Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.mft
File: AxlsieVU2-R3RSJ1mQbiWBoXRpQ.mft (raw, json)
Hash identifier: HLJAOiT5hgXDDkhXGg5WtrTQtZL6RRYvdxxmMGNxQSc=
Subject key identifier: 77:19:62:EC:35:2F:95:06:A8:FE:8D:40:29:62:17:60:0A:59:3A:53
Authority key identifier: 03:19:6C:89:E5:54:DB:E4:77:45:22:75:99:06:E2:58:1A:17:46:94
Certificate issuer: /CN=03196c89e554dbe4774522759906e2581a174694
Certificate serial: 01988F8FE1DE90CD2FCF2003578A3D66107E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.mft
Manifest number: 1151
Signing time: Sat 09 Aug 2025 16:00:27 +0000
Manifest this update: Sat 09 Aug 2025 16:00:27 +0000
Manifest next update: Sun 10 Aug 2025 16:00:27 +0000
Files and hashes: 1: 7YIS0bT7r6mIPdG3lzPc8xURHA0.roa (hash: S7EdUKMung24eC2Jd1bwpXWo6RwzQ7x4IOzT/TSQ/Uc=)
2: AxlsieVU2-R3RSJ1mQbiWBoXRpQ.crl (hash: oQmV/CYCOt5I0UJXbw/PesqjhAtztdFfp0gRqF9USHA=)
3: cJykARzqOKe9uMgc8PFmUBa7sxc.roa (hash: 5MZWo6mlRMkcqk95+uBmGKLKqHpo+sEmACVQEsSg9mA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:8f:e1:de:90:cd:2f:cf:20:03:57:8a:3d:66:10:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03196c89e554dbe4774522759906e2581a174694
Validity
Not Before: Aug 9 16:00:27 2025 GMT
Not After : Aug 10 16:00:27 2025 GMT
Subject: CN=771962ec352f9506a8fe8d40296217600a593a53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:39:22:00:c9:7d:95:b0:bc:71:d7:d1:6e:0c:
8d:1b:95:45:a5:c6:f4:2d:d5:51:29:0d:f1:07:5e:
1f:6a:74:e2:17:69:00:e8:fa:aa:05:c8:66:ac:ff:
7d:69:b5:4d:34:94:28:93:71:04:d4:ec:45:13:6a:
fc:27:8a:0d:0b:d9:94:d6:27:26:ac:0b:30:ae:04:
22:03:3e:95:55:90:af:94:b6:55:14:72:41:5c:a1:
c9:e2:61:d7:c3:cf:0f:d8:d6:1d:9c:93:fa:8a:95:
6a:00:8d:da:c6:99:ba:b3:6f:8c:46:81:ca:e0:e1:
94:5a:59:bd:53:28:7c:52:9e:a2:24:1a:dd:dd:88:
54:c2:9c:cc:b0:0c:2c:c8:e2:5e:c4:62:b1:43:61:
44:dc:29:5a:17:9a:9c:c6:41:3c:27:ca:07:aa:f5:
5b:ca:9b:09:ee:c6:e1:76:eb:37:70:0c:cb:3a:ec:
14:ed:f1:a2:3a:b3:08:ce:c3:a4:59:7b:1e:5d:79:
bb:32:dd:61:12:fe:79:d0:fb:eb:88:bd:88:cc:bf:
21:48:82:c4:aa:02:ff:2d:77:52:64:95:85:9a:36:
81:ab:5a:47:49:47:b1:c5:e7:48:af:47:c6:8c:78:
5d:31:19:9c:7a:a1:87:ab:7f:9f:43:1a:ba:45:15:
63:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:19:62:EC:35:2F:95:06:A8:FE:8D:40:29:62:17:60:0A:59:3A:53
X509v3 Authority Key Identifier:
keyid:03:19:6C:89:E5:54:DB:E4:77:45:22:75:99:06:E2:58:1A:17:46:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:c1:ae:39:82:21:f9:d1:89:9b:78:04:03:0c:ea:57:b4:d1:
0d:be:94:e1:b5:23:a3:4a:bd:76:76:34:9a:ea:f5:2b:20:93:
8f:90:53:e7:a7:56:8c:67:38:93:28:3b:8d:77:30:c5:65:82:
6e:9e:ff:5e:64:7a:58:04:ee:79:b9:6f:69:12:00:d9:c6:6f:
4f:c4:b9:2c:e4:13:09:1d:36:b1:0d:29:13:f1:79:05:61:94:
47:46:cf:b2:62:23:e7:2e:cc:6d:87:a5:c1:00:27:2b:6e:d5:
a3:40:2b:e9:67:fd:29:ad:6d:bf:89:8f:85:41:86:47:b8:6e:
77:3f:46:6b:ee:be:14:ad:cb:6c:c7:fa:a4:c0:5c:aa:09:94:
fc:19:6d:c4:e7:6b:c4:e0:cc:82:bd:90:a3:0d:f2:67:b9:a0:
ae:69:13:11:7f:cc:e9:53:18:76:42:cf:df:59:76:61:24:61:
8d:05:57:2f:c0:40:a3:b9:10:34:36:03:8c:e5:de:83:a6:c9:
14:09:fc:12:db:bf:19:e0:74:e4:b2:87:93:57:96:fa:fa:b9:
f7:0b:06:4c:3d:25:f5:41:59:43:a7:77:91:e4:e7:86:d0:81:
bb:32:be:df:5e:a9:ba:c2:ba:df:90:6d:1d:8c:e9:0e:f2:31:
a0:99:50:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:35:25 2025 by rpki-client