Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/axnRvKx1IxLsTeb1vTmszjKra9Y.mft
File: axnRvKx1IxLsTeb1vTmszjKra9Y.mft (raw, json)
Hash identifier: 8L9LAfFgarcoY67xPJGHNgWHn0n9Ka+A2ewtZZoj8RA=
Subject key identifier: 9B:8E:F2:3D:AF:0D:DE:D9:AC:6C:BC:5E:EA:C4:3D:82:38:07:D1:BC
Authority key identifier: 6B:19:D1:BC:AC:75:23:12:EC:4D:E6:F5:BD:39:AC:CE:32:AB:6B:D6
Certificate issuer: /CN=6b19d1bcac752312ec4de6f5bd39acce32ab6bd6
Certificate serial: 0198D7058F3EA2754295E0211E1571505C81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axnRvKx1IxLsTeb1vTmszjKra9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/axnRvKx1IxLsTeb1vTmszjKra9Y.mft
Manifest number: 143F
Signing time: Sat 23 Aug 2025 13:02:02 +0000
Manifest this update: Sat 23 Aug 2025 13:02:02 +0000
Manifest next update: Sun 24 Aug 2025 13:02:02 +0000
Files and hashes: 1: LDFoqWoquL9wTVn9saN9JZc4auE.roa (hash: YdwrX0/CFiNvv9tuZOtWWVIYa8NZD1PSP+bR1o1/Vn8=)
2: axnRvKx1IxLsTeb1vTmszjKra9Y.crl (hash: U+UKLmQF44yexTFqgIXP1a8eEpKirlwEiaxdxe1o8fk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/axnRvKx1IxLsTeb1vTmszjKra9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/axnRvKx1IxLsTeb1vTmszjKra9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/axnRvKx1IxLsTeb1vTmszjKra9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:8f:3e:a2:75:42:95:e0:21:1e:15:71:50:5c:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b19d1bcac752312ec4de6f5bd39acce32ab6bd6
Validity
Not Before: Aug 23 13:02:02 2025 GMT
Not After : Aug 24 13:02:02 2025 GMT
Subject: CN=9b8ef23daf0dded9ac6cbc5eeac43d823807d1bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:46:87:1e:c1:76:e3:a0:a6:16:72:ed:fa:33:
4d:ac:d3:33:0c:98:be:08:13:9c:9b:36:f7:e8:46:
4d:0a:fe:48:49:0d:38:b7:2c:86:84:73:aa:ca:69:
db:25:11:42:01:50:e6:c5:81:65:06:c5:09:b0:c3:
1b:d7:27:21:59:19:d7:8c:72:d9:11:1a:b9:7b:1b:
21:65:da:8b:64:c7:ec:74:21:9a:2e:df:42:d9:d9:
1c:83:74:9b:43:44:ba:9c:f1:aa:b6:ee:64:86:cd:
72:d7:22:00:3a:79:53:b2:9c:3f:6a:5f:8c:79:b3:
f6:fb:12:18:c3:6c:61:c6:f9:16:52:8c:53:d0:c6:
0d:84:5e:fc:b1:ec:36:d0:f8:4d:49:96:5f:63:90:
80:6e:ea:03:15:d2:30:43:94:66:3c:15:13:d9:af:
66:b8:e3:c8:e2:8b:f6:d8:0f:97:60:bc:05:a4:65:
e4:46:84:83:be:23:41:60:82:bf:38:34:84:03:72:
1f:0c:2f:90:60:84:a2:a9:e8:8c:a3:6a:48:eb:e7:
6b:30:f4:56:dc:4f:9e:d1:21:a3:27:1c:f5:91:49:
18:89:d7:7e:0c:96:c1:a5:7e:a4:c9:fa:9e:77:5f:
a0:94:4c:8d:73:20:ad:72:7e:ba:18:b9:a0:55:26:
4b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:8E:F2:3D:AF:0D:DE:D9:AC:6C:BC:5E:EA:C4:3D:82:38:07:D1:BC
X509v3 Authority Key Identifier:
keyid:6B:19:D1:BC:AC:75:23:12:EC:4D:E6:F5:BD:39:AC:CE:32:AB:6B:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axnRvKx1IxLsTeb1vTmszjKra9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/axnRvKx1IxLsTeb1vTmszjKra9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/axnRvKx1IxLsTeb1vTmszjKra9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:b9:94:44:82:47:ed:c8:e4:fa:b2:11:e0:99:1a:c2:5b:d8:
fe:a5:99:39:f0:a8:bc:07:80:e4:32:45:d0:13:aa:aa:98:c0:
55:bc:d9:47:7a:92:0a:a5:a1:27:c0:4f:d1:a3:2a:a0:6a:ee:
80:46:2e:f0:02:6f:71:09:49:b1:29:25:68:b1:b1:20:a7:f6:
54:0e:7c:b2:a5:36:67:61:35:e5:32:18:64:42:31:a9:8d:59:
d1:d4:46:22:d4:a3:c6:52:b9:8e:17:82:6d:cb:4d:93:c0:34:
57:64:6e:95:dc:8f:de:8d:08:6b:b4:99:f1:9b:6e:21:7a:49:
95:00:a7:af:cf:ce:2a:f6:de:6c:04:d6:98:99:2e:86:2d:2b:
26:d6:a4:90:fb:09:de:43:40:64:1f:80:ea:cc:2e:f0:23:8f:
99:d0:e5:ca:8e:20:f3:92:a4:d7:12:28:a8:67:a3:29:f5:5b:
00:c9:ce:1c:50:b4:84:67:be:49:cf:72:2a:e5:0e:74:61:12:
b4:e6:55:3b:d8:61:b6:86:8b:a3:6b:51:2b:5c:90:40:d2:57:
cb:83:41:23:b4:76:e4:3d:27:f6:30:6b:55:cb:d5:18:cc:96:
b0:d3:b9:fd:4d:a1:87:3f:ad:6e:86:ec:33:79:30:7a:09:29:
46:51:98:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:31:16 2025 by rpki-client