Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/axnRvKx1IxLsTeb1vTmszjKra9Y.mft
File: axnRvKx1IxLsTeb1vTmszjKra9Y.mft (raw, json)
Hash identifier: IZeiQT7xUql7s+hDbdnjGmVseLEj3l9V5eR/m+HtuqY=
Subject key identifier: 95:7E:43:E3:3C:2A:5B:33:C7:BB:FD:EB:9F:2D:C7:ED:71:E9:F5:59
Authority key identifier: 6B:19:D1:BC:AC:75:23:12:EC:4D:E6:F5:BD:39:AC:CE:32:AB:6B:D6
Certificate issuer: /CN=6b19d1bcac752312ec4de6f5bd39acce32ab6bd6
Certificate serial: 0199FAA1409BD528670D53ECD9165158B5CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axnRvKx1IxLsTeb1vTmszjKra9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/axnRvKx1IxLsTeb1vTmszjKra9Y.mft
Manifest number: 14D6
Signing time: Sun 19 Oct 2025 04:01:35 +0000
Manifest this update: Sun 19 Oct 2025 04:01:35 +0000
Manifest next update: Mon 20 Oct 2025 04:01:35 +0000
Files and hashes: 1: LDFoqWoquL9wTVn9saN9JZc4auE.roa (hash: YdwrX0/CFiNvv9tuZOtWWVIYa8NZD1PSP+bR1o1/Vn8=)
2: axnRvKx1IxLsTeb1vTmszjKra9Y.crl (hash: 4XsCGfqzJDjG3mNxgXcG8jhH0ASt+Q0crqieaFkF6ZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/axnRvKx1IxLsTeb1vTmszjKra9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/axnRvKx1IxLsTeb1vTmszjKra9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/axnRvKx1IxLsTeb1vTmszjKra9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 04:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:a1:40:9b:d5:28:67:0d:53:ec:d9:16:51:58:b5:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b19d1bcac752312ec4de6f5bd39acce32ab6bd6
Validity
Not Before: Oct 19 04:01:35 2025 GMT
Not After : Oct 20 04:01:35 2025 GMT
Subject: CN=957e43e33c2a5b33c7bbfdeb9f2dc7ed71e9f559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:cf:81:e1:75:fb:f1:12:58:0e:ea:a7:ba:b2:
26:2c:15:bf:5b:44:35:8e:9a:35:f7:0d:3f:33:45:
62:c4:52:ce:a0:b8:83:e8:c5:57:c1:30:49:b1:74:
06:50:d6:93:75:7d:a2:4c:13:d4:d6:55:6e:5f:7d:
9d:61:ff:e7:76:f7:e6:0b:f8:65:1e:ed:66:f5:7c:
ff:5e:dd:21:2f:67:9d:c7:ed:54:3f:0a:01:9e:f7:
94:9d:e9:2d:97:f5:db:f1:9e:9d:93:d3:5c:18:d5:
b8:40:80:a9:c2:0a:8a:22:8d:9e:c3:90:bd:76:40:
04:d2:ee:1b:41:b3:bc:ac:e6:4e:9a:54:ce:23:3a:
a1:59:e2:1b:02:5d:96:50:85:4b:1d:20:90:61:29:
7a:64:2f:df:70:93:ab:ff:3b:01:fa:e9:15:e4:2a:
c4:2a:7e:09:f3:19:49:1d:4d:25:e4:10:34:4e:3a:
1a:3d:f3:33:7f:dc:11:6c:63:f7:0c:fd:8b:59:67:
a3:2f:8b:ad:18:d7:f4:e0:fd:e4:99:69:24:f1:7d:
d6:2b:71:fb:5d:c6:d8:d0:6d:2c:70:3c:6f:36:60:
41:86:e2:4d:b3:e3:3e:79:69:99:45:d7:74:d4:6d:
89:50:1d:59:0f:08:bc:14:d0:8a:af:fd:95:d1:16:
f1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:7E:43:E3:3C:2A:5B:33:C7:BB:FD:EB:9F:2D:C7:ED:71:E9:F5:59
X509v3 Authority Key Identifier:
keyid:6B:19:D1:BC:AC:75:23:12:EC:4D:E6:F5:BD:39:AC:CE:32:AB:6B:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axnRvKx1IxLsTeb1vTmszjKra9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/axnRvKx1IxLsTeb1vTmszjKra9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/axnRvKx1IxLsTeb1vTmszjKra9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:e0:d1:94:c7:a9:c1:b5:1b:a0:ee:76:b0:c0:75:c9:3e:2d:
13:a0:6b:9e:aa:1d:1e:f4:50:90:8c:b5:16:2c:1c:36:f0:f8:
e0:c0:1c:4b:69:3d:6d:35:e7:31:61:6a:d6:a7:8d:1f:10:91:
f0:59:00:d0:55:b9:fb:d0:42:ec:a1:e3:d1:41:ca:92:01:6c:
a6:2e:25:b9:d1:fb:a9:a5:a5:99:ca:19:97:26:f2:33:59:ff:
d0:7f:20:7e:3e:86:8b:db:6c:63:f9:a9:21:bd:5e:d8:1d:4b:
c0:0f:17:90:19:92:4c:91:00:13:da:a7:68:1f:5e:aa:da:71:
67:9c:ff:21:62:18:bc:78:13:8b:2a:b8:35:8c:02:a1:96:37:
99:ea:64:76:69:12:69:8f:06:e3:ec:82:32:44:10:3e:9a:4a:
e7:41:e2:c4:f5:b9:00:60:9c:49:fe:42:06:43:1d:fa:02:c1:
4a:ab:05:9d:48:64:7a:7a:b1:24:59:5a:d9:aa:a6:4e:e7:68:
b0:be:b2:ab:85:b2:8c:fc:ee:19:67:4a:9b:5d:26:06:29:ca:
c2:25:dd:da:18:0c:ea:58:9f:61:4d:ab:d6:e5:7b:c2:26:1e:
57:c5:f0:72:7a:f7:de:3e:66:42:b5:4f:9a:15:e6:81:45:a6:
d8:a2:7f:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn6oUCb1ShnDVPs2RZRWLXNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiMTlkMWJjYWM3NTIzMTJlYzRkZTZmNWJkMzlhY2NlMzJh
YjZiZDYwHhcNMjUxMDE5MDQwMTM1WhcNMjUxMDIwMDQwMTM1WjAzMTEwLwYDVQQD
Eyg5NTdlNDNlMzNjMmE1YjMzYzdiYmZkZWI5ZjJkYzdlZDcxZTlmNTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlM+B4XX78RJYDuqnurImLBW/W0Q1
jpo19w0/M0VixFLOoLiD6MVXwTBJsXQGUNaTdX2iTBPU1lVuX32dYf/ndvfmC/hl
Hu1m9Xz/Xt0hL2edx+1UPwoBnveUnektl/Xb8Z6dk9NcGNW4QICpwgqKIo2ew5C9
dkAE0u4bQbO8rOZOmlTOIzqhWeIbAl2WUIVLHSCQYSl6ZC/fcJOr/zsB+ukV5CrE
Kn4J8xlJHU0l5BA0TjoaPfMzf9wRbGP3DP2LWWejL4utGNf04P3kmWkk8X3WK3H7
XcbY0G0scDxvNmBBhuJNs+M+eWmZRdd01G2JUB1ZDwi8FNCKr/2V0RbxLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJV+Q+M8Klszx7v9658tx+1x6fVZMB8GA1UdIwQY
MBaAFGsZ0bysdSMS7E3m9b05rM4yq2vWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXhuUnZLeDFJeExzVGViMXZUbXN6aktyYTlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC83Nzc3NDYtZmJlZi00ZTU4LWFmZGYt
YjU1MWU0OTQzNWEyLzEvYXhuUnZLeDFJeExzVGViMXZUbXN6aktyYTlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC83Nzc3NDYtZmJlZi00ZTU4LWFmZGYtYjU1MWU0OTQzNWEy
LzEvYXhuUnZLeDFJeExzVGViMXZUbXN6aktyYTlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASuDRlMep
wbUboO52sMB1yT4tE6BrnqodHvRQkIy1FiwcNvD44MAcS2k9bTXnMWFq1qeNHxCR
8FkA0FW5+9BC7KHj0UHKkgFspi4ludH7qaWlmcoZlybyM1n/0H8gfj6Gi9tsY/mp
Ib1e2B1LwA8XkBmSTJEAE9qnaB9eqtpxZ5z/IWIYvHgTiyq4NYwCoZY3mepkdmkS
aY8G4+yCMkQQPppK50HixPW5AGCcSf5CBkMd+gLBSqsFnUhkenqxJFla2aqmTudo
sL6yq4WyjPzuGWdKm10mBinKwiXd2hgM6lifYU2r1uV7wiYeV8Xwcnr33j5mQrVP
mhXmgUWm2KJ/0Q==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:14:12 2025 by rpki-client