Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft
File: AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft (raw, json)
Hash identifier: Gm4BrMcZOHX0gp6J/f6h46R4BPOlIUk9Z2DFaNWM4KU=
Subject key identifier: 1E:84:CC:86:9D:30:EA:CA:CE:3A:E6:0B:8B:DA:6B:0D:73:DD:6C:C0
Authority key identifier: 01:70:A1:69:B6:CD:41:10:22:27:9E:9F:F9:97:F1:34:FF:54:AB:1C
Certificate issuer: /CN=0170a169b6cd411022279e9ff997f134ff54ab1c
Certificate serial: 0198D5F15E6311481D3D011D4964AC4410BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft
Manifest number: 1665
Signing time: Sat 23 Aug 2025 08:00:21 +0000
Manifest this update: Sat 23 Aug 2025 08:00:21 +0000
Manifest next update: Sun 24 Aug 2025 08:00:21 +0000
Files and hashes: 1: 6VwRzGeN7Aw-2-kYrAIearsgeJI.roa (hash: 1RBt0EOiw+gmhCcV4qD8Gl3QveqKsX3A4AQ+JvudWRY=)
2: AXChabbNQRAiJ56f-ZfxNP9Uqxw.crl (hash: PfxWZ5DSffsy9PRFTyzz7jx742jR9+wMTxmdLRZbzMs=)
3: JCW68n0UPKZzTNycehy0nOKt_SQ.roa (hash: xagTy4CETOR7QjlY2gwlZcZ/87Osop33VWrjyllfqWE=)
4: L28NpBoao3Pa3xUMhUeIlTWycwI.roa (hash: JJ0Hw6tLmgmw+4N0PuUc739/Jd0W5Amgk51pa7BbiAk=)
5: VVRY07iRTEEycoKIAJjRSdP3o6g.roa (hash: QFJZLz+BqIPUbLAJZm4UbjmkbfUJbRCSYAqaN0ZNqjE=)
6: e423f_-NPWho20AuEAOYRpyN6jM.roa (hash: tXv/VSvWDPTQ0prFPO2ksP8QPbj+CoxENFkaBtfDf3U=)
7: nPAKjAAoFG29o9HUftfFBEfMFCA.roa (hash: GUJpwCvRmlnfqQiht/UJ9wNSb1SaXrQjJ5l7dujYT70=)
8: pOqffGGCQYYN_siJmYMpXmSRmg0.roa (hash: Acfh5YPvoqcizngQKdjsqWY7Hx9vwBTM5cRSt1VSioY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:5e:63:11:48:1d:3d:01:1d:49:64:ac:44:10:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0170a169b6cd411022279e9ff997f134ff54ab1c
Validity
Not Before: Aug 23 08:00:21 2025 GMT
Not After : Aug 24 08:00:21 2025 GMT
Subject: CN=1e84cc869d30eacace3ae60b8bda6b0d73dd6cc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:31:7d:2c:1d:c5:c4:28:5b:17:f6:29:d2:51:
fb:ed:07:e6:c6:3a:11:bb:1a:fd:cf:ef:d6:73:26:
71:cb:8f:9c:c4:82:17:f1:8c:ea:72:a9:cd:14:1f:
40:a9:24:af:e8:0b:49:54:49:96:c4:2c:a2:08:18:
a4:6e:e8:41:4b:4c:ff:39:4e:48:70:7a:24:20:5d:
55:09:11:6e:00:69:7c:d8:e3:3c:54:dd:23:5e:43:
f3:79:6e:ec:9f:a1:27:9f:68:1f:a1:5f:25:8a:27:
1b:f0:74:1e:a8:5a:d9:84:cc:e3:b8:42:96:c1:6b:
01:66:a1:04:4b:75:cf:ac:d2:4f:20:bf:d7:9b:f8:
ed:13:48:55:6a:a5:04:a0:f7:ea:15:e8:82:c2:60:
ff:cc:4a:38:61:e3:7d:ab:ee:04:5b:55:2a:3b:f1:
77:58:75:41:f9:78:2b:26:53:7a:6d:d1:ba:57:e6:
95:0c:e4:c0:9f:ad:46:7b:31:b2:63:95:de:ac:3b:
12:58:1b:5a:fb:95:ba:27:86:88:e1:65:c8:d0:d3:
ac:c6:9f:96:b8:a7:ef:f3:0f:fc:5f:10:44:e0:49:
5e:9d:0a:ca:70:4b:fa:7a:6d:73:4c:22:14:e2:d2:
48:fe:60:24:47:35:9c:e6:28:d0:54:8c:33:18:7c:
fa:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:84:CC:86:9D:30:EA:CA:CE:3A:E6:0B:8B:DA:6B:0D:73:DD:6C:C0
X509v3 Authority Key Identifier:
keyid:01:70:A1:69:B6:CD:41:10:22:27:9E:9F:F9:97:F1:34:FF:54:AB:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:51:67:5b:c7:42:fe:66:66:e9:95:30:2d:1a:2d:44:b9:f8:
a7:55:e5:0b:30:67:1f:fb:73:58:f2:f8:ce:29:47:96:e8:01:
e6:67:0c:b4:41:29:2f:22:30:7e:1a:b3:f8:3f:3f:ce:f4:a3:
ef:c4:73:67:06:99:63:4a:df:96:2a:ee:0f:21:85:bc:39:c1:
f1:0e:83:f3:5b:08:fc:cd:03:34:3f:cb:38:27:db:aa:0d:06:
e2:dc:7e:7e:2b:7c:5a:16:7d:aa:3a:03:e0:d7:73:99:68:de:
04:c5:c5:f4:4e:86:63:b6:93:a8:16:23:53:37:80:a9:3d:eb:
0a:15:b2:2a:1c:69:bd:e6:83:a5:87:9d:ff:b5:08:41:23:d3:
0f:8d:cd:92:86:aa:6e:a6:cf:03:4f:e3:f5:ce:b9:89:3d:75:
b4:96:c7:82:ff:c0:26:1d:d6:08:31:a3:8c:37:c4:33:62:eb:
82:17:02:1c:a2:04:1d:30:d9:8f:e2:19:f1:9c:df:20:f2:ac:
fc:1a:5b:3a:2e:e3:f6:fd:81:f3:33:33:42:23:68:cc:91:02:
7b:1a:87:cc:8d:ce:8f:c7:39:30:2e:14:62:87:54:e0:9d:72:
3b:e6:ba:4e:dd:70:3f:60:84:60:8b:f2:96:97:cd:14:e1:3d:
cf:3c:ab:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:37:29 2025 by rpki-client