Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.mft
File: axoVfiCtyjtEBnuo2NyrrmmKi-w.mft (raw, json)
Hash identifier: G/I/EciVeu6uE7dmdEWf5PRTcn0weiyED4aSONAJA7k=
Subject key identifier: 7F:90:46:77:E7:34:D6:11:E9:ED:BC:47:4D:40:17:F9:EA:1A:D9:87
Authority key identifier: 6B:1A:15:7E:20:AD:CA:3B:44:06:7B:A8:D8:DC:AB:AE:69:8A:8B:EC
Certificate issuer: /CN=6b1a157e20adca3b44067ba8d8dcabae698a8bec
Certificate serial: 019874BE56D97B2472FAE5BFD5B6FE08D5C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axoVfiCtyjtEBnuo2NyrrmmKi-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.mft
Manifest number: 0F18
Signing time: Mon 04 Aug 2025 11:01:27 +0000
Manifest this update: Mon 04 Aug 2025 11:01:27 +0000
Manifest next update: Tue 05 Aug 2025 11:01:27 +0000
Files and hashes: 1: HHW8_KabBwkh6LVEy__S-IfCKeo.roa (hash: 2dAL27yrvI2QASpUeAQxXgqjR0VeSsCg1NoOB6ydbps=)
2: axoVfiCtyjtEBnuo2NyrrmmKi-w.crl (hash: /ueGqgXj+8frt9MjtbiY0IxiAAXqTooYfw3COBf/XaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/axoVfiCtyjtEBnuo2NyrrmmKi-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:be:56:d9:7b:24:72:fa:e5:bf:d5:b6:fe:08:d5:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b1a157e20adca3b44067ba8d8dcabae698a8bec
Validity
Not Before: Aug 4 11:01:27 2025 GMT
Not After : Aug 5 11:01:27 2025 GMT
Subject: CN=7f904677e734d611e9edbc474d4017f9ea1ad987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:58:9a:18:44:b2:25:7a:b6:e9:e9:f8:55:24:
77:34:7c:6f:03:28:b8:f8:da:74:74:5a:b5:c4:fe:
7d:fb:45:47:7d:7c:70:2f:64:a4:d7:1b:b2:22:70:
11:b1:d6:2e:48:b9:74:bb:27:92:69:b0:51:69:2b:
18:42:26:70:d8:10:0a:3a:82:4a:02:d3:ad:af:de:
a5:0f:8f:d4:26:36:1d:f1:f7:c9:d9:4a:82:d5:38:
db:18:03:80:e6:5e:71:67:17:02:e9:0e:2b:51:e8:
df:d8:05:0f:bb:c7:a7:16:21:b9:e9:d2:23:99:31:
76:b2:aa:24:86:bc:84:ab:71:3b:c1:fa:41:a2:05:
7c:7d:ce:42:2d:e7:80:32:e0:85:82:43:ee:b9:c9:
c0:3b:f7:d9:fe:ea:0e:7e:b6:92:49:77:e3:74:05:
bf:67:1a:87:21:82:bc:e5:55:9c:37:8e:d6:df:97:
5a:22:49:b5:d4:01:6a:ac:3a:3f:31:d8:5c:fd:72:
e5:45:7a:37:e0:13:6b:bd:13:9c:88:31:6b:75:42:
61:2d:7b:4a:7a:26:4f:aa:1d:47:a4:2e:6b:b5:18:
a7:87:3e:94:50:6c:1b:3d:44:c0:70:0c:8e:29:b9:
69:a6:c3:be:3f:09:6b:5f:e7:d4:38:6e:09:02:33:
11:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:90:46:77:E7:34:D6:11:E9:ED:BC:47:4D:40:17:F9:EA:1A:D9:87
X509v3 Authority Key Identifier:
keyid:6B:1A:15:7E:20:AD:CA:3B:44:06:7B:A8:D8:DC:AB:AE:69:8A:8B:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axoVfiCtyjtEBnuo2NyrrmmKi-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:31:d2:42:ee:05:dc:65:8a:44:2b:14:89:a3:4d:7e:bb:a5:
5a:49:91:d4:5f:81:26:23:ae:14:0d:99:9c:96:2c:de:1c:9b:
f8:ea:c5:e8:20:45:d7:62:4c:35:7e:b8:ff:8b:8a:26:a0:5f:
22:33:b3:77:bf:30:2f:2d:c6:bb:77:06:98:b7:c8:74:54:46:
46:0e:0f:68:f1:61:ac:47:d9:88:5f:bb:2a:e8:fe:12:87:8c:
17:66:8a:ad:1c:f8:ec:88:f5:b9:66:55:a6:68:b7:17:d7:fe:
7b:d0:30:2e:4b:a7:c9:c4:6a:54:7d:72:9f:66:a2:80:3d:c3:
0f:b6:98:71:ae:c7:5c:e2:6d:dc:e9:0f:f5:d8:86:fa:f9:66:
92:63:e1:33:c2:d4:b0:54:37:5d:e1:05:b1:fc:8c:f2:8c:97:
2c:f8:44:75:1e:42:47:bc:74:24:e4:3c:51:56:4e:c6:4d:fa:
33:30:a5:1b:7f:6e:0c:b9:82:21:0a:9b:16:71:8f:d9:a1:6a:
67:1b:99:85:94:8f:a2:72:ae:54:ae:88:19:da:2d:6a:e9:62:
04:8b:4c:34:2c:2e:8d:3a:52:f6:64:ad:e9:ba:fd:4c:08:57:
f8:1e:b7:7d:d1:b1:5a:34:86:d3:81:f6:f3:ca:c9:74:28:4f:
64:c2:52:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:08:26 2025 by rpki-client