Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/d31a90-dd8c-4800-b92d-94353fc9b2af/1/axJMeKp4A8OiPc1y0Nwa6uXe18w.mft
File: axJMeKp4A8OiPc1y0Nwa6uXe18w.mft (raw, json)
Hash identifier: vWt8VaSj7Qa/0aH/vZAKZF0FWyLAS2yDIGYmKzAtkbY=
Subject key identifier: 22:02:BE:99:BD:96:B3:F3:29:3D:DE:D7:5E:A0:EA:1D:50:0D:A5:EB
Authority key identifier: 6B:12:4C:78:AA:78:03:C3:A2:3D:CD:72:D0:DC:1A:EA:E5:DE:D7:CC
Certificate issuer: /CN=6b124c78aa7803c3a23dcd72d0dc1aeae5ded7cc
Certificate serial: 01988B7C704A4AE7522AFB36B41B99EEE522
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axJMeKp4A8OiPc1y0Nwa6uXe18w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/d31a90-dd8c-4800-b92d-94353fc9b2af/1/axJMeKp4A8OiPc1y0Nwa6uXe18w.mft
Manifest number: 1621
Signing time: Fri 08 Aug 2025 21:00:44 +0000
Manifest this update: Fri 08 Aug 2025 21:00:44 +0000
Manifest next update: Sat 09 Aug 2025 21:00:44 +0000
Files and hashes: 1: axJMeKp4A8OiPc1y0Nwa6uXe18w.crl (hash: Q6fD7YV5uTjgJEHv2UVwfDSf0xFNNAf9VMY3zU8wzmg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/d31a90-dd8c-4800-b92d-94353fc9b2af/1/axJMeKp4A8OiPc1y0Nwa6uXe18w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/d31a90-dd8c-4800-b92d-94353fc9b2af/1/axJMeKp4A8OiPc1y0Nwa6uXe18w.mft
rsync://rpki.ripe.net/repository/DEFAULT/axJMeKp4A8OiPc1y0Nwa6uXe18w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:7c:70:4a:4a:e7:52:2a:fb:36:b4:1b:99:ee:e5:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b124c78aa7803c3a23dcd72d0dc1aeae5ded7cc
Validity
Not Before: Aug 8 21:00:44 2025 GMT
Not After : Aug 9 21:00:44 2025 GMT
Subject: CN=2202be99bd96b3f3293dded75ea0ea1d500da5eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:44:ed:6f:03:82:2a:4e:4a:7d:54:d9:1e:86:
70:6d:23:76:23:84:07:cd:e6:05:c4:23:b6:c7:9a:
92:bc:da:c1:d5:cd:1e:40:94:b2:13:d7:49:aa:97:
8b:ce:e0:d2:40:f1:3d:04:76:a6:ca:5d:92:dd:b7:
3d:91:f7:66:f5:96:7b:cc:67:bb:e0:2a:0f:7a:29:
64:f6:1e:45:d6:f8:d0:be:40:de:b6:22:e9:c1:e2:
8a:6e:71:58:5d:4c:cb:60:8a:a6:44:f0:2a:e6:b3:
33:e3:b3:0c:51:b9:a0:ee:92:a0:48:a8:d4:8b:1f:
19:59:62:b6:56:a2:76:bb:f2:c8:15:85:64:47:87:
19:46:28:85:ae:c6:63:51:20:03:26:4a:f2:9d:a0:
ae:2d:83:39:7c:e1:c6:63:1d:07:cf:27:29:49:ff:
87:bb:1f:c1:6a:f5:17:0a:41:74:01:e0:04:4e:d1:
77:e1:b8:61:0f:ef:67:fa:58:df:8f:ff:d8:ae:06:
68:88:bc:8a:e6:7c:fa:d2:33:52:6d:61:45:cd:ee:
87:73:63:e3:c8:c0:bd:20:4e:41:d0:cd:af:94:f4:
1f:13:af:15:0b:a5:4b:f6:3f:53:e9:4c:f2:c8:6e:
36:2a:d2:e6:da:1c:d8:d4:83:aa:74:56:d6:b1:ce:
52:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:02:BE:99:BD:96:B3:F3:29:3D:DE:D7:5E:A0:EA:1D:50:0D:A5:EB
X509v3 Authority Key Identifier:
keyid:6B:12:4C:78:AA:78:03:C3:A2:3D:CD:72:D0:DC:1A:EA:E5:DE:D7:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axJMeKp4A8OiPc1y0Nwa6uXe18w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d31a90-dd8c-4800-b92d-94353fc9b2af/1/axJMeKp4A8OiPc1y0Nwa6uXe18w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d31a90-dd8c-4800-b92d-94353fc9b2af/1/axJMeKp4A8OiPc1y0Nwa6uXe18w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:07:21:a3:9f:e4:a4:ac:4d:16:a1:bf:5e:9a:de:ed:6d:9f:
50:a1:90:4d:4e:a0:4e:0b:bc:d2:f4:7c:fd:7a:d8:16:e3:d9:
de:1d:b1:fd:fc:0b:9d:58:85:43:b5:6e:dd:27:b5:17:b0:6a:
d5:6a:f4:1a:3a:73:d0:6d:a9:4a:e4:9f:cd:c5:1b:eb:bb:ca:
dd:9c:61:cd:9f:12:35:11:69:58:8b:a0:5e:d3:3b:ff:aa:8b:
4f:68:8e:ed:1d:c4:73:5d:3a:c1:69:f6:26:d8:7a:be:ff:22:
dc:9e:3a:3f:dd:5b:65:11:95:47:4a:f5:2c:97:1f:0e:c4:a0:
69:3b:23:de:a2:4c:15:ab:7b:c8:d4:4d:70:e8:15:65:f0:c8:
73:98:3c:7f:c0:40:ce:b3:45:33:40:27:2c:5c:37:3b:a3:36:
83:0c:b2:69:a0:c5:12:9b:26:fc:ce:24:d3:88:ef:c1:e5:45:
26:4c:83:54:4b:71:7d:dc:ee:42:33:25:8d:86:b5:5f:25:62:
3e:3a:5c:98:e9:d4:f0:b3:64:e7:35:b6:e4:9e:56:24:ed:af:
7b:49:d5:91:66:4f:31:49:a4:8b:45:0c:a2:6a:33:16:11:e8:
da:88:75:4e:8c:19:a2:42:59:d4:e8:31:04:ec:5b:b1:b5:8e:
77:0f:62:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiLfHBKSudSKvs2tBuZ7uUiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiMTI0Yzc4YWE3ODAzYzNhMjNkY2Q3MmQwZGMxYWVhZTVk
ZWQ3Y2MwHhcNMjUwODA4MjEwMDQ0WhcNMjUwODA5MjEwMDQ0WjAzMTEwLwYDVQQD
EygyMjAyYmU5OWJkOTZiM2YzMjkzZGRlZDc1ZWEwZWExZDUwMGRhNWViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUTtbwOCKk5KfVTZHoZwbSN2I4QH
zeYFxCO2x5qSvNrB1c0eQJSyE9dJqpeLzuDSQPE9BHamyl2S3bc9kfdm9ZZ7zGe7
4CoPeilk9h5F1vjQvkDetiLpweKKbnFYXUzLYIqmRPAq5rMz47MMUbmg7pKgSKjU
ix8ZWWK2VqJ2u/LIFYVkR4cZRiiFrsZjUSADJkrynaCuLYM5fOHGYx0HzycpSf+H
ux/BavUXCkF0AeAETtF34bhhD+9n+ljfj//YrgZoiLyK5nz60jNSbWFFze6Hc2Pj
yMC9IE5B0M2vlPQfE68VC6VL9j9T6UzyyG42KtLm2hzY1IOqdFbWsc5SmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCICvpm9lrPzKT3e116g6h1QDaXrMB8GA1UdIwQY
MBaAFGsSTHiqeAPDoj3NctDcGurl3tfMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXhKTWVLcDRBOE9pUGMxeTBOd2E2dVhlMTh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9kMzFhOTAtZGQ4Yy00ODAwLWI5MmQt
OTQzNTNmYzliMmFmLzEvYXhKTWVLcDRBOE9pUGMxeTBOd2E2dVhlMTh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi9kMzFhOTAtZGQ4Yy00ODAwLWI5MmQtOTQzNTNmYzliMmFm
LzEvYXhKTWVLcDRBOE9pUGMxeTBOd2E2dVhlMTh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADwcho5/k
pKxNFqG/Xpre7W2fUKGQTU6gTgu80vR8/XrYFuPZ3h2x/fwLnViFQ7Vu3Se1F7Bq
1Wr0Gjpz0G2pSuSfzcUb67vK3ZxhzZ8SNRFpWIugXtM7/6qLT2iO7R3Ec106wWn2
Jth6vv8i3J46P91bZRGVR0r1LJcfDsSgaTsj3qJMFat7yNRNcOgVZfDIc5g8f8BA
zrNFM0AnLFw3O6M2gwyyaaDFEpsm/M4k04jvweVFJkyDVEtxfdzuQjMljYa1XyVi
PjpcmOnU8LNk5zW25J5WJO2ve0nVkWZPMUmki0UMomozFhHo2oh1TowZokJZ1Ogx
BOxbsbWOdw9igg==
-----END CERTIFICATE-----
Generated at Sat Aug 9 01:00:48 2025 by rpki-client