Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.mft
File: AXyQZUZTrBUAKFYrMkMUkbUhR9E.mft (raw, json)
Hash identifier: Tg9F0h9QyYPcNbUdqM86bzzPzu6//k1Q6r1DH3y/8bo=
Subject key identifier: F4:1F:61:F6:68:A1:A7:27:BE:8C:CD:88:44:D7:C6:3D:3F:5B:18:67
Authority key identifier: 01:7C:90:65:46:53:AC:15:00:28:56:2B:32:43:14:91:B5:21:47:D1
Certificate issuer: /CN=017c90654653ac150028562b32431491b52147d1
Certificate serial: 019A4D7442AE71C937E51370AA2C54635789
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AXyQZUZTrBUAKFYrMkMUkbUhR9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.mft
Manifest number: 0EEB
Signing time: Tue 04 Nov 2025 06:00:55 +0000
Manifest this update: Tue 04 Nov 2025 06:00:55 +0000
Manifest next update: Wed 05 Nov 2025 06:00:55 +0000
Files and hashes: 1: AXyQZUZTrBUAKFYrMkMUkbUhR9E.crl (hash: 3yzDcQs6wcrtdUR8S99zT8LsSJudfdvW21UZM3gnWjY=)
2: L2lE8nOnlyxmaD3x1ZRACrDCMP8.roa (hash: ZXu28qkdGNNh4liAxQWetF6CZII1uCDb6IiGf6WW5Vw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/AXyQZUZTrBUAKFYrMkMUkbUhR9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:42:ae:71:c9:37:e5:13:70:aa:2c:54:63:57:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=017c90654653ac150028562b32431491b52147d1
Validity
Not Before: Nov 4 06:00:55 2025 GMT
Not After : Nov 5 06:00:55 2025 GMT
Subject: CN=f41f61f668a1a727be8ccd8844d7c63d3f5b1867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c6:4b:a9:b3:1d:17:73:0e:9a:61:cd:68:d6:
2e:ea:4a:da:ca:fd:f9:8c:54:6d:bd:36:be:87:29:
70:7e:c8:4d:b4:39:c2:4d:63:9f:00:a1:f7:65:5f:
fd:bd:22:3d:b5:f5:b7:b8:16:8e:59:7d:2d:bb:20:
5a:f8:8e:51:0d:78:05:8d:c9:b8:c5:5c:ff:fc:cb:
c5:c7:e6:98:67:3b:74:d3:66:28:53:c4:72:ca:f3:
cf:a8:ec:e9:bf:57:4d:f3:f5:b0:81:60:dd:82:c0:
bc:6e:3b:c0:a4:78:ed:d5:66:17:8c:ac:41:8b:7a:
20:2f:47:1f:cd:50:36:3d:d1:0b:cd:ae:c9:2c:3d:
c2:f2:95:71:ec:73:4b:c3:66:5c:9f:f7:0e:f3:b5:
11:84:a0:26:29:b4:f4:4e:12:0c:72:d0:a7:84:75:
10:2a:6f:c7:5f:bf:f8:80:f3:fe:09:2c:c8:1f:66:
5e:85:96:3c:51:4b:fc:11:9e:0d:c6:b0:bc:a2:ca:
98:f2:16:af:ec:3a:83:a4:c8:a0:3d:29:0e:6b:7e:
fa:3c:ce:55:17:65:83:59:3d:38:26:93:ed:9d:64:
4f:b1:04:86:c2:89:50:75:79:cf:3b:70:5f:66:2d:
93:62:d4:35:61:90:eb:68:c8:c6:e3:33:70:d2:f2:
54:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:1F:61:F6:68:A1:A7:27:BE:8C:CD:88:44:D7:C6:3D:3F:5B:18:67
X509v3 Authority Key Identifier:
keyid:01:7C:90:65:46:53:AC:15:00:28:56:2B:32:43:14:91:B5:21:47:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AXyQZUZTrBUAKFYrMkMUkbUhR9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:b0:52:41:ff:88:c5:47:89:ee:0c:b4:03:0c:c0:6a:b5:ad:
23:f3:ce:65:63:50:22:63:a1:18:dc:b0:fa:fc:71:70:96:0e:
c6:53:bc:db:8e:47:9b:b4:7b:45:43:e5:4d:96:72:6e:eb:ab:
87:fd:32:84:27:c0:aa:d9:6a:78:9d:60:2e:80:6c:2f:4e:30:
6f:bb:b0:4c:81:7d:5c:1c:eb:db:14:f3:15:f4:e5:91:2a:4c:
a6:9f:44:1e:7a:88:f8:de:1b:24:7b:71:c8:07:37:95:ff:94:
3c:9d:51:3d:83:13:58:1e:b3:26:f5:09:ad:6c:04:88:3d:0a:
2b:84:61:b1:d9:30:fd:12:d8:fa:37:f6:87:65:c0:64:0b:1d:
ba:d0:8e:95:93:ea:89:8d:35:0b:d9:9c:67:d5:94:9a:74:49:
bd:1a:f4:5a:29:54:cf:88:c8:33:e3:e3:08:2e:08:08:ed:c0:
3c:1c:4d:4c:28:d4:c4:f9:2d:38:70:1a:92:03:8c:6a:b1:fd:
23:60:d1:fe:e6:bb:3b:1b:06:85:91:94:2f:4e:00:ee:b2:9f:
55:b6:f5:31:66:ff:3e:ad:7c:f0:5e:42:e0:9e:53:d1:4a:f3:
fd:a5:66:56:c8:a4:18:21:23:7c:19:d3:cc:62:62:2d:f6:19:
b0:8b:1f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:55:35 2025 by rpki-client