Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
File: axBPHkq67B7_gPJixi-WwlQ4yOE.mft (raw, json)
Hash identifier: OnNlzE3YCacu8KnW4clzhcorQRVl6VOuAt9pQIKPVzs=
Subject key identifier: CC:3A:38:C7:5E:56:47:78:1B:CD:E6:8C:1D:BD:E9:60:68:13:4D:D1
Authority key identifier: 6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
Certificate issuer: /CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Certificate serial: 019874505DA3FD5F87C94AF528B75A5317A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
Manifest number: 0E11
Signing time: Mon 04 Aug 2025 09:01:20 +0000
Manifest this update: Mon 04 Aug 2025 09:01:20 +0000
Manifest next update: Tue 05 Aug 2025 09:01:20 +0000
Files and hashes: 1: RTtZB_vcGF989dORyH7nDjg3amU.roa (hash: b1jDzIoauefx4FgyRzqcDh5Ob3YxifiP6BI5Q41QUgA=)
2: axBPHkq67B7_gPJixi-WwlQ4yOE.crl (hash: XFeJmlVjscX6kT1qRbwZ0eDwvWYhJ7Bgmf3ivBIdiZI=)
3: jmQbzN1n5vNJfqIg6TS1BfIphoY.roa (hash: y+FBfFHbRZXtqBw859tF/IM/aozMONRZt3b+w+wHC3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:5d:a3:fd:5f:87:c9:4a:f5:28:b7:5a:53:17:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Validity
Not Before: Aug 4 09:01:20 2025 GMT
Not After : Aug 5 09:01:20 2025 GMT
Subject: CN=cc3a38c75e5647781bcde68c1dbde96068134dd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7b:e4:63:c4:43:09:f1:58:0a:a8:4c:01:f5:
b3:08:1a:bc:ff:9f:6e:5e:78:b9:d4:fa:d2:34:88:
e2:ba:04:f7:bd:a5:be:c7:b7:f8:8b:e0:bc:f8:18:
be:fd:ae:9c:7c:5e:c9:fe:4d:f8:89:4c:06:1b:76:
88:e2:c4:5b:84:67:d0:11:98:44:ee:dc:73:5e:8d:
c8:6e:e6:17:77:8a:ae:1e:f5:43:cb:18:cb:ef:fa:
85:37:3a:87:e5:f3:16:63:f5:da:1e:8a:8d:62:c0:
b0:f3:b7:c4:2a:3b:64:db:64:58:93:28:d1:27:f1:
7a:66:35:60:c6:8d:8e:d4:91:ac:4d:38:46:25:7e:
22:f7:9e:c2:57:8a:76:21:13:33:d5:93:76:8f:65:
d5:0a:a1:df:f5:17:a8:55:f8:d6:cb:33:9f:d2:10:
00:80:1b:4d:23:60:73:d0:9b:e6:d6:31:b2:e2:fa:
12:02:ef:f9:d7:ad:c6:5c:52:3b:99:e7:98:74:8e:
94:00:0c:41:99:1a:6c:a4:9f:c2:db:7f:ad:d7:8b:
50:fa:43:9f:e5:99:da:a0:d5:9d:22:be:03:9c:96:
23:49:e1:9b:65:b5:ff:5a:45:1e:83:7b:c6:6b:40:
49:53:30:e2:c9:3e:b0:a4:76:94:f7:39:17:cb:07:
9c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:3A:38:C7:5E:56:47:78:1B:CD:E6:8C:1D:BD:E9:60:68:13:4D:D1
X509v3 Authority Key Identifier:
keyid:6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:28:72:a0:d7:8a:8d:9f:8d:b6:36:70:48:da:da:b4:41:ca:
77:b2:ba:c3:db:7e:59:04:a5:5f:e7:da:52:34:80:e9:36:44:
35:11:9b:e9:0d:f5:b8:e1:c9:4a:e0:0c:8f:d8:13:e9:89:20:
7c:3f:cd:e3:c9:07:8a:9c:2c:f9:ab:ae:97:c6:52:e9:a7:5a:
93:56:76:a2:02:75:e7:e2:6c:80:ec:2c:56:0f:77:91:46:be:
c6:07:c5:ed:24:96:2b:84:11:90:cc:d8:2a:50:e4:96:90:0d:
20:05:24:e2:41:f7:ed:8e:34:9a:01:04:43:a2:10:4a:aa:e1:
64:59:8d:21:4a:26:b8:fb:86:00:8c:64:95:d7:8d:9c:37:95:
99:21:e1:36:9a:cf:65:b4:48:d6:1b:5c:ac:a2:98:74:0d:a4:
16:25:22:cd:16:42:09:ab:2f:12:a9:14:9e:61:3d:49:e6:c8:
b2:8f:14:54:8e:56:d6:61:d2:44:ab:2b:e1:6c:e9:01:39:fa:
f6:fd:08:1c:13:2c:fa:e6:e6:1e:16:09:56:ff:ba:b7:9c:ad:
c3:1a:cd:34:bc:7b:4c:b1:d2:62:8c:7e:b3:65:24:e0:0a:7d:
35:f3:00:bf:82:d6:e8:fc:b1:f5:f0:04:6a:f2:5a:89:e1:7f:
75:ac:b4:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:30:27 2025 by rpki-client