Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.mft
File: AxlsieVU2-R3RSJ1mQbiWBoXRpQ.mft (raw, json)
Hash identifier: r0gN5rO/OP1BG7vwV+HYsnuZMTMM/olJeFPztx46yko=
Subject key identifier: FE:36:9B:B6:57:A3:68:8F:BC:92:F8:8E:33:BF:5D:E4:C4:F4:E8:52
Authority key identifier: 03:19:6C:89:E5:54:DB:E4:77:45:22:75:99:06:E2:58:1A:17:46:94
Certificate issuer: /CN=03196c89e554dbe4774522759906e2581a174694
Certificate serial: 019A51876CCE0D404DC7938B229B5AF5DC91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.mft
Manifest number: 123A
Signing time: Wed 05 Nov 2025 01:00:20 +0000
Manifest this update: Wed 05 Nov 2025 01:00:20 +0000
Manifest next update: Thu 06 Nov 2025 01:00:20 +0000
Files and hashes: 1: 7YIS0bT7r6mIPdG3lzPc8xURHA0.roa (hash: S7EdUKMung24eC2Jd1bwpXWo6RwzQ7x4IOzT/TSQ/Uc=)
2: AxlsieVU2-R3RSJ1mQbiWBoXRpQ.crl (hash: kM6hijtQeynYoaeB2HH8bVNEsFAc3m9Gxrl8gq3BSC4=)
3: cJykARzqOKe9uMgc8PFmUBa7sxc.roa (hash: 5MZWo6mlRMkcqk95+uBmGKLKqHpo+sEmACVQEsSg9mA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:6c:ce:0d:40:4d:c7:93:8b:22:9b:5a:f5:dc:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03196c89e554dbe4774522759906e2581a174694
Validity
Not Before: Nov 5 01:00:20 2025 GMT
Not After : Nov 6 01:00:20 2025 GMT
Subject: CN=fe369bb657a3688fbc92f88e33bf5de4c4f4e852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ad:30:f1:b6:ed:f1:1c:d4:50:38:32:48:ae:
74:4a:b3:ec:28:43:40:47:e2:a5:ba:34:91:8a:a7:
b0:23:5c:fb:fc:68:b2:32:57:85:a8:b2:a8:01:0d:
2e:1c:90:c1:e5:3f:a6:9c:d8:76:1d:9c:14:d7:9b:
27:7e:f6:24:34:91:13:33:69:0e:c2:05:3f:59:1b:
a5:04:09:9e:20:f2:cf:be:29:ec:12:66:b3:50:8a:
03:20:af:53:58:80:ba:d4:ab:37:45:a5:33:a0:7a:
56:b3:4e:a9:5c:3e:d1:b9:21:17:db:16:06:43:b8:
42:13:31:4b:d8:fb:b2:7c:0b:4e:4d:a1:97:f9:04:
9a:5f:a9:ec:10:7e:a0:88:20:d0:39:0b:57:01:6d:
c0:d4:3d:8c:24:9c:79:04:bd:14:ce:d2:f0:8a:5a:
ca:94:f4:f5:9f:53:bb:d3:c3:3a:ae:d8:27:f0:2b:
97:26:13:ee:30:e5:cb:d1:d1:35:e3:2c:93:4a:25:
b9:52:2f:31:7e:96:4f:4f:31:a5:e2:ea:86:fb:62:
75:b7:62:8c:69:6c:8a:58:61:36:bc:78:09:c1:f6:
62:80:cd:17:97:d8:0b:4d:3b:42:cb:af:ea:d9:ce:
df:19:7e:da:02:4f:d3:43:f7:78:00:89:35:60:9d:
d2:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:36:9B:B6:57:A3:68:8F:BC:92:F8:8E:33:BF:5D:E4:C4:F4:E8:52
X509v3 Authority Key Identifier:
keyid:03:19:6C:89:E5:54:DB:E4:77:45:22:75:99:06:E2:58:1A:17:46:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:59:36:1e:ca:59:ed:67:74:e1:71:51:09:f2:3a:54:14:5c:
f3:5c:ec:19:b3:1a:20:94:18:1c:d3:c1:c9:a0:bd:de:e8:1f:
15:47:1f:d5:d8:b7:5b:f2:97:03:cd:fa:6d:b6:d5:87:64:12:
81:29:07:9b:28:15:78:3a:54:3c:84:e0:7c:b7:12:c9:98:99:
ae:a6:aa:5b:3b:e2:bd:33:d9:8f:22:00:98:c2:2d:31:3e:a8:
97:8a:ae:db:39:2f:82:90:af:2f:29:4b:4e:88:3b:af:f0:31:
39:f3:63:3d:7e:b3:6c:43:9e:f9:e4:f1:a3:32:28:dc:a8:46:
f6:0c:f7:ef:06:3c:4f:ca:45:11:1b:a1:a8:4d:06:92:40:ca:
fa:53:60:cf:48:95:f8:5b:51:fc:0d:ef:ef:30:c8:36:89:ba:
e1:2d:b0:67:de:91:03:7c:0c:69:b6:49:fc:7f:d7:ca:03:70:
03:93:6a:08:cc:f7:4d:dd:57:d7:8f:98:04:4a:12:94:5b:f0:
82:2b:8b:a8:8d:bc:91:b5:6d:3a:3c:1a:54:9b:21:b7:16:6c:
37:70:d4:67:59:6c:d6:3b:5a:01:41:be:d2:63:fa:f3:ab:9b:
3a:d8:57:d6:d2:9f:46:55:9b:e4:18:3a:bc:73:9a:2f:4f:61:
51:87:a7:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:51:24 2025 by rpki-client