Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
File: axBPHkq67B7_gPJixi-WwlQ4yOE.mft (raw, json)
Hash identifier: HJCM1adDDlzBJkuPa9GrYiLj5cxdOqDtSmZ/BzfqWDc=
Subject key identifier: FF:61:96:8F:44:3C:1E:34:A3:F0:0E:79:44:5C:83:81:7D:E5:22:33
Authority key identifier: 6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
Certificate issuer: /CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Certificate serial: 0199FBB368D3DFBCE59A69C1FBEAFB4F0108
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
Manifest number: 0EDD
Signing time: Sun 19 Oct 2025 09:01:02 +0000
Manifest this update: Sun 19 Oct 2025 09:01:02 +0000
Manifest next update: Mon 20 Oct 2025 09:01:02 +0000
Files and hashes: 1: FqQkTFQWdBdjU6UXWoqexyJXArk.roa (hash: dqroengNWVJpTvi6imMlKuB2r0Lvi7vllPawj21jEC4=)
2: RTtZB_vcGF989dORyH7nDjg3amU.roa (hash: b1jDzIoauefx4FgyRzqcDh5Ob3YxifiP6BI5Q41QUgA=)
3: axBPHkq67B7_gPJixi-WwlQ4yOE.crl (hash: EOx1QbEmswDHzz6sU1fVxPQ6Ix50YLZUqvQC0QM0Y3o=)
4: jmQbzN1n5vNJfqIg6TS1BfIphoY.roa (hash: y+FBfFHbRZXtqBw859tF/IM/aozMONRZt3b+w+wHC3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 09:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:b3:68:d3:df:bc:e5:9a:69:c1:fb:ea:fb:4f:01:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Validity
Not Before: Oct 19 09:01:02 2025 GMT
Not After : Oct 20 09:01:02 2025 GMT
Subject: CN=ff61968f443c1e34a3f00e79445c83817de52233
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:22:c2:86:70:fb:40:86:b2:f8:70:50:32:da:
2a:4d:fb:55:ef:11:21:e3:d2:a9:4b:18:87:1d:c6:
a0:e4:4a:c9:1a:2c:a8:dd:f2:b0:f9:27:5b:70:39:
c8:2c:cd:46:91:1f:f2:63:81:19:0c:6f:05:b0:54:
a1:99:24:0c:10:d7:50:c0:51:af:e3:95:80:78:8a:
84:ac:99:83:42:fd:2f:62:7b:e4:a2:20:af:79:21:
26:8d:8e:55:0d:c4:e3:c0:02:9e:f9:96:d5:d6:98:
43:01:55:dc:96:cb:22:5f:de:f6:dc:2c:32:43:a0:
ae:a4:3c:a5:e8:3a:8c:b6:e8:0c:0c:c3:23:cd:9f:
1b:e8:ec:3d:78:7f:c8:3b:cc:61:f2:11:b6:93:9e:
87:c7:c5:44:94:ad:18:4b:d4:8f:d6:f1:00:0b:e9:
cf:fd:01:25:26:5f:50:f0:f1:cd:91:2e:b8:ef:42:
e2:45:af:d0:95:94:ab:9a:27:e5:b2:b2:df:8e:d9:
7c:72:bf:78:21:56:67:81:21:f7:e2:88:1e:60:57:
49:31:94:f6:4a:17:ce:47:16:6b:aa:f0:3a:f6:40:
be:17:c6:b2:d0:47:f3:5b:22:4d:53:d9:09:dc:f8:
0e:18:ec:c4:1c:ae:fa:4a:7f:e6:8b:bd:27:c0:7f:
2d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:61:96:8F:44:3C:1E:34:A3:F0:0E:79:44:5C:83:81:7D:E5:22:33
X509v3 Authority Key Identifier:
keyid:6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:e4:69:c5:91:9f:8e:fa:0b:5b:d9:18:10:27:db:9e:8c:9d:
ab:39:6e:cf:32:53:67:72:1a:5b:af:7f:2f:12:b7:dc:41:4c:
62:ac:5d:d2:cf:7d:7f:f6:49:51:d2:ba:c6:47:82:0e:04:a7:
e2:9b:41:39:bc:31:52:27:e4:11:d6:b0:9e:13:0c:ae:ce:e6:
91:49:d3:1d:06:d1:e5:02:de:aa:ef:40:b0:e7:59:4c:4a:0d:
c1:ad:8c:28:ca:43:8b:25:52:32:d2:00:0b:68:cd:e0:b9:39:
e3:f3:4a:47:1e:0b:3b:0c:7d:33:bb:8b:91:fa:55:42:66:3e:
14:d2:43:4f:9d:c8:8d:4b:cd:d9:23:a0:2e:12:06:84:d2:cd:
c9:c1:5d:34:ce:b1:37:7a:48:b3:45:9c:bd:c7:b7:cb:5c:fd:
0c:fa:2c:bf:4f:42:b2:f9:95:d1:43:31:f7:a4:1b:0d:34:4e:
89:ee:3d:a1:44:fe:24:4a:c7:7b:be:42:36:90:6b:8f:3e:7d:
40:ab:6c:ad:95:8b:57:86:36:c6:4a:08:79:eb:70:d1:35:c8:
7b:e4:be:b1:02:95:c9:ff:e8:b4:24:b0:ea:55:ee:f3:cf:79:
17:c6:b2:b5:ca:33:c8:93:33:01:22:d7:d8:73:54:f3:cf:4f:
d6:26:d8:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:54:11 2025 by rpki-client