:35:84:b3:94:b4:16:50:73:90:ec:
c2:6e:d0:c8:04:d1:1d:62:e1:4a:06:c9:55:58:b4:
40:58:f0:a7:32:34:12:06:e0:a8:21:f3:21:2e:2c:
79:dd:a7:d3:ab:a6:11:34:f1:29:09:96:38:14:8e:
02:9f:aa:46:c9:6b:6a:a9:1d:b7:63:5b:da:ea:ad:
15:14:61:70:8e:61:ce:f7:6a:ad:ec:bc:dd:98:89:
fe:66:63:bf:1b:ba:e8:cb:cd:7f:a0:a6:cf:a6:de:
e2:77:5a:77:3b:f4:18:82:b2:45:b7:98:e3:f5:d4:
a8:06:a8:25:5d:02:d5:09:b8:86:13:90:49:eb:db:
a9:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:17:32:91:E0:C8:87:26:F2:E7:AF:1A:4C:43:29:6C:1F:04:08:4D
X509v3 Authority Key Identifier:
keyid:03:14:51:48:97:A0:AA:3F:FB:F4:5B:48:60:61:24:62:7F:15:E5:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AxRRSJegqj_79FtIYGEkYn8V5QY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/dff181-2b76-4ca2-96e4-6b158b22b48f/1/AxRRSJegqj_79FtIYGEkYn8V5QY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/dff181-2b76-4ca2-96e4-6b158b22b48f/1/AxRRSJegqj_79FtIYGEkYn8V5QY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:b9:1f:52:04:94:96:f6:af:39:f4:a2:a6:b4:07:00:0a:44:
9e:5d:b8:db:eb:19:13:fb:d4:28:05:84:1c:ed:98:a1:b4:ed:
65:53:1c:47:2a:00:67:96:c3:69:24:4c:22:87:5f:16:78:de:
d4:52:e6:2a:d9:d4:2f:74:9d:05:cf:a6:87:00:5a:e3:97:e2:
7f:6b:e7:0f:8f:aa:1b:fe:e2:0f:13:b7:03:b6:8d:aa:a6:3b:
57:dd:bd:77:90:48:af:51:5c:f3:ec:75:b8:70:08:ea:06:f4:
4f:fa:a5:32:f0:ce:07:01:01:18:42:6c:cf:03:2c:44:35:10:
0f:2c:f7:8f:1f:76:f1:26:47:70:1b:78:41:b0:e5:c5:b7:70:
0f:54:9b:5f:39:b5:ed:f5:04:43:8a:05:42:6a:83:f1:36:3f:
4e:de:76:92:99:43:93:85:f8:5d:d2:fa:f5:66:2a:43:bf:3f:
7f:77:ea:a1:2f:6d:29:80:16:7a:fa:cd:01:d8:30:24:81:c9:
55:11:57:13:fa:ba:c2:5e:ee:b1:80:55:d5:18:b7:05:81:b2:
26:b0:8d:42:1b:58:71:7c:63:34:f0:19:78:3a:89:1c:e3:b1:
69:ab:84:cc:15:bf:9c:94:33:1a:fd:94:94:c8:f6:55:8a:4c:
16:2c:40:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/yK65+bVs16jZmBIa49wJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzMTQ1MTQ4OTdhMGFhM2ZmYmY0NWI0ODYwNjEyNDYyN2Yx
NWU1MDYwHhcNMjUxMDIwMDQwMjQ1WhcNMjUxMDIxMDQwMjQ1WjAzMTEwLwYDVQQD
Eyg5NzE3MzI5MWUwYzg4NzI2ZjJlN2FmMWE0YzQzMjk2YzFmMDQwODRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2ik5e5wqU77Hba04v6leWIcqKx1
hbz3LEZVv7ru4wtY9nsOXHTuDs946x/pfWECR1G3emZCsCppoZV0Vf6KnBt42M/B
UCD1NDMdlL0pUnafWU9iYss85uhZzQHAfgIZD6JNOyZWRBfHZXdomfP8t7svYosg
zXXakunCPjWEs5S0FlBzkOzCbtDIBNEdYuFKBslVWLRAWPCnMjQSBuCoIfMhLix5
3afTq6YRNPEpCZY4FI4Cn6pGyWtqqR23Y1va6q0VFGFwjmHO92qt7LzdmIn+ZmO/
G7roy81/oKbPpt7id1p3O/QYgrJFt5jj9dSoBqglXQLVCbiGE5BJ69upwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJcXMpHgyIcm8uevGkxDKWwfBAhNMB8GA1UdIwQY
MBaAFAMUUUiXoKo/+/RbSGBhJGJ/FeUGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXhSUlNKZWdxal83OUZ0SVlHRWtZbjhWNVFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9kZmYxODEtMmI3Ni00Y2EyLTk2ZTQt
NmIxNThiMjJiNDhmLzEvQXhSUlNKZWdxal83OUZ0SVlHRWtZbjhWNVFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi9kZmYxODEtMmI3Ni00Y2EyLTk2ZTQtNmIxNThiMjJiNDhm
LzEvQXhSUlNKZWdxal83OUZ0SVlHRWtZbjhWNVFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiLkfUgSU
lvavOfSiprQHAApEnl242+sZE/vUKAWEHO2YobTtZVMcRyoAZ5bDaSRMIodfFnje
1FLmKtnUL3SdBc+mhwBa45fif2vnD4+qG/7iDxO3A7aNqqY7V929d5BIr1Fc8+x1
uHAI6gb0T/qlMvDOBwEBGEJszwMsRDUQDyz3jx928SZHcBt4QbDlxbdwD1SbXzm1
7fUEQ4oFQmqD8TY/Tt52kplDk4X4XdL69WYqQ78/f3fqoS9tKYAWevrNAdgwJIHJ
VRFXE/q6wl7usYBV1Ri3BYGyJrCNQhtYcXxjNPAZeDqJHOOxaauEzBW/nJQzGv2U
lMj2VYpMFixAig==
-----END CERTIFICATE-----
Generated at Mon Oct 20 06:59:49 2025 by rpki-client