Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft
File: AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft (raw, json)
Hash identifier: /bXu3CRFtVdGgZCfjtucKaE5o/4bK81d85xAbRq0YOo=
Subject key identifier: 1A:62:41:62:2B:BD:A1:34:AD:05:6E:47:88:96:A2:91:F2:39:02:53
Authority key identifier: 01:72:35:06:71:8D:FC:F2:A8:BD:17:6D:4E:A2:4E:27:53:22:FC:FB
Certificate issuer: /CN=01723506718dfcf2a8bd176d4ea24e275322fcfb
Certificate serial: 01988CFD86C451BCE8A03C7185C19C250DD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft
Manifest number: 1626
Signing time: Sat 09 Aug 2025 04:01:22 +0000
Manifest this update: Sat 09 Aug 2025 04:01:22 +0000
Manifest next update: Sun 10 Aug 2025 04:01:22 +0000
Files and hashes: 1: AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.crl (hash: E1yAecPP5XMfdJNQqb/MB8HdLDzrjGE10CMacSLS2vg=)
2: SYZlptmfwW05iDvw4BXOJL_fG8M.roa (hash: h6Di4p8kHK2EYyUSqyx3mMW/pVHzVV5hYvjCX+I4Wgk=)
3: upUlmeYdk5_sFXYFi0NBtTtEwO8.roa (hash: xuu1QVb2zW3SwdOeuq3QKp9w0IPCF0Qyp8OFF9tk1jc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 04:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:fd:86:c4:51:bc:e8:a0:3c:71:85:c1:9c:25:0d:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01723506718dfcf2a8bd176d4ea24e275322fcfb
Validity
Not Before: Aug 9 04:01:22 2025 GMT
Not After : Aug 10 04:01:22 2025 GMT
Subject: CN=1a6241622bbda134ad056e478896a291f2390253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4e:b1:47:1a:df:3f:bd:fe:32:a9:82:ec:b6:
21:87:ce:f4:d6:9b:37:39:95:4b:0d:82:7a:76:b9:
f5:96:fb:43:d0:72:dc:27:e6:89:50:fc:c8:5e:47:
9b:13:95:d7:a5:d1:a2:1b:8c:e9:66:de:e6:c4:42:
08:35:e6:af:4e:a0:c7:b5:e8:34:04:6c:fe:8f:38:
42:56:42:6e:b1:40:07:51:ae:8d:9d:90:ca:3b:a2:
f2:20:16:96:f0:ea:5a:23:c0:c4:3a:ce:82:fc:03:
14:6f:7c:71:85:01:82:79:04:73:a9:80:67:d6:c8:
0e:da:8c:c8:92:e7:58:d9:1f:7e:2c:ff:0d:46:3b:
08:ee:41:40:3f:3d:7e:39:ab:0a:55:ff:ee:c5:75:
f4:96:e7:24:0c:c1:e1:c4:08:fc:8c:2d:aa:a6:92:
0b:d1:0e:cc:ee:98:24:ed:89:a6:e4:21:05:07:7d:
3a:1a:de:40:53:1b:7b:c0:63:5c:2f:77:0f:00:ad:
3c:8a:b7:f1:ba:1d:3f:f6:05:3b:77:3f:54:46:6c:
e4:32:63:ca:65:9d:e0:61:b9:2a:fd:59:d7:23:71:
47:af:7b:26:b2:a7:11:10:7c:7f:d0:0b:68:f3:a0:
4c:b6:b2:50:73:6a:ee:c4:e8:e3:52:75:6b:19:1b:
1e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:62:41:62:2B:BD:A1:34:AD:05:6E:47:88:96:A2:91:F2:39:02:53
X509v3 Authority Key Identifier:
keyid:01:72:35:06:71:8D:FC:F2:A8:BD:17:6D:4E:A2:4E:27:53:22:FC:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/83aa8c-0581-44d8-a5c1-05373ba9483d/1/AXI1BnGN_PKovRdtTqJOJ1Mi_Ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:e8:57:46:f9:81:5f:f8:c2:4c:d0:4c:82:13:45:e5:9b:4e:
69:70:e6:fc:93:95:67:1c:2d:a5:7e:80:8a:fa:99:f0:fc:77:
57:b8:bc:b8:41:61:8a:8d:e8:e5:f4:20:9d:06:66:d0:d8:96:
53:1f:53:e2:4d:d1:aa:85:b9:9a:06:72:44:77:71:a0:f1:8d:
68:85:aa:aa:1d:29:78:9f:d6:c2:f3:bd:5d:fd:d4:37:5f:64:
bf:ec:11:49:60:e7:51:14:63:0b:ac:2b:0a:94:e9:4d:cf:d1:
70:ee:07:3d:e0:b7:0a:cb:ec:37:d1:f8:17:90:bb:7b:ce:23:
8e:72:e2:3e:07:f1:f3:49:cb:b1:cc:a3:43:a3:13:37:53:17:
bf:49:8d:8b:0b:47:6c:a3:c7:19:58:de:00:25:d6:f3:fb:e1:
e0:cd:43:dd:4f:53:86:da:aa:99:f2:3c:47:e1:2a:f2:ea:b4:
33:32:6b:ee:5a:61:0b:39:f4:de:b6:41:7c:2a:c6:42:4e:29:
b9:6e:a9:50:cb:22:86:39:3a:07:7b:b8:53:ee:71:40:ab:2b:
c5:57:bd:5f:2f:df:9b:8b:97:bf:a6:f3:03:eb:b5:38:ad:7c:
5c:d1:25:19:0b:f5:8f:1a:88:78:c1:2f:6f:25:23:b4:fc:ee:
d2:33:4d:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:31:50 2025 by rpki-client