Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.mft
File: axoVfiCtyjtEBnuo2NyrrmmKi-w.mft (raw, json)
Hash identifier: JezQgfmPdxFmTggE4lwF6rfkI7RQ2ThgZQUc34/5/xs=
Subject key identifier: 88:00:09:96:33:BD:6E:CB:D2:D7:53:E7:24:0F:94:16:B5:39:1B:EE
Authority key identifier: 6B:1A:15:7E:20:AD:CA:3B:44:06:7B:A8:D8:DC:AB:AE:69:8A:8B:EC
Certificate issuer: /CN=6b1a157e20adca3b44067ba8d8dcabae698a8bec
Certificate serial: 0199FEB52E81AF6EB20201E4EC1B45561D5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axoVfiCtyjtEBnuo2NyrrmmKi-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.mft
Manifest number: 0FE4
Signing time: Sun 19 Oct 2025 23:01:50 +0000
Manifest this update: Sun 19 Oct 2025 23:01:50 +0000
Manifest next update: Mon 20 Oct 2025 23:01:50 +0000
Files and hashes: 1: HHW8_KabBwkh6LVEy__S-IfCKeo.roa (hash: 2dAL27yrvI2QASpUeAQxXgqjR0VeSsCg1NoOB6ydbps=)
2: axoVfiCtyjtEBnuo2NyrrmmKi-w.crl (hash: oR5xnL5dr1lFNqr8YZUvmcShvmAywSKJsmV52YzK2h0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/axoVfiCtyjtEBnuo2NyrrmmKi-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 23:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b5:2e:81:af:6e:b2:02:01:e4:ec:1b:45:56:1d:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b1a157e20adca3b44067ba8d8dcabae698a8bec
Validity
Not Before: Oct 19 23:01:50 2025 GMT
Not After : Oct 20 23:01:50 2025 GMT
Subject: CN=8800099633bd6ecbd2d753e7240f9416b5391bee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fb:54:8c:99:3f:65:6e:9d:69:44:51:77:23:
2b:d4:17:86:94:67:c1:4e:8c:bd:0d:62:61:e9:9a:
ed:dd:b0:98:7e:b0:66:d3:a0:e8:c6:f1:ac:a4:26:
f5:a6:22:5f:4c:1a:1c:ec:ba:a8:c7:bc:3f:79:c7:
cf:03:9c:71:bd:bd:63:39:cb:ca:17:e5:2e:27:75:
0e:82:66:b4:3c:d4:2a:23:42:bb:e3:dc:c0:af:81:
8f:ed:e7:1c:e9:9a:19:4b:e3:81:58:6c:b2:b6:cb:
de:2d:84:44:47:72:54:70:47:a6:1d:9d:1b:c1:fa:
90:e7:e9:8f:0e:6d:20:d6:6d:3a:ad:16:ef:72:a9:
ee:5b:c6:e2:8e:f8:21:46:96:4a:1e:8a:12:8d:3f:
b2:d4:23:a6:31:a1:5d:f7:fd:8c:b2:62:a3:ae:d3:
41:94:2d:c2:98:5c:94:5e:e1:5b:ee:df:a0:17:1f:
45:71:2e:16:25:cd:21:35:9c:45:fc:5d:91:37:1e:
19:7d:20:63:0e:c6:6d:a8:be:b8:17:0f:b0:95:c0:
6d:20:3d:4e:61:67:f3:6d:4c:06:5f:a8:04:93:1b:
50:45:d7:97:f0:1a:c2:b9:01:55:7e:c0:50:89:2f:
8a:a8:5a:84:98:a6:f3:d3:38:0f:b8:25:99:a1:a5:
0a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:00:09:96:33:BD:6E:CB:D2:D7:53:E7:24:0F:94:16:B5:39:1B:EE
X509v3 Authority Key Identifier:
keyid:6B:1A:15:7E:20:AD:CA:3B:44:06:7B:A8:D8:DC:AB:AE:69:8A:8B:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axoVfiCtyjtEBnuo2NyrrmmKi-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:61:63:c3:53:59:d2:2e:a1:b3:da:55:d5:c6:bf:54:d1:8b:
cf:a1:7f:94:a7:e7:1c:c6:98:5e:4c:6a:79:0a:b3:e1:57:36:
74:54:29:29:bc:a7:3a:19:52:2e:67:91:73:7e:54:19:c8:c4:
aa:37:52:eb:98:49:16:81:24:e8:10:f4:8b:62:03:b5:d0:29:
c5:12:c7:67:85:39:5f:91:30:65:7f:ed:25:77:a5:a4:f3:d2:
65:8e:61:c3:d3:ed:70:d7:63:d9:af:2f:bb:b6:4c:cc:0d:1b:
a6:9b:1c:09:aa:53:07:1e:ec:30:d6:7b:da:ac:5f:b8:ec:ce:
8b:fe:4b:4d:65:0a:00:6a:06:7b:2a:bc:5e:83:d7:5e:cd:17:
6e:63:cb:0f:07:79:24:b1:b1:91:e2:50:87:10:9b:8f:f6:d1:
df:d6:f9:3e:74:30:81:63:75:09:42:74:26:4e:ba:45:39:53:
4a:f7:fd:3b:38:eb:72:e0:75:c3:0e:7f:b6:93:20:87:9b:dc:
8d:49:24:4d:e9:b6:66:4b:b4:81:7b:89:c0:6b:e6:4b:7e:5b:
e7:d2:4a:04:1b:b3:28:84:61:45:6a:65:bf:53:b1:48:7f:08:
1f:37:19:06:b7:ce:f4:79:cc:56:ac:c7:17:56:7e:29:a0:8d:
74:01:f1:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:47:27 2025 by rpki-client