Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft
File: AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft (raw, json)
Hash identifier: HJ3M2c7u/thc1Y07K1W1UPWFetUQlmD8wlBvkxS0LK0=
Subject key identifier: BF:C8:B4:2A:49:E0:4B:EC:3B:7E:28:87:C0:37:D0:3E:87:03:FB:B8
Authority key identifier: 01:70:A1:69:B6:CD:41:10:22:27:9E:9F:F9:97:F1:34:FF:54:AB:1C
Certificate issuer: /CN=0170a169b6cd411022279e9ff997f134ff54ab1c
Certificate serial: 0197B632E1CCE97CA395EB35EA44D68AF84B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft
Manifest number: 15D0
Signing time: Sat 28 Jun 2025 11:01:17 +0000
Manifest this update: Sat 28 Jun 2025 11:01:17 +0000
Manifest next update: Sun 29 Jun 2025 11:01:17 +0000
Files and hashes: 1: 6VwRzGeN7Aw-2-kYrAIearsgeJI.roa (hash: 1RBt0EOiw+gmhCcV4qD8Gl3QveqKsX3A4AQ+JvudWRY=)
2: AXChabbNQRAiJ56f-ZfxNP9Uqxw.crl (hash: Ru8dvOUwDmcmKw3Pijm8UtePb2AgWtK/mJu3S2wFJ94=)
3: JCW68n0UPKZzTNycehy0nOKt_SQ.roa (hash: xagTy4CETOR7QjlY2gwlZcZ/87Osop33VWrjyllfqWE=)
4: L28NpBoao3Pa3xUMhUeIlTWycwI.roa (hash: JJ0Hw6tLmgmw+4N0PuUc739/Jd0W5Amgk51pa7BbiAk=)
5: VVRY07iRTEEycoKIAJjRSdP3o6g.roa (hash: QFJZLz+BqIPUbLAJZm4UbjmkbfUJbRCSYAqaN0ZNqjE=)
6: e423f_-NPWho20AuEAOYRpyN6jM.roa (hash: tXv/VSvWDPTQ0prFPO2ksP8QPbj+CoxENFkaBtfDf3U=)
7: nPAKjAAoFG29o9HUftfFBEfMFCA.roa (hash: GUJpwCvRmlnfqQiht/UJ9wNSb1SaXrQjJ5l7dujYT70=)
8: pOqffGGCQYYN_siJmYMpXmSRmg0.roa (hash: Acfh5YPvoqcizngQKdjsqWY7Hx9vwBTM5cRSt1VSioY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 11:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:e1:cc:e9:7c:a3:95:eb:35:ea:44:d6:8a:f8:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0170a169b6cd411022279e9ff997f134ff54ab1c
Validity
Not Before: Jun 28 11:01:17 2025 GMT
Not After : Jun 29 11:01:17 2025 GMT
Subject: CN=bfc8b42a49e04bec3b7e2887c037d03e8703fbb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:71:fa:fc:af:65:d1:8a:ac:5c:e1:5b:07:ec:
1a:ff:7c:08:bd:71:e0:95:20:71:13:ef:54:5c:fd:
6c:d6:97:de:01:04:52:b9:54:c5:e1:4e:63:35:9e:
e7:8e:2e:4a:45:e5:f1:82:87:26:9d:8c:df:cd:11:
ed:07:73:57:5c:84:8c:c2:cc:15:5c:45:e2:72:b1:
5a:59:b8:51:9d:52:3b:09:b9:13:0f:7a:82:cd:7a:
5e:43:52:d2:9b:14:89:14:57:ca:e0:22:a0:b4:f9:
63:89:9a:a6:de:32:ac:56:18:b2:d0:98:f9:ac:7b:
38:6f:d1:1f:fb:53:18:de:41:b0:64:57:5c:42:14:
3e:07:19:5b:a5:47:a7:07:67:2d:7b:f9:c1:78:c0:
be:bb:cc:47:c4:bc:55:fa:3a:8d:5d:7d:ae:a1:08:
b0:54:3a:f2:66:d4:d6:ad:c7:e7:25:b6:59:05:ac:
ec:76:a6:45:62:39:00:df:db:51:f9:cb:e2:24:2f:
6d:a5:53:67:57:d9:42:cf:18:54:10:dd:0e:bf:56:
d0:d0:db:97:b7:c8:4d:4b:06:3a:40:6b:40:29:1e:
9a:b9:63:23:60:53:89:ec:7e:f7:8f:d6:fe:5b:ec:
64:80:33:07:30:33:0a:c7:a7:9e:09:1b:79:ce:65:
68:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:C8:B4:2A:49:E0:4B:EC:3B:7E:28:87:C0:37:D0:3E:87:03:FB:B8
X509v3 Authority Key Identifier:
keyid:01:70:A1:69:B6:CD:41:10:22:27:9E:9F:F9:97:F1:34:FF:54:AB:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:59:07:95:e9:d3:d4:e6:62:72:9b:e6:0a:8f:a8:7b:36:ce:
2a:4a:b8:2d:ee:16:80:6f:e6:df:de:8b:e1:af:ff:df:0b:98:
92:b7:d4:24:e8:86:61:c4:f0:00:7b:02:b4:f9:fd:3a:6d:1f:
8f:23:71:e5:86:05:e0:07:e5:bf:bd:34:a5:14:c0:e2:b0:18:
71:33:b8:d8:48:39:89:38:39:22:7f:3c:9b:49:60:fa:a8:1c:
5b:e3:23:84:90:c8:38:c1:7f:37:c7:19:ea:a4:c6:87:9c:db:
9e:35:e8:51:c8:b4:ac:e0:68:7f:ec:a0:c1:54:b0:e0:25:da:
29:76:09:a1:4c:52:79:1c:81:8c:83:c4:d3:8b:7f:4b:40:0e:
9a:8b:1d:89:42:eb:9f:ac:8f:7c:cc:c8:aa:a4:d2:3c:be:14:
69:97:a4:5a:c8:58:78:9c:2a:6c:06:70:67:1f:14:8c:bb:49:
48:5f:08:ce:8e:27:9b:f0:44:f5:c1:69:69:da:9f:b4:af:ba:
3e:93:7e:53:d3:03:ec:99:ca:2d:35:2e:c2:cf:03:36:02:aa:
2e:0f:da:5f:02:ea:bf:98:0a:48:e2:d4:d1:bb:61:42:f5:8d:
41:49:75:8d:00:e1:a0:3d:f9:c6:db:35:c5:04:54:9d:09:3e:
a4:f0:81:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:13:18 2025 by rpki-client