Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
File: axBPHkq67B7_gPJixi-WwlQ4yOE.mft (raw, json)
Hash identifier: CdiqRz47IhSEqNqFhFB2KjA00eAtJikRbyFte0FSVyw=
Subject key identifier: E1:FD:80:BB:D6:7D:96:C1:4A:45:F1:16:F4:4F:1E:CA:6E:22:76:64
Authority key identifier: 6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
Certificate issuer: /CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Certificate serial: 019A4EBD3F8DEA59A53754C1DD61202D29D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
Manifest number: 0F08
Signing time: Tue 04 Nov 2025 12:00:16 +0000
Manifest this update: Tue 04 Nov 2025 12:00:16 +0000
Manifest next update: Wed 05 Nov 2025 12:00:16 +0000
Files and hashes: 1: FqQkTFQWdBdjU6UXWoqexyJXArk.roa (hash: dqroengNWVJpTvi6imMlKuB2r0Lvi7vllPawj21jEC4=)
2: RTtZB_vcGF989dORyH7nDjg3amU.roa (hash: b1jDzIoauefx4FgyRzqcDh5Ob3YxifiP6BI5Q41QUgA=)
3: axBPHkq67B7_gPJixi-WwlQ4yOE.crl (hash: 6uMbIkke5Q2Pd/9SANi4p2BBhbxEP2HVgJ/sitpkMgg=)
4: jmQbzN1n5vNJfqIg6TS1BfIphoY.roa (hash: y+FBfFHbRZXtqBw859tF/IM/aozMONRZt3b+w+wHC3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:bd:3f:8d:ea:59:a5:37:54:c1:dd:61:20:2d:29:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Validity
Not Before: Nov 4 12:00:16 2025 GMT
Not After : Nov 5 12:00:16 2025 GMT
Subject: CN=e1fd80bbd67d96c14a45f116f44f1eca6e227664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:af:d0:7f:72:19:51:96:38:2a:73:13:92:5a:
d4:23:8e:48:64:81:27:32:0f:e5:85:0d:56:58:f9:
4f:f4:04:fd:5e:a1:70:00:6b:72:cd:43:0b:50:e1:
2f:89:a6:0c:37:78:12:8b:e7:57:cb:b2:1f:1d:c9:
4e:7a:b0:e8:72:bb:7a:2d:b3:4c:5d:5a:65:93:1b:
5b:84:05:72:d7:8e:de:aa:e3:58:ae:d7:c5:6c:fd:
5d:85:98:56:a9:08:60:9c:4a:69:ae:1e:b8:da:3d:
04:1a:19:2c:bc:8f:ec:d9:41:65:30:a4:a4:92:60:
8c:b3:7f:6b:4e:5a:83:43:3d:dc:9c:dc:29:51:59:
a9:a6:16:8f:b1:83:ef:99:13:f9:47:55:9e:e7:08:
7e:84:86:3f:b0:7e:05:01:7d:81:9d:e4:33:b7:03:
fd:86:0e:66:16:45:d9:ab:9b:cc:6e:28:77:5f:38:
19:c3:6a:ca:6a:25:aa:e0:48:d2:3b:2b:b5:89:8f:
85:19:52:fe:6c:f2:99:fb:68:e7:ef:c7:78:40:9e:
fb:05:0d:a5:d5:4e:bd:19:26:d2:19:5a:21:a5:c4:
6b:cd:46:f2:a6:28:35:61:1b:33:d4:6b:29:45:aa:
5f:74:22:3d:ea:d7:a5:28:da:a3:3a:3b:05:69:38:
88:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:FD:80:BB:D6:7D:96:C1:4A:45:F1:16:F4:4F:1E:CA:6E:22:76:64
X509v3 Authority Key Identifier:
keyid:6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:f5:29:f9:43:2c:a2:fb:70:1d:e5:62:96:c4:36:04:8c:7c:
ed:7b:f3:67:24:80:7d:0c:6c:b1:a4:81:f8:b4:c4:2b:97:53:
cc:be:d0:aa:fd:1e:f5:a2:a1:ab:e7:76:d7:7c:f5:0b:0b:97:
51:29:56:7b:98:21:cf:24:f9:6a:79:30:06:49:53:70:0d:9c:
06:06:f4:e7:2d:34:2a:26:f0:e7:72:9c:b4:bf:ff:64:16:df:
33:9c:4c:3b:66:01:8d:fb:e8:d5:35:46:af:b4:28:a9:8b:0c:
0d:2a:b5:59:68:7c:9a:15:dd:6e:56:54:18:d3:79:f2:d2:3d:
14:03:50:8f:6f:c4:38:96:3b:e4:4a:db:be:f8:7c:4b:25:2d:
c5:83:90:df:ab:39:40:e2:4e:62:3a:cc:68:c9:8d:1b:a2:63:
1c:74:ad:e9:e1:e5:84:cd:d7:f8:d1:8e:f0:2d:23:51:a5:14:
60:32:8a:ab:24:a9:17:d3:f6:1b:6d:5d:11:9b:95:72:95:89:
20:2c:c4:5a:a3:13:60:c9:8b:d8:3a:d6:0b:d2:27:a3:e6:27:
c2:f5:dd:61:32:1d:d9:d2:57:3a:3c:e3:e8:70:7e:b9:e2:60:
a2:f1:b8:ed:73:35:9d:77:3a:63:73:40:af:6f:c6:ae:e3:39:
73:33:29:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:53:40 2025 by rpki-client