Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/5ce86e-27d2-48c2-88b5-f181b6e80a62/1/2axioKJWftFz3CqtN25FXIW8trs.mft
File: 2axioKJWftFz3CqtN25FXIW8trs.mft (raw, json)
Hash identifier: kVujK/mVIY5MaHNTuYxIMUtHzy5N47vMIu5nM2nwz4w=
Subject key identifier: 20:39:02:C4:C7:A6:A8:3F:D6:5F:78:0A:A2:5C:7A:75:49:CD:09:D5
Authority key identifier: D9:AC:62:A0:A2:56:7E:D1:73:DC:2A:AD:37:6E:45:5C:85:BC:B6:BB
Certificate issuer: /CN=d9ac62a0a2567ed173dc2aad376e455c85bcb6bb
Certificate serial: 019849652AC6114251539D66534FAB547829
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2axioKJWftFz3CqtN25FXIW8trs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/5ce86e-27d2-48c2-88b5-f181b6e80a62/1/2axioKJWftFz3CqtN25FXIW8trs.mft
Manifest number: 15FD
Signing time: Sun 27 Jul 2025 01:00:23 +0000
Manifest this update: Sun 27 Jul 2025 01:00:23 +0000
Manifest next update: Mon 28 Jul 2025 01:00:23 +0000
Files and hashes: 1: 2axioKJWftFz3CqtN25FXIW8trs.crl (hash: TXTkZ/7GTxECnM2BoU6d/YXL9gCEKRVfzkIijyaFFco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/5ce86e-27d2-48c2-88b5-f181b6e80a62/1/2axioKJWftFz3CqtN25FXIW8trs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/5ce86e-27d2-48c2-88b5-f181b6e80a62/1/2axioKJWftFz3CqtN25FXIW8trs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2axioKJWftFz3CqtN25FXIW8trs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:2a:c6:11:42:51:53:9d:66:53:4f:ab:54:78:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9ac62a0a2567ed173dc2aad376e455c85bcb6bb
Validity
Not Before: Jul 27 01:00:23 2025 GMT
Not After : Jul 28 01:00:23 2025 GMT
Subject: CN=203902c4c7a6a83fd65f780aa25c7a7549cd09d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:34:9e:39:21:3b:6b:a5:aa:33:14:a1:a1:70:
cb:0c:67:5f:71:32:46:18:3b:f6:03:45:be:bf:76:
a8:07:d7:7a:d9:ee:0f:d2:91:6a:c5:c8:6b:53:e3:
66:b2:17:d0:74:91:92:73:2f:27:b6:4b:3a:2f:3d:
c0:49:71:f8:1b:36:e0:5e:e0:43:a9:e1:f0:bb:d0:
94:a4:4d:72:06:e0:8a:ec:7f:fa:7c:16:9d:b3:ee:
67:e8:f7:d8:b8:7d:30:51:60:9c:d4:d0:41:4d:e5:
74:ce:ea:0b:a2:68:fb:00:88:12:07:bd:02:97:bb:
7d:b6:b5:f0:52:a3:f1:a3:96:57:22:df:42:b8:53:
73:23:89:e8:8c:f1:d1:f9:df:37:de:3a:20:b1:0f:
6c:62:11:4a:95:ed:0e:6d:a4:38:a5:95:00:b6:53:
b2:29:c5:6e:5a:61:36:40:10:24:b0:5f:ef:ee:89:
f2:d3:f9:47:80:33:36:96:ee:50:60:ed:79:39:e0:
a8:67:ef:ce:a2:07:db:ea:e5:29:5a:c9:31:70:87:
cc:70:19:a4:b4:9f:b1:a3:ef:b1:ea:86:9e:1f:ba:
f3:56:cd:c8:33:2b:00:68:5d:b3:e3:eb:96:cb:6c:
ac:96:1d:00:cc:d7:e7:65:2b:69:70:5c:5d:fb:09:
60:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:39:02:C4:C7:A6:A8:3F:D6:5F:78:0A:A2:5C:7A:75:49:CD:09:D5
X509v3 Authority Key Identifier:
keyid:D9:AC:62:A0:A2:56:7E:D1:73:DC:2A:AD:37:6E:45:5C:85:BC:B6:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2axioKJWftFz3CqtN25FXIW8trs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5ce86e-27d2-48c2-88b5-f181b6e80a62/1/2axioKJWftFz3CqtN25FXIW8trs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5ce86e-27d2-48c2-88b5-f181b6e80a62/1/2axioKJWftFz3CqtN25FXIW8trs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:c6:50:2c:a2:c7:bf:cf:13:9d:b1:5f:08:fb:fc:45:03:0e:
e4:3b:6f:fa:08:34:0d:9b:7a:a4:26:a4:84:0a:29:68:50:c7:
95:16:81:ed:8c:e8:73:bb:27:69:3b:8b:44:64:c3:99:6b:bf:
26:c7:6f:b0:4e:01:f1:7f:69:76:ad:84:7d:0a:12:a3:b8:d2:
56:a2:54:b1:0e:26:7e:2f:82:c0:a6:bf:59:ff:7c:79:54:f0:
02:ad:21:19:d5:32:2b:4d:c0:a9:00:24:0d:18:04:13:74:33:
3c:f8:75:e6:8c:cf:2d:f6:fc:aa:0b:1d:35:97:74:c9:fc:06:
3e:ac:98:87:eb:97:1a:ac:41:25:47:50:f4:51:e9:b8:49:65:
9e:be:7e:da:a9:16:03:36:14:fc:86:1c:b3:ca:c1:59:9b:27:
7b:25:f8:95:2f:00:87:ce:6e:9b:51:c9:56:08:b4:12:9e:1f:
af:82:b7:a3:63:c3:fc:b5:d1:f4:2a:9f:33:eb:52:88:27:68:
85:ca:ef:15:3e:cd:d4:e4:1a:fa:f5:de:b8:f4:75:f9:a8:ca:
55:ba:f6:6d:dc:a7:0b:b6:8f:6b:b4:63:62:f2:b1:dc:cf:29:
8c:dd:29:6b:66:23:20:63:fa:9f:dd:c4:3e:10:4a:4e:71:7b:
3e:05:03:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZSrGEUJRU51mU0+rVHgpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5YWM2MmEwYTI1NjdlZDE3M2RjMmFhZDM3NmU0NTVjODVi
Y2I2YmIwHhcNMjUwNzI3MDEwMDIzWhcNMjUwNzI4MDEwMDIzWjAzMTEwLwYDVQQD
EygyMDM5MDJjNGM3YTZhODNmZDY1Zjc4MGFhMjVjN2E3NTQ5Y2QwOWQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTSeOSE7a6WqMxShoXDLDGdfcTJG
GDv2A0W+v3aoB9d62e4P0pFqxchrU+NmshfQdJGScy8ntks6Lz3ASXH4GzbgXuBD
qeHwu9CUpE1yBuCK7H/6fBads+5n6PfYuH0wUWCc1NBBTeV0zuoLomj7AIgSB70C
l7t9trXwUqPxo5ZXIt9CuFNzI4nojPHR+d833jogsQ9sYhFKle0ObaQ4pZUAtlOy
KcVuWmE2QBAksF/v7ony0/lHgDM2lu5QYO15OeCoZ+/Oogfb6uUpWskxcIfMcBmk
tJ+xo++x6oaeH7rzVs3IMysAaF2z4+uWy2yslh0AzNfnZStpcFxd+wlgiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCA5AsTHpqg/1l94CqJcenVJzQnVMB8GA1UdIwQY
MBaAFNmsYqCiVn7Rc9wqrTduRVyFvLa7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmF4aW9LSldmdEZ6M0NxdE4yNUZYSVc4dHJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi81Y2U4NmUtMjdkMi00OGMyLTg4YjUt
ZjE4MWI2ZTgwYTYyLzEvMmF4aW9LSldmdEZ6M0NxdE4yNUZYSVc4dHJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi81Y2U4NmUtMjdkMi00OGMyLTg4YjUtZjE4MWI2ZTgwYTYy
LzEvMmF4aW9LSldmdEZ6M0NxdE4yNUZYSVc4dHJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqsZQLKLH
v88TnbFfCPv8RQMO5Dtv+gg0DZt6pCakhAopaFDHlRaB7Yzoc7snaTuLRGTDmWu/
JsdvsE4B8X9pdq2EfQoSo7jSVqJUsQ4mfi+CwKa/Wf98eVTwAq0hGdUyK03AqQAk
DRgEE3QzPPh15ozPLfb8qgsdNZd0yfwGPqyYh+uXGqxBJUdQ9FHpuEllnr5+2qkW
AzYU/IYcs8rBWZsneyX4lS8Ah85um1HJVgi0Ep4fr4K3o2PD/LXR9CqfM+tSiCdo
hcrvFT7N1OQa+vXeuPR1+ajKVbr2bdynC7aPa7RjYvKx3M8pjN0pa2YjIGP6n93E
PhBKTnF7PgUDxg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 10:22:36 2025 by rpki-client