Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/1ffebd-bd37-4393-a33d-48c03520faf7/1/axrGkUv4Rz0YC2A4e9CY8dN9rIA.mft
File: axrGkUv4Rz0YC2A4e9CY8dN9rIA.mft (raw, json)
Hash identifier: ItMqSjVobh0Hl5GdVCy0UrJPkxOoK1Hq8uO/RawGloI=
Subject key identifier: 5E:7B:F5:95:37:EF:C2:1F:B2:4E:04:4E:C8:94:CB:EF:8A:D4:C3:B7
Authority key identifier: 6B:1A:C6:91:4B:F8:47:3D:18:0B:60:38:7B:D0:98:F1:D3:7D:AC:80
Certificate issuer: /CN=6b1ac6914bf8473d180b60387bd098f1d37dac80
Certificate serial: 0198744FEC480CC899390FE5C5091307096A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axrGkUv4Rz0YC2A4e9CY8dN9rIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/1ffebd-bd37-4393-a33d-48c03520faf7/1/axrGkUv4Rz0YC2A4e9CY8dN9rIA.mft
Manifest number: 0270
Signing time: Mon 04 Aug 2025 09:00:51 +0000
Manifest this update: Mon 04 Aug 2025 09:00:51 +0000
Manifest next update: Tue 05 Aug 2025 09:00:51 +0000
Files and hashes: 1: axrGkUv4Rz0YC2A4e9CY8dN9rIA.crl (hash: Q/Smdt9vo3dze8IpBnYFL8CFKGVQJ2P4H8BTNnCL5ho=)
2: nAXNwFgN4oUUiN2gukI8FexiZQY.roa (hash: NwyuW012KA+LOGkG7qw0aPwiZJU8ZOq4NZ4ApNYqggQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/1ffebd-bd37-4393-a33d-48c03520faf7/1/axrGkUv4Rz0YC2A4e9CY8dN9rIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/1ffebd-bd37-4393-a33d-48c03520faf7/1/axrGkUv4Rz0YC2A4e9CY8dN9rIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/axrGkUv4Rz0YC2A4e9CY8dN9rIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:4f:ec:48:0c:c8:99:39:0f:e5:c5:09:13:07:09:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b1ac6914bf8473d180b60387bd098f1d37dac80
Validity
Not Before: Aug 4 09:00:51 2025 GMT
Not After : Aug 5 09:00:51 2025 GMT
Subject: CN=5e7bf59537efc21fb24e044ec894cbef8ad4c3b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:bf:05:f7:d0:0c:3d:f5:b4:3f:6d:17:e3:20:
b3:49:3c:ba:1a:bc:73:f2:d5:e3:37:0b:1c:78:ec:
6e:35:37:b1:82:07:a2:03:68:fd:f3:96:b2:98:63:
43:12:df:6f:a8:bc:c2:cb:d2:f6:0e:21:75:8b:74:
d6:e3:3c:34:e9:97:8b:77:5b:d7:c7:df:cb:3e:11:
d5:f9:b2:1c:4d:ed:1d:82:b5:65:10:7e:10:98:c7:
fb:86:ba:2d:b1:33:8d:92:23:86:04:c9:a4:49:80:
24:9f:47:36:d9:7f:f1:ae:ee:16:2b:c9:18:fe:5a:
f9:72:a2:e6:9f:fe:fe:00:a5:3e:f6:12:80:0a:3b:
63:5e:ca:ad:7c:b6:3f:9a:89:d4:e0:2f:3d:86:e9:
81:64:a9:6c:f4:35:25:53:f5:38:01:81:80:8a:8b:
8e:dd:10:29:00:86:54:d1:ae:3b:95:ef:1d:37:eb:
1c:a2:04:a9:2c:70:96:52:97:44:fd:e4:e0:c2:21:
93:74:5b:55:5b:e9:ed:ee:d5:0f:35:ff:10:7f:38:
f4:ee:f3:15:b0:78:cf:50:3b:4a:1f:87:77:6e:5a:
fb:5e:bd:45:4b:84:e5:d3:ca:56:b4:a5:32:96:71:
d7:35:62:08:cf:fe:ac:37:3f:b7:ca:3e:09:0a:0f:
17:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:7B:F5:95:37:EF:C2:1F:B2:4E:04:4E:C8:94:CB:EF:8A:D4:C3:B7
X509v3 Authority Key Identifier:
keyid:6B:1A:C6:91:4B:F8:47:3D:18:0B:60:38:7B:D0:98:F1:D3:7D:AC:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axrGkUv4Rz0YC2A4e9CY8dN9rIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1ffebd-bd37-4393-a33d-48c03520faf7/1/axrGkUv4Rz0YC2A4e9CY8dN9rIA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1ffebd-bd37-4393-a33d-48c03520faf7/1/axrGkUv4Rz0YC2A4e9CY8dN9rIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:f8:a8:ba:9c:2b:88:ce:60:ab:53:24:e0:de:55:48:34:b7:
8a:f9:da:f8:29:f9:64:36:3c:ee:8f:b4:0f:70:19:cb:1a:6b:
c6:f1:9b:06:3a:98:22:b9:f1:55:cd:49:70:e0:13:82:36:dc:
99:00:ef:40:85:2a:91:8f:f0:65:0a:90:92:10:f3:90:42:91:
02:f2:bf:8a:e3:98:23:2f:0c:bd:fb:bd:bf:05:9b:20:1d:95:
68:19:bc:64:cc:dc:49:09:72:e1:b6:ed:56:2a:c5:e0:38:ee:
3c:c5:31:a4:c8:92:78:d2:53:32:fc:5e:be:50:41:b1:6c:4f:
59:6d:f6:47:ec:0b:30:6a:a5:68:5d:46:69:cc:2b:23:7e:4f:
72:3b:db:31:05:92:fd:f9:64:7b:c4:fa:90:31:67:72:13:ff:
18:d1:81:8b:7f:83:41:dc:c6:7d:39:ee:ec:e6:ba:ca:f2:3f:
29:c5:cd:35:38:00:ea:7d:ed:79:17:ef:4f:27:b7:d6:76:27:
11:36:3f:97:20:5e:68:ef:09:0d:4f:56:cf:81:94:1a:ab:22:
71:bd:fa:96:6c:81:a2:1e:3e:2e:bc:a0:89:a3:30:c0:a8:84:
6c:bc:53:cb:f6:35:48:67:1c:b8:f8:db:83:31:41:69:81:c7:
a9:96:82:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:27:27 2025 by rpki-client