Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.mft
File: axpX8G73IAfdYZP5YKYWNEtzMB8.mft (raw, json)
Hash identifier: aBgQJY5UcRBqcsWiXa7bk+jFvPCJRiJB4lZQXbc7fPM=
Subject key identifier: C8:62:15:29:A5:B6:20:C1:92:B2:1E:39:26:C2:97:8C:62:22:3B:A6
Authority key identifier: 6B:1A:57:F0:6E:F7:20:07:DD:61:93:F9:60:A6:16:34:4B:73:30:1F
Certificate issuer: /CN=6b1a57f06ef72007dd6193f960a616344b73301f
Certificate serial: 019A4F629A44CD9DC22DDAF3BAC7AD9803BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axpX8G73IAfdYZP5YKYWNEtzMB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.mft
Manifest number: 1424
Signing time: Tue 04 Nov 2025 15:00:53 +0000
Manifest this update: Tue 04 Nov 2025 15:00:53 +0000
Manifest next update: Wed 05 Nov 2025 15:00:53 +0000
Files and hashes: 1: 00KT0pkGsHJg3rMPte4BXARpxEs.roa (hash: Rp/NUlFtLgmOY8HOyBWonQv6w2IyoFIU596KejYUomw=)
2: axpX8G73IAfdYZP5YKYWNEtzMB8.crl (hash: SUq/JZGLtzDY3Gu1M7A3GqnRPpSDwiVZen3lAj9NqXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/axpX8G73IAfdYZP5YKYWNEtzMB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:9a:44:cd:9d:c2:2d:da:f3:ba:c7:ad:98:03:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b1a57f06ef72007dd6193f960a616344b73301f
Validity
Not Before: Nov 4 15:00:53 2025 GMT
Not After : Nov 5 15:00:53 2025 GMT
Subject: CN=c8621529a5b620c192b21e3926c2978c62223ba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:66:da:7c:3b:16:a2:5d:b7:1a:82:57:46:21:
12:8e:7e:19:7b:95:7e:09:87:1b:2b:b8:d7:12:19:
ba:4c:21:50:61:b1:19:79:59:62:e9:2a:e3:2c:02:
91:44:31:3e:a0:b5:b6:6a:2e:d6:6b:59:bd:97:1f:
1d:c8:24:41:79:14:3e:e6:b9:8c:53:4b:a5:75:69:
37:bd:75:d5:e6:d1:c4:bd:68:68:63:c2:29:79:9b:
a6:e1:3c:e9:fa:bd:b9:a0:f2:53:d8:22:e7:dc:5f:
cd:54:70:27:f7:09:43:c4:8a:ef:02:14:c3:d1:f2:
bd:f0:a5:53:d7:ce:2f:0b:1a:1c:8e:2c:ce:68:0d:
57:d2:60:e0:fd:02:d0:8d:9a:98:20:e6:2a:39:f6:
e2:43:77:69:ed:2d:fd:35:1d:f3:02:73:df:87:87:
ea:c3:48:dd:e7:e0:0f:c6:ed:53:18:de:1a:57:63:
dd:15:8b:1d:38:d5:7b:1c:f0:53:8e:dd:a0:5a:05:
e6:69:45:d6:ff:16:e6:47:57:70:eb:6c:9f:01:81:
0c:fe:bb:57:60:11:75:18:0f:43:83:9d:73:a3:c0:
15:61:a2:de:08:54:f8:63:58:86:bb:b7:80:7c:dc:
d6:a3:37:28:19:8d:cd:5a:c0:fa:13:72:8e:4c:e9:
0a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:62:15:29:A5:B6:20:C1:92:B2:1E:39:26:C2:97:8C:62:22:3B:A6
X509v3 Authority Key Identifier:
keyid:6B:1A:57:F0:6E:F7:20:07:DD:61:93:F9:60:A6:16:34:4B:73:30:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axpX8G73IAfdYZP5YKYWNEtzMB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:1a:ef:e9:16:49:45:5a:49:a2:59:39:13:cf:d6:59:69:2d:
9a:0b:90:cd:a1:7a:93:61:36:4a:9a:23:48:b1:15:c2:b9:a6:
df:7a:37:1e:3b:d9:e5:d5:35:87:c7:c6:88:fa:69:a6:bc:88:
9c:16:d4:ff:f2:19:6f:5e:4d:eb:9b:94:99:26:5b:d3:af:e4:
38:12:59:77:fa:47:a8:25:bc:28:c7:f5:e1:1d:39:5c:e3:52:
07:ba:9c:32:71:3a:4c:20:95:de:2e:01:47:81:14:53:91:f8:
40:f2:f7:3d:73:6c:f9:a6:12:63:81:19:99:eb:74:f1:d8:85:
de:4b:0d:e1:e4:0a:f8:fa:bc:73:01:fb:1f:b6:52:b1:6c:d3:
e8:ad:1e:3c:06:62:f5:7a:32:a6:dc:47:ae:58:e6:eb:7a:fb:
a7:38:ef:21:26:8b:b0:d5:5e:26:ff:0b:53:1f:22:ce:b3:09:
77:38:76:d7:d5:ff:d4:6f:0d:19:f5:04:57:2e:7d:d6:8f:93:
4c:54:3b:d9:17:6d:6d:14:95:52:c9:4d:04:48:f0:f1:51:90:
10:d1:83:69:d5:75:90:5d:b7:2b:a8:fc:f1:26:3e:8a:ac:4d:
04:de:a4:ff:66:c6:78:0e:05:8b:bc:e0:3f:a9:b3:62:8c:4e:
8f:ad:65:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:35:50 2025 by rpki-client