Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/03228c-8c98-4597-a37f-583c98a06301/1/axa8EQuqKsnRYgwlBxdXfeZKkks.mft
File: axa8EQuqKsnRYgwlBxdXfeZKkks.mft (raw, json)
Hash identifier: 8e6pRUYZ1Zpx7fKdNBkGaFzGHI6WXAYXO2ZETPWQcuI=
Subject key identifier: 18:3A:0B:01:AA:8A:95:7E:F2:3C:65:06:0F:1E:86:07:39:97:1F:64
Authority key identifier: 6B:16:BC:11:0B:AA:2A:C9:D1:62:0C:25:07:17:57:7D:E6:4A:92:4B
Certificate issuer: /CN=6b16bc110baa2ac9d1620c250717577de64a924b
Certificate serial: 019A4EF44C62C1129F471DF4FE2B6CD534C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axa8EQuqKsnRYgwlBxdXfeZKkks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/03228c-8c98-4597-a37f-583c98a06301/1/axa8EQuqKsnRYgwlBxdXfeZKkks.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 13:00:24 +0000
Manifest this update: Tue 04 Nov 2025 13:00:24 +0000
Manifest next update: Wed 05 Nov 2025 13:00:24 +0000
Files and hashes: 1: axa8EQuqKsnRYgwlBxdXfeZKkks.crl (hash: VQCJaZBRXUG3ezaWinc3GC3CpJKNOXbWKCKhVQGqLLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/03228c-8c98-4597-a37f-583c98a06301/1/axa8EQuqKsnRYgwlBxdXfeZKkks.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/03228c-8c98-4597-a37f-583c98a06301/1/axa8EQuqKsnRYgwlBxdXfeZKkks.mft
rsync://rpki.ripe.net/repository/DEFAULT/axa8EQuqKsnRYgwlBxdXfeZKkks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:4c:62:c1:12:9f:47:1d:f4:fe:2b:6c:d5:34:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b16bc110baa2ac9d1620c250717577de64a924b
Validity
Not Before: Nov 4 13:00:24 2025 GMT
Not After : Nov 5 13:00:24 2025 GMT
Subject: CN=183a0b01aa8a957ef23c65060f1e860739971f64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:06:db:d5:ab:16:31:d9:4a:00:58:98:12:bf:
44:3a:7d:c0:43:4c:63:c1:c9:ce:7f:0c:02:20:2f:
b3:a3:6b:7b:bb:6b:e1:bd:fa:76:a5:cf:71:32:05:
5c:95:3b:99:ee:5b:16:bb:37:b2:50:de:16:06:66:
5b:be:d4:af:a8:51:95:06:d0:ea:a1:e4:0c:da:86:
60:3e:2c:ad:ea:10:3c:b4:b6:a4:86:a3:65:93:42:
a8:85:2d:c2:2d:53:30:4c:09:2a:d9:dd:45:70:1a:
1d:4b:34:20:eb:63:5d:95:b3:a9:3b:39:0f:b7:97:
fc:e6:ab:3a:60:6d:4c:96:eb:0b:c5:58:7c:54:52:
43:6b:0b:f3:49:ca:e2:10:03:d3:d9:52:9f:c7:57:
af:18:bc:5b:87:1e:57:f7:26:64:47:6b:e2:83:9d:
44:d0:d6:8a:80:50:2c:b8:9c:46:1e:84:fc:02:26:
f6:da:98:9e:00:10:a9:04:dc:23:d9:29:a1:e6:59:
75:74:75:f2:ee:90:64:39:cc:40:69:8a:29:c6:3b:
50:07:b1:e4:29:21:93:63:59:95:e3:8c:53:62:5f:
33:40:a5:87:e3:fc:81:da:7c:1c:50:e1:c7:31:75:
38:53:02:00:a9:b1:07:ca:41:b4:c7:e3:82:21:dc:
26:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:3A:0B:01:AA:8A:95:7E:F2:3C:65:06:0F:1E:86:07:39:97:1F:64
X509v3 Authority Key Identifier:
keyid:6B:16:BC:11:0B:AA:2A:C9:D1:62:0C:25:07:17:57:7D:E6:4A:92:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axa8EQuqKsnRYgwlBxdXfeZKkks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/03228c-8c98-4597-a37f-583c98a06301/1/axa8EQuqKsnRYgwlBxdXfeZKkks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/03228c-8c98-4597-a37f-583c98a06301/1/axa8EQuqKsnRYgwlBxdXfeZKkks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:15:a5:53:06:77:e6:a2:0b:1f:0c:22:ed:bd:3e:31:1e:ba:
f5:2a:fd:82:13:e4:75:16:8d:41:12:7c:73:e8:3e:7f:91:bf:
f4:d2:ca:a3:f4:8a:b9:bb:de:72:43:e9:a5:c9:9a:86:66:3d:
df:28:b2:1b:af:99:de:e2:a9:9e:e5:1c:71:84:b9:83:04:a2:
cd:b9:06:33:b2:20:16:10:ca:32:a8:d8:26:73:96:5e:73:fd:
6a:23:87:c3:5b:40:32:a6:7f:a4:18:4d:82:81:c5:ea:8c:f0:
a6:c9:fd:c9:3d:06:3d:4f:0d:82:bf:e0:4d:18:8d:8e:26:1b:
49:2c:33:12:c8:b7:71:47:df:33:ae:79:d4:cd:67:94:f6:d4:
52:9d:5a:31:82:75:db:0f:37:9f:ce:4d:c8:2b:3e:0e:2c:1a:
fa:a8:8b:74:19:f9:03:cf:dd:ed:a4:69:2c:4c:55:d2:49:47:
01:9d:b9:c7:bf:da:d4:7d:78:21:2d:0e:c1:3a:07:50:ab:f3:
60:75:aa:e5:b6:d8:90:49:8a:0b:40:f9:47:38:e7:45:89:a7:
40:03:41:57:3b:b8:b6:20:1b:6f:1c:a2:48:21:80:51:a2:7d:
ad:34:6e:25:83:5e:8f:b1:0a:c6:e4:d4:8c:1e:b4:10:a0:83:
42:c4:85:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:46:41 2025 by rpki-client