Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/421476-b808-485e-bb56-f19a2fde1e6a/1/Ax7Erh0E2uFAFcYn-jlrPvzlYGI.mft
File: Ax7Erh0E2uFAFcYn-jlrPvzlYGI.mft (raw, json)
Hash identifier: u2HY05icj+pukUcpsowqYaI6+tFTpJ5SO31fUymjbIc=
Subject key identifier: A1:B0:DE:F0:B1:32:0C:C6:21:D1:20:CA:6A:E3:9C:DD:F1:6C:CD:2A
Authority key identifier: 03:1E:C4:AE:1D:04:DA:E1:40:15:C6:27:FA:39:6B:3E:FC:E5:60:62
Certificate issuer: /CN=031ec4ae1d04dae14015c627fa396b3efce56062
Certificate serial: 0198D5F1B3087F7BF3F5662E9BFF19798980
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ax7Erh0E2uFAFcYn-jlrPvzlYGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/421476-b808-485e-bb56-f19a2fde1e6a/1/Ax7Erh0E2uFAFcYn-jlrPvzlYGI.mft
Manifest number: 44
Signing time: Sat 23 Aug 2025 08:00:43 +0000
Manifest this update: Sat 23 Aug 2025 08:00:43 +0000
Manifest next update: Sun 24 Aug 2025 08:00:43 +0000
Files and hashes: 1: 70r8S8c1wwixC_sIEZkSOztxf88.roa (hash: eJiBHCKsSAZefBJB8YdkbTzjCLj4a33JNeZglPrz6E4=)
2: Ax7Erh0E2uFAFcYn-jlrPvzlYGI.crl (hash: +lktexDFHy2GSfVRitEXktHMZQrcx3WMRk3q1FWuXCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/421476-b808-485e-bb56-f19a2fde1e6a/1/Ax7Erh0E2uFAFcYn-jlrPvzlYGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/421476-b808-485e-bb56-f19a2fde1e6a/1/Ax7Erh0E2uFAFcYn-jlrPvzlYGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ax7Erh0E2uFAFcYn-jlrPvzlYGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:b3:08:7f:7b:f3:f5:66:2e:9b:ff:19:79:89:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=031ec4ae1d04dae14015c627fa396b3efce56062
Validity
Not Before: Aug 23 08:00:43 2025 GMT
Not After : Aug 24 08:00:43 2025 GMT
Subject: CN=a1b0def0b1320cc621d120ca6ae39cddf16ccd2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c1:ed:53:10:dd:df:6b:c4:79:b7:21:53:0a:
e9:ec:ed:a2:be:15:b3:5b:d8:24:2a:cd:3b:70:0b:
92:ee:09:af:0f:f5:ee:e9:cb:63:13:70:dc:d7:53:
98:4b:6a:88:ff:3d:b3:27:66:59:bd:82:49:d5:be:
24:aa:2a:9e:41:5f:0b:7a:3f:79:b5:d3:31:27:e4:
55:e4:ee:6b:1d:09:f4:c7:83:b2:30:45:03:7a:75:
e5:2d:91:f3:0d:d4:85:0b:bd:8a:70:5f:92:44:50:
c2:60:c6:ae:95:53:1d:ad:57:76:58:80:47:dc:07:
f4:f8:43:0f:f1:59:39:a0:71:db:ff:36:3c:c8:b8:
84:24:5f:9c:03:90:58:fa:fc:a4:a0:a5:50:47:d4:
d4:64:f0:a4:dd:21:40:0c:1e:a4:93:e6:7a:30:d2:
74:3a:1a:3b:33:7b:25:db:b3:d7:8f:d1:90:f4:fe:
bf:8c:7b:16:b3:03:7b:e5:c3:23:aa:f8:83:ba:21:
57:17:2c:1c:91:1c:f5:bb:cb:26:e0:49:57:24:df:
40:a0:05:6c:5c:20:e0:0c:bc:72:1e:7b:b0:0c:4b:
9b:24:2b:d3:c4:71:42:b0:a5:38:3c:40:8a:8d:cd:
8c:d7:49:3f:be:85:e3:38:ff:33:2c:d1:d7:59:09:
78:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:B0:DE:F0:B1:32:0C:C6:21:D1:20:CA:6A:E3:9C:DD:F1:6C:CD:2A
X509v3 Authority Key Identifier:
keyid:03:1E:C4:AE:1D:04:DA:E1:40:15:C6:27:FA:39:6B:3E:FC:E5:60:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ax7Erh0E2uFAFcYn-jlrPvzlYGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/421476-b808-485e-bb56-f19a2fde1e6a/1/Ax7Erh0E2uFAFcYn-jlrPvzlYGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/421476-b808-485e-bb56-f19a2fde1e6a/1/Ax7Erh0E2uFAFcYn-jlrPvzlYGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:1f:81:10:4a:d6:29:ec:02:92:af:c6:94:5a:56:a4:ff:6c:
cf:c1:a6:a1:01:4e:4d:40:f0:97:59:cf:42:0a:b5:f8:a4:2d:
19:eb:25:c8:23:e7:66:3e:c4:1b:fc:f4:18:08:0e:1e:9e:76:
a5:62:a8:c2:0d:1e:c1:0c:74:f6:0b:d5:66:75:3c:68:d8:f5:
81:61:a2:da:87:d9:dc:2e:88:42:a4:4e:e6:c6:04:65:19:77:
8b:09:e1:2a:f2:d3:3e:c4:88:44:64:33:d6:80:c0:84:56:d1:
99:c3:37:ad:6d:9e:7a:42:33:f0:f0:6c:e8:99:60:34:69:a8:
af:53:4c:e9:11:2a:86:28:f5:03:1f:b8:28:3d:17:09:3c:33:
29:a5:15:82:b0:44:e5:1a:0e:85:00:c2:d7:51:08:62:9a:07:
a6:f7:a7:e7:53:33:7d:ee:a0:b4:30:db:03:c6:74:f9:d8:bb:
b4:11:6b:b9:0d:00:78:b0:66:fe:81:b7:e0:26:fc:54:78:24:
a6:7a:db:69:d1:b7:5c:98:6b:06:eb:79:d1:d9:0f:c8:b3:42:
82:46:b2:6b:3c:1c:e1:72:2f:b8:88:8a:38:f4:1d:a3:70:a9:
62:93:10:c0:6d:2a:92:50:c6:46:0d:1a:e7:49:fd:6b:a2:9f:
4b:2a:51:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:42:49 2025 by rpki-client