Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft
File: AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft (raw, json)
Hash identifier: vWheLSNq5TUz4fRHVdoZ653dQMjdYU2G15aERuI2z8c=
Subject key identifier: 7F:FA:69:0C:52:25:4F:66:6F:B8:73:38:F9:40:D8:3C:00:34:0B:2A
Authority key identifier: 01:70:A1:69:B6:CD:41:10:22:27:9E:9F:F9:97:F1:34:FF:54:AB:1C
Certificate issuer: /CN=0170a169b6cd411022279e9ff997f134ff54ab1c
Certificate serial: 0199FF5963ABF7EBECC1348A180ECFDFAC5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft
Manifest number: 16FF
Signing time: Mon 20 Oct 2025 02:01:12 +0000
Manifest this update: Mon 20 Oct 2025 02:01:12 +0000
Manifest next update: Tue 21 Oct 2025 02:01:12 +0000
Files and hashes: 1: 6VwRzGeN7Aw-2-kYrAIearsgeJI.roa (hash: 1RBt0EOiw+gmhCcV4qD8Gl3QveqKsX3A4AQ+JvudWRY=)
2: AXChabbNQRAiJ56f-ZfxNP9Uqxw.crl (hash: B4Hn4/AW8PGxPtU9y9fvVEVD4Bc7TM5dE+9LUbPG94A=)
3: JCW68n0UPKZzTNycehy0nOKt_SQ.roa (hash: xagTy4CETOR7QjlY2gwlZcZ/87Osop33VWrjyllfqWE=)
4: L28NpBoao3Pa3xUMhUeIlTWycwI.roa (hash: JJ0Hw6tLmgmw+4N0PuUc739/Jd0W5Amgk51pa7BbiAk=)
5: VVRY07iRTEEycoKIAJjRSdP3o6g.roa (hash: QFJZLz+BqIPUbLAJZm4UbjmkbfUJbRCSYAqaN0ZNqjE=)
6: e423f_-NPWho20AuEAOYRpyN6jM.roa (hash: tXv/VSvWDPTQ0prFPO2ksP8QPbj+CoxENFkaBtfDf3U=)
7: nPAKjAAoFG29o9HUftfFBEfMFCA.roa (hash: GUJpwCvRmlnfqQiht/UJ9wNSb1SaXrQjJ5l7dujYT70=)
8: pOqffGGCQYYN_siJmYMpXmSRmg0.roa (hash: Acfh5YPvoqcizngQKdjsqWY7Hx9vwBTM5cRSt1VSioY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 02:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:63:ab:f7:eb:ec:c1:34:8a:18:0e:cf:df:ac:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0170a169b6cd411022279e9ff997f134ff54ab1c
Validity
Not Before: Oct 20 02:01:12 2025 GMT
Not After : Oct 21 02:01:12 2025 GMT
Subject: CN=7ffa690c52254f666fb87338f940d83c00340b2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:c3:f7:2a:b8:30:de:4d:aa:8a:81:6a:c1:08:
06:37:ad:92:fb:76:73:b0:cb:37:8c:c9:85:c3:f0:
85:60:da:a0:cc:d7:77:8e:aa:8e:1b:87:be:ef:47:
c5:49:69:9a:c3:4d:74:a3:14:12:e5:58:b6:ed:65:
39:16:a0:97:e5:61:8b:7b:dd:fe:b1:fe:07:eb:a7:
41:39:11:cf:e0:19:6a:b6:11:8e:54:92:69:f0:85:
78:ec:05:17:af:94:bc:b0:20:ba:a6:8d:dd:90:c7:
dd:44:6d:21:e2:74:ec:74:27:fc:49:7b:51:33:4c:
32:93:9d:d2:b6:1c:50:b2:c1:4b:9f:59:0c:a6:da:
96:0c:78:6b:e5:1b:ae:71:ad:57:5f:79:72:0b:13:
d5:b0:3f:57:4c:3a:ad:1b:9b:8e:0f:97:68:27:09:
e1:1d:6f:ab:fb:48:85:d3:6e:c8:b2:82:3b:2a:da:
7c:48:67:ad:3d:d7:41:92:d9:7b:23:91:8d:21:3c:
de:13:b4:31:a9:86:65:58:e5:a5:9f:da:79:f4:33:
fc:ae:e2:e3:f5:91:a3:7d:c4:27:94:a3:5f:05:42:
e5:8f:98:c1:92:1f:ed:90:e9:31:d4:b3:3a:e7:5e:
50:50:74:7f:9a:42:9a:96:88:a2:1c:08:0d:f3:ab:
dc:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:FA:69:0C:52:25:4F:66:6F:B8:73:38:F9:40:D8:3C:00:34:0B:2A
X509v3 Authority Key Identifier:
keyid:01:70:A1:69:B6:CD:41:10:22:27:9E:9F:F9:97:F1:34:FF:54:AB:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:1b:28:d4:2e:98:67:a9:1b:76:b4:47:46:3c:84:a5:b0:c1:
43:bb:56:fc:70:36:f8:5c:ad:1b:02:92:15:d1:2e:4e:06:cc:
78:1b:00:59:2f:fc:0b:cc:90:c3:43:e8:65:5e:ff:4f:0c:24:
3f:8f:24:9f:e1:26:2d:5c:9f:fd:59:05:2f:23:52:a8:42:b8:
46:cd:da:62:de:5f:93:40:49:34:b9:0f:4b:37:4f:c4:8a:39:
f9:5b:dd:53:7e:f6:57:7b:19:46:01:80:14:e3:c3:3f:f6:f4:
ce:6b:81:84:b4:c2:fd:c3:a3:88:a3:a4:7e:89:c5:1d:cf:41:
41:41:8f:68:53:91:7f:58:82:24:2e:3f:69:71:d9:07:fd:f0:
4b:e7:ae:ce:b7:a8:6e:bf:7e:37:74:19:97:dc:18:8e:ee:d1:
a4:cd:37:b6:1d:24:a8:d8:35:df:ff:87:af:5b:8b:be:76:8e:
2a:78:3f:62:d3:a4:8e:99:ff:ad:e6:57:d6:57:24:ab:bb:8b:
25:db:cd:fc:e1:c9:5f:50:c9:f6:cf:1d:db:23:d4:5e:e8:83:
2f:bb:fa:29:a4:fd:d1:26:a8:1b:73:69:43:28:8d:17:9c:93:
96:e9:f0:a7:37:c1:e3:d8:10:f7:74:d4:c5:56:39:75:6e:3a:
0a:4a:9a:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/WWOr9+vswTSKGA7P36xdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxNzBhMTY5YjZjZDQxMTAyMjI3OWU5ZmY5OTdmMTM0ZmY1
NGFiMWMwHhcNMjUxMDIwMDIwMTEyWhcNMjUxMDIxMDIwMTEyWjAzMTEwLwYDVQQD
Eyg3ZmZhNjkwYzUyMjU0ZjY2NmZiODczMzhmOTQwZDgzYzAwMzQwYjJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5sP3Krgw3k2qioFqwQgGN62S+3Zz
sMs3jMmFw/CFYNqgzNd3jqqOG4e+70fFSWmaw010oxQS5Vi27WU5FqCX5WGLe93+
sf4H66dBORHP4BlqthGOVJJp8IV47AUXr5S8sCC6po3dkMfdRG0h4nTsdCf8SXtR
M0wyk53SthxQssFLn1kMptqWDHhr5Ruuca1XX3lyCxPVsD9XTDqtG5uOD5doJwnh
HW+r+0iF027IsoI7Ktp8SGetPddBktl7I5GNITzeE7QxqYZlWOWln9p59DP8ruLj
9ZGjfcQnlKNfBULlj5jBkh/tkOkx1LM6515QUHR/mkKaloiiHAgN86vcpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH/6aQxSJU9mb7hzOPlA2DwANAsqMB8GA1UdIwQY
MBaAFAFwoWm2zUEQIieen/mX8TT/VKscMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVhDaGFiYk5RUkFpSjU2Zi1aZnhOUDlVcXh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8xZTc3N2YtOTg2Yi00ZTM0LThkODEt
N2Q0YmIyMzgwNDg3LzEvQVhDaGFiYk5RUkFpSjU2Zi1aZnhOUDlVcXh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC8xZTc3N2YtOTg2Yi00ZTM0LThkODEtN2Q0YmIyMzgwNDg3
LzEvQVhDaGFiYk5RUkFpSjU2Zi1aZnhOUDlVcXh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASxso1C6Y
Z6kbdrRHRjyEpbDBQ7tW/HA2+FytGwKSFdEuTgbMeBsAWS/8C8yQw0PoZV7/Twwk
P48kn+EmLVyf/VkFLyNSqEK4Rs3aYt5fk0BJNLkPSzdPxIo5+VvdU372V3sZRgGA
FOPDP/b0zmuBhLTC/cOjiKOkfonFHc9BQUGPaFORf1iCJC4/aXHZB/3wS+euzreo
br9+N3QZl9wYju7RpM03th0kqNg13/+Hr1uLvnaOKng/YtOkjpn/reZX1lckq7uL
JdvN/OHJX1DJ9s8d2yPUXuiDL7v6KaT90SaoG3NpQyiNF5yTlunwpzfB49gQ93TU
xVY5dW46CkqaZA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 11:07:34 2025 by rpki-client