Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/d31a90-dd8c-4800-b92d-94353fc9b2af/1/axJMeKp4A8OiPc1y0Nwa6uXe18w.mft
File: axJMeKp4A8OiPc1y0Nwa6uXe18w.mft (raw, json)
Hash identifier: uLY0RKMV4ewlqOcHsCQtSDKNxE9OmdmJHMI84qV5vLc=
Subject key identifier: EF:FB:E8:84:DD:21:8B:D8:0F:27:A3:EC:54:88:24:CE:8E:13:E4:C0
Authority key identifier: 6B:12:4C:78:AA:78:03:C3:A2:3D:CD:72:D0:DC:1A:EA:E5:DE:D7:CC
Certificate issuer: /CN=6b124c78aa7803c3a23dcd72d0dc1aeae5ded7cc
Certificate serial: 0199FC2172EC39E31C89976D98A2BEF5B32B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axJMeKp4A8OiPc1y0Nwa6uXe18w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/d31a90-dd8c-4800-b92d-94353fc9b2af/1/axJMeKp4A8OiPc1y0Nwa6uXe18w.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 11:01:14 +0000
Manifest this update: Sun 19 Oct 2025 11:01:14 +0000
Manifest next update: Mon 20 Oct 2025 11:01:14 +0000
Files and hashes: 1: axJMeKp4A8OiPc1y0Nwa6uXe18w.crl (hash: ouVGaxi4nZ7ry5R2r6r0SHP1lTkmWV+krJOx/DN1QUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/d31a90-dd8c-4800-b92d-94353fc9b2af/1/axJMeKp4A8OiPc1y0Nwa6uXe18w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/d31a90-dd8c-4800-b92d-94353fc9b2af/1/axJMeKp4A8OiPc1y0Nwa6uXe18w.mft
rsync://rpki.ripe.net/repository/DEFAULT/axJMeKp4A8OiPc1y0Nwa6uXe18w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:72:ec:39:e3:1c:89:97:6d:98:a2:be:f5:b3:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b124c78aa7803c3a23dcd72d0dc1aeae5ded7cc
Validity
Not Before: Oct 19 11:01:14 2025 GMT
Not After : Oct 20 11:01:14 2025 GMT
Subject: CN=effbe884dd218bd80f27a3ec548824ce8e13e4c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:79:13:2d:a1:25:97:d9:df:06:14:b9:ea:e2:
e9:33:9b:4a:34:76:93:81:6d:b4:8e:5d:2e:93:90:
ef:da:99:39:be:09:1b:39:29:dc:15:ad:3a:e7:96:
c6:9e:69:6d:c5:21:a0:52:e4:98:20:58:bd:dc:fd:
8a:96:69:c1:3c:dc:59:d3:7b:55:e5:84:58:c5:a1:
7c:48:a7:f4:12:7c:0d:8c:73:60:49:f1:5f:07:94:
69:df:41:7a:ea:bd:72:95:1e:b6:39:13:8a:3b:ab:
32:77:ca:78:98:a3:7b:24:a1:f1:8f:e3:e0:8b:65:
20:8d:fe:2b:26:e8:20:2b:57:a2:e7:bb:c8:73:64:
63:d6:f1:0c:88:4e:37:1b:6c:a3:0a:c8:e2:ed:d8:
40:c3:ae:ca:67:c7:48:41:5e:c2:f1:3c:85:5f:03:
8f:cb:13:40:59:61:4a:be:72:49:ae:5a:36:e9:73:
e0:9e:6b:82:45:91:19:38:97:34:43:fe:24:84:1b:
3e:08:11:e4:2c:21:ea:8a:f4:8c:92:16:e1:a3:dd:
66:d8:81:46:48:82:55:ba:12:7f:9b:1f:43:52:5f:
63:18:f9:3d:96:14:7c:e3:5d:15:f8:b5:d7:74:f0:
da:63:80:9c:7a:be:00:f8:7e:d7:ef:2f:28:48:b6:
d1:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:FB:E8:84:DD:21:8B:D8:0F:27:A3:EC:54:88:24:CE:8E:13:E4:C0
X509v3 Authority Key Identifier:
keyid:6B:12:4C:78:AA:78:03:C3:A2:3D:CD:72:D0:DC:1A:EA:E5:DE:D7:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axJMeKp4A8OiPc1y0Nwa6uXe18w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d31a90-dd8c-4800-b92d-94353fc9b2af/1/axJMeKp4A8OiPc1y0Nwa6uXe18w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d31a90-dd8c-4800-b92d-94353fc9b2af/1/axJMeKp4A8OiPc1y0Nwa6uXe18w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:fb:db:ad:5c:79:d8:be:09:51:24:c2:0f:2a:d1:3d:4c:0e:
af:22:b8:f3:ec:16:d9:8c:2e:b7:01:bd:db:58:af:4d:8c:48:
b2:ba:b9:aa:95:27:7b:bf:88:82:99:57:1d:86:6c:89:81:68:
df:17:7b:5d:5a:53:4e:7d:86:72:c3:a7:95:75:5a:31:84:38:
73:9b:05:10:2d:36:91:97:3d:af:95:a0:d0:b5:24:84:75:5b:
1e:ed:94:78:4b:d6:34:49:b7:b5:29:13:4f:d7:12:c9:b9:01:
9d:b6:b0:68:c4:32:35:5a:1a:81:91:0a:fb:2f:3f:05:9b:37:
25:67:35:8a:6d:70:d0:8c:df:7e:92:09:fb:c4:1e:07:29:7d:
60:7f:07:50:29:1c:cb:d9:1b:3a:00:50:bd:d1:60:7c:47:b8:
71:b6:70:5e:d0:cf:24:48:61:b8:94:d5:f1:2b:18:93:3f:92:
0c:01:cd:a0:01:f5:56:ea:78:31:b3:b3:11:f5:b6:bf:81:ac:
18:46:a5:fc:7f:bf:e4:e6:ed:51:95:b9:c0:65:54:da:46:08:
72:3b:df:c7:67:14:cd:d4:d0:6f:94:02:b7:01:7e:f9:d9:63:
d7:cf:de:43:86:b3:10:3d:5b:57:64:27:ac:76:e0:b4:e8:42:
1b:1a:31:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IXLsOeMciZdtmKK+9bMrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiMTI0Yzc4YWE3ODAzYzNhMjNkY2Q3MmQwZGMxYWVhZTVk
ZWQ3Y2MwHhcNMjUxMDE5MTEwMTE0WhcNMjUxMDIwMTEwMTE0WjAzMTEwLwYDVQQD
EyhlZmZiZTg4NGRkMjE4YmQ4MGYyN2EzZWM1NDg4MjRjZThlMTNlNGMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXkTLaEll9nfBhS56uLpM5tKNHaT
gW20jl0uk5Dv2pk5vgkbOSncFa0655bGnmltxSGgUuSYIFi93P2KlmnBPNxZ03tV
5YRYxaF8SKf0EnwNjHNgSfFfB5Rp30F66r1ylR62OROKO6syd8p4mKN7JKHxj+Pg
i2Ugjf4rJuggK1ei57vIc2Rj1vEMiE43G2yjCsji7dhAw67KZ8dIQV7C8TyFXwOP
yxNAWWFKvnJJrlo26XPgnmuCRZEZOJc0Q/4khBs+CBHkLCHqivSMkhbho91m2IFG
SIJVuhJ/mx9DUl9jGPk9lhR8410V+LXXdPDaY4Ccer4A+H7X7y8oSLbRYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO/76ITdIYvYDyej7FSIJM6OE+TAMB8GA1UdIwQY
MBaAFGsSTHiqeAPDoj3NctDcGurl3tfMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXhKTWVLcDRBOE9pUGMxeTBOd2E2dVhlMTh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9kMzFhOTAtZGQ4Yy00ODAwLWI5MmQt
OTQzNTNmYzliMmFmLzEvYXhKTWVLcDRBOE9pUGMxeTBOd2E2dVhlMTh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi9kMzFhOTAtZGQ4Yy00ODAwLWI5MmQtOTQzNTNmYzliMmFm
LzEvYXhKTWVLcDRBOE9pUGMxeTBOd2E2dVhlMTh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjvvbrVx5
2L4JUSTCDyrRPUwOryK48+wW2YwutwG921ivTYxIsrq5qpUne7+IgplXHYZsiYFo
3xd7XVpTTn2GcsOnlXVaMYQ4c5sFEC02kZc9r5Wg0LUkhHVbHu2UeEvWNEm3tSkT
T9cSybkBnbawaMQyNVoagZEK+y8/BZs3JWc1im1w0IzffpIJ+8QeByl9YH8HUCkc
y9kbOgBQvdFgfEe4cbZwXtDPJEhhuJTV8SsYkz+SDAHNoAH1Vup4MbOzEfW2v4Gs
GEal/H+/5ObtUZW5wGVU2kYIcjvfx2cUzdTQb5QCtwF++dlj18/eQ4azED1bV2Qn
rHbgtOhCGxoxug==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:44 2025 by rpki-client