Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/421476-b808-485e-bb56-f19a2fde1e6a/1/Ax7Erh0E2uFAFcYn-jlrPvzlYGI.mft
File: Ax7Erh0E2uFAFcYn-jlrPvzlYGI.mft (raw, json)
Hash identifier: RhqsrC5facQOIHo7IMDypOQ5GjquT7mN8HIIT5qXNaM=
Subject key identifier: 84:F0:5E:DD:35:D5:1C:5E:9A:9F:39:97:29:05:E2:73:71:76:22:B9
Authority key identifier: 03:1E:C4:AE:1D:04:DA:E1:40:15:C6:27:FA:39:6B:3E:FC:E5:60:62
Certificate issuer: /CN=031ec4ae1d04dae14015c627fa396b3efce56062
Certificate serial: 019882E7FA17D2CE40745ACB56558C09908D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ax7Erh0E2uFAFcYn-jlrPvzlYGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/421476-b808-485e-bb56-f19a2fde1e6a/1/Ax7Erh0E2uFAFcYn-jlrPvzlYGI.mft
Manifest number: 19
Signing time: Thu 07 Aug 2025 05:01:37 +0000
Manifest this update: Thu 07 Aug 2025 05:01:37 +0000
Manifest next update: Fri 08 Aug 2025 05:01:37 +0000
Files and hashes: 1: 70r8S8c1wwixC_sIEZkSOztxf88.roa (hash: eJiBHCKsSAZefBJB8YdkbTzjCLj4a33JNeZglPrz6E4=)
2: Ax7Erh0E2uFAFcYn-jlrPvzlYGI.crl (hash: 9kBM/BBoWBcqPI7PQpPraVCYDzTeh25HCAIjwD2daFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/421476-b808-485e-bb56-f19a2fde1e6a/1/Ax7Erh0E2uFAFcYn-jlrPvzlYGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/421476-b808-485e-bb56-f19a2fde1e6a/1/Ax7Erh0E2uFAFcYn-jlrPvzlYGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ax7Erh0E2uFAFcYn-jlrPvzlYGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:e7:fa:17:d2:ce:40:74:5a:cb:56:55:8c:09:90:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=031ec4ae1d04dae14015c627fa396b3efce56062
Validity
Not Before: Aug 7 05:01:37 2025 GMT
Not After : Aug 8 05:01:37 2025 GMT
Subject: CN=84f05edd35d51c5e9a9f39972905e273717622b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0a:2b:6b:4b:d0:a5:3d:fc:9b:bc:ef:46:ef:
3d:26:18:72:71:c6:ec:1b:50:d2:39:fa:eb:1d:ec:
42:c0:66:42:79:75:48:84:7d:22:96:d1:7d:8f:81:
e8:7c:01:51:4d:d5:91:b1:73:f8:66:cd:c6:f9:6a:
cd:11:65:ea:d0:8c:5b:ca:c4:b3:11:5e:aa:ae:5f:
ed:e2:1b:29:a2:13:8c:4e:97:ce:83:8f:77:ac:ab:
ad:81:ae:4b:d2:6f:d3:c3:a6:73:73:9d:43:37:a7:
6a:61:9a:f9:0d:07:c4:17:3d:e8:31:41:83:8a:44:
b7:93:64:d9:38:da:08:4d:ac:e4:4a:9c:1a:7a:1c:
30:3a:05:28:99:39:31:5f:29:26:92:5d:10:86:64:
a3:da:b4:fa:08:ed:f6:97:9e:a9:54:ee:54:e1:2e:
63:66:e0:fe:9d:a0:f2:1f:56:10:94:e5:03:41:fe:
60:34:79:6d:f1:98:54:3e:4a:a1:25:39:d9:c6:7a:
8e:e8:33:00:cb:9d:fa:1b:27:65:c9:f2:30:ab:c9:
0e:67:bd:bb:1a:75:9a:3b:01:be:30:2c:29:07:16:
0e:21:f9:1e:e1:80:d9:40:b1:35:c9:da:52:42:03:
d0:77:6d:db:b7:31:12:a3:bf:ee:f7:dc:0f:61:15:
e3:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:F0:5E:DD:35:D5:1C:5E:9A:9F:39:97:29:05:E2:73:71:76:22:B9
X509v3 Authority Key Identifier:
keyid:03:1E:C4:AE:1D:04:DA:E1:40:15:C6:27:FA:39:6B:3E:FC:E5:60:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ax7Erh0E2uFAFcYn-jlrPvzlYGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/421476-b808-485e-bb56-f19a2fde1e6a/1/Ax7Erh0E2uFAFcYn-jlrPvzlYGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/421476-b808-485e-bb56-f19a2fde1e6a/1/Ax7Erh0E2uFAFcYn-jlrPvzlYGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:87:17:6a:ee:0e:81:e8:b7:b9:46:4c:e4:fe:fc:ea:f2:40:
45:c3:3f:db:78:7e:73:47:e3:a1:25:2a:ec:7b:ea:3a:b4:e4:
0d:c8:27:f6:e8:b4:60:a2:2c:1c:cb:d2:15:06:54:4d:4b:df:
5c:f5:4f:01:bf:6c:d3:48:a1:59:fd:81:d0:18:b8:9d:9f:3b:
c6:b5:92:59:e8:2f:71:60:38:bb:eb:2e:6e:29:f8:43:19:7e:
33:48:73:17:09:9d:9e:b3:63:61:de:9b:1c:19:d8:46:44:3d:
81:36:f9:22:82:16:ef:b6:99:53:0a:2a:28:0d:cb:99:9e:fe:
63:fa:22:f5:e9:32:67:8b:95:35:ef:98:12:3e:03:f8:f1:bf:
ce:fb:9b:b2:ed:63:cf:b9:f7:b3:a8:9f:89:34:7e:6b:fb:82:
cd:96:ed:8e:9e:5e:6a:b8:26:8d:58:fe:40:da:76:ce:da:a4:
c8:2e:cf:14:31:bc:aa:a4:47:66:9b:76:ff:b5:b7:2b:6c:bf:
40:f6:e3:58:52:5a:7d:e4:d6:7e:8b:a9:17:1e:6e:b6:fa:b2:
bc:81:24:e2:b6:53:21:9b:11:26:0f:99:fe:96:85:b2:27:0e:
58:9c:85:e2:6a:a1:f0:ab:45:9f:dd:9c:ad:40:b3:9d:f2:a7:
2c:bb:6e:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiC5/oX0s5AdFrLVlWMCZCNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzMWVjNGFlMWQwNGRhZTE0MDE1YzYyN2ZhMzk2YjNlZmNl
NTYwNjIwHhcNMjUwODA3MDUwMTM3WhcNMjUwODA4MDUwMTM3WjAzMTEwLwYDVQQD
Eyg4NGYwNWVkZDM1ZDUxYzVlOWE5ZjM5OTcyOTA1ZTI3MzcxNzYyMmI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1wora0vQpT38m7zvRu89Jhhyccbs
G1DSOfrrHexCwGZCeXVIhH0iltF9j4HofAFRTdWRsXP4Zs3G+WrNEWXq0IxbysSz
EV6qrl/t4hspohOMTpfOg493rKutga5L0m/Tw6Zzc51DN6dqYZr5DQfEFz3oMUGD
ikS3k2TZONoITazkSpwaehwwOgUomTkxXykmkl0QhmSj2rT6CO32l56pVO5U4S5j
ZuD+naDyH1YQlOUDQf5gNHlt8ZhUPkqhJTnZxnqO6DMAy536GydlyfIwq8kOZ727
GnWaOwG+MCwpBxYOIfke4YDZQLE1ydpSQgPQd23btzESo7/u99wPYRXjzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFITwXt011Rxemp85lykF4nNxdiK5MB8GA1UdIwQY
MBaAFAMexK4dBNrhQBXGJ/o5az785WBiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXg3RXJoMEUydUZBRmNZbi1qbHJQdnpsWUdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS80MjE0NzYtYjgwOC00ODVlLWJiNTYt
ZjE5YTJmZGUxZTZhLzEvQXg3RXJoMEUydUZBRmNZbi1qbHJQdnpsWUdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS80MjE0NzYtYjgwOC00ODVlLWJiNTYtZjE5YTJmZGUxZTZh
LzEvQXg3RXJoMEUydUZBRmNZbi1qbHJQdnpsWUdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYIcXau4O
gei3uUZM5P786vJARcM/23h+c0fjoSUq7HvqOrTkDcgn9ui0YKIsHMvSFQZUTUvf
XPVPAb9s00ihWf2B0Bi4nZ87xrWSWegvcWA4u+subin4Qxl+M0hzFwmdnrNjYd6b
HBnYRkQ9gTb5IoIW77aZUwoqKA3LmZ7+Y/oi9ekyZ4uVNe+YEj4D+PG/zvubsu1j
z7n3s6ifiTR+a/uCzZbtjp5eargmjVj+QNp2ztqkyC7PFDG8qqRHZpt2/7W3K2y/
QPbjWFJafeTWfoupFx5utvqyvIEk4rZTIZsRJg+Z/paFsicOWJyF4mqh8KtFn92c
rUCznfKnLLtuAQ==
-----END CERTIFICATE-----
Generated at Thu Aug 7 07:32:30 2025 by rpki-client