Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/1ffebd-bd37-4393-a33d-48c03520faf7/1/axrGkUv4Rz0YC2A4e9CY8dN9rIA.mft
File: axrGkUv4Rz0YC2A4e9CY8dN9rIA.mft (raw, json)
Hash identifier: XlMzWgSrYiatpNesPcyTGvH4PLZf2+wbKGBCeTfVwa4=
Subject key identifier: 4B:62:F8:C3:5D:E8:13:E3:6E:C3:07:0A:BF:BE:CA:BC:FC:67:9F:5B
Authority key identifier: 6B:1A:C6:91:4B:F8:47:3D:18:0B:60:38:7B:D0:98:F1:D3:7D:AC:80
Certificate issuer: /CN=6b1ac6914bf8473d180b60387bd098f1d37dac80
Certificate serial: 019A5150EBA7F58397E1BA503E0C3FFAE573
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axrGkUv4Rz0YC2A4e9CY8dN9rIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/1ffebd-bd37-4393-a33d-48c03520faf7/1/axrGkUv4Rz0YC2A4e9CY8dN9rIA.mft
Manifest number: 0367
Signing time: Wed 05 Nov 2025 00:00:48 +0000
Manifest this update: Wed 05 Nov 2025 00:00:48 +0000
Manifest next update: Thu 06 Nov 2025 00:00:48 +0000
Files and hashes: 1: axrGkUv4Rz0YC2A4e9CY8dN9rIA.crl (hash: ljpWAGiuS5AckIQp8d27r/ZFk+ceu4scsuBcbJwFKGE=)
2: nAXNwFgN4oUUiN2gukI8FexiZQY.roa (hash: NwyuW012KA+LOGkG7qw0aPwiZJU8ZOq4NZ4ApNYqggQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/1ffebd-bd37-4393-a33d-48c03520faf7/1/axrGkUv4Rz0YC2A4e9CY8dN9rIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/1ffebd-bd37-4393-a33d-48c03520faf7/1/axrGkUv4Rz0YC2A4e9CY8dN9rIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/axrGkUv4Rz0YC2A4e9CY8dN9rIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:eb:a7:f5:83:97:e1:ba:50:3e:0c:3f:fa:e5:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b1ac6914bf8473d180b60387bd098f1d37dac80
Validity
Not Before: Nov 5 00:00:48 2025 GMT
Not After : Nov 6 00:00:48 2025 GMT
Subject: CN=4b62f8c35de813e36ec3070abfbecabcfc679f5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:14:40:0f:93:c5:5b:0c:09:2d:5f:b4:a1:51:
1d:62:67:38:eb:05:fa:e5:6e:4a:8b:65:19:12:fe:
7f:da:7c:ae:5a:15:81:74:3f:c1:5c:e9:81:54:bf:
03:ad:23:ea:72:71:c8:18:24:9e:40:e2:27:f4:d9:
a4:2b:9b:10:6b:fa:00:20:00:93:f9:90:f5:8c:8c:
40:3a:34:66:26:bd:2b:eb:84:f8:35:0d:50:bd:e4:
a5:51:cb:33:35:15:2f:12:cb:d6:73:c7:7e:8c:17:
0f:4e:45:d8:b5:81:df:39:06:c9:6e:32:ee:95:33:
e5:a1:cc:73:f7:03:2a:17:db:5f:39:40:8e:b9:91:
dc:5c:1c:dd:f0:e8:08:94:cb:23:65:6b:b1:8c:56:
af:84:37:e2:5c:e6:04:af:cd:d0:df:c0:e5:70:af:
b2:ef:7f:b7:d6:ee:f9:92:d7:71:8a:b3:95:48:f3:
5b:fb:f9:07:43:cd:eb:84:05:bf:4b:4e:9d:9a:60:
55:9e:a9:57:97:17:6e:fd:9e:96:3f:cb:52:ae:91:
3d:05:3c:36:40:1c:3a:24:74:3d:b4:d8:d7:2b:a2:
51:0c:6c:dc:70:80:6a:d7:bf:d5:07:58:44:33:c9:
d6:7c:d6:2d:15:e3:45:94:c1:67:ef:b8:2d:59:f3:
4f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:62:F8:C3:5D:E8:13:E3:6E:C3:07:0A:BF:BE:CA:BC:FC:67:9F:5B
X509v3 Authority Key Identifier:
keyid:6B:1A:C6:91:4B:F8:47:3D:18:0B:60:38:7B:D0:98:F1:D3:7D:AC:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axrGkUv4Rz0YC2A4e9CY8dN9rIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1ffebd-bd37-4393-a33d-48c03520faf7/1/axrGkUv4Rz0YC2A4e9CY8dN9rIA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1ffebd-bd37-4393-a33d-48c03520faf7/1/axrGkUv4Rz0YC2A4e9CY8dN9rIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:1a:aa:39:fb:73:cf:59:97:e7:41:82:a3:13:d9:5c:8e:cb:
1c:7d:fd:22:c8:ac:7d:0d:b0:1d:d3:df:16:82:61:98:de:37:
bc:93:24:46:a1:cf:d1:37:55:bb:e8:3b:0a:5e:f1:11:0d:34:
da:86:09:66:50:70:85:e9:d6:65:d8:8d:77:07:e9:f2:12:8c:
36:7d:fb:45:c1:70:4f:5d:24:83:59:fe:86:35:0c:41:2c:58:
d9:22:c1:a6:49:eb:63:83:e5:43:0e:73:b8:48:3a:26:d4:09:
4e:81:ab:d7:04:c9:a5:d1:7c:de:18:4a:99:f1:e2:c0:59:f4:
d8:44:3e:62:03:5c:6f:81:c5:70:72:50:8b:83:15:7f:40:c6:
0b:fa:48:d7:6a:38:c4:06:22:44:71:7c:44:46:ac:57:ab:57:
74:85:f3:41:23:82:d3:ac:93:6b:52:8f:46:99:ba:b5:db:11:
28:a3:4f:52:47:33:d6:23:23:93:7a:d6:7b:19:39:d6:a9:c1:
fa:2a:ca:53:f8:60:19:cd:6b:80:61:9a:03:fe:40:7f:3f:91:
f0:c7:c0:75:83:c5:d9:0a:0e:05:1c:a6:e0:dc:7a:37:65:9e:
51:2b:1e:ed:18:eb:0e:96:01:85:c7:8d:36:2a:a1:bb:3c:37:
30:1a:6e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:18:57 2025 by rpki-client