Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.mft
File: AXyQZUZTrBUAKFYrMkMUkbUhR9E.mft (raw, json)
Hash identifier: QiQJI3ysA7Al2tqXO3cXBLqjjw+7+nPmTj2g2Q0iZhs=
Subject key identifier: 5D:7F:FE:1C:76:01:15:29:5E:CF:C9:BC:5D:46:0C:CC:8A:C7:2F:18
Authority key identifier: 01:7C:90:65:46:53:AC:15:00:28:56:2B:32:43:14:91:B5:21:47:D1
Certificate issuer: /CN=017c90654653ac150028562b32431491b52147d1
Certificate serial: 01989ECC88C1B671925D974BA2714B775CAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AXyQZUZTrBUAKFYrMkMUkbUhR9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.mft
Manifest number: 0E0C
Signing time: Tue 12 Aug 2025 15:01:01 +0000
Manifest this update: Tue 12 Aug 2025 15:01:01 +0000
Manifest next update: Wed 13 Aug 2025 15:01:01 +0000
Files and hashes: 1: AXyQZUZTrBUAKFYrMkMUkbUhR9E.crl (hash: DvPR3/xlIIcASbTZzBThO3mMgPIeqbFyJfj/6Xcbxnk=)
2: L2lE8nOnlyxmaD3x1ZRACrDCMP8.roa (hash: ZXu28qkdGNNh4liAxQWetF6CZII1uCDb6IiGf6WW5Vw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/AXyQZUZTrBUAKFYrMkMUkbUhR9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:24:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9e:cc:88:c1:b6:71:92:5d:97:4b:a2:71:4b:77:5c:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=017c90654653ac150028562b32431491b52147d1
Validity
Not Before: Aug 12 15:01:01 2025 GMT
Not After : Aug 13 15:01:01 2025 GMT
Subject: CN=5d7ffe1c760115295ecfc9bc5d460ccc8ac72f18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:10:c4:44:c5:20:44:1a:ba:a8:f2:c8:a5:04:
c2:4e:38:6d:44:2d:b1:8f:82:0e:ff:a1:4e:ba:c0:
22:2a:ad:d8:c6:bb:63:1a:23:0e:b4:38:10:68:a4:
12:d0:06:ce:6e:3e:1c:91:95:71:48:e7:9b:99:17:
e3:fe:c3:79:fc:bf:71:5c:f6:a4:e5:04:b9:a9:fa:
ec:6c:69:af:35:b2:aa:e9:ef:f0:7d:6c:c9:d3:78:
51:45:1f:93:8e:01:ef:5e:c9:f5:8c:41:e2:33:28:
2b:d3:58:35:25:3a:37:66:8a:9b:15:ef:c9:2e:bd:
19:f1:54:9a:96:79:4e:7e:ed:3b:0c:6d:03:e1:d1:
95:dc:5f:8d:66:b1:98:23:9c:01:1d:35:4e:e5:94:
76:fe:68:4e:df:72:b3:4a:ec:83:a2:8a:f3:75:b3:
c1:cc:18:30:de:41:42:9e:e8:22:97:01:2c:88:fc:
07:53:5a:48:c3:11:c9:ec:2f:9c:96:5c:e5:18:12:
c2:e0:6c:12:5f:9c:4d:04:de:86:7a:2f:fb:52:ce:
12:a2:9a:fd:e0:c9:5a:61:b7:8e:f4:ad:30:8f:80:
85:d1:2a:37:ab:a9:02:cc:66:fb:d8:ca:3a:7a:9b:
2c:3d:be:9f:5a:e9:15:35:3c:b0:60:59:2f:9b:35:
9a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:7F:FE:1C:76:01:15:29:5E:CF:C9:BC:5D:46:0C:CC:8A:C7:2F:18
X509v3 Authority Key Identifier:
keyid:01:7C:90:65:46:53:AC:15:00:28:56:2B:32:43:14:91:B5:21:47:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AXyQZUZTrBUAKFYrMkMUkbUhR9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:54:db:8b:c0:ba:d6:a2:d9:64:50:99:a6:de:2a:f0:f5:f9:
44:7d:c9:b3:02:50:19:ab:d9:69:a0:0c:f8:bd:75:f0:db:96:
6a:be:d2:3b:3b:b9:ba:b1:71:95:8d:78:ce:a4:92:d1:1c:50:
39:06:5d:d9:2b:4f:5c:c7:c7:74:29:4c:08:22:d0:a9:1c:4e:
62:79:e2:e4:48:63:3f:ee:7a:9d:81:10:59:fd:3e:fb:4e:3a:
e1:b9:41:93:71:6d:4e:dd:32:49:ba:40:e0:b8:21:c8:01:0b:
6d:04:5c:75:0c:04:b2:1e:2a:25:c1:1d:a4:9b:76:a0:9f:2e:
7e:3d:1e:96:89:7a:5c:95:2e:9d:93:f6:dc:ce:9c:d4:78:e8:
c1:2a:93:4d:52:92:b5:aa:bd:67:fe:d8:33:8e:29:50:8e:b5:
b9:04:36:36:80:8f:b0:8a:ea:e2:95:13:4e:38:2e:fe:cd:1f:
6f:17:38:1b:e5:d0:72:97:53:79:e9:d7:40:fe:49:bb:63:4a:
62:88:50:04:10:5d:de:71:66:d7:81:00:b3:75:dd:bf:a4:b8:
6c:77:62:33:b3:f4:2a:af:a6:9b:6b:d1:3a:98:e5:2a:b1:5a:
84:eb:57:af:0f:d2:b5:ab:a0:e9:9b:62:f6:10:ff:6f:62:1f:
c9:cc:29:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 22:46:25 2025 by rpki-client