Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.mft
File: axoVfiCtyjtEBnuo2NyrrmmKi-w.mft (raw, json)
Hash identifier: uNhd16RjHCHFIcXp9QUOmvxzpKrq79HukY5ax76xJA8=
Subject key identifier: A4:01:6B:86:F3:A5:C9:95:EE:D0:38:0D:77:BE:AC:7A:F3:8D:00:EE
Authority key identifier: 6B:1A:15:7E:20:AD:CA:3B:44:06:7B:A8:D8:DC:AB:AE:69:8A:8B:EC
Certificate issuer: /CN=6b1a157e20adca3b44067ba8d8dcabae698a8bec
Certificate serial: 019A4DE1FDA01D5F2184593EF4268088060A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axoVfiCtyjtEBnuo2NyrrmmKi-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.mft
Manifest number: 100D
Signing time: Tue 04 Nov 2025 08:00:47 +0000
Manifest this update: Tue 04 Nov 2025 08:00:47 +0000
Manifest next update: Wed 05 Nov 2025 08:00:47 +0000
Files and hashes: 1: HHW8_KabBwkh6LVEy__S-IfCKeo.roa (hash: 2dAL27yrvI2QASpUeAQxXgqjR0VeSsCg1NoOB6ydbps=)
2: axoVfiCtyjtEBnuo2NyrrmmKi-w.crl (hash: wPGjmFI/JTMokX8faKK6tH2AmEcjtE7XmDp1rrsm2/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/axoVfiCtyjtEBnuo2NyrrmmKi-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:fd:a0:1d:5f:21:84:59:3e:f4:26:80:88:06:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b1a157e20adca3b44067ba8d8dcabae698a8bec
Validity
Not Before: Nov 4 08:00:47 2025 GMT
Not After : Nov 5 08:00:47 2025 GMT
Subject: CN=a4016b86f3a5c995eed0380d77beac7af38d00ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4a:06:7b:96:59:ab:9a:91:21:f8:a4:6e:82:
84:ca:d8:ae:cd:a3:48:6c:4a:d5:13:47:f0:4a:ec:
b2:5e:4c:63:a4:b4:be:49:d1:a9:05:15:ba:0c:09:
fc:47:c0:4f:88:23:c5:c9:72:66:f9:6a:bc:ea:64:
eb:bd:91:b0:47:4e:cd:ff:3b:58:6a:24:3f:c6:18:
fb:e3:bb:28:a9:e6:36:4d:93:da:67:83:ed:1d:ee:
09:f4:75:09:49:7b:31:a9:7b:2d:58:3f:34:4e:a2:
15:cd:c2:a4:78:a0:c9:c7:54:e5:a0:03:b4:5b:f4:
34:bd:ba:d3:2f:4c:18:7c:d0:1c:47:3d:30:3d:b8:
95:14:73:e8:e1:4f:65:55:38:43:e6:5b:60:a2:a8:
00:84:fc:4e:3e:48:33:e0:64:79:91:ae:b2:f7:58:
95:17:93:6c:95:1f:be:af:5e:38:8c:5e:19:36:2b:
24:99:c7:87:b4:27:8f:48:92:2d:a2:5f:a7:12:4d:
c0:b6:12:99:a3:c3:fd:d5:57:46:45:9b:06:ce:e5:
e2:c0:c8:96:c7:d6:c6:f7:e3:32:1b:72:6a:e1:d7:
72:7a:ba:31:82:f7:3c:40:26:12:97:79:1b:0b:d2:
44:10:d9:90:6e:03:8b:33:32:9b:7d:4f:54:22:a6:
d7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:01:6B:86:F3:A5:C9:95:EE:D0:38:0D:77:BE:AC:7A:F3:8D:00:EE
X509v3 Authority Key Identifier:
keyid:6B:1A:15:7E:20:AD:CA:3B:44:06:7B:A8:D8:DC:AB:AE:69:8A:8B:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axoVfiCtyjtEBnuo2NyrrmmKi-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/870383-df9a-479c-8ee1-36dc2800fded/1/axoVfiCtyjtEBnuo2NyrrmmKi-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:18:c4:ac:f6:a8:7b:5f:5c:7c:87:39:26:1a:25:b2:ef:53:
11:b6:0c:79:9c:a9:7f:aa:19:27:8d:ba:0f:da:d0:54:90:94:
c1:62:f8:31:7a:a1:4b:b0:c4:7e:e3:84:90:85:a9:33:ee:6f:
9c:97:86:ba:5b:0b:75:9b:db:28:f1:71:df:d7:1e:0a:aa:53:
09:0d:83:de:0f:a8:27:2f:43:a8:9e:d9:6e:ba:35:31:6f:05:
b3:70:80:c6:85:2e:6f:b3:3e:f8:56:aa:b8:0b:db:ab:c7:bf:
f3:2a:d6:23:05:a0:7a:01:5c:f1:4a:ba:c5:6d:92:f3:a2:b2:
ae:8e:ca:16:62:10:99:39:f4:3a:d3:e4:13:9b:c7:67:70:67:
48:76:11:f8:62:a5:30:8e:94:5c:ec:22:b6:95:19:99:5b:38:
4c:8f:06:62:91:23:f4:bb:ed:ae:e8:69:02:40:a0:94:9d:87:
81:89:20:a6:59:7d:b4:cc:c6:a3:e0:19:b0:f8:8b:a1:80:66:
08:b3:b3:d8:18:df:b4:92:9c:45:e5:0f:80:02:3b:21:a2:51:
15:87:c2:e6:14:14:65:9c:49:c5:32:0a:80:76:f1:60:7f:22:
35:ac:0a:38:31:c9:68:ad:7a:4b:89:fc:75:61:0d:64:43:85:
78:ef:0c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:31:24 2025 by rpki-client